last executing test programs: 2m33.567778664s ago: executing program 4 (id=4864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000300)="7730982e317b498baa03e54fac97233d8a0b563209580ea907d13fc840b7f23c23beb506799a3c", 0x27}, {&(0x7f0000000340)="caa740bb678adfe5055e02ae67f39a107fa988335a17bd3ec4dea78fb695e965", 0x20}], 0x2, &(0x7f00000003c0)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xfbd}}], 0x30, 0x40090}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fbdbdf257c00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900ff0300006a0000000100010000000000000100000a100600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x4008880}, 0x400c051) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f00000000c0)) 2m33.292449072s ago: executing program 4 (id=4870): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x11, @empty, 0x4c23, 0x1000, 'wrr\x00', 0x7, 0x8, 0x4002b}, 0x2c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x20008084) 2m33.284389349s ago: executing program 4 (id=4872): syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a30000000001800038014"], 0xc8}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000900)=@canfd={{0x3, 0x0, 0x1, 0x1}, 0x3d, 0x1, 0x0, 0x0, "7c087c0a492fe49326f4f576a5b15bf05ed2e8310ede94323ed3b2b32ce6337134743d1709ab3cc73f1e97e7325c5d0f4f91c56477b8cf26a3e437bb6b1173f6"}, 0x80c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a8004000480080001"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xffffffffffffff6a, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000300)='7', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2m32.94006488s ago: executing program 4 (id=4877): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) (async) listen(r0, 0x0) (async) listen(r2, 0x2) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async) listen(r3, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 2m32.774766936s ago: executing program 4 (id=4881): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x178, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x0, 0x8}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x267, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x259, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @remote}, "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"}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) unshare(0x22020600) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x178, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x0, 0x8}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x267, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x259, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @remote}, "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"}}}}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) (async) unshare(0x22020600) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) 2m32.588098777s ago: executing program 4 (id=4885): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twr'], 0x68) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdb0}, 0x94) r6 = openat$cgroup_procs(r4, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r7 = gettid() write$cgroup_pid(r6, &(0x7f0000000100)=r7, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x2b, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="110000001c000100a83d7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="80008f0a0a00020079125908f2a0a7237e56d72ff5a000942820c90004000000"], 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4040000) 2m17.566137359s ago: executing program 32 (id=4885): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twr'], 0x68) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdb0}, 0x94) r6 = openat$cgroup_procs(r4, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r7 = gettid() write$cgroup_pid(r6, &(0x7f0000000100)=r7, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x2b, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="110000001c000100a83d7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="80008f0a0a00020079125908f2a0a7237e56d72ff5a000942820c90004000000"], 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4040000) 3.998259581s ago: executing program 3 (id=6162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) listen(0xffffffffffffffff, 0x400004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0xffffffe2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5649adb04969f3ac, 0x0, 0x8200}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000056dac4a2d988946a83064a66002fb70a9c928f66519a7f53c7fe89ffb0b55d0e757578aaba987f1f1a0b9824a4af0f73f466b22e5b0d38b18dff520d91825ead14febfd570051f7d18e7b413b83c5d5d4a06dd70c985be23923aca0ed38833fa381322", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f00000012c0), 0x0, 0x40018022, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="28062abdfd2a9100000010000108000000000000000000000000066dfb4d59d2d45a51fc71050000002b355b96798b460b1365866fc36c7cb647c146e5fac3d4877ff8f2ef675cb8bd29d4bc232ab0590c2e", @ANYRES32=0x0, @ANYBLOB="008000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) unshare(0x2c020400) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r9, 0x103, 0x2, &(0x7f0000000140)=0x3ff8000, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a3c38485565412f7eedab40efdf61cd604b5515e53acb35cad79f7be522ef9ef35ff6639adafcd15aa8a6635498ec50d24251508728a3210c4ca1783ec3cd329060f9fb1dd174d474a6e8c2b2148a558dbd85b7a743d696c237c416e8c79f504bcba5f7c86e52c2902a08cce3e42932175fdaee681fa68c1cc0dea662c73aba3378fc8462bf", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 3.690058704s ago: executing program 3 (id=6164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120088be"], 0xfdef) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/31, 0x1f}, {0x0}], 0x2}, 0x40000022) (async) connect$unix(r0, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2.609816206s ago: executing program 5 (id=6170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)='h?\x00W', 0x4}, {&(0x7f0000000240)="a492ce3ffd9311d70350", 0xa}], 0x3) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000a18f8b87758c0011001e371d1178b217649d8e6ef000090400008644301d1a13fbeec3f1fbb0531d592c47298563c158b9130600c7363b3590e198a30526384cc094aee7bbb3824740a50725fdb5d4acb75a3f529d7d0fbc7bb8d48c4b6188e64172c8ea97445d5b722dd5cef6be40088051d9a11111db306e30e29a982b1bda00dccd525fec902b320440df341673bd6de11872d4abf48a5940f6", 0x9e) 2.447634136s ago: executing program 3 (id=6172): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d270015000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a0000ad1818853422e45d000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x18, 0x2c, 0x1, 0x0, 0xfffffffc, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x18, 0x2c, 0x1, 0x0, 0xfffffffc, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000100)={'bond_slave_1\x00', {0x2, 0x0, @multicast2}}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'veth1_virt_wifi\x00', @link_local}) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.291482648s ago: executing program 5 (id=6177): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x1}, &(0x7f0000000180)=0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) (async) listen(r5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x1f) (async) socket(0x10, 0x2, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) ppoll(&(0x7f0000000000)=[{r7, 0x8463}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) close(r6) r8 = accept4$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xfdb5, 0x0, &(0x7f0000000180)="e02742e8680d85ff9782762f86dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000140)) (async) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2.018547417s ago: executing program 2 (id=6180): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) writev(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000fb3d64c380c2400000400000000002c0000008500"/33], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r4, r2, 0x25, 0x0, @void}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) syz_emit_ethernet(0xfc0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRESHEX=r5, @ANYRES32=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x44048}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff"], 0x4c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="c674679256a3304eef0ab754033c6325fa2ee97981969171c809d86137f919d0dc8ed9c9210f6dc262ba049d9831befab98e387a61752b4dbd01a2bd8b6492a5124e0f7906bccfa1", 0x48}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000017010000030000000000000000000000700000000000000017010000020000005c00000006123bdb8d3b0c6db20a6e2b616a4705308c77fa649ec1387caf05341bcf2ff353d1027d63c5470432043f594a6cd538640803120dd6d0254c7ff4c656d58ec8aaeaf37f9421027d5f78cd9cee96370f83259d78d7640cd619029f171800000000000000170100000400000001f8ffff0000"], 0xa0, 0x4}, 0x4048091) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@getchain={0x54, 0x66, 0x603, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xe, 0xe}, {0xc, 0x8}, {0xffff, 0xfff1}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x7a}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x24048854) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 1.855106776s ago: executing program 1 (id=6182): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="78000000020601030002000000000000050000090900020073797a300000000005000100060000000500050000f8ffff2d000400000000000c00078005001500020000003400078008000b40000000d90500150084000000050003000600000005001400010000000500150059000008"], 0x78}}, 0x4000000) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f5, 0x2, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10000}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x77, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x26, &(0x7f0000000100)=""/38, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x4, 0x1, 0x5}, {0x4, 0x5, 0x6, 0x1}, {0x3, 0x4, 0x7, 0x6}], 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0xf, 0x1, 0x200, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) r7 = openat$cgroup(r4, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) (async, rerun: 32) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="320000001400000000000000", @ANYRES32=r8, @ANYBLOB="4d2a9effc01b10880635d594427a", @ANYRES64=r6], 0x20) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="9b28eb7ec96ef805", 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="30000000044000df05000000", @ANYRES32, @ANYBLOB, @ANYRES64=r6], 0x20) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000580)={r10, 0x5}, &(0x7f00000005c0)=0x8) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="0270000000000000380012800b0001006272696467650000280002800c0023000200eb5e9f28a66a5788aaaeea71cea5bae80000000000050024000000000005002a0001000000ffd4c82579aa7ac7c9cad3dd21c90c4ff23f9358e89e0ccb045303e336ce195ba0e9559b191dace6788c12e021a1ec140696"], 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r14, @ANYBLOB="00840000000004000c001a8004000480040005"], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) r15 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.770225324s ago: executing program 5 (id=6183): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000200000000000000008500000017000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002180)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xe8, 0x5802, 0x294, 0xe8, 0x294, 0x200, 0x378, 0x378, 0x200, 0x378, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @empty, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff000000, 0xff000000], 'netpci0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x32, 0x0, 0x0, 0x80}, 0x0, 0xa8, 0xe8, 0x52020000}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x29, "61d06c4e175886d6fd7826841ee76fe2075aec0afde9d7b91d7b4d5adaf9"}}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0xffffff00, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'lo\x00', 'gre0\x00', {0xfe}, {}, 0x16, 0x9, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x800, 0x401, 0x7, 'pptp\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0x77, 0x90, &(0x7f0000000380)="649cff960088027fc17a603fd71b6dd399a030780b5e17b85e1c8e8f26eea3d5efd345d96f8febbbac0a0205f5f71daf206eb516e5a9af5958903e0b4f7bf3dd1d889ebc392c13592c9436c3cfbd89786c370c7ff3aa89c46bb43d6951079a7fcf3540b1098cbc5316fac234620d6a501f92f73068b8d7", &(0x7f0000001600)=""/144, 0xfffffffc, 0x0, 0x27, 0x52, &(0x7f00000016c0)="35d2b8ba20a48956fc8649a636676479668534d33b20a09ee41531dc7ca09478942147a0a0627f", &(0x7f0000001700)="ade00e3b213eb9ccbc9f9dd4c0f23310e0081e15326fb55b37f1336bcae85c1c570f0aebde8a08fceeaa5c82e1a09899a7cfc6397c95eef9ddc7193fcbd6cb449aab22743e24d4f0926258a2d7f69f05771f", 0x5, 0x0, 0x68c94cd6}, 0x50) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4081, 0xff1}], 0x1}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000009040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80003}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) 1.708547092s ago: executing program 2 (id=6185): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x1, 0x12, r1, 0xbd3d9000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket(0x2, 0x3, 0x100000001) setsockopt(r3, 0xff, 0xffffffc0, 0x0, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000000)={{0x5}, 0x1}, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000740)={{0x0}, 0x0}, 0x20) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x86) 1.656911352s ago: executing program 1 (id=6186): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(rfc4106(gcm(aes)))\x00'}, 0xffffffffffffff8d) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r2 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x40106150, &(0x7f0000001940)={{r1, 0x0, 0x14100, 0x0, 0x8, 0x0, 0x0}, 0x0, 0x0}) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES64=r4, @ANYBLOB="f307db0a5bf4ad4d2f6edbbb7b403612fdb4f27015b4b0ccd49d137cf0f7b96f14e07f320b3e77f88014a2b49c6ee1ff96593523ce6c1f98ad862122644d56b1d356d3fa4789d7d568c6375b3de0bc4e25fd123907d5ed2125586544250d079cc7a16e905425ee3f7ee3d5efdfba23be3af6833940e288f70814adec5c1674dbbc67c091207442f02e46574347f0cf07a8974a88406e03aeb3d3bfabd8303323105a7e11b8", @ANYRES32=r3], 0x26) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(rfc4106(gcm(aes)))\x00'}, 0xffffffffffffff8d) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') (async) socket(0x8, 0x4, 0x3) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x40106150, &(0x7f0000001940)={{r1, 0x0, 0x14100, 0x0, 0x8, 0x0, 0x0}, 0x0, 0x0}) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES64=r4, @ANYBLOB="f307db0a5bf4ad4d2f6edbbb7b403612fdb4f27015b4b0ccd49d137cf0f7b96f14e07f320b3e77f88014a2b49c6ee1ff96593523ce6c1f98ad862122644d56b1d356d3fa4789d7d568c6375b3de0bc4e25fd123907d5ed2125586544250d079cc7a16e905425ee3f7ee3d5efdfba23be3af6833940e288f70814adec5c1674dbbc67c091207442f02e46574347f0cf07a8974a88406e03aeb3d3bfabd8303323105a7e11b8", @ANYRES32=r3], 0x26) (async) 1.520639316s ago: executing program 0 (id=6187): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="0110000000000000240012800b0001006d616373656300001400028005000a000100000005000b000000000008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.456464655s ago: executing program 5 (id=6188): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x9, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x170}}, 0x24040004) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x8, 0x9}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r5}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 1.455728207s ago: executing program 3 (id=6189): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x9, 0x7}, 0x10) r1 = accept(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x80) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000100)={@remote, @local}, &(0x7f0000000140)=0x8) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x81, r3, 0x3}, 0xc) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000200)) (async, rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000580)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000002780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x808c0000}, 0xc, &(0x7f0000002740)={&(0x7f00000005c0)={0x215c, 0x32, 0x8, 0x70bd2d, 0x25dfdbfc, {0xd}, [@typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x47, 0x17, 0x0, 0x1, [@typed={0x4, 0x8c}, @nested={0x4, 0x1d}, @generic="df3b20b1403a26b58b767c153cbc6e3a3ba89aa1e83a8b22bfda4de42108157c4984016120b14dbe3491e63ad4f19c6adee5c7", @typed={0x8, 0x6c, 0x0, 0x0, @pid=r4}]}, @nested={0x1020, 0xa7, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xc8, 0x0, 0x0, @u32=0x6}, @generic="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", @typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x131}]}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r6}, @nested={0x10ce, 0xe4, 0x0, 0x1, [@typed={0x13, 0xc5, 0x0, 0x0, @str='batadv_slave_0\x00'}, @generic="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", @generic="8e165139dfbe8656e40a5d10", @generic="b964d28b88128d2e87ea6d1a2559e955ac6f18fc07d0f24ed2561352aa9be0e0f28fe4ce3f8b4605096438234eef7c178ef180c9b329d19d519bbf6b0c5f19158dfa3f607d765682bc57d6bfc93af7f00e13f85319cffb3a7844791064b7dee999cebf652fcf2c53761799f4be9d9c52cffa7fb928fb87c54b9f4e797fdba46dd5dd13fecd0261727ea34dd9f8d7905620600da8ef89ee01e5f5f7879c8b79122056d5e7340b9f14379e"]}]}, 0x215c}, 0x1, 0x0, 0x0, 0x40801}, 0xc) (async) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000027c0)={0x0, 0x1, 0x3, 0x9, 0x8001, 0x5, 0x9, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7}}, 0x4, 0xffffffff, 0xfffffffa, 0x1000, 0xd000000}}, &(0x7f0000002880)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000028c0)={r7, 0xcd81}, 0x8) (async, rerun: 32) readv(r0, &(0x7f0000003ac0)=[{&(0x7f0000002900)=""/242, 0xf2}, {&(0x7f0000002a00)=""/93, 0x5d}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x4) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000003b00), &(0x7f0000003b40)=0x4) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000003c00)={'nat\x00', 0x0, 0x0, 0x0, [0x1000, 0x7, 0x6, 0x9, 0x9, 0x3], 0x7, &(0x7f0000003b80)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) (async) getpeername(r1, &(0x7f0000003d00)=@un=@abs, &(0x7f0000003d80)=0x80) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000003dc0)=""/96, &(0x7f0000003e40)=0x60) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000003e80)={0x0, ""/256, 0x0}) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000004080)={{r8, 0xfffffffffffffffa, 0x1, 0xffffffffffff7fff, 0x80000000, 0xe6ab, 0x5, 0x9, 0x7, 0x0, 0x1, 0x1ff, 0x80, 0xb9, 0x9}}) r9 = socket$netlink(0x10, 0x3, 0xe) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005140)={&(0x7f00000050c0)={0x58, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x5]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x77]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb00}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000}, 0x5d0db003f2b7fabe) (async) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000005400)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000053c0)={&(0x7f0000005200)={0x1b8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_EXP={0xb0, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2f}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0xbb4cd0200ef7bb11}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2bdd}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xdab5}]}, @NFQA_EXP={0xb0, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x236d7f0d65694a8a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASK={0x64, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8040000}, 0x40090) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000005440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005480)=0x14) (async, rerun: 64) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000005580)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005540)={&(0x7f0000005500)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40040) (async, rerun: 64) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000055c0)="261f172730db150f28d10cd8fad9f29252097193f7a8fe03c312d2b6a3c8c9056b2577e11059548c194d90ac2a68ff920bea83efdaf331231abc5f89002783a9cd76a2d9e11a35deaf50a397428ef8858ce7ea2739b9bb4394b9abc9b85b27fdaeb4558a537c38ddb41159534b263ceb1f0fa2df765c85f738e3843c9aa571a613ac07c7b0677594efa2b6f24b5fae4f9bcf3392d4c797c426a26833721dcd77722a05260b80", 0xa6, 0x40000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000005680)='reno', 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000056c0)={{}, 0x1000, 0x8, 0x7}) 1.336158877s ago: executing program 0 (id=6190): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="0500"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x70, &(0x7f0000000100)}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 1.271150921s ago: executing program 3 (id=6191): socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x4000004, 0x12) socket$kcm(0xa, 0x3, 0x87) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRESHEX], 0xfdef) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) pread64(r0, &(0x7f0000000380)=""/67, 0x43, 0x3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4000080) 1.220108824s ago: executing program 5 (id=6192): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x0) socket(0x5, 0x800, 0x9) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000050400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280050033000500000004001200"], 0x40}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x0) (async) socket(0x5, 0x800, 0x9) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, 0x0, 0x0) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000050400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280050033000500000004001200"], 0x40}}, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) 756.858033ms ago: executing program 0 (id=6193): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000009c0)={0x0, @loopback, @remote}, &(0x7f0000000a00)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac000000020000000e0000000800000f02000000020000000000000008000000040000000800000007000000010000000100010002000000050000000b000000030000000400000008000000900000000300631c0c639300000e0000000c00000003000000000000000100000004000000d2020000930800003149080000000300000f02000000040000000300000007000000030000000400000009000000040000000300000084c10000934f050000000000000b000000000000"], &(0x7f0000000ac0)=""/116, 0xc6, 0x74, 0x1, 0x7, 0x10000, @value=r2}, 0x28) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x10, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @alu={0x0, 0x1, 0xd, 0x4, 0x7, 0xfffffffffffffffc, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x0, 0x2, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0xd8, &(0x7f00000008c0)=""/216, 0x41000, 0x4, '\x00', r1, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x5, 0x6, 0x8001, 0x9}, 0x10, 0x1ad01, r4, 0x0, 0x0, &(0x7f0000000c00), 0x10, 0x56}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x3a, 0x44, &(0x7f0000000480)="31fa82b75b0097a7812a2b23221f7d3b120c555a86b49bf31f4886494a257674a7d09505816bc2219cca758a523c408c6b0d7208ffbc7cebabed", &(0x7f00000004c0)=""/68, 0xfffffffd, 0x0, 0xde, 0x2e, &(0x7f0000000540)="0c86ae255cd9f9ff6754da2632560e019b0147c63a5216af4bf9bfff8d7f8a9a854b8d46fdad8e169ca090e6006252b0c395d97fe7aa46c2b9c681773ab084cf10cd361f64c3339bfadd71fc04c904a114a9b54fc8e8d904529ce41957f1d450ab550ff921e43369ecd20eaa1884bfd3e09e7d7d10317fede7a1994c3b87f71a16858503da7e9d8088e5978d56326e7bc00dece521e6d006d7e22eb4a473968cb3c10b27c419d36772921c591bb2c5c0d59afed809dfeee4430c76b7edb9d41bc21f511e691972a0953085a6935086126e59f2f7ffa990471aed317d83d4", &(0x7f0000000640)="2e2a1935ecea46109567104fdfc2630541317de5a6ea24a3e8a3b2c158aaf01baf54ed222cf426cc4993736d9f30", 0x2, 0x0, 0xffffc8a0}, 0x50) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x30}, 0x0) unshare(0x20000400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x1, 0x1}}, 0x40) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000ec0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000001080)=ANY=[@ANYBLOB="60010000", @ANYRES16=r8, @ANYBLOB="01012abd7000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="400002803c000100240001006270665f686173040066758c10b3f592c0456e63000000000000002d236c69aa000000000000050003000b0000000c0004000600070e0800000008", @ANYRES32=r1, @ANYBLOB="fc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000c00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040003000000"], 0x160}, 0x1, 0x0, 0x0, 0x20044040}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x40000) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 683.176195ms ago: executing program 2 (id=6194): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x8000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000000)='\x00', 0x200, &(0x7f00000002c0)={@_ha_fsid={[0x3, 0x1]}, {0x40, 0xb, 0x0, 0x7fffffff}}, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000000)='\x00', 0x200, &(0x7f00000002c0)={@_ha_fsid={[0x3, 0x1]}, {0x40, 0xb, 0x0, 0x7fffffff}}, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x5a, 0x100, 0xc, @remote, @private1, 0x1, 0x8, 0x3, 0xd8}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xcc, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe}, 0x94) 579.967199ms ago: executing program 1 (id=6195): socketpair(0x23, 0x5, 0x1, &(0x7f00000000c0)) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e0000000400000004000000", @ANYRES8], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x98}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) 514.230854ms ago: executing program 2 (id=6196): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000047c0)=@delchain={0x3eec, 0x65, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x3, 0xffff}, {0x5, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3eb8, 0x2, [@TCA_MATCHALL_ACT={0x3eb4, 0x2, [@m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0xcc000000, 0x3, 0x100, 0x28}, 0x3, 0x3}, [{0x5, 0x4, 0x3, 0x4, 0x6, 0x9}, {0x3c9f, 0x10001, 0x7, 0xdf, 0x5, 0x2}, {0x0, 0x2, 0x4, 0xed3, 0xc, 0xfff}, {0x100, 0x0, 0x5, 0x1, 0x7, 0x7}, {0x3, 0x7, 0x10001, 0x0, 0x6, 0x101}, {0xab, 0x9, 0xffff8000, 0x1, 0x401, 0x4}, {0x0, 0xfffffffe, 0xda, 0x8, 0x3, 0x2b}, {0x0, 0x6, 0x6, 0x3, 0x9, 0x5}, {0x2, 0x101, 0x7, 0x7, 0x6, 0x3}, {0x800, 0x9, 0xced0000, 0x8, 0x2f14, 0x3ff}, {0x8, 0x972, 0x2, 0x5, 0x9, 0x6}, {0x20, 0x3, 0xa0000, 0x109, 0xfff, 0xffffff80}, {0x2, 0xfffffffa, 0x1, 0x4, 0x6, 0x1}, {0xffff, 0xffffffff, 0x0, 0x1, 0x5, 0x1bc5efa2}, {0x4, 0xb, 0x2, 0x1, 0x369f, 0x6}, {0xf, 0x6, 0x5, 0xf, 0x4800, 0x8001}, {0x2, 0x7fffffff, 0x1, 0x2, 0x8, 0x9}, {0xd87, 0xfcf, 0x4, 0xe64, 0x40, 0xfffffff8}, {0x800, 0x7fffffff, 0x5, 0x401, 0x1, 0x400}, {0x4, 0x1, 0x8, 0x4, 0x8, 0x48a8c9b3}, {0x101, 0x80000000, 0xde9, 0x5, 0x3, 0x5d7}, {0x3, 0xf7, 0xfffffffd, 0x4, 0x400, 0x3ff}, {0x3, 0x5c1, 0x55, 0x3, 0x5, 0xff}, {0x6a89d764, 0x800, 0x6, 0x40, 0x0, 0xf}, {0x1, 0x10000, 0x80000000, 0x40, 0x9, 0x10000000}, {0x1, 0xff, 0x9, 0x5, 0xe, 0x45f}, {0x2, 0x99, 0x4, 0x6, 0x7f, 0x80000001}, {0x8000, 0x843a44d, 0x2, 0x7, 0x56c, 0x7}, {0x1cfc7e2d, 0x6, 0x9, 0x2, 0x0, 0xd}, {0x800, 0xc, 0x1, 0xb, 0x8, 0x7}, {0xfe000000, 0x578, 0x299, 0x2, 0x7, 0x81}, {0x8, 0x3, 0x5, 0xfff, 0x2, 0x1}, {0xc, 0x3, 0x2, 0x184, 0x1000, 0x5}, {0x5, 0x9a, 0x1, 0x6, 0x3, 0x7}, {0x2, 0x7fff, 0xc46, 0x1, 0xfff00, 0xb}, {0x7, 0x6, 0x8, 0x0, 0x30000000, 0x2}, {0x3, 0x3, 0x0, 0x7fffffff, 0x1fd9c740, 0x1}, {0x5, 0x1ff, 0x4, 0x5, 0x9}, {0x401, 0x5, 0x5, 0x5, 0x3, 0x7}, {0x2, 0x5, 0x10001, 0x80000001, 0x8, 0x6}, {0x800, 0xd76, 0x4, 0xa1, 0xffffffff, 0xa}, {0x5, 0x80, 0x7e, 0x120, 0x6, 0x1}, {0x401, 0xfffffff6, 0x7fff, 0x2, 0x900, 0x8b4}, {0xffff, 0x7, 0x4, 0x4, 0x100, 0x4}, {0xfffffffd, 0x59, 0x80000000, 0xfffffffc, 0x1, 0x7ff}, {0x3, 0x40, 0xfe46, 0x1, 0x6, 0xfffffff7}, {0x2, 0x42ca, 0xa, 0x1be5c538, 0x5f, 0x5}, {0xc, 0x80, 0x401, 0x2, 0x7, 0x5}, {0xba, 0xf, 0x7fffffff, 0x3, 0x4, 0x8}, {0x8000, 0x1, 0x6, 0x7, 0x4, 0x4d}, {0x4, 0x0, 0x288, 0xd, 0xffffffff, 0xfff}, {0x3, 0xffff0001, 0x7ca, 0x4, 0x2, 0x1}, {0x6, 0x0, 0xed, 0x0, 0xbfa7022}, {0x5, 0x8001, 0x6, 0x8, 0x7, 0x200}, {0x0, 0x5, 0xf7, 0x4, 0x5, 0x1298d385}, {0x81, 0x906, 0x0, 0x8, 0x1ae65937, 0x8000}, {0x3, 0x9e, 0x7c6, 0xc491, 0x5, 0x5}, {0x8, 0x5, 0x2, 0x1000, 0x9, 0xd0}, {0x9, 0xfffffffb, 0x1, 0x1, 0x7ff, 0x7}, {0x3, 0x6, 0x8, 0xbc6, 0x6, 0x10000}, {0x5, 0x900, 0x100, 0x2, 0x2, 0x9}, {0x1, 0xfffffffc, 0x9, 0xb, 0x3ff, 0x2}, {0x6, 0x3, 0xffffffff, 0x6, 0x2, 0x7}, {0xd, 0x3, 0x8, 0x401e9679, 0x4, 0x80}, {0x2, 0x3, 0xb2, 0x3709, 0x2445, 0x1}, {0x400, 0x1, 0x81, 0x4, 0x2, 0x101}, {0x1, 0x3ff, 0x1, 0x0, 0xf, 0x50000}, {0xa, 0x5, 0x3, 0x2, 0x200, 0x2}, {0x5, 0x5, 0x5, 0x4, 0x1, 0xfffffffb}, {0x3ec1e00f, 0x7, 0x0, 0x882b, 0x3, 0x9}, {0xd, 0x1, 0x6, 0x800}, {0x1, 0x7, 0x900, 0x48a, 0x5, 0x3}, {0x40, 0xa37, 0x0, 0x3, 0xfffffffa, 0x7}, {0x1000, 0x1ff, 0x100, 0x2, 0x2800, 0x800}, {0x8, 0x7, 0x6, 0x472, 0x3, 0x3}, {0x80, 0x4, 0x6, 0xfff, 0x5, 0x9e5}, {0x8, 0x8, 0x200, 0x9, 0x400, 0x4}, {0x7, 0x5, 0x6, 0x7, 0xfffffffe, 0xa0}, {0x7, 0x7fff, 0x2, 0x4, 0x1, 0x247}, {0x9, 0x8c2, 0x1, 0x52f85651, 0x0, 0xffffffff}, {0xfffffbff, 0x3, 0x1ff, 0x9, 0xffff0b31}, {0x0, 0x4, 0x80000001, 0x4, 0x2, 0x40}, {0x10001, 0x11, 0x4, 0x3, 0x9, 0x1}, {0x0, 0x6, 0x1000, 0x10, 0x0, 0x8001}, {0x7, 0x80000000, 0x0, 0xfffffffe, 0x0, 0x10000}, {0x6, 0x8, 0xffffff77, 0x3, 0x8, 0x200}, {0x6, 0x8, 0x6, 0x7, 0x4, 0xb5b8388}, {0xd67, 0x7fffffff, 0x5, 0x3, 0x6a, 0x8}, {0x9, 0x8, 0xffffffff, 0x6, 0xfff, 0x1}, {0xfffffff7, 0xfffffff9, 0xc7, 0x1, 0x40, 0x3}, {0x2, 0x4, 0x2, 0x18b0, 0x9, 0x4}, {0xffffffff, 0x401, 0x6, 0x2, 0xffff1f45, 0x2}, {0xe, 0xffff, 0x0, 0x2f, 0x8ef, 0x7}, {0x10001, 0x4, 0xec, 0x1, 0x8, 0x2}, {0x401, 0x1180, 0x678, 0x10, 0x8, 0x800}, {0x2, 0x7, 0xffff0000, 0x8, 0xd594, 0xa5}, {0x3, 0x1, 0x4, 0x4, 0xb, 0xfffffff9}, {0x0, 0x272, 0x3, 0x6, 0xd6, 0x5}, {0x8, 0x421a4cea, 0xfff00, 0x7, 0x581, 0x8}, {0x4, 0x3ff, 0x5, 0xfffffffe, 0x9, 0xb95}, {0xa, 0x6, 0x2, 0x0, 0xfffffffd, 0x9}, {0x1, 0x2, 0x8, 0x7fffffff, 0x1, 0xe0000}, {0x0, 0x3, 0x3, 0x1, 0x2, 0xe9}, {0xfffffff7, 0x7, 0x2, 0x7, 0x7f, 0x538ae754}, {0x0, 0xa, 0x7, 0x40, 0x101, 0x8}, {0x7, 0x80000001, 0x8000, 0x3, 0x0, 0x8}, {0x2, 0x7, 0x2f4, 0xd2d, 0x4, 0x3}, {0x5, 0x470c, 0x1, 0x6, 0xb32, 0xc8e}, {0xfffffffd, 0x8, 0xff, 0xd3, 0x2, 0xfffffffb}, {0xfe, 0x8e, 0x4, 0x2b7, 0xff}, {0x101, 0x7f, 0x9, 0x10000, 0xffff, 0x1}, {0x9, 0x0, 0x75a2, 0x1, 0xcf1, 0x5}, {0xb, 0x4, 0x1000, 0xa, 0x0, 0x6}, {0x7, 0x4, 0x9, 0x3, 0x401, 0x40}, {0x7a, 0xfffffff8, 0x7, 0x5909b2cc, 0x5, 0x5}, {0x4, 0x141, 0x6, 0x2, 0x0, 0x6b}, {0x0, 0x343e757d, 0x900, 0x9, 0x6, 0x5}, {0x8, 0x80, 0x1ad0f340, 0x6, 0x4, 0x8000}, {0x9, 0x4, 0x1, 0x38f7f012, 0x2, 0x6}, {0x0, 0x3, 0xc1a7, 0x0, 0x3, 0x54c}, {0x101, 0xf3, 0x10001, 0x1, 0x6, 0x2}, {0xd, 0x8, 0x2, 0x1, 0x459f, 0x9}, {0x6, 0x9, 0xffffffff, 0xf4, 0x4, 0x4}, {0xa, 0x5, 0x8001, 0x5, 0x3, 0x100}, {0x1e, 0x9, 0xfffffffa, 0x7fff, 0x2, 0x5}, {0x9, 0x6, 0x10, 0x6, 0x80000001, 0x2}, {0x8, 0xffffffff, 0x9, 0x8, 0x2, 0x8}, {0x80, 0x8, 0xc3, 0x9, 0x9, 0x101}], [{0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {}, {0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0xee60d1db90cb64d5, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x2}, {0x3}, {0x8, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x3060, 0x7, 0x0, 0x0, {{0xb}, {0x3034, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x0, 0x1, 0xdf4, 0xaa6a, 0xa, 0x2, 0x79e, 0x1000, 0x3, 0x326a, 0x5e8, 0x9, 0x401, 0x2, 0x4, 0x3, 0x3ef5, 0x55, 0x10000, 0xfffffff9, 0x7, 0x1, 0x7f, 0x4e, 0xfff, 0x1, 0x3, 0x200, 0x5, 0xf, 0x0, 0xba22, 0x3ff, 0x3, 0x5, 0x2, 0x9, 0xe000000, 0x9, 0x400000, 0xa, 0x4, 0x0, 0x3, 0x4, 0x1, 0x3, 0x3, 0x8, 0x4, 0x800, 0x4, 0x4, 0x5, 0x7, 0x3, 0x1, 0xffffffff, 0x7, 0x2, 0x4f97, 0x3, 0x7ff, 0x5, 0x10000, 0x92, 0x0, 0x0, 0x2, 0x4, 0x2, 0x4, 0x8, 0x3, 0x1, 0x7, 0x5, 0x8, 0x2, 0x3, 0x8, 0x8dca, 0x6, 0x6, 0x6, 0xf, 0x0, 0x80, 0x7, 0x101, 0x49, 0xf, 0x17fd, 0xfff, 0x5, 0x20, 0x7, 0x93, 0x8000, 0x40, 0x10001, 0x3ff, 0xc, 0x7ff, 0x3ff, 0x7, 0x0, 0xb18, 0x5, 0x7, 0x6, 0x80000001, 0x1, 0x3, 0x4ba, 0xc37, 0x58, 0x2, 0x0, 0x7, 0x9, 0x8000, 0x830, 0x7fffffff, 0x3520, 0xffffffff, 0x4, 0x8972, 0x101, 0xc, 0x7b0, 0x6, 0x9, 0x6cd, 0x4, 0x7, 0x9, 0x3, 0x9, 0x1, 0x6, 0x6, 0x4, 0x2, 0xb9d4, 0x1, 0x3d4, 0x2, 0x6, 0x8, 0x3, 0x7fff, 0x5b, 0x100, 0x9, 0x3, 0xd71c, 0x3, 0xef1, 0x60, 0x8000, 0xf36f, 0x280eaee9, 0x5, 0x9, 0x3, 0x80000000, 0x1, 0x4, 0x3, 0x80000000, 0xfffffffb, 0x5, 0x7, 0x5, 0x0, 0xd, 0x3, 0x8, 0x4, 0x6, 0xfffffff9, 0x4, 0xf, 0x7fff, 0x8, 0x1, 0x3188, 0xf6, 0x7, 0x5, 0x2, 0x2, 0x39, 0xfffffffc, 0x89, 0x1, 0xffffffff, 0x200, 0x80000001, 0x2, 0x10, 0x1, 0x0, 0xd5, 0x0, 0x10001, 0xb, 0x6, 0x2d, 0x4ba7, 0x3, 0x6, 0xc, 0x80, 0x0, 0x4, 0x3, 0xfcd, 0xbc0, 0x7, 0x6, 0x5, 0x6, 0x8, 0x9, 0x5, 0x3, 0x1, 0x7, 0x3, 0x5, 0x3ff, 0x6, 0x19c, 0x0, 0x99, 0x88, 0x1, 0x2, 0x8, 0x6, 0x5, 0x0, 0x6, 0x80000000, 0x400, 0x9, 0x2, 0x7f, 0x8, 0x5, 0x800, 0x5, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x59, 0xfff, 0xc4, 0xffff4284, 0x4, 0x6, 0x3, 0x7, 0x3, 0xffffffff, 0x1, 0xfffffe00, 0xfffffff1, 0xa, 0x3, 0x1ff, 0x9, 0x3abb, 0x5, 0xfec8, 0x41, 0x8000, 0x7, 0x9, 0xfffffff8, 0xa, 0xfffffff8, 0x6, 0xa00000, 0xffff, 0x6, 0x4, 0x9, 0xc8, 0xfffffff8, 0x1, 0x0, 0x29d7, 0x7, 0x4, 0x4b, 0x71, 0x6, 0x8000, 0x6, 0xc, 0x80000001, 0xf, 0x8, 0x4, 0x400, 0x3, 0x2, 0x10001, 0x84e, 0x7, 0x3, 0x0, 0x1, 0x0, 0x4, 0xef27, 0x7fff, 0x5, 0x2, 0x2, 0x7f, 0x50, 0xd, 0x6, 0x1, 0x8815, 0x5, 0x2, 0x9, 0x8, 0x9, 0x401, 0x3, 0x8, 0x101, 0x1, 0x6, 0x4, 0x6a, 0x8, 0x1, 0x10001, 0xfffffffb, 0x8, 0x8, 0x2, 0xd, 0xa1, 0x1ff, 0x9, 0x7, 0xf680, 0x80000000, 0xffff, 0x3, 0x7ff, 0x7fffffff, 0xe0000000, 0x3, 0xfffffffb, 0x61, 0x3, 0x9, 0x0, 0x100, 0x9, 0xad, 0x8000, 0xa19f, 0x3, 0x600, 0x3, 0xb9, 0x9, 0x9, 0x3, 0x0, 0x2d, 0x0, 0x52, 0x8, 0x3, 0x9, 0x0, 0x101, 0x27b70cfb, 0x0, 0x2, 0x10000, 0xffff, 0x2, 0x5, 0x3, 0x8, 0xffffff0c, 0xc7, 0x7ff, 0x6, 0xb9b, 0x2, 0x0, 0xfffffc01, 0x2, 0x0, 0xf80e, 0xfffffffa, 0x6, 0xfce2, 0xc000, 0x3, 0x0, 0x2a29, 0x9, 0x8000, 0x10001, 0xb5d, 0x1, 0x6, 0xfff, 0x6, 0x9, 0x2, 0x8001, 0x0, 0x0, 0x2, 0x8df4, 0x5, 0x5, 0xd, 0x3, 0x694, 0x7, 0x3e21, 0x2, 0x2, 0x8, 0xd, 0x3, 0x3, 0x7, 0x8, 0xe, 0x3, 0x86d, 0x6, 0x4, 0x1, 0x4, 0x0, 0x1, 0xf7, 0x9, 0x6, 0x1ca2c4cf, 0x6, 0x0, 0xf, 0x6, 0x1, 0x6, 0x6, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x5, 0x7ff, 0x0, 0x9, 0x93, 0x0, 0x5, 0x200, 0x9, 0x0, 0x9, 0x4, 0xfff, 0x7, 0x80000001, 0xfffffff7, 0x8, 0x8, 0x1, 0x8, 0x1, 0xffff, 0x7, 0x5, 0x8, 0x9, 0xa, 0x8, 0x5, 0x7, 0x0, 0x3, 0x7f, 0x2, 0x9, 0x3, 0x7, 0x7, 0xfff, 0x5, 0x1, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff0000, 0x7, 0x2, 0x1, 0x200, 0x80000000, 0x2, 0x2, 0x8, 0x6, 0x0, 0x7, 0xb6, 0x7, 0x5, 0x7, 0x5, 0xff, 0x0, 0xfff, 0x80000000, 0x4, 0x1ff, 0x3, 0x6, 0x8, 0x5, 0x2, 0x8, 0x40, 0x5, 0x1e361d52, 0x10001, 0x5, 0x800, 0x5, 0x8, 0xfffffff7, 0x3, 0x2, 0x9, 0xb4, 0x2, 0x400, 0x5a, 0x7, 0x4, 0x5111de0d, 0x2, 0x0, 0x6, 0x400, 0x6, 0xd03, 0x7, 0x4f61, 0x5, 0x6, 0xff, 0x4, 0x8, 0xc8, 0x4, 0x5, 0x6, 0x5, 0x8, 0x9, 0x6, 0x5, 0x40, 0x3c40000, 0x6, 0x4, 0x8, 0x8, 0x6, 0x1000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x4, 0x6, 0x6, 0x2, 0x0, 0x7, 0xc, 0x5, 0x24000, 0xff, 0x3, 0x2, 0x94, 0xffffffff, 0x1, 0x6, 0x8, 0x1, 0xfffffff7, 0x1, 0x6, 0xb4c, 0x4, 0x1e0, 0xfffffff0, 0x4, 0x9, 0x1ff, 0x9, 0x8, 0x4f, 0xfffffff9, 0x3, 0x6151, 0x800, 0x3, 0xf, 0x6, 0x400, 0x8, 0x4, 0x0, 0x3, 0x68e8, 0x4, 0xa, 0x7ff, 0xc401, 0x6, 0x3, 0x7f, 0xfffffffa, 0x3, 0x8, 0x7ff, 0x1, 0x58e, 0x8, 0x766, 0x0, 0x2ee, 0x1ff, 0x10001, 0x5, 0x36, 0x2, 0x6, 0x1a, 0x7, 0x1, 0x9, 0x1000, 0xa21b, 0xfffffff8, 0xf, 0xb, 0x0, 0x4, 0x5, 0x6, 0x200, 0x45c0, 0x10000, 0x400, 0xfffffff7, 0x9, 0x3ff, 0x785, 0xffffffff, 0x7, 0x3e1a5ec2, 0x1, 0x7, 0x8, 0x1, 0x4, 0xfff, 0x2, 0x8, 0x4, 0xfffffff9, 0xfffffff0, 0x9, 0x3, 0x1, 0x99, 0x4, 0xf488, 0x3, 0x6, 0x5, 0x1, 0x5, 0x5, 0x5, 0x2, 0x80, 0x2, 0x4, 0x8, 0xfffffffc, 0x14, 0x3, 0x6, 0x4, 0x7, 0x7, 0x8, 0x8001, 0x4, 0x8, 0x1, 0x0, 0x9, 0xe59, 0x4, 0xee, 0x5, 0x5, 0xf, 0x9aad, 0x1, 0x0, 0x80000000, 0x4, 0x7, 0x0, 0x2, 0x3c6ccd55, 0xd, 0x9, 0x5, 0x5, 0x1, 0x8001, 0x3, 0x6, 0x0, 0x8000, 0x5, 0xf8, 0x5f8, 0x262, 0x2, 0x5, 0x4, 0xb, 0x1, 0x100, 0x9, 0x8, 0x8, 0xfffff000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2, 0x4, 0x1, 0xfa, 0x101, 0x4, 0x100, 0x10, 0x44c1, 0x4, 0x9, 0x4, 0x6, 0xe35, 0xff, 0x9e, 0x100, 0x1, 0x1, 0xa, 0x4, 0x3, 0x4, 0xffff63d2, 0x8000, 0x5, 0x3, 0x7, 0x69, 0xfffffff7, 0x80000000, 0x2, 0x5, 0x2, 0x80, 0x7, 0xfffffff2, 0x4, 0x3, 0x800, 0x5, 0x1000, 0x7, 0x3, 0x8, 0xeca, 0x8, 0x5, 0x4, 0x9, 0x7, 0x4, 0x1, 0xc45, 0xec24, 0x9, 0x73, 0x7, 0x10001, 0xfffffffc, 0xfffffff8, 0x4f63, 0x28, 0xe439, 0x5, 0x6, 0xa2, 0x10, 0x0, 0x7f, 0xfffffdbd, 0x6, 0x1, 0x7, 0x0, 0x6, 0x2, 0x5, 0xd, 0x1, 0x3a2, 0x7, 0x11d, 0xd50, 0xf, 0x1, 0x8, 0x2, 0x2, 0x0, 0x4f6ec543, 0xfdd, 0x3, 0x9a9417d, 0x4d, 0x10000, 0x8001, 0x2, 0x0, 0x3, 0x0, 0x2, 0x7, 0x7fffffff, 0x80000000, 0x7, 0x1, 0x5a09, 0x5, 0xd, 0xfffffeff, 0x1, 0x0, 0x6, 0xa, 0xe, 0x8001, 0xb, 0x0, 0x0, 0x9, 0x4, 0x1000, 0x3eb, 0x1, 0x6, 0x0, 0x0, 0xffffffff, 0x8, 0x4, 0x2, 0x9, 0x5, 0x4e5, 0x2, 0xffffffff, 0x50, 0x9, 0x1dad7a61, 0x40e, 0x10, 0x0, 0xfffffc22, 0x8, 0x0, 0x8, 0x1c, 0x8, 0x5, 0x4, 0x2, 0x100, 0x4, 0x337, 0x8, 0x7, 0x5, 0x5, 0x8, 0x5, 0xc059, 0x7fffffff, 0x80000000, 0x8, 0x6, 0x9, 0x6, 0x89, 0x4, 0xfffeffff, 0x4, 0x5, 0x800, 0x7ff, 0xc, 0x6, 0x7, 0xff, 0xffffff7f, 0x10001, 0x0, 0x0, 0xa, 0x9, 0x85b, 0x0, 0x2, 0x0, 0x4, 0x80, 0x1, 0x9, 0x101, 0xa5, 0x9, 0x0, 0x8, 0x3, 0x1, 0x4, 0x1, 0x0, 0xcc1, 0x0, 0x3a, 0x8, 0x4, 0x6, 0x9, 0xb0e3, 0x6, 0x7fff, 0x2, 0x4, 0x7, 0xfffff000, 0x2, 0x8, 0x8, 0x1c000, 0xca7, 0xa2, 0x7fff, 0xb, 0xfffffffd, 0x193f, 0xf, 0x5, 0x10001, 0x5, 0x1, 0x2, 0x3, 0xa, 0x4, 0x89, 0x2, 0x3, 0x81, 0x4, 0x10001, 0x0, 0x8, 0x40000, 0x3, 0x94c, 0xa4, 0x3, 0x6, 0xffffffff, 0x81, 0xe6c, 0x7fff, 0x80000000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xae, 0xffffe982, 0x5, 0x8, 0x3, 0x3, 0x6, 0x4, 0x1, 0x7, 0x0, 0x9, 0x2, 0x9, 0x5, 0x40, 0x20, 0xfffffff9, 0x5, 0x0, 0x4, 0x5, 0x1ff, 0xfa9, 0xed9, 0x200, 0x1, 0x4, 0x4, 0xf903, 0x1, 0xffff, 0x7, 0x8, 0x401, 0x0, 0x2, 0x9, 0x4, 0x3, 0x0, 0x7, 0x5, 0x5, 0x4, 0x3, 0x2, 0x4297, 0xfffffffb, 0x5, 0x7, 0x8, 0x9, 0x0, 0x4ead, 0x6, 0x80, 0x5, 0x4, 0x10000, 0xfffffffc, 0x0, 0x10000, 0xf68a, 0x1, 0xde4b, 0x5, 0x2, 0xc, 0x2, 0x7ff, 0x4, 0x1, 0x3, 0x0, 0x5, 0x401, 0xff, 0x8, 0xfffffff8, 0x3, 0x6, 0x80000000, 0x4, 0xbc0b, 0x25, 0x80000000, 0xff, 0xf, 0xfafe, 0x1, 0xfffff693, 0x4, 0x0, 0x1e9, 0x8, 0x6, 0x6, 0xfffffffc, 0x8, 0x1, 0x3, 0x4, 0x4, 0xfffffffe, 0xfffffffa, 0x694, 0x3, 0xe3, 0xa, 0x1bf3b1f8, 0xe9, 0x80000000, 0x1, 0x0, 0x2, 0x76, 0x6, 0x80, 0x2, 0x0, 0x10, 0x28bbdf24, 0x464647e4, 0xcae8, 0x0, 0x8, 0x9, 0x2, 0xf, 0x8ef, 0xfffffff8, 0x2, 0x0, 0x49bdde32, 0x8, 0x7, 0x8, 0x401, 0x407, 0x5, 0xd7ac00, 0x9, 0x2, 0x10, 0x6, 0x80000001, 0x4, 0x9, 0x0, 0x0, 0x27, 0x6, 0x80000000, 0x2, 0x91b, 0x8, 0x8bce, 0xf, 0x1456e564, 0xfffff030, 0x480000, 0x4, 0xf, 0x7, 0x2, 0x80000001, 0x2, 0x3, 0x92ff, 0x2, 0x6, 0x35fe, 0x4, 0xfff, 0x8, 0x6, 0x6, 0x8, 0x7fffffff, 0x0, 0x355, 0x6, 0xea0a, 0xffffffff, 0x9, 0x4, 0x200000, 0x5, 0x96, 0x81, 0x7, 0xffffffff, 0x8001, 0x5, 0x28, 0x2, 0x9, 0x5, 0x1ff, 0x5, 0x5, 0x2a00, 0x2, 0xfffffc01, 0x5, 0x200, 0x7fff, 0x2, 0x6, 0xe281, 0x81, 0x9, 0xb0a, 0x0, 0x88e9, 0x21, 0x7f, 0x0, 0xfff, 0x1, 0x7fff, 0x7, 0xfffeffff, 0x889, 0x100, 0x8, 0x2, 0xf8000000, 0x1, 0x1, 0x9, 0x0, 0x576, 0x7fffffff, 0x5, 0x0, 0xa, 0x2, 0x7, 0x0, 0x9, 0xfffffff9, 0x5, 0x1, 0xf, 0x800, 0x9ad, 0x8, 0x1ff, 0x5, 0xf440, 0x1, 0xffffffd7, 0x5, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf31, 0x0, 0x3, 0x1, 0xaa, 0x2, 0xfec, 0xfffffff9, 0xfffffffc, 0xfffffffd, 0x6, 0x1, 0xd, 0x8, 0x5, 0xffffffff, 0xd, 0x81, 0x10000, 0x8, 0x2, 0x8, 0xd7, 0x4, 0x5, 0x7, 0x7, 0x4, 0xdc8, 0x9, 0xf, 0x3ff, 0x1, 0x6, 0x100, 0x9, 0x5, 0xe, 0x6, 0x6, 0x3, 0x9, 0x8, 0x8af4, 0x2, 0x0, 0xfff, 0xe8b5c2c, 0x4, 0x0, 0x5, 0xfffffff4, 0x735, 0x1, 0x400, 0x6, 0x10000, 0x7f, 0x4, 0x8, 0x1ff, 0x4872, 0x9, 0x1, 0x401, 0x80000000, 0x2, 0x800, 0xf, 0x2, 0x4, 0x7, 0x8, 0x1, 0x5, 0x7, 0x6, 0x7, 0x7ff, 0x401, 0x2, 0xf6, 0x80000000, 0x9, 0x5, 0x3, 0xfffffffa, 0x7, 0x5, 0x10001, 0xf32b, 0x4, 0x5, 0x3e8, 0x9, 0x7, 0x4, 0x5, 0x9, 0xd7db, 0x1, 0x6, 0x10000, 0x74, 0x8, 0xce3c, 0x8000, 0x0, 0x2, 0x1, 0x9, 0x100, 0x5, 0xc, 0x0, 0x8, 0xff, 0x0, 0x6, 0x9, 0x6, 0x3, 0xc4, 0xfffffffc, 0x2, 0x4, 0x5, 0x80000001, 0x2ddfd83a, 0xc, 0xfffffffe, 0x0, 0x3ff, 0x3, 0x4, 0x3, 0x3, 0xfffffff9, 0xdd2d, 0x3, 0x3ff, 0x9, 0x45, 0x7f, 0x6, 0x6, 0x80000001, 0x3, 0x9cc, 0xe, 0x3, 0x8, 0x5, 0xfffffffe, 0xba6, 0x59, 0x2, 0x5, 0x9, 0x3c, 0xa6c, 0x8, 0x1, 0x1, 0x3b, 0x401, 0x8, 0xfffffc69, 0xfffff000, 0x7, 0x6, 0xfffffbff, 0xfffffff1, 0x8000, 0x8, 0xa5, 0x1, 0xcb2, 0x8000, 0x4, 0xc, 0xe719, 0x3, 0xfff, 0x9, 0xfffffc04, 0x7fff, 0x5, 0x8, 0xa, 0x5, 0xc04, 0x80, 0x4, 0xe31, 0x5, 0x1987c7d, 0x10, 0x1, 0x3a, 0x4, 0x5, 0x9, 0xe, 0xffff, 0x7, 0x3, 0x4, 0x2, 0x677, 0x4, 0x2, 0x0, 0x4, 0x0, 0x2, 0x0, 0x9, 0xbca0, 0x2, 0x6, 0xb, 0xe, 0x4, 0x4, 0xfffffff6, 0x0, 0x6, 0x400, 0x4, 0xb8, 0x0, 0x140000, 0x957, 0xffffffff, 0x3, 0x10001, 0x6, 0x0, 0x401, 0x24000, 0x401, 0x3ff, 0x9, 0x1, 0x4, 0x5, 0x5, 0x1, 0x3, 0x7fff, 0x1, 0x0, 0x4, 0x4ca, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x40, 0x2, 0xffff, 0x1, 0xe, 0x4, 0xf2e6, 0x1, 0x1, 0x5, 0x8, 0x7, 0x7, 0x1, 0xcd, 0x3, 0x0, 0x2, 0x9f77, 0x5, 0x6, 0x0, 0x0, 0x6, 0xc, 0x3, 0xff, 0x9, 0x1, 0xb915, 0x5f4, 0xffffffff, 0x4, 0x6, 0x7ee, 0x8, 0x7, 0x7ff, 0x5, 0x7, 0x0, 0x900, 0x401, 0x401, 0x2fa815a5, 0x465, 0x9, 0x9, 0x1, 0x7fff, 0x81, 0x7, 0x7, 0x9, 0x8, 0x3, 0x10000, 0x6, 0x94, 0xff, 0x19d, 0x1, 0xfffffffa, 0x8d1, 0x7, 0x81, 0x8, 0x2, 0x0, 0x983, 0x2, 0x1, 0x9, 0x200, 0x1, 0x4, 0x40, 0x7, 0x400, 0x9, 0x5, 0x6, 0x0, 0x0, 0x8, 0xffff7fff, 0x3, 0x0, 0x6, 0x3, 0x5, 0x15, 0xf, 0x3, 0x10, 0xc, 0x9, 0x7, 0x9, 0xfffffff7, 0x80fc, 0x7, 0x3, 0xd86f, 0x9, 0x79b9a4aa, 0x6, 0xef85, 0x82, 0x8, 0x3, 0x6, 0xffffff80, 0x3, 0x40, 0x6, 0x24, 0x6b, 0x3, 0x155, 0x5, 0x2, 0x3, 0x0, 0x0, 0x81, 0xd8, 0x8, 0x6, 0xfc, 0x2, 0x4, 0xb, 0x62, 0x81, 0x7f, 0x9, 0x4, 0x50, 0xa, 0x1, 0x2, 0x1ff, 0x2, 0x6, 0x7, 0x2, 0x5, 0x4, 0x7d, 0x0, 0x21a0892f, 0x5937, 0x7, 0x3, 0xfc0c, 0x7684, 0x2, 0x4, 0x6, 0x1, 0xa0, 0xe, 0x10001, 0x4, 0x10001, 0x40, 0x21e, 0x3, 0x3, 0x10, 0x65e, 0x494, 0x6, 0x38, 0xff, 0x3, 0xc, 0x9, 0x8, 0x5, 0x96f, 0x6, 0x7, 0x6, 0xff, 0xe6e8, 0x1ff, 0x9f, 0x8, 0x44545d2f, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x7fff, 0x2, 0x4, 0x100, 0x1, 0x0, 0x6, 0x7fffffff, 0x5, 0x4, 0x1, 0x5, 0x4, 0x8, 0x4, 0xfffff0d6, 0x769, 0x200, 0x7, 0x4b, 0x8, 0x1, 0x2, 0x7, 0xffff7fff, 0x8, 0x5e, 0x5, 0x8, 0x3, 0x81, 0x100, 0x1c00000, 0x9, 0x4, 0xd8dd, 0x1, 0x1, 0x6, 0x6, 0x8, 0x7, 0x4, 0x26e6, 0x1000, 0x36, 0x100, 0x1, 0x5, 0x8, 0xda9d, 0xfffffffe, 0x5, 0x3, 0x0, 0x8, 0xcadb, 0xa1c, 0x4, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xef, 0x9, 0x3ff, 0x7, 0x60000, 0xeeda, 0xb089, 0x0, 0x8, 0xffff, 0x800, 0xe78, 0xffffffff, 0xa, 0x8000, 0x400, 0x80000001, 0x27dd, 0x5, 0x8ef, 0x3, 0x7, 0x101, 0x2, 0x7, 0x6, 0xfffff000, 0x72, 0xb8e, 0x2, 0x1000, 0xd6, 0x5, 0x6e, 0x2d3f, 0x7, 0x1, 0x6, 0x0, 0xff, 0x0, 0x7, 0xe, 0xb, 0x3, 0x6, 0xfffffff8, 0x9, 0x1, 0x941, 0x8, 0x10001, 0x0, 0x1000, 0x4, 0x7, 0x3, 0x3, 0x6, 0xfffffff9, 0xfffff000, 0x0, 0x9, 0x7, 0x8, 0x8, 0x6, 0x200, 0xb, 0x5, 0xa, 0x6, 0xc, 0x2, 0x1, 0x0, 0x2, 0x8, 0x9, 0x8e, 0xa, 0x800, 0x81, 0x9, 0x1, 0x227, 0x61a, 0x1, 0x9, 0x5, 0x400, 0xfc, 0x5931, 0x492a, 0x463, 0x40, 0x7, 0x5, 0x8, 0x9, 0x0, 0x9, 0x9, 0xe, 0x4, 0xfc, 0x0, 0x1ff, 0x3, 0x4, 0x0, 0x1, 0x4, 0x1, 0x8, 0x7, 0x4, 0xff, 0x3, 0x7fffffff, 0x2, 0x10001, 0x51af, 0x5, 0x0, 0x2c, 0x1, 0x38000000, 0x5, 0x2, 0x6, 0xa3, 0x80000000, 0x2, 0x886, 0x2, 0x9, 0x6, 0xfffffffb, 0x2, 0x2, 0xe5, 0xfffffffd, 0x7, 0xf5, 0x80000000, 0x9, 0x5, 0x9, 0x401, 0xc3, 0x6, 0xe, 0x7, 0x9, 0xa918, 0x5, 0x200, 0x7, 0x7, 0x1, 0x8, 0x10001, 0x9, 0x3b, 0xfffff000, 0x9, 0x9, 0x6, 0x1a8, 0x8000, 0x6, 0x2, 0xfffffff7, 0x6, 0xda2, 0x6, 0x96, 0x3, 0x7, 0x9, 0x38, 0x456d, 0x8, 0x7, 0x11, 0x4, 0x200, 0xffffffb2, 0x1, 0xec, 0x2, 0x4, 0x8000, 0x3, 0x6, 0x3c4ca5ed, 0x1005, 0x101, 0x7, 0x4, 0x0, 0x5, 0x3f78, 0x3, 0xed5b, 0xffffffbb, 0x1, 0x9, 0x2, 0x81, 0xea, 0x5, 0xffffa58b, 0x36, 0x200, 0x7, 0x5, 0x5, 0x400, 0x8, 0x5, 0x677, 0xfe4c, 0x7, 0x6, 0x5, 0x4, 0x1000, 0x5, 0x3, 0x2, 0x9, 0xfff, 0xfffffffa, 0x3, 0x2, 0x9, 0xff, 0xbd, 0x9d, 0x4, 0x7fffffff, 0x100, 0x200, 0xffff8001, 0x1f, 0x5, 0x38c2, 0x7, 0xf44f, 0x2, 0x18b, 0x8, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x1, 0x741, 0x9, 0x10001, 0x2, 0x1, 0x8, 0x3, 0x3, 0x5, 0x6, 0x5, 0x6, 0x8fd, 0x2, 0x8, 0x5, 0x2, 0x1, 0x6, 0x3, 0xcafe, 0x7fffffff, 0x4, 0x3, 0x9, 0x7, 0x2, 0x101, 0x3, 0xffffffff, 0x2000000, 0x7ff, 0x6, 0x80000001, 0x101, 0x3, 0x7ff, 0x10, 0x3, 0x1, 0x5, 0x0, 0x7, 0xffffff80, 0x8, 0x2, 0xd, 0x4, 0xffff, 0x38b, 0xbdfd79f8, 0x0, 0x0, 0x6, 0xff, 0x7fff, 0x8, 0x101, 0x4, 0xfffffc00, 0x69, 0x6de5, 0x4, 0xc4f9, 0xfffffffa, 0x5, 0x0, 0x1, 0x800, 0xfffffffa, 0x5, 0x7fffffff, 0x40, 0x8, 0x6, 0x43, 0x2, 0x9, 0x7ff, 0xffffffff, 0x8, 0x5, 0x0, 0x3, 0x58, 0x1, 0x5, 0x3, 0x1, 0x9, 0x77a2, 0x9, 0xdebe, 0x1, 0x8, 0x5, 0x2, 0x6, 0xfffff801, 0x6, 0xc, 0x200, 0xee, 0xffffff39, 0x4, 0x0, 0xfffffffd, 0x2, 0x1, 0xe28, 0xe51, 0xba44, 0xa, 0x4abc, 0x7ff, 0x40, 0x1200, 0x99, 0x6, 0x47b2, 0x7, 0x1, 0x5, 0x3, 0xc, 0x7, 0xf, 0x4, 0xfffffff1, 0x9, 0xa, 0x2, 0x8, 0x200, 0x4, 0x0, 0x2, 0x3, 0x7b0, 0xfffffff8, 0x40, 0x5, 0x6, 0x6, 0x3, 0x7, 0x8, 0x2, 0x0, 0x100, 0x8001, 0x9, 0x2b9c, 0x0, 0x2, 0x6, 0x80000000, 0x1ff, 0x7fffffff, 0x4, 0x101, 0x7fffffff, 0x669, 0x4, 0xffffff75, 0x9, 0xfff, 0x7, 0x6, 0x5, 0x1, 0x2, 0x1, 0x8001, 0x0, 0x10, 0x1, 0x8000, 0x8001, 0x8000, 0x43, 0xfffffff8, 0x0, 0xd6c, 0xa67, 0x8001, 0xffffffff, 0x2, 0x2, 0x1, 0xe, 0xc1, 0x2, 0x6, 0x3, 0x9, 0x3, 0x9, 0x5, 0x1, 0xfffffffc, 0x9, 0xfffffff8, 0xda, 0x5, 0xdcdf, 0xffffffff, 0x6, 0x6, 0x7fff, 0xfffffff7, 0xdd40b5, 0x80000001, 0xe213, 0xe, 0x80000000, 0xffff, 0x2, 0x3, 0xd6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x0, 0x0, 0x4, 0x6, 0xa, 0x2, 0x8, 0x7, 0x3, 0x7, 0x2c, 0x4be, 0x7fff, 0x0, 0x8, 0xffffffff, 0xe5b7, 0xfffffffd, 0x5, 0x1, 0x8, 0xfffffffd, 0x81, 0x3, 0x8, 0x9, 0x1, 0x80000001, 0xa69]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0xf, 0x0, 0xfffffff7, 0xffffffff, 0x0, 0x1ff, 0x0, 0x200, 0xa, 0xfffffff9, 0xd1ef, 0x5, 0x8, 0x401, 0xeac, 0x5, 0xacdf, 0x6, 0x7, 0x2, 0x4, 0xfffffff7, 0x5, 0x45, 0x7, 0x6, 0x59, 0x9, 0x2, 0xc18, 0xcff0, 0x2, 0x8, 0x6226, 0x7, 0x2, 0x5, 0x3, 0xa8f, 0xe72, 0x5, 0x2, 0x5, 0x5, 0x1f, 0x3, 0x7, 0x7, 0x7, 0x5, 0x3, 0x3, 0x8, 0x10001, 0x2, 0x9, 0x10001, 0x440, 0x8, 0x876, 0x7f, 0x3, 0x80, 0xffffffff, 0x9, 0x400, 0x7, 0x5, 0x5, 0x2, 0x7a, 0x7, 0x7, 0x4, 0x3, 0x4, 0x4, 0x0, 0x71fe, 0x9, 0x6, 0x2, 0x9, 0xfff, 0x7, 0x8, 0xc, 0xfffffc68, 0xcd, 0x58, 0x9, 0xfffffffb, 0x81, 0x1, 0xcdd, 0x6, 0x4, 0x80000000, 0x1ff, 0x0, 0x2, 0x0, 0x2, 0x9, 0xeb0c, 0x0, 0x5, 0x5e, 0x8, 0x4, 0x9, 0xec17, 0x1000, 0x2000200, 0x101, 0x496, 0x800, 0x5, 0x5, 0xa, 0x8, 0x4, 0x7, 0x4, 0x4, 0x7ff, 0xe7, 0x7, 0xb2e5, 0x401, 0xc1, 0x0, 0x4, 0x2, 0x400, 0x2, 0x4, 0x3, 0x2, 0x3, 0x8, 0x6, 0x5, 0x8, 0xff800000, 0x10000, 0x345, 0x4, 0x80, 0x7, 0x401, 0x8, 0xfffffff5, 0x9, 0x7, 0x3, 0x8, 0x3, 0xfa84, 0x6, 0x5, 0x0, 0x1, 0x1, 0xfffffff8, 0xcd5a, 0x1, 0x1, 0x3, 0x2, 0x8000, 0x0, 0x1, 0x6, 0x1, 0x0, 0x7, 0x7, 0xe02, 0x1, 0x3, 0xa8, 0x4, 0x40883c55, 0x1, 0x5e0, 0x9, 0x6, 0x7fff, 0x4, 0x10, 0x5, 0xfff, 0x9, 0xe, 0x7, 0x5, 0x140, 0x100, 0x5, 0x3, 0x54b, 0x1, 0x1ff, 0x1, 0xfffffffd, 0x4, 0x779988e0, 0x800, 0x7522fa20, 0x4, 0x7, 0x40, 0xb, 0x9, 0x3, 0x5, 0x5, 0x2, 0x6, 0xcb1, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x2, 0xfffffffe, 0x3, 0x2, 0x5, 0x8, 0xc, 0x6, 0x8200, 0x7fff, 0x7, 0x0, 0x80000000, 0xb, 0x1, 0x1, 0x80000001, 0x4, 0xb7b, 0x7, 0xffffff69, 0xfe, 0x1, 0xb887]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1000, 0x2, 0xfffffffa, 0x7ff, 0x2, 0x4210, 0x1, 0x2, 0x244, 0xb, 0x8, 0xd7d1, 0x5, 0xffffffff, 0xf74, 0x2, 0x4, 0x7, 0xce, 0x80, 0x40, 0x5, 0xed4e, 0x7f, 0x200, 0x2, 0xb, 0x1, 0xb0ca, 0xe, 0xfff, 0x1, 0x1c, 0x80, 0x2, 0x10001, 0x80000000, 0xfffffe1b, 0x3, 0x80000000, 0x7, 0x22, 0x0, 0x9, 0x120, 0x9, 0x6, 0x3, 0x8000, 0x4, 0xf491, 0xfff, 0x1, 0x1, 0x8a6, 0x7, 0x10, 0x10000, 0x9, 0x3, 0x6, 0x9, 0x1, 0x4, 0xfffffff9, 0xfffffffd, 0xb15, 0x7, 0x80000001, 0x81, 0x4, 0x10001, 0x0, 0x1, 0x3, 0x7, 0x9, 0x0, 0x8, 0x62, 0x0, 0x7, 0x0, 0x100, 0x9, 0x1, 0x2, 0x5, 0x200, 0x6e72, 0x6, 0x9, 0xaff, 0x1, 0x57cc, 0x1, 0x397, 0xc00, 0x1, 0x0, 0x800, 0xfffffff8, 0xed, 0x8001, 0x40, 0x1b64afcb, 0x2, 0x0, 0xffffff57, 0x73, 0x2, 0x24, 0xfffffffb, 0xfeae, 0x0, 0x8, 0x0, 0x9, 0x1ff, 0x0, 0x5, 0x223, 0x2, 0xf7, 0x9, 0x9, 0x8, 0xa43, 0x6, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0x2967, 0xa, 0xc, 0x7, 0x8, 0x106893fb, 0xfffff000, 0x1000, 0x1, 0x5, 0x940d, 0x1, 0x1, 0x2, 0x3, 0xf58, 0x399, 0xe5a8, 0x9a, 0x7, 0x1, 0x1000, 0xdec5, 0x5, 0x6, 0x7, 0x7fffffff, 0x998, 0xf, 0xc, 0x1f76, 0xfffffffa, 0x8, 0x3ff, 0x4, 0x86, 0x71, 0x400, 0x1, 0x27e, 0x4, 0xfff, 0x10000, 0x1, 0x4, 0xfffffffd, 0x7, 0xa09c, 0x0, 0x81, 0xb8c7, 0x84eb, 0xfffff88b, 0x6, 0x5, 0x7, 0xe, 0x80000000, 0x2, 0xffff0a1f, 0x40, 0x7, 0x1f0a, 0x0, 0x938, 0x2, 0x8, 0x2, 0x400, 0x5, 0x4, 0x9, 0x1c4b, 0x8, 0x80, 0xfff, 0x8cc6, 0x1, 0x1000, 0x4, 0x1, 0x632f, 0x1, 0x1, 0x80000000, 0x3ff, 0x9, 0x2, 0x2, 0x80, 0x1, 0x7, 0xfffffffe, 0x7fffffff, 0x4, 0x3, 0x7, 0x0, 0x10001, 0x6, 0x10, 0xde, 0x9e5, 0x7, 0x7, 0x2, 0x7, 0x1, 0x1, 0x6, 0xfffff703, 0x1, 0x400, 0x5, 0x7, 0x7, 0x200, 0x80000000, 0x8000, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x4, 0x80, 0x1000, 0x6, 0x2, 0x0, 0x3, 0x2, 0xfd, 0xffff, 0xf13b, 0xfffffffe, 0x2, 0x5, 0x7a, 0x5, 0xffffffff, 0x527, 0x2, 0x4, 0xffffffff, 0x6, 0x9, 0x97, 0xac, 0x9179, 0x28f7bebd, 0x440, 0x1, 0x7, 0x10, 0x1, 0x101, 0x5, 0x8c, 0x100, 0x7, 0x5, 0x4, 0x2, 0x7, 0x7, 0x5, 0x9, 0x5, 0x3279a245, 0x1d8, 0x7, 0x2, 0x200, 0x1, 0x0, 0x6, 0x7af2339d, 0x7, 0x8, 0x10000, 0x1, 0x5, 0x9, 0xfff, 0xffffffff, 0x1, 0x1000, 0x8, 0xfffffffa, 0x4, 0x4, 0x3, 0x7, 0x7, 0x1, 0x3, 0xb, 0x6, 0x14000, 0x5, 0x1, 0xefc, 0x7fffffff, 0x2, 0x5, 0x2, 0x8, 0x8, 0x16cc, 0x10, 0xffffffff, 0x10, 0x2, 0x3, 0xfffffb71, 0x1, 0x4, 0x2, 0x4, 0x5, 0x3, 0x3, 0x0, 0x7fff, 0x2, 0x1, 0xe000000, 0x8000, 0x7fff, 0x87, 0xfff, 0xffffffff, 0x0, 0xffffffff, 0x5, 0x4cda, 0xd, 0x2, 0x2, 0xffff, 0x4, 0xffffffff, 0x8cc5, 0x4, 0x63, 0x8, 0xffff8001, 0x8, 0x4, 0x0, 0x40, 0xfffffffb, 0x1000, 0x1, 0x3, 0x0, 0x8, 0x1000, 0x3, 0x7, 0x8, 0x7, 0x7, 0x9, 0xffffffff, 0x1e7d, 0x7, 0x550be07d, 0x6, 0x1, 0x6, 0x4, 0x9, 0x6, 0x1d7, 0x1, 0x1ff, 0x2, 0x1, 0x7, 0x5, 0x241, 0x8, 0xd7e, 0x4, 0x9, 0x1, 0x10, 0xc69, 0xe, 0x280, 0x0, 0x9, 0x6, 0x8001, 0x4, 0x5, 0x5, 0x7fff, 0x4, 0x677, 0x2, 0xfff, 0x5b, 0x2, 0xffffffff, 0xd, 0x2, 0x2, 0x6f0, 0x1, 0x401, 0x271, 0x9, 0x5, 0xf845, 0x8ab, 0x100, 0x2, 0x4, 0x8, 0x3, 0x40, 0x7, 0x6, 0xffff8001, 0x9, 0x500000, 0x6d15, 0x6, 0xea9, 0x0, 0xf895, 0x7, 0x38000, 0x800, 0x7c0, 0x7, 0x0, 0x70a5, 0x800, 0x1, 0xc, 0xe, 0x7cc33581, 0x8, 0x6, 0x8, 0x80, 0x6, 0x27b, 0xffffffff, 0x90b5, 0x5, 0x1, 0x3ff, 0x3, 0x0, 0x9, 0x6, 0x6, 0x3, 0xffffe000, 0x7, 0x7, 0x0, 0x7, 0x3, 0x1ff, 0x4, 0xfb, 0x0, 0x10001, 0x9, 0x100, 0x9a4, 0x9, 0x3]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x3eec}}, 0x44004) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 471.832303ms ago: executing program 0 (id=6197): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9ff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in6=@private2, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc060}, 0x0) 328.111935ms ago: executing program 1 (id=6198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0cff0900a244984f2595f43dfb1e", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611861000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 327.537814ms ago: executing program 0 (id=6199): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000004c0)={0x8, 'dummy0\x00', {'dvmrp1\x00'}, 0x1}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000240)=0x4) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0xd, 0x2, 0x0, 0x2, 0xfffffffffffffff0}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000300)='syzkaller\x00', 0xffff, 0x37, &(0x7f0000000340)=""/55, 0x61980, 0x63, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xd, 0x7, 0xa7d}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r2, r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000480)=[{0x0, 0x3, 0x0, 0x9}, {0x0, 0x4, 0x10, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000200)="af6e", 0x0}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r5, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000800)={r2, r2}, 0xc) (async) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r2, 0x0, 0xffffffff000) epoll_wait(r2, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x5fd) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040), 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf250c000000280005800100"], 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x94, r8, 0xb, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7545}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x94}}, 0x4000015) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 326.967213ms ago: executing program 5 (id=6200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket(0x2d, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x48d0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) socket$packet(0x11, 0x3, 0x300) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff, 0xff], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x21, 0x0, 0x0, 0x1}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x9, 0x1ff, 0x3, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x20}, {0x1}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@tos={{0x28}, {0xff, 0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xf, 0x5, 0x8, 'snmp\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) ioctl$AUTOFS_IOC_PROTOVER(r12, 0x80049363, &(0x7f00000001c0)) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="240000002d000100000000000000000008000c00", @ANYRES32=r11, @ANYBLOB], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r13, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 291.04286ms ago: executing program 1 (id=6201): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa803, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r3, 0x75fb3000) 277.567695ms ago: executing program 3 (id=6202): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x40844) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='bic', 0xfffffffffffffe00) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000)=0x80000000, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10044045}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd60ecff8000281101fc000000000000000000000000000000ff0200000000000000000000000000014e224e220028907804000000020000000300000000000000c1ec20295ad01efe921824b966900bd5"], 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) pipe(&(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept$alg(r8, 0x0, 0x0) 210.958681ms ago: executing program 2 (id=6203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x2}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x41}, 0x28) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', r5, 0x29, 0x2, 0xd, 0x0, 0x18, @dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7, 0x20, 0x8, 0x7}}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff2, 0xfff3}, {0xfff1, 0xf}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044800) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000001021c020010826192a0f16f52bdcf00000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x2}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x41}, 0x28) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000004) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', r5, 0x29, 0x2, 0xd, 0x0, 0x18, @dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7, 0x20, 0x8, 0x7}}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff2, 0xfff3}, {0xfff1, 0xf}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044800) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}}) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000001021c020010826192a0f16f52bdcf00000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) 132.984429ms ago: executing program 0 (id=6204): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000200), 0x0, 0x24004cc1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x9, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007000000090001007379008b7b97061a602a0000000000000700000008000a40000080000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280280001800b00010074756e6e656c0000040002800800034000000106140000001000010000000000000000000084000a0000000000000000"], 0xcc}}, 0x20050800) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000000)) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000240)=@netrom={'nr', 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000a0000002900002a2b9a473c77408ec4adc16fccbaa56782b6726c0c2045ee7b38fbcfc633d524995aae827d80de2d86dcdc648c4484f3598195e73a2de00422477b571f"], 0x0, 0x26, 0x0, 0x1, 0x8}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x8000) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f00000008c0)=0x7, 0x4) 85.849787ms ago: executing program 2 (id=6205): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket(0x2, 0x1, 0x50b) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x48, r2, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 0s ago: executing program 1 (id=6206): bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r0, r1, 0x0, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x20}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x3e, 0x6, 0x7, 0xb, 0x7, 0x6]}, 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000002d00)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="b826bb7eaebed6b4ed65ea228ff03a99", 0x10}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x20040880) (async) sendmmsg$alg(r5, &(0x7f0000002d00)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="b826bb7eaebed6b4ed65ea228ff03a99", 0x10}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x20040880) kernel console output (not intermixed with test programs): ink: 8 bytes leftover after parsing attributes in process `syz.2.4522'. [ 563.910671][T24601] macsec1: entered promiscuous mode [ 563.916667][T24601] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 563.932349][T24601] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 563.943230][T24611] netlink: 'syz.0.4527': attribute type 1 has an invalid length. [ 563.992469][T24608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4525'. [ 564.003396][T24608] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 564.011743][T24608] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 564.050046][T24611] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 564.061585][T24611] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 564.071739][T24618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4527'. [ 564.205954][T24627] netlink: 'syz.3.4530': attribute type 21 has an invalid length. [ 564.335195][T24634] netlink: 'syz.2.4532': attribute type 10 has an invalid length. [ 564.355056][T24634] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4532'. [ 564.587255][T24618] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 564.626710][T24642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'. [ 564.629599][T24644] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4535'. [ 564.649991][T24611] bond5: (slave gretap1): making interface the new active one [ 564.670894][T24611] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 564.766431][T24648] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4537'. [ 565.067793][T24676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4541'. [ 565.316668][T24682] pim6reg1: entered promiscuous mode [ 565.347452][T24682] pim6reg1: entered allmulticast mode [ 565.471207][T24696] netlink: 'syz.1.4548': attribute type 1 has an invalid length. [ 565.482123][T24695] netlink: 'syz.1.4548': attribute type 1 has an invalid length. [ 567.878415][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 567.886520][ C1] lec:lec_tx_timeout: lec0 [ 568.007911][T24671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.187886][T24741] netlink: 'syz.3.4560': attribute type 2 has an invalid length. [ 568.223829][T24741] hmac(sha224): entered promiscuous mode [ 568.245218][T24741] netlink: 'syz.3.4560': attribute type 2 has an invalid length. [ 568.319968][T24753] netlink: 'syz.2.4564': attribute type 1 has an invalid length. [ 568.388109][T24764] netlink: 'syz.4.4567': attribute type 21 has an invalid length. [ 568.450404][T24764] netlink: 'syz.4.4567': attribute type 21 has an invalid length. [ 568.456902][ T7848] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.466705][ T7848] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.475513][ T7848] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.488111][ T7848] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.542394][T24771] netlink: 'syz.1.4565': attribute type 1 has an invalid length. [ 568.664481][T24771] __nla_validate_parse: 12 callbacks suppressed [ 568.664527][T24771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4565'. [ 568.693760][T24782] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 568.743709][T24784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4571'. [ 568.776302][T24786] netlink: 'syz.4.4569': attribute type 30 has an invalid length. [ 568.860121][T24786] bond7: option arp_missed_max: invalid value (0) [ 568.869322][T24786] bond7: option arp_missed_max: allowed values 1 - 255 [ 568.886601][T24786] bond7 (unregistering): Released all slaves [ 569.253487][T24819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.629826][T24837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4584'. [ 569.863405][T24848] netlink: 'syz.4.4587': attribute type 29 has an invalid length. [ 569.884897][T24848] netlink: 'syz.4.4587': attribute type 29 has an invalid length. [ 569.895185][T24848] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4587'. [ 569.902386][T24851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4588'. [ 569.920025][T24851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4588'. [ 569.938407][T24851] netlink: 58 bytes leftover after parsing attributes in process `syz.3.4588'. [ 570.034927][T24851] team0 (unregistering): Port device team_slave_1 removed [ 570.055276][T24862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4591'. [ 570.142646][T24862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4591'. [ 570.246490][T24861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.329246][T24874] netlink: 'syz.4.4593': attribute type 22 has an invalid length. [ 570.358511][T24874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4593'. [ 571.206845][T24932] tipc: Started in network mode [ 571.231867][T24932] tipc: Node identity ac14140f, cluster identity 4711 [ 571.255219][T24932] tipc: New replicast peer: 255.255.255.255 [ 571.263868][T24932] tipc: Enabled bearer , priority 10 [ 571.271887][T24931] tipc: Enabling of bearer rejected, already enabled [ 571.520426][T24949] bond7: (slave bridge8): making interface the new active one [ 571.559492][T24949] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 571.607290][T24954] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 571.737252][T24968] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 571.988623][T24988] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 572.006526][T24985] bond8: entered promiscuous mode [ 572.016424][T24985] 8021q: adding VLAN 0 to HW filter on device bond8 [ 572.025326][T24988] mac80211_hwsim hwsim38 syzkaller0: Caught tx_queue_len zero misconfig [ 572.091395][T24985] bond8: (slave bridge3): making interface the new active one [ 572.128453][T24985] bridge3: entered promiscuous mode [ 572.136687][T24985] bridge3: left promiscuous mode [ 572.218123][T25001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.276263][T25003] bond8: Removing last arp target with arp_interval on [ 572.323896][T25004] bond9: Removing last arp target with arp_interval on [ 572.419792][ T7527] tipc: Node number set to 2886997007 [ 572.550892][T25027] bond10: option lacp_active: invalid value (8) [ 572.593973][T25027] bond10 (unregistering): Released all slaves [ 573.064336][T25056] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 573.072689][T25056] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 573.077931][T25062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.089387][T25062] IPv6: NLM_F_CREATE should be set when creating new route [ 573.096632][T25062] IPv6: NLM_F_CREATE should be set when creating new route [ 573.149836][T25053] bond6: option lp_interval: invalid value (0) [ 573.170219][T25053] bond6: option lp_interval: allowed values 1 - 2147483647 [ 573.207526][T25053] bond6 (unregistering): Released all slaves [ 573.345490][T25060] erspan1: entered allmulticast mode [ 573.763101][T25091] __nla_validate_parse: 12 callbacks suppressed [ 573.763119][T25091] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4653'. [ 573.932695][T25103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4655'. [ 573.944615][T25102] vlan2: entered promiscuous mode [ 573.949929][T25102] gretap0: entered promiscuous mode [ 574.158646][T25122] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 574.174860][T25121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4658'. [ 574.226556][T25129] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4658'. [ 574.467347][T25143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4662'. [ 574.634634][T25155] validate_nla: 4 callbacks suppressed [ 574.634652][T25155] netlink: 'syz.3.4664': attribute type 3 has an invalid length. [ 575.273776][T25185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.301531][T25185] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.352095][T25208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4673'. [ 575.376553][T25185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.442137][T25195] macsec3: entered promiscuous mode [ 575.448493][T25195] virt_wifi0: entered promiscuous mode [ 575.611420][T25217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 575.631913][T25217] tipc: Enabled bearer , priority 0 [ 575.659039][T25222] netlink: 'syz.2.4677': attribute type 1 has an invalid length. [ 575.670322][T25224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.786483][T25222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 575.864548][T25231] bond6: (slave geneve3): making interface the new active one [ 575.893762][T25231] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 575.945970][ T7849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 575.964943][ T7849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 576.007973][ T7849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 576.042421][ T7849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 576.222009][T25272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4689'. [ 576.363973][T25278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4690'. [ 576.443113][T25289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4690'. [ 576.560877][T25282] lo speed is unknown, defaulting to 1000 [ 576.605626][T25298] netlink: 'syz.4.4696': attribute type 1 has an invalid length. [ 576.692981][T25298] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 577.159222][ T7526] IPVS: starting estimator thread 0... [ 577.308794][T25334] IPVS: using max 32 ests per chain, 76800 per kthread [ 577.533317][T25350] vlan2: entered allmulticast mode [ 577.553250][T25350] bond0: entered allmulticast mode [ 577.565096][T25350] bond_slave_0: entered allmulticast mode [ 577.574670][T25350] bond_slave_1: entered allmulticast mode [ 577.596589][T25351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.609130][T25351] bond_slave_0: left allmulticast mode [ 577.620705][T25351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.660041][T25351] bond_slave_1: left allmulticast mode [ 577.666033][T25351] bond0 (unregistering): Released all slaves [ 577.963827][T25380] netlink: 'syz.3.4716': attribute type 1 has an invalid length. [ 578.042527][T25380] bond0: entered promiscuous mode [ 578.047972][T25380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.094421][T25385] netlink: ct family unspecified [ 578.672061][T25421] bridge0: entered allmulticast mode [ 578.985898][T25435] __nla_validate_parse: 9 callbacks suppressed [ 578.985916][T25435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4732'. [ 579.046196][T25435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.262817][T25452] tls_set_device_offload_rx: netdev not found [ 579.269690][T25450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4737'. [ 579.334689][T25452] lo speed is unknown, defaulting to 1000 [ 579.954290][T25477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4744'. [ 580.132273][T25482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.205004][T25489] netlink: 'syz.3.4749': attribute type 10 has an invalid length. [ 580.247191][T25491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.291632][ T50] Bluetooth: hci4: command 0x041b tx timeout [ 580.374343][T25477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 580.523141][T25497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4752'. [ 580.536927][T25477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 580.574796][T25498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4752'. [ 580.814944][T25477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.084104][T25525] lo speed is unknown, defaulting to 1000 [ 581.536519][T25477] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 581.585467][T25477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.709376][T25538] : entered promiscuous mode [ 581.907126][ T7843] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.972111][T16938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.985287][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4768'. [ 582.043519][ T7843] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 582.080300][T25562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4768'. [ 582.093096][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4768'. [ 582.347787][T16938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 582.359985][T25579] 8021q: VLANs not supported on nlmon0 [ 582.534461][T25583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4771'. [ 582.555971][T25594] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4773'. [ 582.909192][T25611] openvswitch: netlink: IP tunnel dst address not specified [ 582.931835][T25612] openvswitch: netlink: IP tunnel dst address not specified [ 583.485467][T25626] netlink: 'syz.2.4779': attribute type 1 has an invalid length. [ 583.527895][ T7848] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 583.549216][ T7848] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 583.573670][ T7848] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 583.592433][ T7848] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 583.722562][T25643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.860584][T12881] lec:lec_start_xmit: lec0:No lecd attached [ 584.462494][T25646] netlink: 'syz.3.4785': attribute type 3 has an invalid length. [ 586.019317][T25622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.424277][T25675] __nla_validate_parse: 4 callbacks suppressed [ 586.424294][T25675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4792'. [ 586.467223][T25669] bond4: option updelay: invalid value (18446744073709493611) [ 586.491683][T25669] bond4: option updelay: allowed values 0 - 2147483647 [ 586.513428][T25669] bond4 (unregistering): Released all slaves [ 586.808019][T25693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4798'. [ 586.837479][T25693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4798'. [ 586.847329][T25697] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4799'. [ 586.872948][T25693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4798'. [ 586.888193][T25701] netlink: 'syz.4.4800': attribute type 1 has an invalid length. [ 587.193409][T25727] wg1: Caught tx_queue_len zero misconfig [ 587.213133][T25727] netlink: 'syz.2.4807': attribute type 58 has an invalid length. [ 587.223311][T25713] lo speed is unknown, defaulting to 1000 [ 587.234790][T25708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4802'. [ 587.249484][ T43] IPVS: starting estimator thread 0... [ 587.338405][T25731] IPVS: using max 44 ests per chain, 105600 per kthread [ 587.406002][T25714] lo speed is unknown, defaulting to 1000 [ 587.476360][T25735] netlink: 'syz.0.4809': attribute type 41 has an invalid length. [ 587.535700][T16937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.548537][T16937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.603380][T25743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.672815][ T7843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.683931][ T7843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.937990][T25766] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 588.025253][T25770] sock: sock_set_timeout: `syz.3.4817' (pid 25770) tries to set negative timeout [ 588.239908][T25783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4819'. [ 588.250847][T25783] netlink: 'syz.4.4819': attribute type 1 has an invalid length. [ 588.323227][T25785] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 588.545099][T25797] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4824'. [ 588.703522][T25810] netlink: 'syz.2.4827': attribute type 11 has an invalid length. [ 588.814706][T25825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4831'. [ 588.868341][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 588.876444][ C1] lec:lec_tx_timeout: lec0 [ 588.972734][T25832] geneve4: entered promiscuous mode [ 589.040151][T25839] netlink: zone id is out of range [ 589.147423][T25837] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 589.190197][T25837] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 589.657337][T25854] xt_HMARK: proto mask must be zero with L3 mode [ 589.670661][T25854] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4838'. [ 592.036164][T25840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.276350][T25876] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4844'. [ 592.481919][T25892] netlink: 'syz.2.4849': attribute type 5 has an invalid length. [ 592.497979][T25892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4849'. [ 592.513293][T25893] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4850'. [ 592.607108][T25892] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4849'. [ 592.658967][T25900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4852'. [ 592.699381][T25900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.789854][T25912] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 592.856846][T25912] netlink: 'syz.2.4854': attribute type 32 has an invalid length. [ 592.873350][T25912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4854'. [ 592.975504][T25912] bond8: option coupled_control: invalid value (12) [ 593.001785][T25912] bond8 (unregistering): Released all slaves [ 593.057837][T25931] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4860'. [ 593.073482][T25931] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4860'. [ 593.091985][T25922] tipc: Started in network mode [ 593.123979][T25922] tipc: Node identity 96aed493ac8e, cluster identity 4711 [ 593.163136][T25922] tipc: Enabled bearer , priority 0 [ 593.176788][T25928] syzkaller0: entered promiscuous mode [ 593.200221][T25928] syzkaller0: entered allmulticast mode [ 593.217319][T25912] tipc: Resetting bearer [ 593.233301][T25911] tipc: Resetting bearer [ 593.299249][T25911] tipc: Disabling bearer [ 593.377099][T25953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.511352][T25965] IPVS: set_ctl: invalid protocol: 139 172.20.20.187:20004 [ 593.548114][T25974] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 593.580122][T25975] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 593.584321][T25965] netlink: 'syz.2.4868': attribute type 10 has an invalid length. [ 593.616035][T25974] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 593.636680][T25974] syzkaller1: linktype set to 805 [ 593.637513][T25979] netlink: 'syz.2.4868': attribute type 10 has an invalid length. [ 593.659781][T25981] netlink: 'syz.0.4873': attribute type 1 has an invalid length. [ 593.661493][T25982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4872'. [ 593.677962][T25981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4873'. [ 593.897138][T25992] netlink: 'syz.2.4874': attribute type 8 has an invalid length. [ 593.920602][T25992] 5nè‹Ò: entered promiscuous mode [ 594.112153][T26012] syzkaller0: entered promiscuous mode [ 594.145590][T26012] syzkaller0: entered allmulticast mode [ 594.268947][T26029] netlink: 'syz.1.4886': attribute type 1 has an invalid length. [ 594.462934][T26030] lo speed is unknown, defaulting to 1000 [ 594.957422][T26039] lo speed is unknown, defaulting to 1000 [ 594.988647][T26050] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 595.148474][T26050] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 595.303039][T26050] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 595.352591][T26064] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 595.369096][T26064] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 595.422733][T26050] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 595.790071][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 595.969037][T16938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 596.017763][ T7843] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 596.044923][T16938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 596.181181][T26101] macsec3: entered promiscuous mode [ 596.186507][T26101] virt_wifi0: entered promiscuous mode [ 596.825488][T26103] netlink: 'syz.0.4903': attribute type 3 has an invalid length. [ 596.838521][T26103] netlink: 'syz.0.4903': attribute type 3 has an invalid length. [ 597.836924][T26051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.175815][T26131] netlink: 'syz.1.4912': attribute type 1 has an invalid length. [ 598.199036][T26131] __nla_validate_parse: 7 callbacks suppressed [ 598.199050][T26131] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4912'. [ 598.436348][T26139] ªªªªª: renamed from vlan0 [ 598.527491][T26141] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 598.562682][T26141] bond9 (unregistering): Released all slaves [ 598.826637][T26167] bond0: Caught tx_queue_len zero misconfig [ 598.830564][T26166] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4921'. [ 598.889687][T26160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.898925][T16936] nci: nci_ntf_packet: unknown ntf opcode 0x26 [ 598.916268][T26169] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4923'. [ 599.147524][T26187] IPVS: Unknown mcast interface: dummy0 [ 599.194951][T26193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4929'. [ 599.271902][T26195] lo speed is unknown, defaulting to 1000 [ 599.344643][T26199] tipc: Enabled bearer , priority 0 [ 599.395471][T26199] syzkaller0: entered promiscuous mode [ 599.402528][T26199] syzkaller0: entered allmulticast mode [ 599.482951][T26201] syzkaller0: entered promiscuous mode [ 599.494586][T26201] syzkaller0: entered allmulticast mode [ 599.505848][T26195] tipc: Resetting bearer [ 599.515423][T26202] lo speed is unknown, defaulting to 1000 [ 599.796018][T26194] tipc: Resetting bearer [ 599.830170][T26194] tipc: Disabling bearer [ 599.900254][T26217] netlink: 'syz.3.4937': attribute type 1 has an invalid length. [ 600.055412][T26217] 8021q: adding VLAN 0 to HW filter on device bond9 [ 600.090686][T26217] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4937'. [ 600.151797][T26223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4938'. [ 600.192615][T26218] bond9: (slave veth11): Enslaving as an active interface with a down link [ 600.524417][T26245] netlink: 'syz.0.4943': attribute type 13 has an invalid length. [ 600.537140][T26245] netlink: 'syz.0.4943': attribute type 17 has an invalid length. [ 600.712788][T26245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.744375][T26245] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.836419][T26245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.514328][T26293] netlink: 'syz.2.4951': attribute type 61 has an invalid length. [ 601.716779][T26301] xt_limit: Overflow, try lower: 28676/2147483648 [ 601.831589][T26303] netlink: 'syz.1.4953': attribute type 8 has an invalid length. [ 601.839676][T26303] netlink: 'syz.1.4953': attribute type 4 has an invalid length. [ 601.965973][T26309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4955'. [ 602.184580][T26320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4958'. [ 602.756402][T26324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4959'. [ 603.628639][T26255] Set syz1 is full, maxelem 65536 reached [ 604.886584][T26307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.999663][T26325] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 606.050658][T26329] lo speed is unknown, defaulting to 1000 [ 606.574144][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4968'. [ 606.603994][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4968'. [ 606.732058][T26375] netlink: 'syz.3.4973': attribute type 6 has an invalid length. [ 606.740888][T26377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4974'. [ 606.741744][T26375] netlink: 'syz.3.4973': attribute type 7 has an invalid length. [ 606.758941][T26375] netlink: 'syz.3.4973': attribute type 8 has an invalid length. [ 606.773104][T26373] netlink: 'syz.2.4972': attribute type 10 has an invalid length. [ 606.790409][T26373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4972'. [ 607.303546][T26395] bond10: ARP target 9.0.0.0 is already present [ 607.330849][T26395] bond10: option arp_ip_target: invalid value (9) [ 607.352551][T26395] bond10 (unregistering): Released all slaves [ 607.657962][T26416] sctp: [Deprecated]: syz.0.4983 (pid 26416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.657962][T26416] Use struct sctp_sack_info instead [ 607.780755][T26409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4981'. [ 607.894271][T26423] lo speed is unknown, defaulting to 1000 [ 607.993898][T26434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.078705][T26440] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4987'. [ 608.278069][T26451] pim6reg1: entered promiscuous mode [ 608.289069][T26451] pim6reg1: entered allmulticast mode [ 608.443650][T26455] dummy0: entered promiscuous mode [ 608.450266][T26455] dummy0: entered allmulticast mode [ 608.651154][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4994'. [ 608.703545][T26463] tipc: Enabled bearer , priority 14 [ 609.241294][T26475] lo speed is unknown, defaulting to 1000 [ 609.344122][T26490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5004'. [ 609.353456][T26490] netlink: 'syz.3.5004': attribute type 1 has an invalid length. [ 609.443702][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 609.454914][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 609.466771][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 609.480972][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 609.491377][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 609.707741][T26512] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5008'. [ 609.824119][T26494] lo speed is unknown, defaulting to 1000 [ 609.831948][T26519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.259791][T26494] chnl_net:caif_netlink_parms(): no params data found [ 610.638787][T26494] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.676067][T26494] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.703877][T26494] bridge_slave_0: entered allmulticast mode [ 610.745291][T26494] bridge_slave_0: entered promiscuous mode [ 610.779940][T26494] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.798479][T26494] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.811717][T26494] bridge_slave_1: entered allmulticast mode [ 610.821631][T26494] bridge_slave_1: entered promiscuous mode [ 610.956298][T26494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.977676][T26568] netlink: 'syz.0.5022': attribute type 1 has an invalid length. [ 610.991741][T26494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.059772][T26568] 8021q: adding VLAN 0 to HW filter on device bond8 [ 611.200801][T26494] team0: Port device team_slave_0 added [ 611.235340][T26494] team0: Port device team_slave_1 added [ 611.289909][T26574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5023'. [ 611.305361][T26578] netlink: 'syz.1.5025': attribute type 5 has an invalid length. [ 611.361935][T26580] ip6gre1: entered promiscuous mode [ 611.367219][T26580] ip6gre1: entered allmulticast mode [ 611.382931][T26494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.408149][T26494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.491542][T26494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.513133][T26563] batadv_slave_0: Caught tx_queue_len zero misconfig [ 611.522205][T26494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.531379][T26494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.569207][ T5843] Bluetooth: hci0: command tx timeout [ 611.586580][T26494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.655083][T26587] __nla_validate_parse: 3 callbacks suppressed [ 611.655100][T26587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5028'. [ 611.770530][T26557] lo speed is unknown, defaulting to 1000 [ 611.839414][T26494] hsr_slave_0: entered promiscuous mode [ 611.845998][T26494] hsr_slave_1: entered promiscuous mode [ 611.853092][T26494] debugfs: 'hsr0' already exists in 'hsr' [ 611.859731][T26494] Cannot create hsr debugfs directory [ 612.094680][T26613] syzkaller1: entered promiscuous mode [ 612.100384][T26613] syzkaller1: entered allmulticast mode [ 612.185113][T26618] netlink: 'syz.3.5034': attribute type 1 has an invalid length. [ 612.193713][T26618] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.5034'. [ 612.290519][T26620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5035'. [ 612.380259][T26620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5035'. [ 612.561019][T26633] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 612.577156][T26633] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 612.844322][T26644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5043'. [ 612.982897][T26658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5043'. [ 612.985584][T26647] Cannot find add_set index 0 as target [ 613.083967][T26643] ipvlan2: entered promiscuous mode [ 613.090304][T26494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 613.101083][T26494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.149337][T26657] vlan2: entered allmulticast mode [ 613.154537][T26657] bridge7: entered allmulticast mode [ 613.163193][T26661] netlink: 'syz.0.5046': attribute type 29 has an invalid length. [ 613.194004][T26494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 613.210285][T26494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.224620][T26644] netlink: 'syz.2.5043': attribute type 4 has an invalid length. [ 613.225670][T26494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 613.245437][T26494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.253916][T26494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 613.266983][T26494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.281018][T26668] debugfs: 'netdev:syzkaller0' already exists in 'phy48' [ 613.312084][T26655] lo speed is unknown, defaulting to 1000 [ 613.320658][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5047'. [ 613.367783][T26668] veth5: entered promiscuous mode [ 613.468730][T26684] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5050'. [ 613.497174][T26684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5050'. [ 613.557094][T26686] pim6reg: entered allmulticast mode [ 613.658436][ T5843] Bluetooth: hci0: command tx timeout [ 613.746790][T26685] pim6reg: left allmulticast mode [ 613.969221][T26695] syzkaller0: entered promiscuous mode [ 613.984947][T26695] syzkaller0: entered allmulticast mode [ 614.176394][T26715] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5057'. [ 615.729550][ T5843] Bluetooth: hci0: command tx timeout [ 617.505403][T26494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.584242][T26494] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.621127][T16938] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.628567][T16938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.657410][T16938] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.664633][T16938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.810102][ T5843] Bluetooth: hci0: command tx timeout [ 617.866271][T26736] __nla_validate_parse: 2 callbacks suppressed [ 617.866289][T26736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5065'. [ 618.065370][T26758] netlink: 'syz.2.5071': attribute type 1 has an invalid length. [ 618.073780][T26758] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5071'. [ 618.087454][T26758] NCSI netlink: No device for ifindex 0 [ 618.177622][T26494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.362584][T26776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5076'. [ 618.419515][T26776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5076'. [ 618.861117][T26813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.029632][T26494] veth0_vlan: entered promiscuous mode [ 619.092836][T26494] veth1_vlan: entered promiscuous mode [ 619.213064][T26494] veth0_macvtap: entered promiscuous mode [ 619.237412][T26494] veth1_macvtap: entered promiscuous mode [ 619.292309][T26494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.329658][T26494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.374500][T16936] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.391337][T16936] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.404113][T16936] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.415648][T16936] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.657480][T26846] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 619.721025][T16933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.764566][T16933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.899390][ T7849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.919737][ T7849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.084048][T26860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5093'. [ 620.107770][T26860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5093'. [ 620.132031][T26860] netlink: 31 bytes leftover after parsing attributes in process `syz.1.5093'. [ 620.160692][T26863] netlink: 'syz.1.5093': attribute type 10 has an invalid length. [ 620.180033][T26860] netlink: 'syz.1.5093': attribute type 3 has an invalid length. [ 620.214339][T26863] veth1_vlan: left promiscuous mode [ 620.234263][T26860] netlink: 'syz.1.5093': attribute type 2 has an invalid length. [ 620.257927][T26863] team0: Device veth1_vlan failed to register rx_handler [ 620.270582][T26860] netlink: 31 bytes leftover after parsing attributes in process `syz.1.5093'. [ 620.295604][T26860] netlink: 'syz.1.5093': attribute type 2 has an invalid length. [ 620.485572][T26881] netlink: 'syz.1.5099': attribute type 10 has an invalid length. [ 620.495030][T26881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5099'. [ 620.782558][T26890] netlink: 'syz.5.5101': attribute type 10 has an invalid length. [ 620.971296][T26881] dummy0: left allmulticast mode [ 620.977260][T26881] bridge0: port 3(dummy0) entered blocking state [ 620.984187][T26881] bridge0: port 3(dummy0) entered disabled state [ 620.991328][T26881] dummy0: entered allmulticast mode [ 621.049039][T26890] team0 (unregistering): Port device team_slave_0 removed [ 621.085890][T26890] team0 (unregistering): Port device team_slave_1 removed [ 621.389267][T26904] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5105'. [ 621.406799][T26904] team_slave_1: Caught tx_queue_len zero misconfig [ 621.693688][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809eb9f800: rx timeout, send abort [ 621.794123][T26939] xt_cgroup: xt_cgroup: no path or classid specified [ 621.815464][T26937] geneve4: entered promiscuous mode [ 621.871510][T26942] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 621.880368][T26942] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 621.949575][T26951] sctp: [Deprecated]: syz.2.5120 (pid 26951) Use of int in max_burst socket option deprecated. [ 621.949575][T26951] Use struct sctp_assoc_value instead [ 622.193862][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809eb9c800: rx timeout, send abort [ 622.202557][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809eb9f800: abort rx timeout. Force session deactivation [ 622.204902][T26968] netlink: 'syz.3.5122': attribute type 15 has an invalid length. [ 622.414669][T26971] lo speed is unknown, defaulting to 1000 [ 622.702178][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809eb9c800: abort rx timeout. Force session deactivation [ 622.806771][T26994] netlink: 'syz.2.5129': attribute type 3 has an invalid length. [ 622.997445][T26998] __nla_validate_parse: 6 callbacks suppressed [ 622.997466][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5130'. [ 623.215482][T27008] IPv6: sit2: Disabled Multicast RS [ 623.432837][T27019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5136'. [ 623.504544][T27027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5138'. [ 623.517206][T27026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5138'. [ 623.582524][T27026] hsr_slave_1 (unregistering): left promiscuous mode [ 623.678686][T27038] bond1: option arp_all_targets: invalid value (129) [ 623.692459][T27038] bond1 (unregistering): Released all slaves [ 623.904011][T27052] lo speed is unknown, defaulting to 1000 [ 623.925408][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'. [ 624.169428][T27063] lo speed is unknown, defaulting to 1000 [ 624.297511][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 624.460364][T27075] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 624.547251][T27080] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5153'. [ 624.783129][T27095] IPVS: Unknown mcast interface: xgzƒŠDg [ 624.924311][T27107] netlink: 'syz.3.5157': attribute type 10 has an invalid length. [ 625.145334][T27119] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5162'. [ 625.215362][T27122] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 625.342302][T27132] netlink: 'syz.0.5167': attribute type 10 has an invalid length. [ 625.492363][T27153] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 625.538606][T27153] tipc: Enabling of bearer rejected, already enabled [ 625.565786][T27153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5171'. [ 625.623954][T27157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5173'. [ 625.692608][T27162] netlink: 'syz.0.5176': attribute type 1 has an invalid length. [ 625.770409][T27162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5176'. [ 626.329479][T27205] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 626.382497][T27211] netlink: 'syz.5.5186': attribute type 21 has an invalid length. [ 626.396901][T27211] netlink: 'syz.5.5186': attribute type 4 has an invalid length. [ 626.414027][T27211] netlink: 'syz.5.5186': attribute type 5 has an invalid length. [ 626.533764][T27219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.653557][T27231] mac80211_hwsim hwsim44 wlan1: Caught tx_queue_len zero misconfig [ 626.708467][T27230] tunl0: Caught tx_queue_len zero misconfig [ 627.637144][T27290] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 627.696023][T27291] xfrm0: entered promiscuous mode [ 627.717864][T27291] xfrm0: entered allmulticast mode [ 628.641544][T27313] __nla_validate_parse: 10 callbacks suppressed [ 628.641562][T27313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5212'. [ 628.695839][T27313] bond5: option broadcast_neighbor: invalid value (30) [ 628.715241][T27317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5213'. [ 628.736604][T27313] bond5 (unregistering): Released all slaves [ 629.159387][T27336] netlink: 676 bytes leftover after parsing attributes in process `syz.0.5218'. [ 629.358028][T27348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5219'. [ 629.405104][T27347] netlink: 'syz.3.5221': attribute type 11 has an invalid length. [ 629.492442][T27350] team0: entered promiscuous mode [ 629.497941][T27350] team_slave_0: entered promiscuous mode [ 629.510474][T27350] team_slave_1: entered promiscuous mode [ 629.570650][T27346] lo speed is unknown, defaulting to 1000 [ 629.729855][T27357] netlink: 'syz.3.5224': attribute type 39 has an invalid length. [ 629.818277][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 629.826462][ C1] lec:lec_tx_timeout: lec0 [ 629.856456][T27365] netlink: 'syz.0.5227': attribute type 1 has an invalid length. [ 630.129658][T27381] netlink: 'syz.2.5234': attribute type 1 has an invalid length. [ 630.204334][T27381] 8021q: adding VLAN 0 to HW filter on device bond9 [ 630.267275][T27381] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5234'. [ 630.300443][T27388] vlan3: entered promiscuous mode [ 630.311211][T27388] bond9: entered promiscuous mode [ 630.316523][T27388] vlan3: entered allmulticast mode [ 630.322134][T27388] bond9: entered allmulticast mode [ 630.361411][T27394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5235'. [ 631.145399][T27417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5240'. [ 631.145399][T27423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5240'. [ 631.262162][T27427] nftables ruleset with unbound set [ 631.303335][T27432] netlink: 'syz.1.5246': attribute type 4 has an invalid length. [ 631.311501][T27432] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5246'. [ 631.624814][T27442] IPVS: rr: FWM 3 0x00000003 - no destination available [ 631.682987][T27440] lo speed is unknown, defaulting to 1000 [ 632.014074][T27446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5248'. [ 632.653536][T27472] 8021q: adding VLAN 0 to HW filter on device bond10 [ 633.263168][T27497] syzkaller0: entered promiscuous mode [ 633.286279][T27497] syzkaller0: entered allmulticast mode [ 633.807092][T27527] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 633.837425][T27528] __nla_validate_parse: 6 callbacks suppressed [ 633.837444][T27528] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5274'. [ 634.108213][T27553] openvswitch: netlink: Multiple metadata blocks provided [ 634.192753][T27558] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5282'. [ 634.283429][T27565] tipc: Enabling of bearer rejected, failed to enable media [ 634.338738][T27570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5286'. [ 634.365285][T27570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5286'. [ 634.648760][T27585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5291'. [ 634.934344][T27596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5292'. [ 635.177572][T27610] netlink: 'syz.0.5295': attribute type 1 has an invalid length. [ 635.374808][T27610] 8021q: adding VLAN 0 to HW filter on device bond10 [ 635.430180][T27611] bond10: (slave geneve4): making interface the new active one [ 635.442713][T27618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5298'. [ 635.454044][T27611] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 635.489516][ T7849] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.500415][ T7849] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.562798][ T7849] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.594935][ T7849] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.611858][T27625] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5299'. [ 635.831379][T27642] netlink: 'syz.3.5304': attribute type 1 has an invalid length. [ 635.840379][T27642] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5304'. [ 635.872563][T27643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5306'. [ 635.999260][T27643] bridge5: port 1(bond5) entered blocking state [ 636.005793][T27643] bridge5: port 1(bond5) entered disabled state [ 636.013155][T27643] bond5: entered allmulticast mode [ 636.023041][T27643] bond5: entered promiscuous mode [ 636.975658][T27707] bridge4: entered allmulticast mode [ 637.158987][T27715] bond11: option updelay: invalid value (18446744073709493611) [ 637.177628][T27715] bond11: option updelay: allowed values 0 - 2147483647 [ 637.213687][T27726] xt_hashlimit: size too large, truncated to 1048576 [ 637.326800][T27715] bond11 (unregistering): Released all slaves [ 637.591658][T27740] netlink: 'syz.3.5332': attribute type 10 has an invalid length. [ 640.100649][T27717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.495193][T27768] __nla_validate_parse: 7 callbacks suppressed [ 640.495211][T27768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5335'. [ 640.585470][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.635772][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.681889][T27782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5341'. [ 640.692905][T27779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'. [ 640.708124][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.714686][T27782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5341'. [ 640.727120][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5341'. [ 640.743919][T27782] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5341'. [ 640.756429][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.782570][T27782] netlink: 'syz.5.5341': attribute type 3 has an invalid length. [ 640.796891][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.804895][T27782] netlink: 'syz.5.5341': attribute type 2 has an invalid length. [ 640.818400][T27782] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5341'. [ 640.822675][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5342'. [ 640.836767][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5342'. [ 640.842048][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.852741][T27782] netlink: 'syz.5.5341': attribute type 2 has an invalid length. [ 640.920245][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.946464][T16936] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 640.968009][T16936] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 640.973640][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.984084][ T7848] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 640.991717][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.996413][ T7848] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 641.012396][T27791] tipc: Enabled bearer , priority 0 [ 641.031431][T27771] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 641.274408][T27800] netlink: 'syz.1.5346': attribute type 2 has an invalid length. [ 641.296312][T27800] : entered promiscuous mode [ 641.309850][T27800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5346'. [ 641.474349][T27810] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 641.559244][T27810] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 641.653093][T27810] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 641.751992][T27810] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 641.837580][T27824] syzkaller0: entered promiscuous mode [ 641.865974][T27824] syzkaller0: entered allmulticast mode [ 642.046144][ T7843] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 642.116215][T16936] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 642.194954][T16936] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 642.296302][T16936] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 642.815947][T27869] lo speed is unknown, defaulting to 1000 [ 642.938067][T27876] sctp: [Deprecated]: syz.2.5371 (pid 27876) Use of int in max_burst socket option deprecated. [ 642.938067][T27876] Use struct sctp_assoc_value instead [ 643.234574][T27874] syzkaller0: entered promiscuous mode [ 643.240390][T27874] syzkaller0: entered allmulticast mode [ 646.882237][T27930] __nla_validate_parse: 6 callbacks suppressed [ 646.882254][T27930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5380'. [ 646.885429][T27933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5379'. [ 646.936359][T27936] netlink: 'syz.1.5381': attribute type 1 has an invalid length. [ 646.940658][T27935] syz_tun: entered promiscuous mode [ 646.951080][T27935] syz_tun: entered allmulticast mode [ 646.956423][T27935] bond0: entered allmulticast mode [ 647.153779][T27943] tipc: Resetting bearer [ 647.196973][T27943] debugfs: 'netdev:syzkaller0' already exists in 'phy48' [ 647.316210][T27964] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5385'. [ 647.567729][T27972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5383'. [ 647.594734][T27972] openvswitch: netlink: Key type 29 is not supported [ 647.606923][T27975] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5387'. [ 647.641068][T27975] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 647.663903][T27975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5387'. [ 647.710663][T27971] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 647.725415][T27971] bond7 (unregistering): Released all slaves [ 648.013018][T27985] lo speed is unknown, defaulting to 1000 [ 648.015278][T27983] syzkaller0: entered promiscuous mode [ 648.052322][T27983] syzkaller0: entered allmulticast mode [ 648.121096][T27998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5391'. [ 648.481543][T28009] netlink: 'syz.3.5393': attribute type 10 has an invalid length. [ 648.512418][T28009] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5393'. [ 648.711691][T28019] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.781884][T28019] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.807883][T28019] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 648.971864][T28019] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.029157][T28019] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.048410][T28019] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 649.050221][T28036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5399'. [ 649.268213][T28019] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.304741][T28019] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.326107][T28019] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 649.382132][T28051] batman_adv: batadv0: Adding interface: macvtap1 [ 649.389282][T28051] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.416094][T28051] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 649.446948][T28019] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.468064][T28019] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.512064][T28019] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 649.574682][T28046] lo speed is unknown, defaulting to 1000 [ 649.920482][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5407'. [ 649.973117][ T7848] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.005347][ T7848] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.031667][ T7848] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 650.138710][ T7848] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.157948][ T7848] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.185124][ T7848] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 650.235854][T12881] lec:lec_start_xmit: lec0:No lecd attached [ 650.268098][T16936] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.276675][T16936] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.285227][T16936] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 650.320039][ T35] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.333318][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.344415][ T35] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 650.446962][T28098] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 650.489623][T28098] bond11 (unregistering): Released all slaves [ 655.808323][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 655.816363][ C1] lec:lec_tx_timeout: lec0 [ 671.907508][T28135] openvswitch: netlink: IP tunnel dst address not specified [ 671.907747][T28130] __nla_validate_parse: 2 callbacks suppressed [ 671.907761][T28130] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5421'. [ 671.923917][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5420'. [ 671.944817][T28138] netlink: 'syz.2.5419': attribute type 4 has an invalid length. [ 671.955627][T28138] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5419'. [ 671.959877][T28135] netlink: 'syz.3.5420': attribute type 13 has an invalid length. [ 671.975454][T28135] netlink: 'syz.3.5420': attribute type 17 has an invalid length. [ 672.032982][T28138] netlink: 'syz.2.5419': attribute type 4 has an invalid length. [ 672.080056][T28135] erspan0: entered promiscuous mode [ 672.153430][T28142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5420'. [ 672.197467][T28144] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 672.212011][T28135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.232840][ T43] lo speed is unknown, defaulting to 1000 [ 672.247525][ T43] syz2: Port: 1 Link ACTIVE [ 672.393548][T28165] pimreg: entered allmulticast mode [ 673.013014][T28198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5435'. [ 673.165704][T28202] netlink: 'syz.0.5436': attribute type 1 has an invalid length. [ 673.179848][T28202] netlink: 'syz.0.5436': attribute type 2 has an invalid length. [ 673.192727][T28207] netlink: 'syz.5.5437': attribute type 1 has an invalid length. [ 673.203203][T28196] lo speed is unknown, defaulting to 1000 [ 673.417223][T28206] bond4: left promiscuous mode [ 673.443927][T28219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5441'. [ 673.643480][T28206] virt_wifi0: left promiscuous mode [ 673.682659][ T6070] lo speed is unknown, defaulting to 1000 [ 673.698815][ T6070] syz2: Port: 1 Link DOWN [ 673.716382][T28207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.730936][T28235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5440'. [ 673.791032][T28209] bond1: (slave veth3): Enslaving as an active interface with a down link [ 673.801220][ T7849] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.824957][ T7849] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.846712][ T7849] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 673.875640][ T7849] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.885427][ T7849] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.898777][ T7849] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 673.907352][ T7849] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.917051][ T7849] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.926331][ T7849] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 673.982433][T28232] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5443'. [ 673.998933][T28232] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 674.015716][T28233] tipc: Resetting bearer [ 674.040822][ T7849] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.057703][ T7849] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.078827][ T7849] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 674.183917][T28239] lo speed is unknown, defaulting to 1000 [ 674.367729][T28260] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.5451'. [ 674.476168][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5449'. [ 674.721510][T28275] netlink: 'syz.2.5455': attribute type 12 has an invalid length. [ 674.747767][T28275] netlink: 'syz.2.5455': attribute type 11 has an invalid length. [ 674.819723][T28275] netlink: 'syz.2.5455': attribute type 10 has an invalid length. [ 674.905941][T28275] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 676.449597][T28326] nbd4: detected capacity change from 0 to 1023 [ 676.470867][ T5843] block nbd4: Receive control failed (result -32) [ 676.479021][T28146] block nbd4: Dead connection, failed to find a fallback [ 676.505952][T28146] block nbd4: shutting down sockets [ 676.531973][T28146] blk_print_req_error: 138 callbacks suppressed [ 676.531991][T28146] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.590539][T28146] buffer_io_error: 138 callbacks suppressed [ 676.590556][T28146] Buffer I/O error on dev nbd4, logical block 0, async page read [ 676.645295][T28146] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.668560][T28146] Buffer I/O error on dev nbd4, logical block 1, async page read [ 676.690285][T28339] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 676.693931][T28146] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.717064][T28146] Buffer I/O error on dev nbd4, logical block 2, async page read [ 676.717392][T28339] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20000 [ 676.725173][T28146] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.725201][T28146] Buffer I/O error on dev nbd4, logical block 3, async page read [ 676.725328][T28146] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.801113][T28146] Buffer I/O error on dev nbd4, logical block 0, async page read [ 676.809518][T28146] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.825651][T28146] Buffer I/O error on dev nbd4, logical block 1, async page read [ 676.871649][T28146] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.895108][T28146] Buffer I/O error on dev nbd4, logical block 2, async page read [ 676.914902][T28146] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.946036][T28146] Buffer I/O error on dev nbd4, logical block 3, async page read [ 676.994521][T28146] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.043164][T28146] Buffer I/O error on dev nbd4, logical block 0, async page read [ 677.076394][T28146] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.109055][T28146] Buffer I/O error on dev nbd4, logical block 1, async page read [ 677.142373][T28146] ldm_validate_partition_table(): Disk read failed. [ 677.172082][T28146] Dev nbd4: unable to read RDB block 0 [ 677.191956][T28146] nbd4: unable to read partition table [ 677.211710][T28362] __nla_validate_parse: 7 callbacks suppressed [ 677.211725][T28362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5474'. [ 677.237454][T28146] ldm_validate_partition_table(): Disk read failed. [ 677.267306][T28146] Dev nbd4: unable to read RDB block 0 [ 677.290646][T28146] nbd4: unable to read partition table [ 678.422101][T28400] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 678.452726][T28400] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 678.733775][T28411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5488'. [ 678.827383][T28411] bond11: entered promiscuous mode [ 678.844748][T28411] 8021q: adding VLAN 0 to HW filter on device bond11 [ 678.972093][T28436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5493'. [ 678.990437][T28443] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 679.167837][T28450] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5499'. [ 679.252165][T28452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.371286][T28458] 8021q: VLANs not supported on lo [ 679.379846][T28458] validate_nla: 3 callbacks suppressed [ 679.379864][T28458] netlink: 'syz.5.5502': attribute type 4 has an invalid length. [ 679.446137][T28460] bridge0: entered promiscuous mode [ 679.455375][T28461] IPVS: length: 35 != 24 [ 679.510151][T28463] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 679.810553][T28473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5505'. [ 679.901244][T28473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5505'. [ 679.906172][T28479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5508'. [ 679.961657][T28473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5505'. [ 679.969284][T28475] IPVS: Scheduler module ip_vs_ not found [ 680.008169][T28473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5505'. [ 680.092849][T28482] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.5505'. [ 680.265696][T28482] gretap3: entered promiscuous mode [ 680.325701][T28482] batman_adv: batadv0: Adding interface: gretap3 [ 680.336194][T28482] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 680.383218][T28482] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 681.629975][T28519] openvswitch: netlink: Message has 224 unknown bytes. [ 681.724599][T28519] x_tables: duplicate underflow at hook 2 [ 681.974390][T28539] xfrm0: entered promiscuous mode [ 682.007559][T28539] xfrm0: entered allmulticast mode [ 682.565644][T28572] __nla_validate_parse: 5 callbacks suppressed [ 682.565662][T28572] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5535'. [ 682.617882][T28575] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5536'. [ 682.787052][T28580] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5538'. [ 683.067006][T28590] lo speed is unknown, defaulting to 1000 [ 683.590527][T28613] netlink: 'syz.5.5547': attribute type 2 has an invalid length. [ 683.601052][T28613] tipc: Started in network mode [ 683.607112][T28613] tipc: Node identity 340008, cluster identity 4711 [ 683.625573][T28613] tipc: Node number set to 3407880 [ 683.690683][T28614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5542'. [ 683.703901][T28610] bridge0: port 3(vlan2) entered blocking state [ 683.730378][T28610] bridge0: port 3(vlan2) entered disabled state [ 683.751620][T28610] vlan2: entered allmulticast mode [ 683.809677][T28610] bridge0: entered allmulticast mode [ 683.837394][T28610] vlan2: left allmulticast mode [ 683.854681][T28610] bridge0: left allmulticast mode [ 683.970750][T28614] geneve5: entered promiscuous mode [ 684.162901][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5550'. [ 684.200895][T16938] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.243190][T16938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.260855][T28629] netlink: 'syz.3.5550': attribute type 29 has an invalid length. [ 684.261654][T28635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5552'. [ 684.286571][T16938] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.298069][T16938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.393263][T28642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5552'. [ 684.557602][T28635] bond12 (unregistering): Released all slaves [ 684.646449][T28649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5555'. [ 684.663826][T28656] x_tables: unsorted entry at hook 1 [ 684.674524][T28658] x_tables: unsorted entry at hook 1 [ 684.678203][T28647] lo speed is unknown, defaulting to 1000 [ 684.998797][T28657] lo speed is unknown, defaulting to 1000 [ 685.197612][T28673] vlan2: entered allmulticast mode [ 685.203177][T28673] bridge0: port 4(vlan2) entered blocking state [ 685.210059][T28673] bridge0: port 4(vlan2) entered disabled state [ 685.218965][T28673] vlan2: entered promiscuous mode [ 685.301649][T16936] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.312981][T16936] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.337661][T28677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5561'. [ 685.360552][T16936] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.394070][T16936] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.515385][T28688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5566'. [ 685.531839][T28689] netlink: 'syz.0.5565': attribute type 1 has an invalid length. [ 685.551762][T28689] NCSI netlink: No device for ifindex 0 [ 685.657397][T28688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 685.742661][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 685.990334][T28710] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20003 [ 686.200573][T28728] SET target dimension over the limit! [ 686.439199][T28740] lo speed is unknown, defaulting to 1000 [ 686.791322][T28755] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 687.152974][T28760] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 687.737914][T28777] syzkaller1: entered promiscuous mode [ 687.759920][T28777] syzkaller1: entered allmulticast mode [ 688.254297][T28804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.645032][T28827] openvswitch: netlink: Key type 310 is out of range max 32 [ 688.726600][T28827] syzkaller0: entered promiscuous mode [ 688.731340][T28834] __nla_validate_parse: 8 callbacks suppressed [ 688.731357][T28834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5606'. [ 688.736460][T28827] syzkaller0: entered allmulticast mode [ 688.960829][T28843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5608'. [ 688.986363][T28841] bridge0: port 3(veth0_to_bridge) entered blocking state [ 689.009532][T28841] bridge0: port 3(veth0_to_bridge) entered disabled state [ 689.021518][T28841] veth0_to_bridge: entered allmulticast mode [ 689.037948][T28841] veth0_to_bridge: entered promiscuous mode [ 689.355885][T28864] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 689.679387][T28876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5618'. [ 689.737670][T28882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.751639][T28882] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.752020][T28876] netlink: 'syz.2.5618': attribute type 2 has an invalid length. [ 689.767880][T28882] bridge0: port 3(dummy0) entered blocking state [ 689.776521][T28882] bridge0: port 3(dummy0) entered forwarding state [ 689.790014][T28886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5619'. [ 689.799194][T28876] netlink: 'syz.2.5618': attribute type 1 has an invalid length. [ 689.811128][T28882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 689.836786][T28888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5620'. [ 689.914442][T28885] netlink: 'syz.2.5618': attribute type 21 has an invalid length. [ 689.933960][T28885] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5618'. [ 689.954623][T28885] netlink: 'syz.2.5618': attribute type 4 has an invalid length. [ 689.990048][T28885] netlink: 'syz.2.5618': attribute type 3 has an invalid length. [ 690.017475][T28885] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5618'. [ 690.246627][T28902] netlink: 'syz.2.5623': attribute type 1 has an invalid length. [ 690.255771][T28902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5623'. [ 690.276548][T28906] bond8: option mode: invalid value (254) [ 690.284074][T28906] bond8 (unregistering): Released all slaves [ 690.565197][T28925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5630'. [ 690.703259][T28932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5633'. [ 690.768392][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 690.776482][ C1] lec:lec_tx_timeout: lec0 [ 690.816687][T28934] netlink: 'syz.3.5634': attribute type 11 has an invalid length. [ 691.080228][T28947] can: request_module (can-proto-5) failed. [ 691.456721][T28972] SET target dimension over the limit! [ 692.340992][T29028] ±ÿÿÿÿa–ïD: Caught tx_queue_len zero misconfig [ 693.596610][T29110] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 693.603068][T29110] syzkaller1: linktype set to 768 [ 693.609690][T29110] ip6tnl0: Caught tx_queue_len zero misconfig [ 694.605727][T28989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.742289][T29119] netlink: 'syz.3.5683': attribute type 5 has an invalid length. [ 694.774204][T29119] netlink: 'syz.3.5683': attribute type 5 has an invalid length. [ 694.882652][T29135] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 694.885351][T29134] __nla_validate_parse: 16 callbacks suppressed [ 694.885368][T29134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5687'. [ 694.903420][T29132] syzkaller1: entered promiscuous mode [ 694.924476][T29132] syzkaller1: entered allmulticast mode [ 695.105457][T29148] tipc: Enabled bearer , priority 14 [ 695.146752][T29147] tipc: Enabling of bearer rejected, already enabled [ 695.148738][T29148] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5689'. [ 695.205259][T29151] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5689'. [ 695.237181][T29151] 0ªX¹¦À: renamed from caif0 [ 695.260340][T29151] tipc: Disabling bearer [ 695.266684][T29151] 0ªX¹¦À: entered allmulticast mode [ 695.276997][T29151] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 695.320548][T29148] 1ªX¹¦À: renamed from 60ªX¹¦À [ 695.347265][T29148] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 695.376985][T29158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5691'. [ 695.633147][T29184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5697'. [ 695.970993][T29207] nbd: must specify at least one socket [ 695.997249][T29209] nbd: must specify at least one socket [ 696.065916][T29208] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 696.071275][T29216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5702'. [ 696.332961][T29228] syzkaller0: entered promiscuous mode [ 696.351927][T29230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5708'. [ 696.362634][T29228] syzkaller0: entered allmulticast mode [ 696.701528][T29256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5714'. [ 696.739444][T29256] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5714'. [ 696.799211][T29248] bond8: invalid ARP target 0.0.0.0 specified for addition [ 696.806765][T29248] bond8: option arp_ip_target: invalid value (0) [ 696.827344][T29248] bond8 (unregistering): Released all slaves [ 697.165384][T29285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5720'. [ 697.311503][T29294] netlink: 'syz.5.5723': attribute type 6 has an invalid length. [ 697.340208][T29287] lo speed is unknown, defaulting to 1000 [ 697.455905][T29296] Bluetooth: MGMT ver 1.23 [ 697.638870][T29312] netlink: 'syz.3.5728': attribute type 32 has an invalid length. [ 697.678018][T29312] bond10: Setting coupled_control to off (0) [ 698.048543][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 698.741387][T29371] netlink: 'syz.2.5746': attribute type 1 has an invalid length. [ 699.316379][T29406] netlink: 'syz.5.5758': attribute type 10 has an invalid length. [ 699.375070][T29413] netlink: 'syz.0.5756': attribute type 1 has an invalid length. [ 699.518159][T29413] 8021q: adding VLAN 0 to HW filter on device bond12 [ 699.928842][T29439] __nla_validate_parse: 6 callbacks suppressed [ 699.928859][T29439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5765'. [ 699.947949][T29440] netlink: 'syz.5.5764': attribute type 83 has an invalid length. [ 699.966748][T29431] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5764'. [ 700.236783][T29453] delete_channel: no stack [ 700.299746][T29458] netlink: 'syz.3.5772': attribute type 13 has an invalid length. [ 700.307848][T29458] netlink: 'syz.3.5772': attribute type 17 has an invalid length. [ 700.381756][T29458] erspan0: left promiscuous mode [ 700.424684][T29467] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5774'. [ 700.444185][T29458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.462832][ T5910] lo speed is unknown, defaulting to 1000 [ 700.463207][T29452] syzkaller0: entered promiscuous mode [ 700.474493][ T5910] syz2: Port: 1 Link ACTIVE [ 700.497545][T29452] syzkaller0: entered allmulticast mode [ 700.795959][T29480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.835896][T29486] lo speed is unknown, defaulting to 1000 [ 701.059917][T29510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5785'. [ 701.086611][T29510] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5785'. [ 701.503234][T29532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5787'. [ 701.557961][T29544] netlink: 'syz.1.5791': attribute type 10 has an invalid length. [ 701.606279][T29544] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.5791'. [ 701.641517][T29549] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5791'. [ 701.702364][T29553] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5791'. [ 701.745850][T29544] netlink: 'syz.1.5791': attribute type 10 has an invalid length. [ 701.746463][T29555] netlink: 'syz.5.5794': attribute type 1 has an invalid length. [ 701.760089][T29544] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.5791'. [ 701.869220][T29555] bond2: entered promiscuous mode [ 701.874890][T29555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 701.968576][T29570] netlink: 'syz.0.5795': attribute type 7 has an invalid length. [ 702.168601][T29575] netlink: 'syz.3.5798': attribute type 1 has an invalid length. [ 702.185041][ T7849] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 702.201526][ T7849] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 702.263790][ T7849] bond0: now running without any active interface! [ 702.387126][T29586] netlink: 'syz.5.5801': attribute type 4 has an invalid length. [ 702.420724][T29575] bond11: entered promiscuous mode [ 702.426174][T29575] 8021q: adding VLAN 0 to HW filter on device bond11 [ 702.435481][T29589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.507450][T29580] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 702.597719][T29595] netlink: 'syz.5.5801': attribute type 4 has an invalid length. [ 702.658023][T29580] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 702.737890][T29580] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 702.833671][T29580] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 702.925179][T29608] netlink: zone id is out of range [ 702.934273][T29608] netlink: zone id is out of range [ 702.947802][T29608] netlink: zone id is out of range [ 702.962995][T29608] netlink: zone id is out of range [ 702.970290][T29608] netlink: zone id is out of range [ 702.975835][T29608] netlink: zone id is out of range [ 702.991271][T29608] netlink: zone id is out of range [ 703.008034][T29608] netlink: zone id is out of range [ 703.043564][T16933] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 703.098594][T16938] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 703.114525][T16938] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 703.136664][T16938] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 704.098669][T29638] lo speed is unknown, defaulting to 1000 [ 707.706023][T29663] lo speed is unknown, defaulting to 1000 [ 707.952499][T29692] __nla_validate_parse: 14 callbacks suppressed [ 707.952515][T29692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5833'. [ 708.228023][T29708] gretap0: entered promiscuous mode [ 708.254366][T29708] vlan3: entered promiscuous mode [ 708.456831][T29716] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.5838'. [ 708.492752][T29716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5838'. [ 708.506240][T29716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5838'. [ 708.556168][T29713] lo speed is unknown, defaulting to 1000 [ 708.742470][ T29] audit: type=1804 audit(1776660483.711:18): pid=29734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5839" name="/newroot/493/memory.events" dev="tmpfs" ino=2541 res=1 errno=0 [ 708.846718][T29736] validate_nla: 2 callbacks suppressed [ 708.846736][T29736] netlink: 'syz.3.5842': attribute type 10 has an invalid length. [ 708.872739][T29736] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5842'. [ 708.882374][T29736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 708.895389][T29736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.908911][T29736] hsr0: entered promiscuous mode [ 708.915362][T29736] bridge0: port 3(hsr0) entered blocking state [ 708.922816][T29736] bridge0: port 3(hsr0) entered disabled state [ 708.942974][T29736] hsr0: entered allmulticast mode [ 708.952702][T29736] hsr_slave_0: entered allmulticast mode [ 708.978557][T29736] hsr_slave_1: entered allmulticast mode [ 709.131479][T29743] lo speed is unknown, defaulting to 1000 [ 709.332800][T29759] netlink: 'syz.3.5845': attribute type 4 has an invalid length. [ 709.383473][T29753] netlink: 'syz.3.5845': attribute type 4 has an invalid length. [ 709.455048][ T43] lo speed is unknown, defaulting to 1000 [ 709.463325][ T5910] lo speed is unknown, defaulting to 1000 [ 709.512606][T29753] netlink: 'syz.3.5845': attribute type 10 has an invalid length. [ 709.532559][T29767] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5849'. [ 709.657847][T29771] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5850'. [ 709.739213][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5851'. [ 710.145125][T29796] netlink: 5676 bytes leftover after parsing attributes in process `syz.5.5856'. [ 710.369810][T29812] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5860'. [ 710.702125][T29833] netlink: 'syz.1.5869': attribute type 6 has an invalid length. [ 710.888565][T29841] hsr_slave_0: left promiscuous mode [ 710.907268][T29841] hsr_slave_1: left promiscuous mode [ 710.928073][T29841] bridge0: port 3(hsr0) entered disabled state [ 710.985097][T29841] hsr0 (unregistering): left allmulticast mode [ 710.995613][T29841] bridge0: port 3(hsr0) entered disabled state [ 711.123912][T29858] xt_policy: too many policy elements [ 711.481518][T29870] 8021q: adding VLAN 0 to HW filter on device bond13 [ 711.874005][T29891] lo speed is unknown, defaulting to 1000 [ 712.554009][T29932] IPVS: length: 528 != 944 [ 713.299876][T29957] __nla_validate_parse: 6 callbacks suppressed [ 713.299893][T29957] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.5901'. [ 713.374625][T29961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5901'. [ 713.401694][T29961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5901'. [ 713.405572][T12881] lec:lec_start_xmit: lec0:No lecd attached [ 713.422918][T29964] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 713.665446][T29969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5904'. [ 713.700915][T29968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5904'. [ 713.747524][T29980] netlink: 'syz.5.5906': attribute type 61 has an invalid length. [ 713.786409][T29980] netlink: 'syz.5.5906': attribute type 62 has an invalid length. [ 714.180173][T29996] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5912'. [ 714.200281][T29996] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5912'. [ 714.266749][T29999] x_tables: duplicate entry at hook 3 [ 714.281621][T29999] bridge0: port 3(syz_tun) entered blocking state [ 714.291535][T29999] bridge0: port 3(syz_tun) entered disabled state [ 714.313903][T29999] syz_tun: entered allmulticast mode [ 714.349166][T29999] syz_tun: entered promiscuous mode [ 714.363053][T29999] bridge0: port 3(syz_tun) entered blocking state [ 714.371638][T29999] bridge0: port 3(syz_tun) entered forwarding state [ 714.859411][T30014] lo speed is unknown, defaulting to 1000 [ 714.918804][T30017] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.5918'. [ 715.259615][T30030] bridge11: entered allmulticast mode [ 715.427879][T30033] tipc: Enabling of bearer rejected, failed to enable media [ 715.448070][T30033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5922'. [ 715.677781][T30046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5925'. [ 715.706487][T30046] x_tables: duplicate underflow at hook 2 [ 715.790038][T30051] xt_bpf: check failed: parse error [ 715.859949][T30047] team1: entered promiscuous mode [ 715.876545][T30047] team1: entered allmulticast mode [ 715.905282][T30047] 8021q: adding VLAN 0 to HW filter on device team1 [ 715.940905][T30054] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 715.959213][ T29] audit: type=1800 audit(1776660490.941:19): pid=30061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5928" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=908 res=0 errno=0 [ 716.145666][T30069] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 716.209770][T30054] team2: entered promiscuous mode [ 716.218736][T30054] team2: entered allmulticast mode [ 716.230756][T30054] 8021q: adding VLAN 0 to HW filter on device team2 [ 716.318628][T30069] syzkaller1: entered promiscuous mode [ 716.324217][T30069] syzkaller1: entered allmulticast mode [ 716.730610][T30092] netlink: 'syz.0.5936': attribute type 1 has an invalid length. [ 716.754834][T30094] x_tables: duplicate underflow at hook 1 [ 716.773614][T30094] xt_l2tp: invalid flags combination: 0 [ 716.832038][T30092] 8021q: adding VLAN 0 to HW filter on device bond14 [ 716.901261][T30096] bond14: (slave veth17): Enslaving as an active interface with a down link [ 717.465192][T30141] Cannot find del_set index 49151 as target [ 717.486725][T30134] lo speed is unknown, defaulting to 1000 [ 717.504089][T30123] lo speed is unknown, defaulting to 1000 [ 717.549821][T30136] lo speed is unknown, defaulting to 1000 [ 717.572055][T30143] Cannot find del_set index 49151 as target [ 718.019231][T30157] netlink: 'syz.1.5953': attribute type 1 has an invalid length. [ 718.098846][T30157] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 718.686812][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 718.713297][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 718.724319][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 718.736918][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 718.746434][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 718.778950][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 718.787007][ C1] lec:lec_tx_timeout: lec0 [ 718.834438][T30182] lo speed is unknown, defaulting to 1000 [ 719.235834][T30213] __nla_validate_parse: 4 callbacks suppressed [ 719.235851][T30213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5966'. [ 719.274109][T30205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 719.376144][T30182] chnl_net:caif_netlink_parms(): no params data found [ 719.724324][ T7849] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 719.805837][T30230] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5971'. [ 719.852514][T30230] batadv_slave_1: entered promiscuous mode [ 719.907512][T30229] batadv_slave_1: left promiscuous mode [ 719.916110][T30182] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.927770][T30182] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.936727][T30182] bridge_slave_0: entered allmulticast mode [ 719.946275][T30182] bridge_slave_0: entered promiscuous mode [ 719.959845][ T7849] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 719.989150][T30182] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.996462][T30182] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.004200][T30182] bridge_slave_1: entered allmulticast mode [ 720.013131][T30182] bridge_slave_1: entered promiscuous mode [ 720.060399][ T7849] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 720.130891][T30242] netlink: 'syz.5.5974': attribute type 2 has an invalid length. [ 720.152902][T30243] netlink: 'syz.5.5974': attribute type 2 has an invalid length. [ 720.163480][T30236] bond9: invalid ARP target 0.0.0.0 specified for addition [ 720.175368][T30236] bond9: option arp_ip_target: invalid value (0) [ 720.183099][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5975'. [ 720.193470][T30236] bond9 (unregistering): Released all slaves [ 720.230785][T30242] l2: entered promiscuous mode [ 720.278096][T30182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.304256][ T7849] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 720.357455][T30182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.477127][T30182] team0: Port device team_slave_0 added [ 720.509518][T30182] team0: Port device team_slave_1 added [ 720.647585][T30182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.674479][T30182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.764780][T30182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.809046][T30182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.844909][T30182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.871160][ T5843] Bluetooth: hci6: command tx timeout [ 720.927445][T30281] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5983'. [ 720.946646][T30182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.162947][T16933] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.210243][T30269] lo speed is unknown, defaulting to 1000 [ 721.229230][T30182] hsr_slave_0: entered promiscuous mode [ 721.240928][T30182] hsr_slave_1: entered promiscuous mode [ 721.257629][T30182] debugfs: 'hsr0' already exists in 'hsr' [ 721.264035][T30182] Cannot create hsr debugfs directory [ 721.301599][ T7843] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.435762][T16933] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.622140][T16933] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.652355][ T7849] veth0_to_bridge: left allmulticast mode [ 721.664625][ T7849] veth0_to_bridge: left promiscuous mode [ 721.687151][ T7849] bridge0: port 3(veth0_to_bridge) entered disabled state [ 721.716063][ T7849] bridge_slave_1: left allmulticast mode [ 721.732183][ T7849] bridge_slave_1: left promiscuous mode [ 721.743917][T30298] netlink: 'syz.5.5986': attribute type 1 has an invalid length. [ 721.759846][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.777408][ T7849] bridge_slave_0: left allmulticast mode [ 721.784433][ T7849] bridge_slave_0: left promiscuous mode [ 721.816301][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.845914][T30304] netlink: 'syz.2.5987': attribute type 2 has an invalid length. [ 721.876624][ T7849] pimreg: left allmulticast mode [ 721.890051][ T7849] tipc: Resetting bearer [ 722.053673][ T7849] tipc: Disabling bearer [ 722.437399][ T7849] bond5 (unregistering): (slave gretap1): Releasing active interface [ 722.458474][ T7849] batman_adv: batadv0: Removing interface: gretap3 [ 722.496187][ T7849] bond10 (unregistering): (slave geneve4): Releasing active interface [ 722.733631][ T7849] bond5 (unregistering): (slave bridge4): Releasing active interface [ 722.921909][ T7849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.934226][ T7849] bond_slave_0: left allmulticast mode [ 722.938388][ T5843] Bluetooth: hci6: command tx timeout [ 722.940775][ T7849] bond0 (unregistering): Released all slaves [ 722.957746][ T7849] bond1 (unregistering): (slave veth9): Releasing active interface [ 722.980943][ T7849] bond1 (unregistering): Released all slaves [ 723.030316][ T7849] bond2 (unregistering): Released all slaves [ 723.056471][ T7849] bond3 (unregistering): Released all slaves [ 723.076811][ T7849] bond4 (unregistering): Released all slaves [ 723.105193][ T7849] bond5 (unregistering): Released all slaves [ 723.127172][ T7849] bond6 (unregistering): Released all slaves [ 723.172666][ T7849] bond7 (unregistering): Released all slaves [ 723.199999][ T7849] bond8 (unregistering): Released all slaves [ 723.221347][ T7849] bond9 (unregistering): Released all slaves [ 723.269657][ T7849] bond10 (unregistering): Released all slaves [ 723.292508][ T7849] bond11 (unregistering): Released all slaves [ 723.305565][ T7849] bond12 (unregistering): Released all slaves [ 723.319403][ T7849] bond13 (unregistering): Released all slaves [ 723.342715][ T7849] bond14 (unregistering): (slave veth17): Releasing active interface [ 723.352815][ T7849] bond14 (unregistering): Released all slaves [ 723.399971][T30298] bond3: entered promiscuous mode [ 723.420137][T30298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 723.610836][ T7849] tipc: Disabling bearer [ 723.631439][ T7849] tipc: Left network mode [ 723.647691][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 723.663387][T30335] bridge9: entered promiscuous mode [ 723.681183][T30335] bridge9: entered allmulticast mode [ 723.719956][T30336] bridge10: entered promiscuous mode [ 723.744300][T30336] bridge10: entered allmulticast mode [ 723.906428][T30345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5994'. [ 724.083056][T30345] 8021q: adding VLAN 0 to HW filter on device bond11 [ 724.684175][T30371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5999'. [ 724.782876][T30182] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.813842][T30378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6002'. [ 725.011031][ T5843] Bluetooth: hci6: command tx timeout [ 725.246203][T30182] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.448948][T30182] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.565968][T30376] netlink: 'syz.5.6001': attribute type 7 has an invalid length. [ 725.589867][T30376] netlink: 'syz.5.6001': attribute type 10 has an invalid length. [ 725.625138][ T7849] hsr_slave_0: left promiscuous mode [ 725.653365][ T7849] hsr_slave_1: left promiscuous mode [ 725.703270][T30428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6012'. [ 726.062135][ T7849] team_slave_1 (unregistering): left promiscuous mode [ 726.073862][ T7849] team0 (unregistering): Port device team_slave_1 removed [ 726.087526][ T7849] team_slave_0 (unregistering): left promiscuous mode [ 726.100603][ T7849] team0 (unregistering): Port device team_slave_0 removed [ 726.225301][T30182] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.549599][T30449] syzkaller0: entered promiscuous mode [ 726.561826][T30449] syzkaller0: entered allmulticast mode [ 726.804390][T30458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6018'. [ 726.824714][ T7849] IPVS: stop unused estimator thread 0... [ 726.849246][T30458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6018'. [ 727.088474][ T5843] Bluetooth: hci6: command tx timeout [ 727.522981][T30498] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6028'. [ 727.566848][T30498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6028'. [ 727.794636][T30182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 727.846120][T30182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.873160][T30182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 727.917440][T30182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.952016][T30182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 728.018820][T30182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.057520][T30182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 728.093389][T30182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.557928][T30182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.617847][T30182] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.648590][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.655820][ T7843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.672380][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.679614][ T7843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.826996][T30569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6041'. [ 728.967605][T30564] lo speed is unknown, defaulting to 1000 [ 729.021205][T30576] syz.3.6041: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 729.065990][T30576] CPU: 0 UID: 0 PID: 30576 Comm: syz.3.6041 Not tainted syzkaller #0 PREEMPT(full) [ 729.066017][T30576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 729.066031][T30576] Call Trace: [ 729.066037][T30576] [ 729.066046][T30576] dump_stack_lvl+0xe8/0x150 [ 729.066082][T30576] warn_alloc+0x249/0x340 [ 729.066111][T30576] ? stack_trace_save+0xa9/0x100 [ 729.066136][T30576] ? __pfx_warn_alloc+0x10/0x10 [ 729.066165][T30576] ? kasan_save_track+0x4f/0x80 [ 729.066189][T30576] ? kasan_save_track+0x3e/0x80 [ 729.066214][T30576] ? __kasan_kmalloc+0x93/0xb0 [ 729.066230][T30576] ? __kmalloc_cache_noprof+0x31c/0x660 [ 729.066257][T30576] ? xskq_create+0x56/0x170 [ 729.066276][T30576] ? xsk_setsockopt+0x54c/0x990 [ 729.066291][T30576] ? do_sock_setsockopt+0x17c/0x1b0 [ 729.066318][T30576] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 729.066343][T30576] ? do_syscall_64+0x15f/0xf80 [ 729.066371][T30576] __vmalloc_node_range_noprof+0x132/0x1730 [ 729.066433][T30576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 729.066470][T30576] ? __kasan_kmalloc+0x93/0xb0 [ 729.066495][T30576] vmalloc_user_noprof+0xad/0xe0 [ 729.066524][T30576] ? xskq_create+0xbf/0x170 [ 729.066545][T30576] xskq_create+0xbf/0x170 [ 729.066569][T30576] xsk_init_queue+0x8a/0xe0 [ 729.066588][T30576] xsk_setsockopt+0x54c/0x990 [ 729.066608][T30576] ? __pfx_xsk_setsockopt+0x10/0x10 [ 729.066625][T30576] ? __pfx_aa_sk_perm+0x10/0x10 [ 729.066650][T30576] ? aa_sock_opt_perm+0xff/0x1a0 [ 729.066714][T30576] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 729.066741][T30576] ? __pfx_xsk_setsockopt+0x10/0x10 [ 729.066761][T30576] do_sock_setsockopt+0x17c/0x1b0 [ 729.066796][T30576] __x64_sys_setsockopt+0x13d/0x1b0 [ 729.066826][T30576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.066849][T30576] do_syscall_64+0x15f/0xf80 [ 729.066872][T30576] ? trace_irq_disable+0x3b/0x140 [ 729.066892][T30576] ? clear_bhb_loop+0x40/0x90 [ 729.066914][T30576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.066932][T30576] RIP: 0033:0x7fbc47d9c819 [ 729.066951][T30576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.066967][T30576] RSP: 002b:00007fbc48c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 729.066990][T30576] RAX: ffffffffffffffda RBX: 00007fbc48016270 RCX: 00007fbc47d9c819 [ 729.067005][T30576] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 729.067016][T30576] RBP: 00007fbc47e32c91 R08: 0000000000000004 R09: 0000000000000000 [ 729.067028][T30576] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.067040][T30576] R13: 00007fbc48016308 R14: 00007fbc48016270 R15: 00007ffcc5386d28 [ 729.067069][T30576] [ 729.067087][T30576] Mem-Info: [ 729.247003][T30581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6043'. [ 729.331374][T30576] active_anon:7157 inactive_anon:0 isolated_anon:0 [ 729.331374][T30576] active_file:2759 inactive_file:40401 isolated_file:0 [ 729.331374][T30576] unevictable:768 dirty:151 writeback:0 [ 729.331374][T30576] slab_reclaimable:13055 slab_unreclaimable:144646 [ 729.331374][T30576] mapped:37748 shmem:1395 pagetables:1579 [ 729.331374][T30576] sec_pagetables:0 bounce:0 [ 729.331374][T30576] kernel_misc_reclaimable:0 [ 729.331374][T30576] free:1242300 free_pcp:27606 free_cma:0 [ 729.501674][T30576] Node 0 active_anon:28428kB inactive_anon:0kB active_file:11036kB inactive_file:161404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105932kB dirty:604kB writeback:0kB shmem:4044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15912kB pagetables:5848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 729.657872][T30576] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 729.693151][T30597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6045'. [ 729.720445][T30576] Node 0 DMA free:15320kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:8kB free_cma:0kB [ 729.731401][T30182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.766278][T30601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6046'. [ 729.775465][T30576] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 729.775530][T30576] Node 0 DMA32 free:1180384kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28428kB inactive_anon:0kB active_file:11036kB inactive_file:161404kB unevictable:1536kB writepending:604kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:45280kB local_pcp:19476kB free_cma:0kB [ 729.775593][T30576] lowmem_reserve[]: 0 0 0 0 0 [ 729.775635][T30576] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 729.775689][T30576] lowmem_reserve[]: 0 0 0 0 0 [ 729.775731][T30576] Node 1 Normal free:3773196kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:67712kB local_pcp:33804kB free_cma:0kB [ 729.775790][T30576] lowmem_reserve[]: 0 0 0 0 0 [ 729.775833][T30576] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) [ 729.852074][T30601] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6046'. [ 729.888724][T30576] 2*512kB [ 729.930486][T30601] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6046'. [ 729.961176][T30182] veth0_vlan: entered promiscuous mode [ 729.977165][T30576] (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15320kB [ 730.013913][T30182] veth1_vlan: entered promiscuous mode [ 730.045759][T30576] Node 0 DMA32: 5984*4kB (UME) 7025*8kB (UME) 4295*16kB (UME) 931*32kB (UME) 246*64kB (UME) 810*128kB (UM) 705*256kB (UM) 411*512kB (UME) 250*1024kB (UE) 116*2048kB (UM) 0*4096kB = 1182552kB [ 730.110253][T30576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 730.157754][T30182] veth0_macvtap: entered promiscuous mode [ 730.178040][T30576] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 12*16kB (UM) 4*32kB (UM) 12*64kB (UM) 9*128kB (UM) 7*256kB (UM) 8*512kB (UM) 7*1024kB (UM) 7*2048kB (U) 914*4096kB (UM) = 3773448kB [ 730.195628][T30182] veth1_macvtap: entered promiscuous mode [ 730.235715][T30576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.263949][T30576] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 730.277837][T30576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.291319][T30614] lo speed is unknown, defaulting to 1000 [ 730.306506][T30182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.310388][T30576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 730.323890][T30576] 44550 total pagecache pages [ 730.329647][T30576] 0 pages in swap cache [ 730.334044][T30576] Free swap = 124996kB [ 730.339606][T30576] Total swap = 124996kB [ 730.382360][T30576] 2097051 pages RAM [ 730.389717][T30576] 0 pages HighMem/MovableOnly [ 730.394526][T30576] 427401 pages reserved [ 730.402706][T30576] 0 pages cma reserved [ 730.426708][T30182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.513496][T16933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.544226][T16933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.623379][T16933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.659455][T16933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.012556][T30634] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6052'. [ 731.374920][T30665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6054'. [ 731.476713][T30656] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6056'. [ 731.624400][T13749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.677692][T13749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.772675][T30680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6058'. [ 731.787553][T30679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.835923][ T7849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.876299][ T7849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.017827][T30690] netlink: 296 bytes leftover after parsing attributes in process `syz.5.6061'. [ 732.157252][T30695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6060'. [ 732.791445][T30733] net_ratelimit: 40 callbacks suppressed [ 732.796098][T30733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.502296][T30773] bpq0: entered promiscuous mode [ 733.515850][T30773] bpq0: entered allmulticast mode [ 733.636377][T30782] netlink: 'syz.1.6079': attribute type 3 has an invalid length. [ 733.691374][T30782] nbd: nbd1 already in use [ 733.710906][T30782] block nbd1: NBD_DISCONNECT [ 733.735498][T30782] block nbd1: Send disconnect failed -32 [ 733.745926][T30782] block nbd1: shutting down sockets [ 733.762998][T30784] lo speed is unknown, defaulting to 1000 [ 733.825270][T30782] bridge0: left allmulticast mode [ 733.837508][T30790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.855045][T30782] 1ªX¹¦À: left allmulticast mode [ 733.863667][T30782] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 733.921826][T16938] veth0_to_bridge: left allmulticast mode [ 733.937152][T16938] veth0_to_bridge: left promiscuous mode [ 733.955164][T16938] bridge0: port 3(veth0_to_bridge) entered disabled state [ 733.976756][T16938] bridge_slave_1: left allmulticast mode [ 733.986815][T16938] bridge_slave_1: left promiscuous mode [ 733.996393][T16938] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.007045][T16938] bridge_slave_0: left allmulticast mode [ 734.014373][T16938] bridge_slave_0: left promiscuous mode [ 734.024648][T16938] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.441479][T16938] bond1 (unregistering): (slave geneve2): Releasing active interface [ 735.082362][T16938] bond1 (unregistering): Released all slaves [ 735.100115][T16938] bond2 (unregistering): Released all slaves [ 735.114744][T16938] bond3 (unregistering): Released all slaves [ 735.128142][T16938] bond4 (unregistering): Released all slaves [ 735.143894][T16938] bond5 (unregistering): Released all slaves [ 735.163052][T16938] bond6 (unregistering): (slave lo): Releasing backup interface [ 735.172176][T16938] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 735.183678][T16938] bond6 (unregistering): Released all slaves [ 735.202144][T16938] bond7 (unregistering): (slave veth13): Releasing active interface [ 735.211119][T16938] bond7 (unregistering): Released all slaves [ 735.226369][T16938] bond8 (unregistering): (slave veth15): Releasing active interface [ 735.235461][T16938] bond8 (unregistering): Released all slaves [ 735.253111][T16938] bond0 (unregistering): Released all slaves [ 735.267525][T16938] bond9 (unregistering): Released all slaves [ 735.281635][T16938] bond10 (unregistering): Released all slaves [ 735.295905][T16938] bond11 (unregistering): Released all slaves [ 735.310682][T16938] bond12 (unregistering): Released all slaves [ 735.337128][T16938] bond13 (unregistering): Released all slaves [ 735.469224][T30820] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 735.492468][T30816] lo speed is unknown, defaulting to 1000 [ 735.669352][T16938] tipc: Disabling bearer [ 735.674884][T16938] tipc: Left network mode [ 736.066069][T30830] __nla_validate_parse: 7 callbacks suppressed [ 736.066089][T30830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6088'. [ 736.108890][T30830] netlink: 'syz.3.6088': attribute type 12 has an invalid length. [ 736.117125][T30830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6088'. [ 736.151636][T30830] netlink: 'syz.3.6088': attribute type 12 has an invalid length. [ 736.545872][T30841] netlink: 'syz.5.6092': attribute type 2 has an invalid length. [ 736.942314][T30869] siw: device registration error -23 [ 736.964158][T16938] hsr_slave_0: left promiscuous mode [ 736.981204][T16938] hsr_slave_1: left promiscuous mode [ 737.895279][T30888] netlink: 'syz.1.6103': attribute type 13 has an invalid length. [ 737.904591][T30888] netlink: 'syz.1.6103': attribute type 17 has an invalid length. [ 738.038647][T16938] dummy0 (unregistering): left allmulticast mode [ 738.181632][T30888] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 738.220101][T30900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6105'. [ 738.404707][T30909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.414439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.439955][T30885] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.546529][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6109'. [ 738.592370][T30919] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6110'. [ 738.616060][T30919] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 738.633521][T30921] netlink: 9092 bytes leftover after parsing attributes in process `syz.0.6111'. [ 738.661129][T30916] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 738.672243][T30926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6112'. [ 738.723569][T30926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6112'. [ 738.779380][T30885] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.965418][T30935] xt_TCPMSS: Only works on TCP SYN packets [ 739.025338][T30939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6116'. [ 739.028033][T30885] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.106080][T30945] pim6reg: entered allmulticast mode [ 739.145890][T30932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6114'. [ 739.240952][T30885] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.263264][T30945] pim6reg: left allmulticast mode [ 739.274839][T16938] IPVS: stop unused estimator thread 0... [ 739.282593][T30949] netlink: 'syz.3.6118': attribute type 8 has an invalid length. [ 739.289468][T30947] pim6reg: entered allmulticast mode [ 739.536275][T30958] 8021q: VLANs not supported on ip_vti0 [ 739.544231][T16938] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.567680][T16938] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.663642][T16936] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.669056][T30966] netlink: 'syz.1.6123': attribute type 3 has an invalid length. [ 739.705294][T16936] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.053576][T30987] netlink: 'syz.2.6128': attribute type 4 has an invalid length. [ 740.083480][T30982] lo speed is unknown, defaulting to 1000 [ 740.308544][T30994] team0: No ports can be present during mode change [ 740.339497][T30994] veth0: entered promiscuous mode [ 740.407089][T30999] netem: incorrect ge model size [ 740.413567][T30999] netem: change failed [ 740.607148][T30994] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 740.628435][T30994] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 740.636503][T30994] tipc: Resetting bearer [ 740.650959][T30993] veth0: left promiscuous mode [ 740.857178][T31019] netlink: 'syz.1.6138': attribute type 1 has an invalid length. [ 740.863244][T31017] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 740.866659][T31020] netlink: 'syz.3.6137': attribute type 1 has an invalid length. [ 740.868908][T31020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.062988][T31029] syzkaller0: entered promiscuous mode [ 741.079006][T31029] syzkaller0: entered allmulticast mode [ 741.121879][T31038] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 741.129908][T31038] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 741.144227][T31038] tipc: Resetting bearer [ 741.183906][T31043] xt_hashlimit: size too large, truncated to 1048576 [ 741.215639][T31038] __nla_validate_parse: 5 callbacks suppressed [ 741.215658][T31038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6143'. [ 741.311102][T31048] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6144'. [ 741.881066][T31066] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20004 [ 742.025446][T31072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6151'. [ 742.047520][T31072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6151'. [ 742.113189][T31075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6151'. [ 742.207970][T31081] netlink: 'syz.1.6153': attribute type 1 has an invalid length. [ 742.241483][T31081] netlink: 352 bytes leftover after parsing attributes in process `syz.1.6153'. [ 742.291681][T31081] netlink: 'syz.1.6153': attribute type 1 has an invalid length. [ 742.320219][T31081] netlink: 352 bytes leftover after parsing attributes in process `syz.1.6153'. [ 742.396711][T31089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6155'. [ 742.551795][T31098] netlink: 'syz.1.6158': attribute type 1 has an invalid length. [ 742.617104][T31098] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 742.759599][T31105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6159'. [ 742.810800][T31119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6162'. [ 742.844303][T31113] lo speed is unknown, defaulting to 1000 [ 743.235191][T31132] syzkaller1: entered promiscuous mode [ 743.274285][T31132] syzkaller1: entered allmulticast mode [ 743.490048][T31141] bridge3: entered promiscuous mode [ 743.539212][T31143] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 743.559167][T31143] CPU: 1 UID: 0 PID: 31143 Comm: syz.5.6166 Not tainted syzkaller #0 PREEMPT(full) [ 743.559215][T31143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 743.559233][T31143] Call Trace: [ 743.559241][T31143] [ 743.559250][T31143] dump_stack_lvl+0xe8/0x150 [ 743.559284][T31143] sysfs_warn_dup+0x8e/0xa0 [ 743.559313][T31143] sysfs_do_create_link_sd+0xc0/0x110 [ 743.559343][T31143] device_add_class_symlinks+0x1cf/0x240 [ 743.559380][T31143] device_add+0x475/0xb70 [ 743.559394][T31143] wiphy_register+0x1dc5/0x2dc0 [ 743.559423][T31143] ? __pfx_wiphy_register+0x10/0x10 [ 743.559436][T31143] ? __pfx_netdev_run_todo+0x10/0x10 [ 743.559448][T31143] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 743.559467][T31143] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 743.559484][T31143] ieee80211_register_hw+0x3d82/0x4a70 [ 743.559507][T31143] ? ieee80211_register_hw+0x1981/0x4a70 [ 743.559533][T31143] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 743.559549][T31143] ? __asan_memset+0x22/0x50 [ 743.559563][T31143] ? __hrtimer_setup+0x1b7/0x260 [ 743.559579][T31143] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 743.559598][T31143] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 743.559635][T31143] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 743.559650][T31143] ? kstrndup+0xbf/0x160 [ 743.559668][T31143] hwsim_new_radio_nl+0xf6a/0x1c00 [ 743.559695][T31143] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 743.559715][T31143] ? rcu_is_watching+0x15/0xb0 [ 743.559731][T31143] ? trace_kmalloc+0x2a/0xf0 [ 743.559750][T31143] ? __nla_parse+0x40/0x60 [ 743.559767][T31143] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 743.559779][T31143] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 743.559796][T31143] genl_family_rcv_msg_doit+0x22a/0x330 [ 743.559812][T31143] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 743.559831][T31143] ? bpf_lsm_capable+0x9/0x20 [ 743.559843][T31143] ? security_capable+0x7e/0x2c0 [ 743.559861][T31143] genl_rcv_msg+0x61c/0x7a0 [ 743.559876][T31143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 743.559887][T31143] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 743.559910][T31143] netlink_rcv_skb+0x232/0x4b0 [ 743.559925][T31143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 743.559938][T31143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 743.559961][T31143] ? down_read+0x270/0x2e0 [ 743.559974][T31143] ? genl_rcv+0xd/0x40 [ 743.559986][T31143] genl_rcv+0x28/0x40 [ 743.559996][T31143] netlink_unicast+0x75c/0x8e0 [ 743.560015][T31143] netlink_sendmsg+0x813/0xb40 [ 743.560036][T31143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.560054][T31143] ? __se_sys_ioctl+0x47/0x170 [ 743.560069][T31143] ? do_syscall_64+0x15f/0xf80 [ 743.560090][T31143] ? aa_sock_msg_perm+0xf1/0x1b0 [ 743.560117][T31143] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 743.560149][T31143] ____sys_sendmsg+0x972/0x9f0 [ 743.560178][T31143] ? __might_fault+0xaf/0x130 [ 743.560211][T31143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 743.560235][T31143] ? import_iovec+0x73/0xa0 [ 743.560249][T31143] ___sys_sendmsg+0x2a5/0x360 [ 743.560265][T31143] ? __lock_acquire+0x6b5/0x2cf0 [ 743.560281][T31143] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.560302][T31143] ? tomoyo_path_number_perm+0x219/0x630 [ 743.560329][T31143] ? __fget_files+0x2a/0x420 [ 743.560342][T31143] ? __fget_files+0x3a0/0x420 [ 743.560364][T31143] __x64_sys_sendmsg+0x1bd/0x2a0 [ 743.560382][T31143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 743.560397][T31143] ? rcu_is_watching+0x15/0xb0 [ 743.560418][T31143] ? __pfx_kcov_ioctl+0x10/0x10 [ 743.560434][T31143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.560446][T31143] do_syscall_64+0x15f/0xf80 [ 743.560459][T31143] ? trace_irq_disable+0x3b/0x140 [ 743.560470][T31143] ? clear_bhb_loop+0x40/0x90 [ 743.560483][T31143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.560494][T31143] RIP: 0033:0x7fb86819c819 [ 743.560505][T31143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.560515][T31143] RSP: 002b:00007fb869013028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.560528][T31143] RAX: ffffffffffffffda RBX: 00007fb868416090 RCX: 00007fb86819c819 [ 743.560537][T31143] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 743.560544][T31143] RBP: 00007fb868232c91 R08: 0000000000000000 R09: 0000000000000000 [ 743.560551][T31143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.560558][T31143] R13: 00007fb868416128 R14: 00007fb868416090 R15: 00007fff3b29b6f8 [ 743.560579][T31143] [ 744.431258][T31168] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 744.475549][T31168] netlink: 'syz.2.6174': attribute type 3 has an invalid length. [ 744.486015][T31174] netlink: 'syz.0.6175': attribute type 1 has an invalid length. [ 744.500413][T31173] netlink: 'syz.0.6175': attribute type 1 has an invalid length. [ 744.635317][ T6070] hid (null): global environment stack underflow [ 744.691988][T31175] bond1: entered promiscuous mode [ 744.717173][T31175] bond1: entered allmulticast mode [ 744.744656][T31175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 744.795908][ T6070] hid-generic 0005:0006:0004.0001: global environment stack underflow [ 744.828906][ T6070] hid-generic 0005:0006:0004.0001: item 0 2 1 11 parsing failed [ 744.842794][ T6070] hid-generic 0005:0006:0004.0001: probe with driver hid-generic failed with error -22 [ 744.936400][T31204] netlink: 'syz.1.6182': attribute type 4 has an invalid length. [ 745.359499][T31223] ip6gretap0: entered promiscuous mode [ 745.491396][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.502393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.530414][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.542910][ T6070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.552024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.565654][T31273] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 746.577808][T16936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.589330][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.607897][ T6070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.671028][T31270] syzkaller0: entered promiscuous mode [ 746.680159][T31270] syzkaller0: entered allmulticast mode [ 746.960895][T31285] [ 746.963268][T31285] ====================================================== [ 746.970291][T31285] WARNING: possible circular locking dependency detected [ 746.977335][T31285] syzkaller #0 Not tainted [ 746.981754][T31285] ------------------------------------------------------ [ 746.988772][T31285] syz.2.6205/31285 is trying to acquire lock: [ 746.994835][T31285] ffff888026dbbd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 747.004265][T31285] [ 747.004265][T31285] but task is already holding lock: [ 747.011644][T31285] ffff888026dbb840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 747.022033][T31285] [ 747.022033][T31285] which lock already depends on the new lock. [ 747.022033][T31285] [ 747.032801][T31285] [ 747.032801][T31285] the existing dependency chain (in reverse order) is: [ 747.041822][T31285] [ 747.041822][T31285] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 747.050540][T31285] blk_alloc_queue+0x546/0x680 [ 747.055855][T31285] __blk_mq_alloc_disk+0x197/0x390 [ 747.061511][T31285] nbd_dev_add+0x499/0xb50 [ 747.066481][T31285] nbd_init+0x168/0x1f0 [ 747.071181][T31285] do_one_initcall+0x250/0x870 [ 747.076487][T31285] do_initcall_level+0x104/0x190 [ 747.082012][T31285] do_initcalls+0x59/0xa0 [ 747.086879][T31285] kernel_init_freeable+0x2a6/0x3e0 [ 747.092618][T31285] kernel_init+0x1d/0x1d0 [ 747.097534][T31285] ret_from_fork+0x514/0xb70 [ 747.102666][T31285] ret_from_fork_asm+0x1a/0x30 [ 747.108065][T31285] [ 747.108065][T31285] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 747.115313][T31285] fs_reclaim_acquire+0x71/0x100 [ 747.120790][T31285] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 747.127405][T31285] __alloc_skb+0x1d0/0x7d0 [ 747.132368][T31285] __ip6_append_data+0x2d6d/0x3f70 [ 747.138029][T31285] ip6_append_data+0x10f/0x280 [ 747.143340][T31285] rawv6_sendmsg+0x12d3/0x18e0 [ 747.148649][T31285] ____sys_sendmsg+0x80a/0x9f0 [ 747.153971][T31285] ___sys_sendmsg+0x2a5/0x360 [ 747.159195][T31285] __x64_sys_sendmsg+0x1bd/0x2a0 [ 747.164697][T31285] do_syscall_64+0x15f/0xf80 [ 747.169821][T31285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.176250][T31285] [ 747.176250][T31285] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 747.184008][T31285] lock_sock_nested+0x41/0x100 [ 747.189320][T31285] inet_shutdown+0x6a/0x390 [ 747.194715][T31285] nbd_mark_nsock_dead+0x2e9/0x560 [ 747.200360][T31285] recv_work+0x1c2e/0x1d40 [ 747.205302][T31285] process_scheduled_works+0xb5d/0x1860 [ 747.211369][T31285] worker_thread+0xa53/0xfc0 [ 747.216473][T31285] kthread+0x388/0x470 [ 747.221049][T31285] ret_from_fork+0x514/0xb70 [ 747.226158][T31285] ret_from_fork_asm+0x1a/0x30 [ 747.231434][T31285] [ 747.231434][T31285] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 747.239071][T31285] __mutex_lock+0x1a3/0x1550 [ 747.244173][T31285] nbd_queue_rq+0x37b/0x1100 [ 747.249360][T31285] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 747.255409][T31285] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 747.262243][T31285] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 747.268743][T31285] blk_mq_run_hw_queue+0x348/0x4f0 [ 747.274392][T31285] blk_mq_dispatch_list+0xd16/0xe10 [ 747.280138][T31285] blk_mq_flush_plug_list+0x48d/0x570 [ 747.286038][T31285] __blk_flush_plug+0x3ed/0x4d0 [ 747.291400][T31285] __submit_bio+0x28d/0x580 [ 747.296417][T31285] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 747.302589][T31285] block_read_full_folio+0x599/0x830 [ 747.308409][T31285] filemap_read_folio+0x137/0x3b0 [ 747.313983][T31285] do_read_cache_folio+0x358/0x590 [ 747.319628][T31285] read_part_sector+0xb6/0x2b0 [ 747.324900][T31285] adfspart_check_ICS+0xb1/0x960 [ 747.330356][T31285] bdev_disk_changed+0x817/0x1770 [ 747.335906][T31285] blkdev_get_whole+0x380/0x510 [ 747.341275][T31285] bdev_open+0x31e/0xd30 [ 747.346044][T31285] blkdev_open+0x470/0x610 [ 747.350981][T31285] do_dentry_open+0x785/0x14e0 [ 747.356279][T31285] vfs_open+0x3b/0x340 [ 747.360866][T31285] path_openat+0x2e08/0x3860 [ 747.365973][T31285] do_file_open+0x23e/0x4a0 [ 747.370987][T31285] do_sys_openat2+0x113/0x200 [ 747.376175][T31285] __x64_sys_openat+0x138/0x170 [ 747.381542][T31285] do_syscall_64+0x15f/0xf80 [ 747.386646][T31285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.393092][T31285] [ 747.393092][T31285] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 747.400465][T31285] __mutex_lock+0x1a3/0x1550 [ 747.405597][T31285] nbd_queue_rq+0xc6/0x1100 [ 747.410607][T31285] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 747.416660][T31285] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 747.423513][T31285] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 747.430006][T31285] blk_mq_run_hw_queue+0x348/0x4f0 [ 747.435627][T31285] blk_mq_dispatch_list+0xd16/0xe10 [ 747.441330][T31285] blk_mq_flush_plug_list+0x48d/0x570 [ 747.447207][T31285] __blk_flush_plug+0x3ed/0x4d0 [ 747.452568][T31285] __submit_bio+0x28d/0x580 [ 747.457589][T31285] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 747.463741][T31285] block_read_full_folio+0x599/0x830 [ 747.469550][T31285] filemap_read_folio+0x137/0x3b0 [ 747.475181][T31285] do_read_cache_folio+0x358/0x590 [ 747.480802][T31285] read_part_sector+0xb6/0x2b0 [ 747.486070][T31285] adfspart_check_ICS+0xb1/0x960 [ 747.491514][T31285] bdev_disk_changed+0x817/0x1770 [ 747.497043][T31285] blkdev_get_whole+0x380/0x510 [ 747.502398][T31285] bdev_open+0x31e/0xd30 [ 747.507159][T31285] blkdev_open+0x470/0x610 [ 747.512081][T31285] do_dentry_open+0x785/0x14e0 [ 747.517353][T31285] vfs_open+0x3b/0x340 [ 747.521926][T31285] path_openat+0x2e08/0x3860 [ 747.527118][T31285] do_file_open+0x23e/0x4a0 [ 747.532132][T31285] do_sys_openat2+0x113/0x200 [ 747.537324][T31285] __x64_sys_openat+0x138/0x170 [ 747.542685][T31285] do_syscall_64+0x15f/0xf80 [ 747.547782][T31285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.554179][T31285] [ 747.554179][T31285] -> #1 (set->srcu){.+.+}-{0:0}: [ 747.561290][T31285] __synchronize_srcu+0xca/0x300 [ 747.566734][T31285] elevator_switch+0x1e8/0x7a0 [ 747.572002][T31285] elevator_change+0x2cc/0x450 [ 747.577272][T31285] elevator_set_default+0x36c/0x430 [ 747.582974][T31285] blk_register_queue+0x3e9/0x4e0 [ 747.588504][T31285] __add_disk+0x677/0xd50 [ 747.593348][T31285] add_disk_fwnode+0xfb/0x480 [ 747.598531][T31285] nbd_dev_add+0x72c/0xb50 [ 747.603728][T31285] nbd_init+0x168/0x1f0 [ 747.608393][T31285] do_one_initcall+0x250/0x870 [ 747.613668][T31285] do_initcall_level+0x104/0x190 [ 747.619127][T31285] do_initcalls+0x59/0xa0 [ 747.623976][T31285] kernel_init_freeable+0x2a6/0x3e0 [ 747.629685][T31285] kernel_init+0x1d/0x1d0 [ 747.634527][T31285] ret_from_fork+0x514/0xb70 [ 747.639629][T31285] ret_from_fork_asm+0x1a/0x30 [ 747.644908][T31285] [ 747.644908][T31285] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 747.652718][T31285] __lock_acquire+0x15a5/0x2cf0 [ 747.658078][T31285] lock_acquire+0x106/0x350 [ 747.663092][T31285] __mutex_lock+0x1a3/0x1550 [ 747.668192][T31285] elevator_change+0x1b3/0x450 [ 747.673492][T31285] elevator_set_none+0xb5/0x140 [ 747.678846][T31285] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 747.685163][T31285] nbd_start_device+0x17f/0xb10 [ 747.690522][T31285] nbd_genl_connect+0x165b/0x1cf0 [ 747.696050][T31285] genl_family_rcv_msg_doit+0x22a/0x330 [ 747.702102][T31285] genl_rcv_msg+0x61c/0x7a0 [ 747.707118][T31285] netlink_rcv_skb+0x232/0x4b0 [ 747.712389][T31285] genl_rcv+0x28/0x40 [ 747.716878][T31285] netlink_unicast+0x75c/0x8e0 [ 747.722152][T31285] netlink_sendmsg+0x813/0xb40 [ 747.727427][T31285] ____sys_sendmsg+0x972/0x9f0 [ 747.732702][T31285] ___sys_sendmsg+0x2a5/0x360 [ 747.737905][T31285] __x64_sys_sendmsg+0x1bd/0x2a0 [ 747.743359][T31285] do_syscall_64+0x15f/0xf80 [ 747.748456][T31285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.754855][T31285] [ 747.754855][T31285] other info that might help us debug this: [ 747.754855][T31285] [ 747.765061][T31285] Chain exists of: [ 747.765061][T31285] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 747.765061][T31285] [ 747.778871][T31285] Possible unsafe locking scenario: [ 747.778871][T31285] [ 747.786309][T31285] CPU0 CPU1 [ 747.791657][T31285] ---- ---- [ 747.797006][T31285] lock(&q->q_usage_counter(io)#50); [ 747.802368][T31285] lock(fs_reclaim); [ 747.808867][T31285] lock(&q->q_usage_counter(io)#50); [ 747.816763][T31285] lock(&q->elevator_lock); [ 747.821339][T31285] [ 747.821339][T31285] *** DEADLOCK *** [ 747.821339][T31285] [ 747.829461][T31285] 6 locks held by syz.2.6205/31285: [ 747.834638][T31285] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 747.842824][T31285] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 747.851786][T31285] #2: ffff888026dca9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 747.863192][T31285] #3: ffff888026dca8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 747.874165][T31285] #4: ffff888026dbb840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 747.884797][T31285] #5: ffff888026dbb878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 747.895669][T31285] [ 747.895669][T31285] stack backtrace: [ 747.901549][T31285] CPU: 1 UID: 0 PID: 31285 Comm: syz.2.6205 Not tainted syzkaller #0 PREEMPT(full) [ 747.901569][T31285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 747.901580][T31285] Call Trace: [ 747.901587][T31285] [ 747.901594][T31285] dump_stack_lvl+0xe8/0x150 [ 747.901619][T31285] print_circular_bug+0x2e1/0x300 [ 747.901645][T31285] check_noncircular+0x12e/0x150 [ 747.901670][T31285] __lock_acquire+0x15a5/0x2cf0 [ 747.901698][T31285] ? elevator_change+0x1b3/0x450 [ 747.901712][T31285] lock_acquire+0x106/0x350 [ 747.901730][T31285] ? elevator_change+0x1b3/0x450 [ 747.901749][T31285] __mutex_lock+0x1a3/0x1550 [ 747.901769][T31285] ? elevator_change+0x1b3/0x450 [ 747.901784][T31285] ? rcu_is_watching+0x15/0xb0 [ 747.901806][T31285] ? work_grab_pending+0x3d1/0x990 [ 747.901828][T31285] ? elevator_change+0x1b3/0x450 [ 747.901842][T31285] ? __pfx___mutex_lock+0x10/0x10 [ 747.901860][T31285] ? enable_work+0x17f/0x230 [ 747.901873][T31285] ? lockdep_hardirqs_on+0x7a/0x110 [ 747.901893][T31285] ? __cancel_work_sync+0xf7/0x110 [ 747.901907][T31285] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 747.901925][T31285] elevator_change+0x1b3/0x450 [ 747.901942][T31285] elevator_set_none+0xb5/0x140 [ 747.901957][T31285] ? __pfx_elevator_set_none+0x10/0x10 [ 747.901973][T31285] ? xa_load+0x1db/0x210 [ 747.901994][T31285] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 747.902018][T31285] ? kernfs_add_one+0x477/0x5c0 [ 747.902039][T31285] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 747.902061][T31285] ? sysfs_add_file_mode_ns+0x259/0x300 [ 747.902081][T31285] nbd_start_device+0x17f/0xb10 [ 747.902101][T31285] ? device_create_file+0xf4/0x1b0 [ 747.902118][T31285] nbd_genl_connect+0x165b/0x1cf0 [ 747.902134][T31285] ? __pfx___nla_validate_parse+0x10/0x10 [ 747.902158][T31285] ? __pfx_nbd_genl_connect+0x10/0x10 [ 747.902176][T31285] ? rcu_is_watching+0x15/0xb0 [ 747.902196][T31285] ? trace_kmalloc+0x2a/0xf0 [ 747.902219][T31285] ? __nla_parse+0x40/0x60 [ 747.902233][T31285] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 747.902252][T31285] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 747.902272][T31285] genl_family_rcv_msg_doit+0x22a/0x330 [ 747.902291][T31285] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 747.902312][T31285] ? __lock_acquire+0x6b5/0x2cf0 [ 747.902334][T31285] genl_rcv_msg+0x61c/0x7a0 [ 747.902352][T31285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.902367][T31285] ? __pfx_nbd_genl_connect+0x10/0x10 [ 747.902387][T31285] netlink_rcv_skb+0x232/0x4b0 [ 747.902407][T31285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.902423][T31285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 747.902449][T31285] ? down_read+0x270/0x2e0 [ 747.902467][T31285] ? genl_rcv+0xd/0x40 [ 747.902481][T31285] genl_rcv+0x28/0x40 [ 747.902495][T31285] netlink_unicast+0x75c/0x8e0 [ 747.902517][T31285] netlink_sendmsg+0x813/0xb40 [ 747.902541][T31285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.902563][T31285] ? aa_sock_msg_perm+0xf1/0x1b0 [ 747.902583][T31285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 747.902607][T31285] ____sys_sendmsg+0x972/0x9f0 [ 747.902629][T31285] ? __might_fault+0xaf/0x130 [ 747.902650][T31285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.902675][T31285] ? import_iovec+0x73/0xa0 [ 747.902691][T31285] ___sys_sendmsg+0x2a5/0x360 [ 747.902712][T31285] ? __lock_acquire+0x6b5/0x2cf0 [ 747.902732][T31285] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.902756][T31285] ? futex_wait+0x2a2/0x390 [ 747.902780][T31285] ? __fget_files+0x2a/0x420 [ 747.902798][T31285] ? __fget_files+0x3a0/0x420 [ 747.902819][T31285] __x64_sys_sendmsg+0x1bd/0x2a0 [ 747.902842][T31285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 747.902867][T31285] ? rcu_is_watching+0x15/0xb0 [ 747.902891][T31285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.902908][T31285] do_syscall_64+0x15f/0xf80 [ 747.902926][T31285] ? clear_bhb_loop+0x40/0x90 [ 747.902942][T31285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.902957][T31285] RIP: 0033:0x7f664fd9c819 [ 747.902972][T31285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.902986][T31285] RSP: 002b:00007f6650d3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.903003][T31285] RAX: ffffffffffffffda RBX: 00007f6650015fa0 RCX: 00007f664fd9c819 [ 747.903015][T31285] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 747.903025][T31285] RBP: 00007f664fe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 747.903035][T31285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.903044][T31285] R13: 00007f6650016038 R14: 00007f6650015fa0 R15: 00007ffe0c861448 [ 747.903062][T31285] [ 747.906771][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 748.360001][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.472311][ T5843] block nbd1: Receive control failed (result -32) [ 748.472334][ T50] block nbd1: Receive control failed (result -32) [ 749.658427][ T980] net_ratelimit: 5 callbacks suppressed [ 749.658448][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.450007][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.458641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.490038][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.498625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.288578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.297438][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.305807][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.314055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.322986][T30635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.818267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5470 ms [ 753.826316][ C1] lec:lec_tx_timeout: lec0 [ 755.408823][T30635] net_ratelimit: 13 callbacks suppressed [ 755.408843][T30635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.649823][ T7526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.658344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.689644][ T6070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.698078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog