last executing test programs: 6.760950982s ago: executing program 2 (id=2714): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x42, 0x0, 0xfffffffffffffe72, 0x0, 0x54}, 0x2000c880) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="d02bf467b72d0b08daea3ed912a70937884fe39797532fb98fa3645c9fd3ec959beac12b6f50e82c8cf4a77342b776fbb79b60bbeb600f58a371c6972a6e2d90b187d5e0b04984a539459a7870552eb9a1271f2071e069641b37e8bfb0732ce9b4d22ed1740a108e6fdb747706ba92ef2a20592e1e2dfe08fae035fb9c8dda88607a16ef55e84c1a22cec53fc56c876edfa0e0eb4f0ec70ce9c0026936607ab932dfb3e341bf283db8b4a65b0adbc4bf3a99c51c9b558c3e45c44ed0722cb6dbfaf6e1dd6913d4f5870e52b93af152b11b3243fc5d4472cb160a14b4d3c895135e4ca7dd49cc8c8e692c4019ac4cf9e8a5a1afe588", @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r8, &(0x7f00000000c0)}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close(0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x88}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r11, @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffff5, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) 6.264462026s ago: executing program 3 (id=2719): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x6a90, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x6a5c, 0x2, [@TCA_MATCHALL_ACT={0x4554, 0x2, [@m_ife={0x64, 0xa, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x9c, 0x10000000, 0x7, 0x800}, 0x1}}]}, {0x7, 0x6, "cf7cd1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x10d0, 0x1a, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, '}*\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xa4d, 0x10000, 0x1}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0x4, 0x7fff, 0x79}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x6, 0xffffffffffffffff, 0x80000000, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffd, 0x3, 0xffffffffffffffff, 0x9, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0xb, 0x7, 0x0, 0x9, 0x100}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0xac, 0xb, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffd97b, 0x1, 0x20000000, 0x0, 0x2}, 0x230}}]}, {0x60, 0x6, "4e071beb7cb5b48b2617dbf5cfdb7483c3c119385e5fc75a3bd875a532dfbff5e4dfd45972b50043129193c13ff052b1badd6fcb010a443a5858b79633c6da6f44b2b91d63c7b6ec486d0739dace63b849462219f348607c35731549"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x124, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0xee, 0x6, "eb22f3b874e3e254248d122a62bff7dfa3e37bfb244c3df23173a3bebfd7e1095e4538117ca77b987df7049ab4cae9778056afda211b06c26d24ce0087e31fcb4be35fc1fc8005fa4d347a3ab801eec07a733b19f8234985c33d08832e72e17b1b6b477f65c5a0dd4111a86b39eac1181ebf2b07bf025662196a7fcfd66bed55dba9c19f2443006ea85ad7d8012251861dff7733f9dddc46ab0ff8d8fdef3a6de69bbb1d7c8e5b820ca64b84401ac9021e260b4ab7af5bceb1068efaba592327190c205911ca5817eaace61c4b88f82f463651dcbfec30e56c17dab5fdc5c578b6aaa87a29e0b7543873"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x2bc, 0x11, 0x0, 0x0, {{0x7}, {0x278, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0xa5, 0x6, {0x719, 'filter\x00', 0x6, 0x9, "03cc7c8bda2752f59fb1dc6251c643734bc4eca960583f1b86c49be2220d2c2aacf152bd3c59f32baadec12cd5b3773eb7ca910bac1585bd703186220eae3df5a0c0d051bf0e3944bd18a14585daaa87d3194c77d0710f38dce4ee97d718524e373902c531688f533022bd738e24e07e129e0de11102bd77835a51"}}, @TCA_IPT_TARG={0x4c, 0x6, {0x65b8, 'filter\x00', 0x9, 0x8, "f4c12e2b0f062b35bc9345a29a6c5bed4790860469095c635899acb95e7dad78957f"}}, @TCA_IPT_TARG={0xcf, 0x6, {0x9, 'filter\x00', 0x5, 0x2, "2b0b75d02876ed46f4583f4efa7e8fe5f4af06f6766734e376a96adfdd71582fb1e6d75fd1387a69a194ea705b431dd8921ce3b8146cdda66b0c70773bf28fcf2a8da21e83e1ce1044ea06b05276c64945ae1495beb77653569dad84e389033cba17ab11d8d55481d0e86cc933c69a9f2c3d27863cc453ab7bd96b957a822c6b3497924d8ce57bd20cf627a4ef1c0bf29905ba99a63fd20e24c28c1b3a374ae54b51d50837"}}, @TCA_IPT_TARG={0x60, 0x6, {0x0, 'mangle\x00', 0x6, 0x5, "89e94c88cff930c2e87e425da835b44303356720ffeb2a9dc42db4271c9aab114e8b084446484c2a8639241298d9f1b1934558dc82fe"}}]}, {0x1f, 0x6, "b85faa01ee925e815f808d496129e9c80ace7bddb6a65bce23b0c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x2e5c, 0x3, 0x0, 0x0, {{0xb}, {0x2d8c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc968, 0x3, 0x7, 0x3, 0x7, 0x2, 0x1, 0x3, 0xfffff2ba, 0x9, 0xb8, 0x7, 0x0, 0xadf, 0x8001, 0x77b0, 0xd, 0x7, 0xfffffff7, 0x7, 0x0, 0x4, 0x6, 0x400, 0xffff, 0x2f1, 0xfffffff9, 0xc9, 0xb40f, 0x500, 0x5, 0xf, 0xffffff0c, 0x3, 0x3, 0x7, 0x0, 0x23, 0x5, 0x7fffffff, 0x2, 0x101, 0x4, 0x4aa, 0x6, 0xcb, 0x100, 0x5, 0x5, 0x5, 0x3, 0x5, 0x337, 0x2, 0x1, 0x6, 0x9, 0x1, 0x17c0, 0x9, 0x0, 0x4, 0x0, 0x3, 0xfffffe01, 0x2, 0x81, 0xb, 0x1, 0x80000001, 0x1ff, 0x400, 0xcd89, 0x3, 0x80000001, 0x7, 0x80, 0x0, 0x9, 0xb85, 0x1, 0x1, 0x7ff, 0x1, 0x4, 0x7, 0xfffffffc, 0x6, 0x1ff, 0xd91, 0x4, 0x3, 0x8, 0x6, 0x6b1, 0x7, 0x0, 0xb78, 0x63b9766d, 0x7fffffff, 0x886, 0x7, 0xffffffff, 0x2, 0x7, 0x3, 0x2, 0x1c5, 0x5, 0x1, 0xb, 0xfea5, 0x80000000, 0x101, 0x8, 0x0, 0xd9cf, 0x3, 0x88, 0x4, 0xe605, 0x9, 0xf, 0x5, 0x8, 0x5, 0xadc, 0x4796, 0x0, 0x6, 0xfffffffd, 0x4, 0xffff8000, 0x4, 0x8, 0x2, 0x0, 0x4, 0xb68, 0x7, 0x5, 0x3, 0xfffff823, 0x9, 0xfffffff9, 0x3, 0x7, 0x7, 0x3, 0x7, 0x4, 0x4, 0x5, 0x10001, 0x5, 0x4, 0x9, 0x9, 0x2, 0x2, 0x5, 0x9, 0x6, 0x5, 0x1, 0x8000, 0x4, 0x47f65c1d, 0x3871, 0x1, 0x2, 0x9, 0xfa9, 0xc, 0x8, 0xa4f, 0xc8c, 0x7, 0x390, 0x8, 0x7f, 0x797, 0x7, 0x16c9, 0x7, 0x8e5, 0x7, 0x8, 0x8000, 0x3, 0x7, 0x2, 0x10, 0x4, 0x51ef, 0x8, 0x77ee2347, 0x5e, 0x2b2, 0x80000000, 0x9, 0x8, 0x6, 0x4dc7, 0x7, 0x6, 0x0, 0x5, 0x5, 0xffff026e, 0x3, 0x8, 0x9, 0x3, 0xe, 0xac, 0x1000, 0x5, 0x0, 0x4, 0x435c, 0x2, 0x4, 0x4f9a7c7, 0x86, 0x80000000, 0x10000, 0x8000, 0x789d, 0x9, 0x2, 0x3, 0x401, 0x6975, 0xa3f7, 0x9, 0x4feb, 0x3, 0xa, 0x200, 0xff, 0xfffffff8, 0x6, 0x9, 0x6, 0x1, 0x1, 0xfb9, 0x3, 0x4, 0x2, 0x7ff, 0x10000, 0x0, 0x6, 0x7]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9c4}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xd49, 0x4, 0x2, 0x4, 0xfffffe00, 0x0, 0xfffffffd, 0x8, 0x10, 0x8001, 0x2, 0xffffffff, 0x9, 0x0, 0xaf0b, 0x20def8f5, 0x8001, 0x4, 0x46, 0x2, 0x6, 0x7, 0x1, 0xffc0, 0x6, 0x6, 0xa, 0xa53, 0xfffffff9, 0x0, 0x2b, 0x1ac, 0xfffffff9, 0x7, 0xba2c, 0x7fffffff, 0x9, 0x6d134d4d, 0x9cc9, 0x6, 0x3, 0x6, 0x3, 0x6aaa, 0x1, 0xc, 0x10001, 0x19bf, 0xd, 0x0, 0x1000, 0x4, 0xc, 0x1000, 0x2, 0x81, 0x80000, 0x1, 0x0, 0x5, 0x3, 0x7ff, 0x8, 0x100, 0xfffffff8, 0x8, 0xa000, 0x2, 0x0, 0xc462, 0x7, 0x628, 0x3, 0x1, 0x3, 0x7, 0x3, 0x3, 0x6, 0x9, 0x0, 0x1000, 0x1c, 0x220a, 0x4, 0xfffffffd, 0x2, 0x8000, 0x180, 0x1, 0x8000, 0xf, 0x9, 0x7f, 0x401, 0x4, 0x6, 0x4d, 0x1, 0x9, 0xfffffff8, 0xf95a, 0x0, 0x1, 0x7, 0xffff, 0x7ff, 0x2, 0x4, 0x4, 0x200, 0x1, 0x2, 0x2, 0x200, 0x100, 0x3, 0xc, 0x0, 0xae0, 0xc, 0x5, 0x80, 0x97, 0x10001, 0xd, 0x7, 0xfffffffd, 0xf80, 0x0, 0x1, 0x700, 0xfff, 0x1, 0xf, 0x45, 0x0, 0xfbe, 0x1, 0x9, 0x4, 0x10, 0x1, 0xd1, 0x5, 0x64ce, 0x3, 0xd, 0x1, 0xffff, 0x9db1, 0x0, 0x9, 0x6, 0x26e088ea, 0xffff, 0x30, 0x4, 0x7e, 0x200, 0x5c, 0x4, 0x5, 0x5, 0x1, 0x7, 0xff, 0x100, 0x27b3, 0x7, 0x1, 0xce, 0xc1, 0x4, 0x1ff, 0x7, 0x1, 0x7f, 0x2, 0x7fff, 0xffff0001, 0x4, 0x3, 0x80, 0x5, 0x6, 0x4, 0x0, 0x1000000, 0x81, 0xfffffffe, 0x81, 0x4, 0x200, 0xb, 0x7, 0x10000, 0xb7, 0xfffeffff, 0xfffffff8, 0xc, 0x1, 0x2, 0x10000, 0x4, 0x9, 0x7, 0x4, 0x3, 0x9, 0x5, 0x40, 0x9, 0x5, 0x4, 0x0, 0x594, 0x15b, 0x6, 0x2, 0xa2c9, 0x7, 0x2, 0x35f, 0x413f, 0x2, 0x4, 0x5, 0x23b08f31, 0x9, 0xf5, 0x9, 0x5, 0xfffffff0, 0x1ff, 0x8000, 0x10001, 0x7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0xffffff0b, 0x1, 0x8000, 0x8, 0x1, 0x4, 0x2128, 0x1000000, 0x7, 0x100, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xfff, 0xff, 0xb, {0x93, 0x2, 0x6, 0xfffe, 0x270, 0x5}, {0x5, 0x0, 0x16f, 0x9, 0x0, 0xff4}, 0x1, 0x10000, 0x200}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x36}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0xb69, 0x101, 0xdb, 0x4, 0x8, 0x0, 0xffffffff, 0x5, 0x1, 0x8, 0x0, 0x67, 0x8, 0x8, 0x0, 0x7, 0xfffffc01, 0x0, 0x3ff, 0x3, 0x3, 0x8, 0x9, 0x0, 0x2, 0xa2, 0x4, 0x100, 0x4, 0x7ff, 0x9, 0x5, 0x6, 0x0, 0x3b, 0x2d2f, 0x49c20d2f, 0x7ff, 0x1, 0xf, 0x36128324, 0xffffffff, 0xd, 0x6e1, 0x0, 0x1ff, 0xae, 0x8, 0xdac7, 0x800, 0x4, 0x7, 0xc, 0x0, 0xfffffff9, 0x401, 0x1, 0x3, 0x9, 0xf, 0x0, 0x7296, 0x2, 0xffff, 0x77, 0x9, 0x8, 0x0, 0xed, 0x5, 0x8, 0x3, 0x4, 0xffff, 0x1f86, 0xf, 0x6, 0xfffffffa, 0x101, 0x5, 0x6, 0xa, 0x8, 0x0, 0x8, 0xfffffff7, 0x400, 0x8001, 0x7a, 0xf27, 0xe23, 0x9, 0x2, 0xfffff001, 0x9, 0x7f, 0x3ff, 0x0, 0x6, 0x7, 0x6, 0x80000001, 0x9, 0x2, 0x1, 0x7a0000, 0x3, 0xdb, 0x1000, 0x1, 0x8, 0x1fe00000, 0x36, 0x24aa, 0x8, 0x40, 0x5, 0x4, 0xfffff45d, 0x10000, 0x9, 0x9, 0x5, 0xfffffff8, 0x10001, 0x9, 0x1, 0xed5f, 0x8, 0x2, 0x100, 0x145, 0x1, 0xd, 0x1, 0x4, 0x1cb8, 0x5d8, 0x3, 0x80000000, 0x3, 0xcf38, 0x1, 0x10001, 0x80, 0x7f, 0x80, 0x80000001, 0x100, 0x3, 0x7, 0x2, 0x7241, 0x1, 0xfffffff9, 0x1, 0x1, 0x3, 0x40, 0x10001, 0x80000001, 0x4, 0x3, 0x5, 0xfffffffa, 0x1, 0x5, 0x6, 0x3, 0xad, 0x3, 0x2, 0x2a49, 0xe00, 0x3ff, 0x81, 0x5, 0xcc5, 0x9, 0x0, 0x0, 0x0, 0x86f, 0x3, 0x7f, 0x8, 0xfffffffa, 0x7, 0x37a6, 0x3, 0xfffffff8, 0x3, 0x7, 0x9, 0x0, 0x10000, 0xf, 0x5, 0xb877, 0x2, 0x6, 0x5, 0x6, 0xfff, 0xc, 0x662, 0xe0a3, 0x6, 0x4, 0x6, 0x7e, 0x8, 0x8c6, 0xf046, 0x8, 0x8b3, 0x9, 0x7, 0x6, 0x4, 0x9e5e, 0x6, 0xf, 0x6, 0x9, 0x5c31, 0x10001, 0x0, 0x162, 0x0, 0x7f, 0x100, 0x4, 0x7, 0x97, 0x6, 0x7, 0xffff, 0x8001, 0x376, 0x7fffffff, 0x3, 0x2, 0xfffffffe, 0x398000, 0x180000, 0x1, 0x4, 0x2, 0x7, 0x1, 0x45bf, 0x10000, 0xc89]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x54}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x3, 0xffffff80, 0x1000, 0x3, 0x100, 0xa, 0x1ff, 0xed7, 0x4, 0x2fe5, 0x1, 0x6, 0x1, 0x6d769a9e, 0x80000000, 0x40, 0x7, 0x1, 0x7fff, 0x3, 0x2, 0xd676, 0x4, 0x2, 0x7, 0x9, 0xffffffff, 0x7, 0xe, 0x1, 0x2, 0x2, 0x101, 0x0, 0xfffffffb, 0x3, 0xffffff7a, 0x0, 0x5, 0x91, 0x91, 0x8, 0x300000, 0x3, 0x494, 0x38d0, 0x5, 0x1ff, 0x8, 0x5, 0x9, 0x7f9, 0x7, 0x9, 0x3ff, 0x6, 0x1, 0x7, 0x8187, 0x0, 0x4888517d, 0x0, 0x3, 0x2, 0x4, 0x6, 0x7fff, 0x7, 0x6, 0x8000, 0x8, 0x4, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1, 0x2abddd7e, 0x1, 0x7, 0x9, 0x4, 0xff, 0xbe, 0x71d, 0x8000, 0x2, 0x0, 0x3, 0x3, 0x3, 0xffffffff, 0x0, 0x9, 0x80000001, 0x4, 0x80, 0x1, 0xfffffff8, 0x8, 0x1, 0x0, 0x4f, 0x0, 0xfffffffb, 0x8001, 0x1b, 0x1, 0x6, 0xfffffff8, 0x3, 0x5, 0xffffffff, 0x4, 0x1, 0x7, 0x6, 0x8, 0x3, 0x0, 0x101, 0x2, 0x5, 0xb9, 0x0, 0xfdb, 0x3, 0x6, 0x7, 0x1, 0x9, 0x800, 0xfff, 0x9, 0x9, 0x2, 0x9, 0xff, 0x7, 0x2, 0x1000, 0x6, 0x4, 0x7fff, 0x6, 0x4, 0x1, 0x5, 0x3, 0xfffffff2, 0x3, 0x4, 0x5, 0x6eff, 0x0, 0x22, 0x0, 0x5, 0x5, 0x100, 0x3ff, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x7, 0x3, 0x0, 0x3, 0x202, 0x7, 0x9, 0x6, 0x5a6c, 0x8, 0x2c25, 0x5, 0x2089, 0x3, 0x1, 0x7, 0x8, 0x4, 0x1, 0x7ff, 0x5301, 0x7, 0x5, 0x862e, 0x3d, 0xfffffffe, 0x9, 0xed9, 0x8, 0x7, 0x4, 0x5, 0x1, 0x1, 0x4, 0x1000, 0x9, 0x7, 0x40, 0x2, 0x3ff, 0x10000, 0x228f, 0x0, 0x5, 0x9, 0xc99, 0x200, 0x5d68, 0xffffffff, 0x0, 0x4, 0x10, 0x0, 0x3, 0x3, 0x6, 0x2, 0x1, 0x8001, 0x401, 0x9, 0x51c, 0x0, 0x9, 0xfffffffa, 0xbc, 0x5, 0xf53f, 0x5, 0xca0e, 0x514, 0x10000, 0x6, 0x6, 0x0, 0x8, 0x690, 0x6, 0x3, 0x5, 0x9, 0x7ff, 0xed79, 0x4f3a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x59f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0xb39f, 0xc85e, 0x4, {0x5, 0x0, 0x4, 0x7f, 0xfc, 0xa8000000}, {0x80, 0x0, 0x100, 0xf5, 0x9, 0x9}, 0x80000000, 0x0, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0xadee, 0x9, 0x10, 0x11e1, 0x6, 0x0, 0x4, 0x7ff, 0x4, 0x3, 0x5, 0x0, 0x0, 0xc3, 0xfdd0, 0x7, 0x7, 0x4, 0x3, 0xa, 0x1, 0x29f4, 0x2d, 0x10000, 0xfffffe01, 0x9, 0x3, 0x8, 0x6, 0x4, 0xe, 0x1, 0x9, 0xf460, 0x401, 0xe, 0x1000, 0xfffffbff, 0x4, 0xfffffff9, 0xfffffffe, 0x2, 0x92b, 0x7, 0x800, 0x1ff, 0x10001, 0x6be, 0x9b2d, 0x5, 0x101, 0x3, 0x4, 0xffffffff, 0xc, 0x10, 0x8, 0x8, 0x0, 0x1, 0x95a2, 0x6, 0x9, 0xffffffb2, 0x9, 0x1c000, 0x7, 0xa, 0xff, 0x7, 0xe8, 0x7, 0xfffffffe, 0x9, 0x9, 0x9, 0x9, 0x2, 0xb, 0xeb83, 0x8, 0xfffffffd, 0x0, 0x80000000, 0x864, 0x80000001, 0xd, 0xffff5533, 0x1ff, 0xcf, 0x5, 0xfea, 0xc, 0x3, 0x6, 0x800, 0x3, 0x401, 0x9, 0x1, 0x6, 0x1, 0x0, 0x101, 0x10, 0x2, 0x8001, 0x8, 0x794, 0x6, 0xffff, 0x7, 0xfffffff7, 0x1000, 0x5, 0x7, 0x8, 0xe, 0xfffffff9, 0x0, 0x7, 0x5, 0x8000, 0x0, 0x199, 0x3, 0x4e5, 0x3, 0x3, 0x4, 0x7fffffff, 0x6, 0xdd94, 0xffffffff, 0xfff, 0x19, 0x6, 0xcc0e0000, 0x8, 0x9, 0x9, 0x24, 0x0, 0xb8, 0x4, 0x81, 0x28, 0xec8, 0xff, 0x6, 0x0, 0x28, 0x9, 0x0, 0x55fb, 0x5, 0x8001, 0x9, 0x3, 0x3, 0x5, 0x5, 0x0, 0x3ff, 0x1a, 0x7fffffff, 0xf085, 0x8, 0xc684, 0x1400000, 0x1, 0x3, 0x2, 0x0, 0x8001, 0x6, 0x4, 0x100, 0xe0, 0x6, 0x2, 0xa60, 0x7, 0xc, 0x3, 0x80, 0x8, 0x8, 0x7f, 0x2, 0x3, 0x9, 0x7fe, 0x8, 0xa9c0, 0x7, 0xb6, 0x5, 0x2, 0x8001, 0x1000, 0xb7, 0x9, 0x8, 0x9e, 0x2e92, 0x1, 0xd8, 0x6, 0x8, 0x628, 0x1ff, 0x1, 0x1ff, 0x2, 0x0, 0x7fffffff, 0x6, 0x1, 0x8, 0x2, 0x9, 0x40, 0x5, 0x7, 0x200, 0xb0, 0xb, 0x1, 0x0, 0xfffffff7, 0x7, 0x10001, 0x7ff, 0xd0e5, 0x1, 0x6, 0x883, 0x6, 0x3, 0xc, 0x6, 0x8, 0x8, 0x13, 0x2, 0x4, 0x0, 0x8, 0x81, 0xd1, 0x5, 0x1dd, 0x2a29]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7, 0x81, 0x7d5, 0x3808e28b, 0x8, 0x3955, 0x5, 0x40, 0x4fc, 0xb, 0xc37b, 0x5, 0x1, 0x40, 0x7, 0xd4a, 0x4, 0xff, 0x8, 0x8, 0x6, 0x8001, 0x7, 0x97, 0x8001, 0x12000000, 0x2, 0x9d7, 0xfba6, 0xf, 0x1, 0x1, 0x214c, 0x2, 0x7fffffff, 0x7, 0x9f5, 0x6, 0x0, 0x5, 0xfffffffc, 0x7fff, 0x4, 0x401, 0x0, 0x9, 0x400, 0x1, 0x9, 0x10000, 0x4, 0x3, 0x2, 0x6, 0x9, 0x8, 0x6, 0x3, 0x0, 0x2, 0x8, 0x7, 0x320000, 0x1, 0x7fffffff, 0x7f, 0x5, 0x40d, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0xae8e, 0xa8ed, 0x1a, 0x2, 0x2, 0xd1b, 0xb, 0x3, 0x3, 0x2, 0x7fff, 0x5741, 0x8eb9, 0x1, 0xd7b, 0x6, 0xf12f, 0x4, 0x2, 0xfffffffb, 0xac, 0x4, 0xffffffff, 0x6da8c18, 0x7, 0xb7a, 0xfff, 0x5, 0x9, 0x3b2, 0x10000, 0x2, 0x10, 0x4, 0xd128, 0xa, 0xffff, 0x5, 0x7, 0x6, 0x80, 0x6, 0x9, 0x9b, 0x9, 0x5, 0xfffffffc, 0x9, 0x6, 0x7, 0x1, 0x10000, 0x8, 0x3, 0x4, 0x4f, 0xeaec, 0xc, 0x80000000, 0x0, 0xd863, 0x2, 0x3ff, 0x5, 0x0, 0x9, 0x3, 0xfffffff8, 0x81, 0x30000000, 0x101, 0xd20f, 0x3, 0x800000, 0xa, 0x401, 0x6, 0x8, 0xfffffffb, 0x7, 0x3, 0x5, 0x8, 0x7, 0x9, 0xcbd4, 0x0, 0x4, 0xb, 0x0, 0x9, 0x7f, 0x3, 0x9, 0x1, 0x8, 0x7ff, 0x2, 0xca45, 0x8d8, 0xf7c5, 0x6, 0x4b9, 0x81, 0x7, 0x5, 0x5, 0x7fff, 0xf, 0x10000, 0x9, 0x4, 0x0, 0xfffffffe, 0x3, 0x1, 0x6211, 0xfff, 0x2, 0x1, 0x2, 0x3735, 0x7, 0x2, 0x200, 0x8, 0x2, 0x40, 0x3, 0xa, 0x7ff, 0xd, 0x5, 0x6, 0x80, 0x1, 0x0, 0xdee1, 0x3, 0xd, 0x3, 0x8, 0x400, 0x7b, 0xd90, 0x5, 0x6, 0x3, 0x3, 0x101, 0x0, 0x5ab65658, 0x80000001, 0x8, 0x9, 0x3, 0x6, 0x4, 0x4, 0x10, 0x0, 0x4, 0xffff, 0x6, 0x1, 0x1e5f, 0x1000, 0x1, 0x7b63, 0x10001, 0x80d, 0x7, 0x10000, 0x12000, 0x401, 0x7, 0x100, 0x5, 0x1, 0x2, 0xa5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x7, 0x43b4f17a, 0x6402, 0xfffffffc, 0xe, 0xffffff0a, 0x7, 0x100, 0x0, 0xfff, 0x1, 0x7fff, 0x9, 0x2, 0x6c, 0x3, 0x4, 0x9, 0xd, 0x8001, 0xa4c1, 0x988, 0x1, 0x9, 0xb, 0xfffffffb, 0x1, 0x9, 0x1, 0x4, 0x40000, 0xffff0001, 0xdba, 0x8, 0xef6, 0x8, 0x2, 0x7, 0x8, 0x98ec, 0x1ff, 0x7, 0xfb, 0x9, 0x2, 0xc, 0xf, 0x1, 0x4, 0x3, 0x0, 0x0, 0x3, 0x401, 0x5, 0x9, 0x0, 0x5, 0x6, 0xfffff800, 0x0, 0x6, 0x0, 0x8, 0x7, 0x86f3, 0x5, 0x7, 0x5, 0xade8, 0x0, 0x7, 0xec0e, 0xffffffff, 0x0, 0x6, 0x4, 0x6, 0x4, 0x80000000, 0x7, 0x530, 0xe1, 0x2, 0x1, 0x40, 0x8, 0x6, 0xffff, 0x6979, 0x5, 0x7, 0xb16, 0x70f1, 0x1841, 0x800, 0x6, 0x2, 0x100, 0xfffffffc, 0xf, 0x6677fbae, 0x10000, 0x2, 0x7, 0x9, 0x1ff, 0x527, 0x7f, 0x7, 0xef5, 0x9, 0x7, 0x6a0537f5, 0x3533, 0x7, 0x2, 0x7, 0x401, 0xfffffff7, 0x0, 0xce16, 0x314, 0x91e, 0x0, 0x3, 0x7, 0x10000, 0x1, 0x1ff, 0x1ff, 0x9, 0x0, 0x80, 0x1b, 0x99, 0x3, 0x29ee9c30, 0x2, 0x4, 0x4, 0x12, 0x2, 0x80, 0x0, 0x7, 0x5, 0x1, 0xfffffbff, 0x6, 0x7fffffff, 0x8, 0x8, 0x9, 0x5, 0x3, 0x4, 0x7, 0x6, 0x8, 0x6, 0x3, 0x6, 0x8, 0x5, 0x9, 0x2, 0x5, 0x2, 0x7, 0x1ff, 0xfffffff7, 0x6, 0x3, 0x10001, 0x800, 0x1, 0x0, 0x2, 0x2, 0x6, 0xfff, 0x7f, 0xffffffff, 0x7, 0xc, 0x6, 0x4, 0x1, 0x2, 0xf38, 0x8, 0x8, 0x10000, 0xbc80, 0xffffffff, 0x3, 0xedb8, 0x6d, 0x8, 0x78b7, 0xfffffffe, 0x2, 0x2800, 0x4, 0x58, 0x2, 0xffffffff, 0x0, 0x7, 0x5, 0x8, 0x1, 0x1, 0x6, 0x9, 0x1, 0x3ff, 0x7f, 0x5, 0x1, 0x2, 0x7a6, 0x8, 0x9, 0xae, 0xf, 0x2, 0x1, 0x0, 0xb, 0x2, 0x8, 0xa36, 0xce, 0x8, 0x4, 0x2, 0x7, 0x401, 0xb, 0x6, 0x6, 0x0, 0x101, 0x5, 0x4, 0x80000001, 0xc, 0x9, 0x6e2d, 0xc47, 0x5, 0x8001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7cfa}, @TCA_POLICE_RATE={0x404, 0x2, [0x99bf, 0x64b, 0x4, 0x8988, 0x3d, 0x6, 0x401, 0x8, 0x3, 0x0, 0x3, 0x7d8, 0xfffffffa, 0x5, 0x5, 0x2f5, 0x8, 0x6, 0x3, 0x80b, 0x40, 0x33, 0x7, 0x9, 0xd, 0x8, 0x2, 0x8, 0x2, 0x1, 0x400, 0x39fa, 0x401, 0x80000001, 0x3, 0x1, 0x6, 0x24000000, 0xe, 0x5d, 0x8000, 0x2, 0x1, 0x80, 0x6, 0x6, 0x8, 0x6, 0x6, 0x2, 0x0, 0x6, 0x6, 0xf, 0x5, 0x6, 0x5, 0x4, 0xf, 0x7ff, 0x7, 0x3, 0x81, 0x80000001, 0x2, 0x7, 0x9, 0x6964e078, 0x7b, 0x61, 0x3, 0xc, 0x3333, 0x6, 0x0, 0x8001, 0x5, 0x0, 0x9a07, 0x0, 0x9, 0x80000000, 0x0, 0x400, 0x6, 0x9, 0x3ff, 0x1, 0xf0c0, 0x6, 0x0, 0xb514, 0x5, 0x3, 0x80000000, 0x3, 0x1ff, 0xf, 0x14f5, 0x0, 0xf98e, 0x0, 0x8, 0x6, 0x6, 0x3, 0x74a9, 0x4, 0x7, 0xd, 0x2, 0x4, 0x6, 0x401, 0x4, 0x7, 0x10000, 0x10001, 0x3, 0x1, 0x6, 0xe, 0x3, 0x9, 0x6, 0x100, 0x3, 0x200, 0x5, 0x7, 0x7, 0x0, 0x200, 0x7, 0x3ff, 0x3, 0xb, 0x5d, 0x9, 0x9, 0x8, 0x9, 0x8, 0x7, 0x8001, 0x400, 0xe7f0, 0x1, 0xae00, 0x1, 0x7, 0xa, 0x0, 0x2, 0x1200000, 0x0, 0x100000, 0x2, 0xfffffffd, 0x80000001, 0x8, 0x7, 0x4, 0x7, 0x8001, 0x8, 0x4, 0x8, 0x1, 0xfff, 0x6, 0x69, 0xe, 0x81, 0x80000000, 0xfffff15f, 0x1, 0x1, 0x1, 0xb83, 0x3, 0x0, 0x8, 0xfffffeff, 0x9, 0x8, 0x6, 0x10, 0x3, 0x4, 0x25005968, 0x800, 0x4, 0x7, 0x8, 0x0, 0x8, 0x5, 0x5, 0x6, 0x8001, 0x100, 0xffff, 0x0, 0x6, 0xe13, 0x3dc5, 0xcd7, 0x3, 0x1, 0xfffffff8, 0xd, 0x0, 0xc, 0x2, 0x3, 0x6, 0x2, 0x1, 0x2, 0x80, 0x8, 0xfffffff9, 0x5, 0x4, 0x3ff, 0xffffffff, 0x3, 0x9, 0x9, 0x5, 0x7, 0x80, 0x8001, 0xf, 0x100, 0xc2, 0x3, 0x7, 0xfffffffe, 0x811, 0x3ff, 0x4, 0x6, 0x9, 0x1, 0x6, 0xc, 0x6, 0x1b, 0xa, 0x2c, 0x0, 0x7, 0x7, 0x9f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x6, 0xff, 0x1875, 0x40, {0xc, 0x1, 0x3, 0x3, 0x314, 0x800}, {0x7, 0x0, 0x100, 0x3ff, 0x8, 0x5}, 0x3, 0x40, 0x8001}}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffb, 0xff, 0x0, 0xf, 0x10001, 0x71fb, 0x8, 0x0, 0x7, 0x9, 0xa, 0x4, 0x8be0, 0x96, 0x1, 0xfffffffa, 0x4, 0x7, 0xdca8, 0x0, 0x101, 0x6, 0xf, 0x7f, 0x6, 0x2, 0xfff, 0x4, 0x4000000, 0xfbd, 0x3, 0x8, 0x7, 0x3, 0xfff, 0x1, 0x0, 0x5, 0x5e, 0x9845, 0xbe, 0x80, 0x7fffffff, 0x4, 0xc380, 0x1000, 0x9, 0x2, 0x3ff, 0x3, 0x80, 0x332f, 0xbb, 0xb, 0x2, 0x2, 0x80, 0xf00, 0x9, 0x8, 0xd5d, 0x6e0, 0x9, 0x3, 0x4, 0x0, 0x200, 0x6ffa, 0x7ff, 0x1446, 0x4, 0x100, 0x80000000, 0x6, 0x30, 0x5, 0xc, 0xd, 0x7, 0x46d8, 0x8, 0x1, 0x0, 0x2, 0xa, 0x7, 0xffffffff, 0x2, 0x3, 0x8, 0x6, 0x6, 0x7fffffff, 0x4, 0xcc, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7, 0x10000, 0x4, 0x1000, 0x88b, 0x6, 0x8, 0x0, 0x6, 0x5, 0x3, 0x9, 0x8000, 0x8, 0x8, 0xad, 0x8, 0x9, 0x8, 0x4, 0x1, 0x2, 0x5, 0x4, 0x200, 0x6, 0x1, 0xd, 0x8, 0x7, 0x6, 0x1, 0x1, 0x1e8, 0x6, 0x6, 0x9, 0xb80000, 0x0, 0x2, 0xd, 0x44, 0xf, 0xa, 0x3, 0x5, 0xfffffffd, 0xbc6, 0x10000, 0xffffffff, 0x7, 0x4e, 0xcaf, 0xd73, 0x0, 0x3, 0x2, 0x9, 0x587, 0x5, 0xf, 0x2, 0x200, 0x10, 0x1c24, 0x4, 0x2, 0xfff, 0x8, 0xd, 0x401, 0x4, 0x2, 0x3, 0x5, 0x8, 0x0, 0x5867e739, 0x10, 0x1, 0x101, 0xa, 0x6, 0x3, 0x4, 0x1, 0x9, 0x5, 0x6b07, 0xd, 0x6, 0x7, 0xfff, 0x6, 0x8000, 0xa, 0x7ff, 0xffff, 0x80, 0xffff5d0d, 0x7fffffff, 0x25d4e353, 0xffffd24d, 0x1, 0x2000, 0x6, 0xb, 0x6, 0x7, 0x5, 0xbf, 0x1, 0xff, 0x1000, 0x95aa, 0x8000, 0x81, 0xfffffbff, 0x7fff, 0x7, 0x8, 0x0, 0x3, 0x9, 0x8000, 0x1, 0x7, 0x3, 0x7, 0x40, 0x3, 0x3, 0x7f, 0x1ff, 0x4, 0xc, 0x3, 0x9, 0x4, 0x0, 0x4, 0x3, 0x4, 0x6, 0x1cf13b09, 0x2, 0x6bb, 0x8, 0x8, 0x5, 0x10, 0x4, 0x7, 0x7, 0x0, 0xa]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x6, 0x4, 0xfffffff9, 0x101, 0x8, 0x2, 0x5, 0xc, 0x9, 0x9, 0x7, 0x2, 0xb7f7, 0x7, 0x7, 0x4ad6, 0xfffffff0, 0x0, 0x0, 0x6, 0x100, 0x1, 0x1, 0x6, 0x7, 0x7, 0x8, 0xe, 0x7, 0xff, 0x4, 0x8000, 0x4, 0x76, 0x9, 0x0, 0x8, 0xffff6a72, 0x5, 0xd95, 0xfffffe00, 0x0, 0xa, 0x8, 0x1, 0x5f, 0x9, 0x5c1c, 0x80000001, 0x9, 0x8, 0x1, 0xd6f6, 0x5, 0x8, 0x8551, 0x2e, 0x5, 0x8, 0x7, 0x6, 0x0, 0x8, 0x800, 0x1, 0xb, 0x5, 0xf, 0x4, 0x47, 0x8, 0x4, 0x200, 0x9, 0x400, 0x7ff, 0x0, 0xfffffffe, 0x9, 0x4, 0x9, 0x7, 0x5a86, 0x310, 0xb, 0x4, 0x3, 0x0, 0x3, 0x6, 0xffa, 0x7fffffff, 0x2, 0x9, 0x10, 0x7, 0xc, 0xeb, 0x65b, 0x3, 0x2, 0x200, 0x4, 0x0, 0xffffffff, 0x9, 0x5, 0x7fffffff, 0x9, 0x79376a7, 0x620, 0x4, 0x2, 0x4, 0x7, 0xef, 0x6, 0x2, 0x6, 0x7f, 0xfffffffe, 0x401, 0x3c8b, 0x80000000, 0x6, 0xffffffff, 0x678, 0x6, 0x7fffffff, 0x7, 0x6, 0x8000, 0x4, 0x4, 0x81, 0x9, 0x2, 0x40, 0x2, 0x9, 0x3, 0x8, 0x6, 0x800, 0x7, 0x3, 0x101, 0x81, 0x9, 0x2, 0xfffffffd, 0xc9, 0x21, 0x5, 0x9, 0x6, 0x1c000, 0x2, 0x156, 0x602, 0x1d, 0x3, 0xfff, 0x8, 0x7, 0xc, 0xf09a, 0x3, 0x8, 0x5, 0x80, 0x0, 0xd, 0x6, 0x1, 0x1, 0x5, 0x3, 0x9, 0x2, 0x4, 0x7, 0x6, 0x4a9900b9, 0x80, 0x5, 0x100, 0x2e, 0xc2bc, 0x5, 0x2, 0x2, 0x8, 0xfffffff7, 0x6, 0x7, 0x101, 0x9, 0x2, 0x800, 0x6, 0x4, 0x2, 0x1, 0x1, 0x7fffffff, 0x1, 0x5, 0x1, 0x6, 0x8000, 0x7, 0xcc9, 0x8, 0x8, 0x6779, 0x9, 0x7a, 0x4, 0x18, 0x7ff, 0x9, 0x7, 0x8, 0x2b00000, 0x7, 0x3, 0x200, 0x10, 0x8, 0x6, 0x1, 0xe, 0x1, 0xf, 0x7, 0x8, 0xfffffffa, 0x1, 0xfffffff5, 0x9, 0xe, 0x80000001, 0x4, 0x3ff, 0x7a, 0x6, 0x91f9, 0x0, 0xf, 0x3ff, 0x8, 0x9, 0x1e44, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xfffffffc, 0x417e6eb6, 0x8000, 0x1, 0x80, 0x7, 0x0, 0xfffffffa, 0x3, 0x6, 0x50, 0xd, 0x1, 0x2, 0x401, 0x3, 0x3, 0x6, 0x20, 0xae63, 0x5, 0x800, 0xe9, 0x9, 0x40, 0x1, 0x3, 0x1ff, 0xae, 0x1, 0x5, 0x3, 0x1ff, 0x7dc0, 0x9, 0x2, 0x383a, 0x101, 0x3, 0xffff, 0x80000001, 0x8, 0x10000, 0x1, 0x81, 0x1, 0x3, 0x6, 0x1, 0x9, 0x34a, 0x81, 0x9, 0x3657, 0x3ff, 0x80000000, 0x81, 0x3, 0x9, 0x637, 0x10000, 0x81, 0x3, 0x6, 0x6, 0x608, 0x6, 0xfffffff8, 0x8f, 0x5832, 0x98, 0xd, 0x1, 0x1000, 0x1, 0xfffffff9, 0xfffffffc, 0x3b, 0xfffffff7, 0x0, 0x2, 0x57, 0xb8, 0x3ff, 0x10, 0x9, 0x9, 0xb0, 0xfc0c, 0x401, 0x2, 0x2, 0x8, 0x4b2, 0x6, 0x3, 0x80000001, 0x8, 0xba, 0x7, 0x1, 0x7f, 0xffff, 0x7, 0x0, 0x6, 0x4, 0xea, 0x5, 0x10001, 0x5, 0x40000000, 0x668, 0xfffffff2, 0x9, 0x7, 0x945, 0x5, 0x100, 0x5, 0x0, 0xfff, 0x3, 0x1, 0xfffffff9, 0x7, 0x7, 0xcd, 0x4, 0x5, 0xf, 0x8, 0x6, 0x0, 0x0, 0x400, 0x5, 0x3, 0xd, 0xe, 0x6f7, 0x5, 0x9, 0xa, 0x8, 0x0, 0x7ff, 0x8, 0x3, 0x3, 0x5, 0x3, 0xe, 0x2, 0x9, 0x1, 0x9, 0x6, 0x94000000, 0x7, 0x8, 0x9, 0x200000, 0x2a, 0x3, 0x8, 0x5, 0x2, 0x8, 0x80000001, 0x3, 0x7, 0x4, 0x4, 0xffff9ae0, 0x8, 0x9, 0x0, 0x10001, 0xffffffff, 0x4, 0x9, 0x0, 0x8000, 0xb55, 0x3, 0x3, 0x6, 0x2, 0x46, 0x46b, 0x2, 0x6, 0x2, 0x40, 0xb, 0x6, 0xf4, 0x8000, 0x3, 0x1, 0xd, 0x0, 0x2e9, 0x21f3, 0x4, 0x9, 0x8d14, 0x4, 0x0, 0x9, 0x800, 0x1, 0x4, 0x9, 0x7, 0xffffffb6, 0x13, 0x81, 0x5, 0x4, 0x8, 0x7983088f, 0x0, 0x2, 0xfffffffd, 0x7fffffff, 0x0, 0x4, 0xf99, 0xa1, 0x8, 0x2, 0x0, 0x7, 0x4, 0x10, 0x10000, 0x68, 0x2, 0xfb43, 0x8, 0x5, 0x9, 0x8, 0x2, 0x7, 0x7fffffff, 0x50da5ee1, 0x10, 0x9, 0xffffff80, 0x5, 0x200, 0x9]}]]}, {0xa8, 0x6, "2315d4a7dd54dc527391c0f2c0a9d47b8397a2e962d7753b2a55abfdaa09eb0ef1d346eca55bf186c1ca0265d121470446b63570b0db5de92e5d8d5109b7a9aeeb4af1349196eaa01325fb378d21d8f2113d9ef447bd1c90e51b574e9103bc0692bb72bcde3d37a6a3237525525bef4587983140563e4744e5e8d9acf36cd4aa4f69acdb6addb3a758c06013aad49aa29bb1e034266d1a15787815b6188de30f9e501264"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x134, 0x13, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80, 0xe, 0x5, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x80}]}, {0xce, 0x6, "1bf8a6c38ae06d17566d969b6781a6a6b708118a4d7d7e7766767e18cf4b3234350d55f8f0194af6d578223c17c9033b4c88d5a1c98e3cb40b4d67984ee175ec82203f1ad6d0cb88339b196b3c9be1502b1eb535328d16f87d3e3c7914a891af2a9477aaae80d20b83982004b397de6d0ef50edc1f5b99baf31fbf5c9e2c7e4a7d1813e4efd430d3b0d6a15a92af0f7e061792df1cfd8d82d57064976d0f3253fabcc6a23013685a65782dc61e0e50609666951a658bfaf36edb0da16d0018603e9607bc200caecefe0e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xffe0}}, @TCA_MATCHALL_ACT={0x254, 0x2, [@m_ctinfo={0x158, 0x1a, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfff}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3d}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xf, 0x8, 0x8, 0x3ff}}]}, {0xe2, 0x6, "aaf6804bdb7cf165b643bc5ff6093311253077c69fbcc86a4dce4c8909606fc328b6d79ff005f52d73241b6ef33140ae065e1009d49971d76f496012a80a3a918458a555ac0c2ac845a8b1a4c071ab07e7fc54033b3f69cf37d65d4b8fb4f92e612b0a1230aa57d1ede3f46c29a2df50d3ee3ca5c16cbef91a3b63039ec320c9a836d5ed60db402a73e9f69e7d9831e97033001aa9a29d6a75bcf6403d26bc34fe2646e6de6d54c5c5b905ae3b1755320ecd04139a811d53c4719a15e66003e0f2e00fb4db45a13af71525d2342e80e67b7a9738708edb6d6f56ce685bd7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xf8, 0x16, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x2, 0xffffffffffffffff, 0x9, 0x1}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfec, 0x6, 0x1, 0x7, 0xfffffff7}, 0x2}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x77, 0x6, "098a75f6f262df5a9b038a2bf51ca72de17878de431ef6207e88a59db996c7bb52eecfda05cf85dd694c7cefacc79a0bd2531da2f29c8f90efa885d96123649ca68149079a95350f2d985de39803e1ab26d5953cbc4ea3fe790394c4c8921513d68c5626ab61324488f4078f73b22c0826527c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x2288, 0x2, [@m_skbmod={0x128, 0xe, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fff, 0x3, 0x2, 0x9, 0x2}, 0x3}}]}, {0xd5, 0x6, "886ec01301f9678689650cfa8b6dc5b760c69b5dc2c0fac89af1bf433f902738dbdb852ebbecbc921fa8c5e9d1d6b4ff7d17f1092e507d3424ec4df2adc00cadc80769594ce0e3d968f7b5d995dd0255d2d49d56acc2f89ea9b9593451367d219510a48e7e9d0ad5d59ede656ebb2e27b7dad987019f4eedf8fad066e68930f135f464aa7a92cc6dcdf13ea32f6a9311764dd1cf885236c1a0d9c5660358f4b55fb1c41a65902082af666a064fb0ae9b4a28ae5c494035f7cadf2126377eec0de54a1fc0e02ab927753a7720fd77e87a2a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xc8, 0xa, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x1, 0xfffffffffffffff8, 0x2, 0x10000}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xe0}]}, {0x71, 0x6, "f4e5dc9529688bc9a622e08f7f84c61d7a8e1285a0dd0598e0f8f936b52efd930726959f9b19847100ea3070a2689063d8d6559853516645bd450d77827604a01ff7ad87e333848061514b373dba93dc322d1d48a1ee717aeec55290824a40647b595106330e22ff255591dcfe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x114, 0x1c, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6dd53a57, 0xffff, 0x10000000, 0x0, 0x7}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x5}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x0, 0x2, 0x10000, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x7f, 0x6, "e9b97af4bf25cbe2011ace570641031f92f55a743f456255ee46a282a1e479e2315a6a2f36104de8ff17e13014675ac9480010d29795310402ba9f4db16a19977eabc4d380bd86116af694b2ab2cd5fbf46f416c83180f6b6b1ff8ffe3e7f387d4c7abca3e1bf146f685655107b2f959dda9a15ee94382a0615320"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x11c, 0x8, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x43d687c9}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}]}, {0xba, 0x6, "b2c7b5b6617043f5b45219a8f2ea57bdc6a18addff95bb1367192ef99177bd107c428b4a895b1e29343ff6ac16d449ef2ee9119114ed6ecb3f66fe8a3ed99c62ca1bb914ebe95687091c75dcdf5d039d2bf62a7e297f6cf9ba893a59c885d6f012244389a297a5e6916213ce34dac26788e31bb006101923ab17056b97d8d2d05bee6404be705f44a12d01fe573daf6b5e139ecedab9e9d2680344911a64343b1c71a0e80242920869535ae16a6257364a264e5c3a14"}, {0xc, 0x7, {0x2307f68fcd2c59da}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x1a20, 0x15, 0x0, 0x0, {{0xb}, {0x18f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1000, 0x2, 0xba, 0x5d8, 0x9, 0x400, 0xb8, 0x7fffffff, 0x4, 0xdd4, 0x2, 0xff, 0x6, 0x1, 0x80000000, 0xfffffffe, 0x101, 0x2, 0x5, 0x92, 0x1, 0x2, 0xa, 0x282, 0xf44, 0x400, 0xbf0b, 0x180, 0x8d95, 0xae71, 0x0, 0x0, 0xbd, 0x0, 0xffff, 0x800, 0xffffffff, 0x7, 0x8, 0x0, 0x7, 0x2, 0x5, 0x2, 0x5, 0x0, 0x9, 0x7, 0x5edf6b69, 0x2, 0x7ff, 0x10, 0xfffffff9, 0x2, 0x7f, 0x5, 0x6, 0xfff, 0x8, 0x0, 0xc2d, 0x31d8e8cf, 0x1ff, 0x8, 0x4e4f, 0xfffffffa, 0x5, 0xb, 0x7, 0x9, 0x1000, 0xffffffff, 0xffffffff, 0x1000, 0xb, 0x1, 0x5, 0x4, 0xff, 0x42, 0x1, 0xf, 0x3, 0x1c2, 0x9, 0x6, 0x5204180, 0x4, 0x1, 0xfffff558, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x6, 0x0, 0x0, 0x1d280, 0x401, 0x8000, 0x3, 0x7, 0xfffffff9, 0x8, 0x9, 0x2, 0x3, 0xbde, 0x1, 0x100, 0xe, 0x1000, 0xb, 0x2, 0x64f, 0x6, 0x9, 0x5, 0x1, 0xd, 0x80000001, 0x8, 0x6d2, 0x3, 0x7, 0x591, 0xffff, 0xfffffff8, 0x1ff, 0x3, 0x2, 0x200, 0x1, 0x5642, 0x3, 0x682d, 0x9, 0x8, 0x2, 0x8, 0x2, 0xd2, 0x3, 0x7c89, 0x0, 0x7, 0x101, 0x9, 0x2e5, 0x5f, 0x0, 0x4, 0x2, 0x10000, 0x3, 0x97b, 0x6, 0x8, 0x8001, 0x7fff, 0x4277ee51, 0x4971948a, 0x8, 0xa03, 0xff, 0x7d7, 0x3, 0x101, 0x2, 0x4, 0x1000, 0x7, 0x40, 0xfff, 0x2, 0x2, 0x8, 0x8, 0x1ff, 0x7ff, 0x3ff, 0x6, 0x10, 0x72, 0x0, 0x8, 0xfff, 0x6, 0x21, 0x1, 0x5, 0x7, 0x7fffffff, 0x5, 0x2, 0x7, 0x634b, 0x5, 0x3, 0xb, 0x7, 0xd54, 0x5, 0xe, 0x1, 0xf1, 0xa, 0x9, 0x1ff, 0x7f, 0x4, 0x2, 0x2, 0x10000, 0xf854, 0x2000000, 0x800, 0x2, 0x2, 0x41f, 0xfff, 0xfffffff8, 0x2, 0x7, 0x1000, 0x2, 0xd, 0x6, 0x400, 0x0, 0xfff, 0x6, 0x4, 0x9ae, 0x1, 0x4, 0x127, 0x0, 0x4, 0x9, 0x7ea15212, 0x9, 0xfff, 0x4, 0x1, 0x5a, 0x7ff, 0x253e9ca8, 0x606c5e1, 0x4, 0x3dec, 0x3, 0xfffffffc, 0x886]}, @TCA_POLICE_RATE={0x404, 0x2, [0x705, 0x100, 0x3, 0x100, 0x2, 0x31d, 0xf, 0x3, 0x800, 0x3, 0x5, 0x8, 0x3, 0x1, 0x2, 0x7fffffff, 0x0, 0x800, 0x4, 0x361, 0x3, 0x938, 0x4, 0x4, 0x101, 0x6, 0x9, 0x8001, 0x7, 0x6, 0x413, 0x536d, 0x1, 0x40, 0x8, 0x7, 0xfff, 0xe, 0xfffffff8, 0x400, 0x5, 0x7, 0xfffffffb, 0x2, 0x318b007c, 0x8, 0x7, 0xf6e, 0x9, 0x80000000, 0x401, 0xc, 0x1ff, 0x2, 0x1, 0x8, 0x9053, 0x8, 0x800, 0x60, 0x7, 0x8, 0x3, 0x2cb70fe0, 0x2, 0x81, 0x9, 0x2, 0x0, 0x3, 0x6, 0x2, 0x9, 0x2, 0x0, 0x0, 0x4, 0xc, 0x7, 0xfffffffd, 0x8, 0x0, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x6, 0x7fffffff, 0x5, 0x9, 0x4, 0x7, 0x4c, 0x5, 0x0, 0x8533, 0x6, 0x4, 0x9, 0x8, 0x8, 0x9, 0x8000, 0x6, 0x0, 0xacd, 0x9, 0x2, 0x1ff, 0x5, 0x3, 0xff, 0x5, 0x1, 0x101, 0x46ef, 0x5, 0x9, 0x100, 0x10001, 0x2, 0xffffffff, 0xc, 0x8, 0x9, 0xffffff31, 0x10, 0x7, 0x81, 0xf374, 0x80000000, 0x74, 0x6, 0x3, 0xe, 0x2, 0xfffffffc, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x7, 0x3, 0x10001, 0x4, 0xb, 0x7, 0x2, 0x0, 0x80, 0x1, 0x3, 0x5, 0x1, 0x0, 0x7f, 0xd6e4, 0xfffff001, 0xfffffff4, 0x3, 0xcb, 0x1, 0xffffffff, 0x8, 0x40, 0x0, 0x4, 0xc, 0x297, 0x0, 0x4, 0xbe7, 0x4, 0x4, 0x3b, 0x3, 0x8001, 0x6, 0x9, 0xfd, 0x4, 0x0, 0x3ff, 0x3, 0x2, 0x4, 0x9, 0x1000, 0x10001, 0x8, 0x1, 0xa3f, 0x2d8a, 0xfffffffe, 0x8855, 0x7fff, 0x5ae, 0x9, 0xfffffffa, 0x6, 0x3, 0x7c0439f7, 0x4, 0x10000, 0x1, 0x9, 0xc, 0x7ff, 0x80000000, 0x9, 0x1, 0xffff0351, 0xfff, 0xfffffc01, 0x7, 0x4, 0x5, 0x9, 0x5, 0x632, 0x5, 0x6, 0x1000, 0x43, 0x6, 0x8, 0x0, 0x3, 0x1, 0x8, 0xa6, 0xfffffc00, 0x3, 0x2, 0x5, 0x2a, 0x1000, 0x4, 0xc128, 0x0, 0xacb0, 0xc000, 0x5, 0x8, 0xd4b8, 0x7aea, 0x3, 0xb7b, 0x2b, 0xfffffff8, 0xea, 0x25, 0x3, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x100, 0x2, 0x8, {0x0, 0x2, 0xf560, 0x6, 0x5466, 0xdb72}, {0x5, 0x1, 0x4, 0x45, 0x8, 0x4}, 0x25f, 0x6, 0xffff8000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x5, 0x9, 0x1, 0xd, 0x4, 0xffff0000, 0x6944e5e3, 0x4, 0x2, 0x4, 0x5, 0xe, 0xfffffff5, 0x5, 0x80000000, 0x9, 0x1, 0x4, 0x9, 0x8, 0x6, 0x7f, 0x5, 0x4, 0x3, 0xfc2, 0x9, 0x7, 0x6, 0x6, 0x1, 0xd06, 0xbf, 0x3, 0x2, 0xffff, 0x80000000, 0xb, 0x6c2, 0x2, 0x0, 0x92, 0x3, 0x6, 0x833, 0x5, 0x3, 0x7, 0x80, 0x6, 0xa, 0x2, 0x400, 0x9, 0x6, 0x0, 0x7, 0xf10, 0x2, 0x982, 0x9, 0x5, 0x80000001, 0x5, 0x3, 0x5, 0x5, 0x1bdd73c4, 0x1, 0x1ff, 0x5, 0x7, 0xb6c, 0x1, 0x5, 0xcf3b, 0x5, 0x6, 0x7, 0xd, 0x4af, 0x5, 0x80000000, 0x7fff, 0x6, 0x5, 0x7fff, 0x69, 0x8001, 0xad, 0x800, 0x25f, 0x2, 0x400, 0x5, 0xa33, 0xffffff45, 0x10001, 0xfffffffb, 0x1f, 0xfff, 0x1, 0x546b, 0x0, 0xe9a9, 0x1, 0x6, 0x7fff, 0x2, 0xf3e1, 0x5, 0x800, 0xa, 0x401, 0x7, 0x6, 0x9, 0x9, 0x7f, 0xfffffff1, 0x9, 0x401, 0x6, 0xffffff32, 0x3, 0x8, 0x9, 0x3ff, 0x4, 0x9, 0xe, 0x80, 0x6, 0x60, 0x6, 0x1, 0x7, 0x4, 0x8, 0x6, 0xe, 0x8, 0x7, 0x6, 0x1ff, 0x1, 0x800, 0x8, 0x10, 0x2, 0x1, 0x8, 0xfc, 0xff, 0xb2, 0xdf, 0x10, 0xff, 0x0, 0xb1, 0x5, 0x5, 0x95, 0xffff, 0x0, 0x3, 0x5, 0x9, 0x101, 0xffff, 0x0, 0x9, 0x7, 0xfffffffa, 0x3fff80, 0x1, 0x56c1, 0x6b45, 0x7, 0x401, 0x9, 0x7, 0x7f93, 0xfffffeff, 0x4, 0x9, 0x2, 0x4, 0x4, 0x80000001, 0x3, 0x40, 0x637, 0x9, 0x8, 0x0, 0x3, 0xd8, 0x6, 0x5, 0x4, 0x7, 0x7, 0xffffff34, 0xc, 0x2, 0x3ff, 0x481, 0x1, 0x5, 0x9, 0x7f, 0xfffffffa, 0x6, 0x9, 0x7, 0x400, 0xf, 0x9, 0x9, 0x0, 0x1, 0x4, 0x4, 0x1, 0x2b, 0x7, 0x1, 0x0, 0x5, 0x3, 0x7fffffff, 0x6, 0xffff, 0x2, 0xffffffff, 0x1, 0x2, 0x1, 0x9, 0x5, 0x7, 0x4, 0x8, 0x7, 0x6, 0xfffffff9, 0x10, 0x6, 0x3, 0x2, 0x3, 0x5, 0x70, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x571, 0x6, 0x1, 0x1, 0x6, 0x6, 0x1, 0x2, 0xfff, 0x6, 0x3ff, 0x8000, 0xbe97, 0x0, 0x4, 0x1, 0x5, 0x7f, 0x18, 0xff, 0xba, 0xfffffe00, 0x1, 0x48, 0x21a2, 0x3, 0x3c7, 0x9343, 0x1, 0x10001, 0x1, 0x79e6, 0xa, 0x3, 0x400, 0xffff, 0x8, 0x8, 0x1, 0x3, 0x9, 0x400, 0xff, 0x1, 0x80000001, 0x7, 0xe, 0xdc3, 0x8600, 0x2, 0x5, 0x2, 0xa, 0x48, 0x54b2, 0x6df, 0x401, 0x0, 0x2, 0x6, 0x0, 0x4, 0x3, 0xb, 0x8000, 0x40004000, 0x3da4, 0x6, 0x8000, 0x4, 0x9, 0x4, 0x1, 0x3, 0x7fff, 0x7f, 0x6, 0x0, 0x1, 0xf, 0x7, 0x0, 0x8, 0xfffffff7, 0x0, 0x100, 0x8, 0x2, 0x4, 0x4, 0x13fc, 0xb, 0xee, 0x8, 0xffff, 0x7, 0x7, 0xfffffff5, 0x0, 0x3, 0x9, 0x80000001, 0x5, 0x0, 0x1, 0xfffffff9, 0x2, 0x6a4, 0xe, 0x59, 0x8, 0x6, 0x9, 0x636b, 0x5, 0x401, 0xfe08, 0x0, 0x5, 0x3, 0x9, 0x8, 0x7, 0x8, 0x2, 0x0, 0x6, 0x8, 0x2, 0x3, 0x200, 0xe58b, 0x1, 0x10000, 0xfffffff7, 0x2, 0x8001, 0xfc4, 0x11d, 0x1, 0x5, 0x8, 0x7, 0x10, 0x80a, 0xfffffff7, 0x6, 0x10, 0x3ff, 0x7bd, 0x101, 0x4, 0x7f, 0x8, 0x190, 0x9, 0x2, 0x9, 0x6, 0x6a, 0x7, 0x1, 0x4, 0x400, 0x4, 0x3ff, 0x7, 0xc08, 0x878, 0x6, 0x7, 0xfffffeff, 0x4, 0x3, 0x2, 0x80, 0x8, 0x8000000, 0x4, 0x400, 0x8, 0x7, 0xd5, 0x6, 0x7, 0x2, 0xfffff001, 0x2, 0xe3f, 0x36c, 0x800, 0xd5, 0x9, 0x0, 0x0, 0xffffff63, 0x10000, 0x4, 0x8, 0x3ff, 0x5, 0xecd, 0xf, 0x4, 0x9, 0xa, 0x9, 0xfffffffb, 0x3, 0x80000000, 0xff, 0x1, 0x8, 0x45, 0x8, 0x11e, 0x3, 0x7, 0x7, 0x5, 0x8, 0x204cc, 0x80000000, 0x8, 0xabe, 0x1, 0x4, 0x60, 0x5, 0xffffffff, 0x2, 0xc, 0xf, 0x5, 0x8000, 0xe, 0x8, 0xaedf126, 0x3, 0x0, 0x6, 0x3, 0xffffffff, 0x6, 0x0, 0xd, 0xffffffff, 0x4, 0x7fff, 0x8, 0x9, 0x3, 0x81, 0x8, 0x3, 0x8]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xdec}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x41}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2e}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff0969}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x80000001, 0x2, 0x130ba284, 0xc0, 0x10001, 0xfffff2d8, 0x13db6fb5, 0xf, 0x9e5, 0xf6, 0xfffff327, 0x7, 0x6, 0x4, 0x7fff, 0x7f, 0x8, 0x5, 0x400, 0x5, 0x5c, 0xd, 0x6, 0x3, 0x9, 0x80, 0x2, 0x401, 0x5, 0x0, 0x3, 0x129, 0xd, 0x5, 0xf, 0xfffffffa, 0x8, 0x3a800, 0xc, 0x1, 0x6, 0x43, 0x8, 0x1, 0x5, 0x80000000, 0x0, 0x5, 0x3, 0x10, 0x2, 0xb481, 0x6, 0x2, 0x4df, 0xcebf, 0x6, 0x100, 0x6, 0x5, 0x3, 0x401, 0x7, 0x41, 0x7, 0xff, 0x5, 0x3, 0x33, 0x9, 0xac, 0xf6, 0x1ff, 0x10000, 0x55, 0x3, 0x4, 0x81, 0xc25, 0x7fff, 0xfff, 0x8, 0x8, 0xffff, 0x9, 0x4, 0x400, 0x4, 0x6, 0x101, 0x4, 0x9, 0x3, 0x8, 0xb, 0x4, 0x7f, 0x5, 0x935, 0x7, 0x8000, 0x7, 0x7, 0x0, 0xcd, 0x5, 0x0, 0x1, 0x2, 0x5, 0xf5, 0xe7, 0x4, 0x4, 0x8, 0x0, 0x3, 0x6, 0x3, 0x8, 0xff, 0xd, 0x2, 0x3, 0x2, 0xa, 0xb4e, 0x0, 0x8, 0xf, 0x5, 0x2, 0x3, 0x9, 0x5, 0x3, 0xcf62, 0x9, 0xa, 0xe54dc1f, 0x6, 0x2, 0x6, 0x3, 0x3, 0xd, 0x1ff, 0x2, 0x800, 0x5, 0x2, 0x5, 0xfffffc01, 0x9, 0x0, 0x4, 0x1, 0x6, 0x6, 0xe, 0x480000, 0x7, 0x54e1, 0x5, 0xd38, 0x565, 0xe, 0x8, 0x8, 0x2, 0x7, 0xd108, 0x7, 0x3, 0xfe9f, 0x10000, 0x1, 0x4, 0xb, 0x8, 0x9, 0x9, 0x9, 0xa, 0xf, 0x0, 0x0, 0x9, 0x6, 0x7ff, 0x4, 0x5a1c, 0x4, 0x2, 0x8f, 0x7, 0x9, 0x2, 0x5, 0x0, 0x80000000, 0xfffffff9, 0x80, 0x20d, 0x9, 0x800, 0x40, 0x4, 0x9, 0xa, 0xfffffff7, 0x4, 0x6, 0xfffffc01, 0x8, 0x401, 0x1, 0x6, 0xf, 0x7, 0xfffffffd, 0x7, 0x1000, 0x40, 0xfffff338, 0x4, 0x4, 0x1000000, 0xfffffffc, 0x200, 0x2cd5, 0x5, 0x6, 0x6, 0xffffff7f, 0x99, 0x10001, 0xffffff1a, 0x4, 0xde000, 0x2, 0x8000, 0x8, 0xff, 0x7, 0xd2ca, 0x800, 0x89a6, 0x2, 0x7, 0xa4ec, 0x1, 0x4, 0x1, 0xfffffff9]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x0, 0x4, 0x3, 0x200, 0x40000, 0x6, 0x2, 0x952a, 0x3, 0x4, 0x5775, 0x3, 0x4, 0x1, 0xfff, 0x7, 0x9, 0x5, 0x7fffffff, 0xffffff7f, 0xac0, 0x1000, 0x80, 0xc7, 0x4, 0x2, 0x1, 0x4, 0x7000000, 0xb09, 0x400, 0x1, 0x7, 0xff, 0x0, 0x101, 0xb1d7, 0x1c0, 0x62, 0x6, 0x3ff, 0x1, 0x7ff, 0x7, 0xd, 0xffffffff, 0x9, 0x50, 0x3, 0xffffffff, 0x3, 0xd43, 0x800, 0x5, 0x9, 0x3a, 0x3, 0x4, 0x2e9, 0xa, 0x2, 0x42331c29, 0x1, 0x1, 0x3fc00000, 0x6, 0x6, 0x4, 0xc7c, 0x4, 0x80000001, 0xfffffffa, 0x5, 0x0, 0x1ee4, 0x5, 0x5, 0x3, 0x2c1c60f5, 0x6, 0xf, 0xd, 0x60f, 0x7, 0x9, 0x0, 0x8, 0x0, 0x8, 0x1ff, 0xffffffff, 0x2, 0x4, 0x8, 0x2, 0xfffffff2, 0x1ff, 0x401, 0x5, 0x7b2c7e1f, 0x0, 0x3, 0x7, 0x800, 0x6, 0x7, 0x400, 0x7fffffff, 0x3, 0x427, 0xe9fd, 0x7f, 0xd, 0x8, 0x3, 0x8, 0x4, 0x5, 0x8081, 0xfffffff9, 0x0, 0x8, 0x9, 0xc, 0xf8, 0x5230, 0x5a9b, 0x3ff, 0x4, 0x1, 0xffff7fff, 0x5, 0x3a3, 0x6, 0x80000000, 0x100, 0x8, 0x101, 0x1, 0x1, 0x2, 0x8, 0xfb1f, 0x7fffffff, 0x8, 0x80000001, 0x9, 0x6, 0x7, 0x2, 0x8, 0x2, 0x8000, 0x5, 0x8, 0x0, 0x2, 0xbf, 0xfff, 0xffffff71, 0x5, 0x8, 0x3, 0x63, 0x400, 0xe3, 0x8000, 0x2, 0x6000, 0x8c0, 0x80000001, 0x7, 0xfffffff8, 0x8, 0x55c, 0x46, 0x3, 0x7, 0xbcf, 0x0, 0x3, 0xfff, 0xbbd, 0xdde, 0xfffffff7, 0x5, 0x8, 0x0, 0x4, 0x5, 0x7f, 0x8, 0x2, 0x162d4aa, 0x4, 0x3, 0x80000001, 0x5, 0x1, 0x7e, 0x7fffffff, 0x1, 0x0, 0x7f, 0x1, 0x6, 0x54, 0x7, 0x7fff, 0xca8e, 0x9, 0x0, 0x800, 0x7f, 0x4, 0x7, 0x5, 0x1, 0x7, 0xfffffff8, 0xe60, 0x9, 0x2, 0x30fe, 0x7dc7, 0xffffffff, 0x1c, 0x8, 0x1, 0x1000, 0x2, 0xfffffff0, 0x200, 0x81, 0x8, 0x5, 0x7f, 0x6, 0x5, 0x0, 0x9, 0x800, 0x7, 0x9, 0x0, 0x9, 0x6032, 0xfffffff7, 0x81, 0xfffffffa, 0x52aa, 0x7, 0x9, 0x8, 0xfffffffc]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff00000}]]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x9c, 0x17, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x20000000, 0x7, 0x443}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x4}}]}, {0x2f, 0x6, "ae048e90bf60030e14e4d32033eff3763cddba84adc138098d9201577ed9e405ba1d8cc4b91788ed341228"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xc4, 0xb, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x400}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xad10, 0x3ff, 0x8, 0x9, 0x401}}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x2f9, 0x3, 0x58, 0x5}, 0x1}}]}, {0x43, 0x6, "c52859a419d3ace3bb43e9300972829becbcd5180c1f65f56271bf85dd04a83589d8e06819032c7aa7601754b847b87155dad95451eba89442f9aaaeb94a42"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xb8, 0x1a, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x383a3ab6, 0xffffffffffffffff, 0xa, 0xa39}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbab, 0x2, 0x2, 0x9ef, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xc96d, 0x5, 0x8, 0x57ed}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xfffffffa, 0x0, 0x8, 0x10000}, 0x1, r3}}]}, {0xa, 0x6, "11f4bc24807c"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x104, 0x15, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'sfb\x00'}, @TCA_DEF_DATA={0x8, 0x3, '&\x85{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x770c, 0xfffffff9, 0x5, 0x4, 0xf28}}, @TCA_DEF_DATA={0xc, 0x3, 'devlink\x00'}]}, {0xa2, 0x6, "3c6122489ef8932f0ca1475b88cd4408a465620f36900d4d2eb050fb64c9554feeb940d7ed28e68970436175f3bd4993e37f0e791fe3fdf52164f97379d6d2b2838a988bfef75fb45b5bb70fe4634e9b066185ef92e45aea80c637e0c520b702b7677f2963b7b6ccadd8f44bc53a357fcb8e66c4f99557f46ab6a391f7d35e29bbf2f96a267226879c681773909a474723bc85ae0c955ed4a9dfa638aba4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x128, 0x7, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0xf6b3, 0x6, 0x6, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0xca, 0x6, "faa382e3a927400983570b134ba79be7f8e0e3dc70655fae5a334e00e17c12d51248f9a7dce7b77f35c345401a849fe3f155da2a473927399f5420fc429957c099d47fc6c8036f4fbcc362e1a891e3f6b89fadc26a26d474268a9d0c98b2e9794a0956022f388aa6c95071ff9cd5d431a5e2ff623cff885f6c030edd78908b2c9509702f525dc648e0a7e591686cf03bbbb5bf4439468e4c43101ebee1c66ce887ab606a267d6b8043584818211c7b2b626f3c4d217e40340eb6b541f04455401ac5c8a64027"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x6a90}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) 6.192985406s ago: executing program 1 (id=2721): unshare(0x24020400) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000001000ffff25bd7000966d47785f97fbdbdf2500001200c1", @ANYRES32=0x0, @ANYBLOB="0000000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r7, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$inet6_tcp_int(r5, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) recvmsg$can_j1939(r5, &(0x7f0000000680)={&(0x7f0000000340)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000540)=""/168, 0xa8}], 0x3, &(0x7f0000000640)=""/9, 0x9}, 0x0) ioctl(r4, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r4, 0x8914, &(0x7f0000000000)='lapb0\x00'/40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x45d1affa) listen(r8, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 6.073484591s ago: executing program 2 (id=2723): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000020000"], 0x0, 0x35, 0x0, 0x1}, 0x28) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000065c0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="ef", 0x1}], 0x1}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000003fc0)=[{&(0x7f0000006780)="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", 0x4e2}], 0x1}}], 0x2, 0x200080c4) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xa, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x0, 0x303, 0x3, 0x25dfdbfb, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r0], 0x30}}, 0x0) 2.718896331s ago: executing program 4 (id=2729): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000640)=ANY=[@ANYBLOB="9b72"], 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x91}}}}}}, 0x0) 2.716562036s ago: executing program 2 (id=2730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x1f8, 0x2c, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x8, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x1cc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xa3a8}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_ACT={0x1b0, 0x4, [@m_skbedit={0x74, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8ae4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xf}}]}, {0x2f, 0x6, "00668b35b7e9059043a932480463711192f32c1dd9042bd726b42dd45cddfde209bd474efd8f8125fc0720"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x138, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}]}, 0x1f8}}, 0x4e3b0074706e80cc) 2.683454988s ago: executing program 1 (id=2731): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x1c, r4, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x1c}, 0x1, 0xffffffff00000003}, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) (async) socket$kcm(0x23, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) listen(r0, 0x800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x1c, r4, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x1c}, 0x1, 0xffffffff00000003}, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80000) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async) 2.662496013s ago: executing program 3 (id=2732): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/12], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x27, 0x660f537e, 0x48}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="380100001000010028bd700000010000fe880000000000000000000000000001fc010000000000000000000000000002000115b24e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d4330000007f000001020000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0100000000000000ffffffffffffffff00000000000000002300000000000000feffffffffffffff02000000fcffffff000000002abd70000435000002000100200000000000000048000100686d6163287368613235362900"/240], 0x138}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x784, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x3, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfe, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008d00000000000000c50e000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100ffffffff950000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000180100007832dfdf0e1563696c6c2500000077002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1002, &(0x7f0000000440)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 2.003936652s ago: executing program 4 (id=2734): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x22, 0x0, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_TARGET_NETNSID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) unshare(0x20000400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000000c00000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xfe7, &(0x7f0000000a80)=""/4071, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x12, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.847749531s ago: executing program 2 (id=2736): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690040000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x1, 0x9, 0x42, @private0, @local, 0x7, 0x8000, 0x7, 0x80000000}}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 1.729467735s ago: executing program 4 (id=2737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2c6e01, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) (async) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001814010000000000070000000800010001000000080003"], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x40000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x8001, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) epoll_create1(0x80000) (async) r3 = epoll_create1(0x80000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x10}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000cc0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000aaaaaaaaaa30ffffffffffff080045f8003f00670000002f9078ac1e0001e000134a318536459f4c076600ffeffff600000000111740006694d1000000000000000000000000000095561b524063b900000000f51dbdad20976872d81ee562cc1e8e91bf4fd8d7940ea446597dfd28b44c9d48cb16305be2167f4d377cbb", @ANYRES8=r6, @ANYRESOCT=r3, @ANYBLOB="c3e903ba7d9773a6c12ba716c25dc84bc86e99bf8d1b900797488afd22193f93eba3630bb890df706a", @ANYRESOCT=r8, @ANYRES64=r8, @ANYRESHEX], 0x51) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="58ef3b369c95e8c0edb87311d63715a62855b54dce34144efd3cda4e477ea1a55587c2ea39d2eeef1d253d7036780849f380cd3dba563792169b0a8a9ac3d81dad3e8be24329049aa4a62fd9c6b2cb4035c08e7b2e92f9687f85d42d99e7e7fd19c43aaf693e446c0169f159613f046798ab31f50598bd290254f742ecc1b2d20270b6695cef6ae3b1b0afd2db92fb24bc7e059ec1ea65c0225ccd7270ed4124972d4dd676d51dcc173c95830fb6efd1b3682b597d773119e0e28cb5600f637feb650c2b2b2041379b93c9581e727574d4f7dc", @ANYBLOB="bad0efb29dc0250bb9b439e9a3451744b6d264619c30e1be115b4563b4dfdf974b8a8454b18af5ef2a2749a78377ec25163bd15fbc947ac89811e68d44b5058ba3fbee051b35a9b4454cb8e183034a2a507d77cebe511591d9beb9cfd48de2877bfc787c86c3b9ed97f3555cde30e1b4f79a7a1ab0dcc65a890e0c9bb2f9f7bcdef4645269f4a7c969c2058df13e0b6bcb5ce7cdd1a118034e2980b2f8393b47c10a3ce647c7d74a481fd2f8dc592ca83acf0630e4606059d5ced8379fb64340c883862bd5b2597d5494cf098de1ad9def31115e2f76ec41412ad9fedf1ebcc3556d033ebfd82f06f4251326"], &(0x7f0000000140)='syzkaller\x00', 0x5c47, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000000}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000000}, 0x50) recvmsg(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, &(0x7f0000000840)=""/43, 0x2b}, 0x20) (async) recvmsg(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, &(0x7f0000000840)=""/43, 0x2b}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x810) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000040), 0x4) (async) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000600)) 1.678522033s ago: executing program 0 (id=2738): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x82, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0x81, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.653135496s ago: executing program 3 (id=2739): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x400, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x1f8, 0x2c, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x8, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x1cc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xa3a8}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_ACT={0x1b0, 0x4, [@m_skbedit={0x74, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8ae4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xf}}]}, {0x2f, 0x6, "00668b35b7e9059043a932480463711192f32c1dd9042bd726b42dd45cddfde209bd474efd8f8125fc0720"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x138, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}]}, 0x1f8}}, 0x4e3b0074706e80cc) 1.535079033s ago: executing program 0 (id=2740): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4d83020004010000140003006e657464657673696d30000000000000180016801400018010000600070000008623000004c6a5b8"], 0x4c}, 0x1, 0x0, 0x0, 0x40c1}, 0x8840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005fc0), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) 1.514976763s ago: executing program 2 (id=2741): unshare(0x24020400) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000001000ffff25bd7000966d47785f97fbdbdf2500001200c1", @ANYRES32=0x0, @ANYBLOB="0000000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r7, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$inet6_tcp_int(r5, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) recvmsg$can_j1939(r5, &(0x7f0000000680)={&(0x7f0000000340)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000540)=""/168, 0xa8}], 0x3, &(0x7f0000000640)=""/9, 0x9}, 0x0) ioctl(r4, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r4, 0x8914, &(0x7f0000000000)='lapb0\x00'/40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x45d1affa) listen(r8, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.438436951s ago: executing program 1 (id=2742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000606010200000019eb0000000000000105000100070000000900030073797a30000000000900030073797a32000000000900020073797a3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000fedbdf2510000034000800000005002e0001000000ae32c2ff3e5abce1c042e4e69834c43021b64f76b1a6a4255000be2e23c4ba8957fb20f2d43424552e75e73c4305a0db04ef3ccc2f6742b42262015dfe2c1561ee4a0021245e93707128ba7fd475c86102995d8211ba31ed405bf747"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x20000050) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000003c0)={&(0x7f0000000100)=0x8001, 0x7, &(0x7f0000000200)=[{}, {}], &(0x7f0000000380)}) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x39, 0x301, 0x70bd25, 0xfffffffc, {0xc}}, 0x14}}, 0x40800) 1.240376841s ago: executing program 0 (id=2743): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r0, @ANYBLOB="010029bd7000fcdbf625140000000c000780080002000000000019dfd2d8be0688b892b3f804c0f0d731a6c3269c95b8d2b80fe9f3d69e8ddee277ada620aa105005e0a2daf2d9c8d6e7c24bbaaf63e02dfc4243fb74d13631db682d08d9be"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="14005878377f41000010000100000000000000000005e96b971329c1f185a9324eccbc010400000000000000000a000004090001000000020900020073797a310000000008000a40fffffffc0800034000000106140000001100010000000000002d8d00"/112], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000010000000000000000000500000a480000000c0a01013405f1b1000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100000000000800034000000001140000001100010000000000000000000200000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000010000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x68}}, 0x48810) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x4, 0x0, 0x0, {0xa, 0x4e21, 0x10000001, @rand_addr=' \x01\x00'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x3, 0x1, 0x3}}, 0x2e) close(0x3) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x4c000000}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 1.105312917s ago: executing program 1 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x7, 0x2, 0x3, 0x100}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x2c, r2, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x2c, r2, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newsa={0xfc, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private0, 0x4e20, 0x71a, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0x1000000000000192, 0x9ba3, 0xffff, 0x82519, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@iptfs_dont_frag={0x4}, @iptfs_pkt_size={0x8, 0x29, 0x1}]}, 0xfc}}, 0x844) r6 = socket$inet(0x2, 0x6, 0x1) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000d80)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x21, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\x00', 0x1, 0xf0, &(0x7f0000000c80)=""/240, 0x41000, 0x58, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000e00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x7, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000e80)=[r8], &(0x7f0000000ec0)=[{0x0, 0x2, 0x1, 0xb}, {0x4, 0x1, 0xe, 0x9}, {0x5, 0x3, 0x3, 0x3}, {0x5, 0x5, 0x10, 0x2}, {0x1, 0x1, 0xb, 0x1}], 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x21, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\x00', 0x1, 0xf0, &(0x7f0000000c80)=""/240, 0x41000, 0x58, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000e00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x7, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000e80)=[r8], &(0x7f0000000ec0)=[{0x0, 0x2, 0x1, 0xb}, {0x4, 0x1, 0xe, 0x9}, {0x5, 0x3, 0x3, 0x3}, {0x5, 0x5, 0x10, 0x2}, {0x1, 0x1, 0xb, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)={0xffffffffffffffff}, 0x4) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)={0xffffffffffffffff}, 0x4) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x40}}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r9, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0, 0x5c, &(0x7f0000000680), 0x0, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x38, &(0x7f0000000480)=""/56, 0x41100, 0x10, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x7, 0x80000001, 0x5}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r1], 0x0, 0x10, 0x7}, 0x94) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000100)="16e1575349084bc063b07b4392", 0xd) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e34, @local}}, 0x616d, 0x0, 0x8, 0xb, 0x58, 0xfffffbfb, 0x8}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e34, @local}}, 0x616d, 0x0, 0x8, 0xb, 0x58, 0xfffffbfb, 0x8}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000a0000000800000007000000c1"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r11}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r11, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000140)=0x1, 0x4) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f8004170000080003004700000008003e0067"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 1.104012106s ago: executing program 3 (id=2745): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1a0008", 0x18, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, {[], @mld={0x82, 0x0, 0x0, 0x82d8, 0xc033, @empty}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 28) 867.87159ms ago: executing program 0 (id=2746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x1f8, 0x2c, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x8, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x1cc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xa3a8}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_ACT={0x1b0, 0x4, [@m_skbedit={0x74, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8ae4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xf}}]}, {0x2f, 0x6, "00668b35b7e9059043a932480463711192f32c1dd9042bd726b42dd45cddfde209bd474efd8f8125fc0720"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x138, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}]}, 0x1f8}}, 0x4e3b0074706e80cc) 815.391413ms ago: executing program 3 (id=2747): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000c00)={0x8c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x81}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x8c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x7}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRES16=r6, @ANYBLOB="010379102c71950029a804"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB="60010000", @ANYRES16=r6, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x448a1}, 0x24000040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="ff419179ee770d2b33d1acb4bd1a67260457d5fb041b997af0cf5b12c82cc815d7463af9195035bf8b2160690140449a6bd587693b2aeaaa7c957b2fc747eb50c006c9c3c86ccd2929c3e89d4ce108f45d45dce7491b5d9cee30411afb7a305e7b3e9f946b07d806b080e6871b8a9c97e5d4d7d781b610d1e6e86f1c452a41d875b4428a572c1a834c983c0e85c6906bb5e323ae064b600615c5f88e891bbd55d80290e6a684befc0fb184b889c8a1"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x11, 0x0, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="365f807a2482485b949bfc1244000200", @ANYRES16=r10, @ANYBLOB="000429bd7000fcdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0xb080067e550ab67d) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ab0000000060a010400000000000000000a0000040900010073797a310000000038000480100001800c0001006e6f747261636b00240001800b0001006578746864720000140002800800064000000002080007400000000b0900020073797a32"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1108204}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)=@delsa={0x208, 0x11, 0x10, 0x70bd29, 0x25dfdbfc, {@in=@loopback, 0x4d4, 0x2, 0x3c}, [@iptfs_drop_time={0x8, 0x24, 0x101}, @algo_auth={0xad, 0x1, {{'sha3-512-generic\x00'}, 0x328, "12d6574973bb1ee248f6d295cff601adbd672a615285a38adf3959b684a0040ad19642604cb75784d44b77d2a8bce6e5ba5b7133b49404f917143e56cc58c3b5667a212bcc7b40de76178a913877ca1aa51312fbb91d3833eec5894d599afb1e29295d4777"}}, @policy_type={0xa}, @algo_comp={0x66, 0x3, {{'deflate\x00'}, 0xf0, "1595e1f8472d20405e517e2b43ed2dec7ae456dc819920a25bbf2e1a6079"}}, @algo_auth_trunc={0xac, 0x14, {{'blake2s-224-x86\x00'}, 0x300, 0x200, "3485625a72484e3194aaddce57f7fc5c04fa57c48d6db020f1568a2155d012a85bf040dd2674530a2afeb01248de1103335ebcc0ff00dbeee0e732a397fe8bd2be90646d5c6c87b7c24dc32f5955b3d77aadd4d4aff959d02fbf834d048748f5"}}, @replay_thresh={0x8, 0xb, 0x5}]}, 0x208}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x10000000, 0x88, 0x9c4}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x18000}, 0x10) r13 = socket(0xa, 0x3, 0x3a) getsockopt$inet_IP_XFRM_POLICY(r13, 0x3a, 0x11, 0x0, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e0000000000000000000000050006003a0000000a00000400000000fc00000000000000000000000000000000000000000000000200010000000000000003180000000005000500000000000a"], 0x70}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x17c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x0, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @coaddr={0x14, 0xe, @in=@local}, @tfcpad={0x8, 0x16, 0x4}, @extra_flags={0x8, 0x18, 0xffffff77}]}, 0x17c}, 0x1, 0x0, 0x0, 0x880}, 0x200040c4) 800.572212ms ago: executing program 2 (id=2748): unshare(0x62040200) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r1], 0x1c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005e00019eb17738540600000000000000", @ANYRES32=0x0, @ANYRES8=r0], 0x1c}], 0x1, 0x0, 0x0, 0x44818}, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000340)=0x10, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="110800000000000014001280090001007665746800000000040002806d0dc19a0c7400614ea8b0499a871f"], 0x34}}, 0x40c4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 683.492938ms ago: executing program 4 (id=2749): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/12], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x27, 0x660f537e, 0x48}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="380100001000010028bd700000010000fe880000000000000000000000000001fc010000000000000000000000000002000115b24e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d4330000007f000001020000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0100000000000000ffffffffffffffff00000000000000002300000000000000feffffffffffffff02000000fcffffff000000002abd70000435000002000100200000000000000048000100686d6163287368613235362900"/240], 0x138}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x784, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x3, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfe, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008d00000000000000c50e000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100ffffffff950000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000180100007832dfdf0e1563696c6c2500000077002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1002, &(0x7f0000000440)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 588.295194ms ago: executing program 0 (id=2750): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x54) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x890) 464.947079ms ago: executing program 1 (id=2751): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="00300000000000003c001a803800048034"], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="0e96ccbbfde984b75b06a36215aa4bf479d564fa81dfe16d040066c814444a9250883ea3cb0087043bbcf43423c8e141b079b7aaa57fd8bb4e76a40d5718f6c03fbb7e028bd2c0f0b2e4eefe99ccd50fef", @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000006c0)={'caif0\x00', &(0x7f0000000540)=@ethtool_regs={0x4, 0xff, 0x90, "1b7fc406b4b32de09a2e0c70ef709a82441600543b9fc6b244e464fa26dbd130b869f088445a791613ba53673c75ebcd9689a25b6ac42c2e56811ab1135af8d690c7c1904327ea62a5447299e979b4e5c7d20545968e16288993c5b89ae09d6b9cf686b4208d083ace05089d64b8c6dae00000e4d1af27227f85635c99ebd5fecd82ce5421039ff088954d007101da73"}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x7, 0x96a, 0x40, @empty, @mcast1, 0x700, 0xc0, 0xe45, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001a000ffc00ff03000100"/29], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 327.632925ms ago: executing program 0 (id=2752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 289.746715ms ago: executing program 4 (id=2753): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140010002200230700000000000000000400a980"], 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) 216.219245ms ago: executing program 1 (id=2754): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2020600) (async) unshare(0x2020600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x2000000, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x2000000, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001300230a28bd7000ffdbdfa500000000", @ANYRES32=0x0, @ANYBLOB="20a40300000000001400350076657468305f6d6163767461700000001800168014000180100002000356c7fa830f0000ffffff7f08002900d66b"], 0x54}, 0x1, 0x0, 0x0, 0x5b556efbb1a58058}, 0x44850) (async) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001300230a28bd7000ffdbdfa500000000", @ANYRES32=0x0, @ANYBLOB="20a40300000000001400350076657468305f6d6163767461700000001800168014000180100002000356c7fa830f0000ffffff7f08002900d66b"], 0x54}, 0x1, 0x0, 0x0, 0x5b556efbb1a58058}, 0x44850) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000240), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 156.109136ms ago: executing program 3 (id=2755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r9 = socket(0x400000000010, 0x1, 0x0) (rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 4 (id=2756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000060000000000000006006200c3a2adff0100000095"], &(0x7f0000000340)='syzkaller\x00', 0xb, 0x9e, &(0x7f0000000480)=""/158, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000002c0)='0\t', 0x2}], 0x2, 0x0, 0x0, 0x4000411}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0x752a}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): FAULT_INJECTION: forcing a failure. [ 268.623721][T11574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.623757][T11574] CPU: 1 UID: 0 PID: 11574 Comm: syz.3.1346 Not tainted syzkaller #0 PREEMPT(full) [ 268.623788][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.623801][T11574] Call Trace: [ 268.623810][T11574] [ 268.623819][T11574] dump_stack_lvl+0xe8/0x150 [ 268.623854][T11574] should_fail_ex+0x410/0x560 [ 268.623883][T11574] _copy_from_user+0x2d/0xb0 [ 268.623910][T11574] __sys_bpf+0x2e7/0xd90 [ 268.623948][T11574] ? __pfx___sys_bpf+0x10/0x10 [ 268.623984][T11574] ? __fget_files+0x2a/0x420 [ 268.624031][T11574] ? ksys_write+0x242/0x270 [ 268.624063][T11574] ? __pfx_ksys_write+0x10/0x10 [ 268.624098][T11574] __x64_sys_bpf+0xba/0xd0 [ 268.624122][T11574] do_syscall_64+0x166/0x520 [ 268.624147][T11574] ? trace_irq_disable+0x3b/0x140 [ 268.624167][T11574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.624188][T11574] ? clear_bhb_loop+0x70/0xc0 [ 268.624211][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.624230][T11574] RIP: 0033:0x7f5b90b9e159 [ 268.624250][T11574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.624267][T11574] RSP: 002b:00007f5b91a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.624299][T11574] RAX: ffffffffffffffda RBX: 00007f5b90e25fa0 RCX: 00007f5b90b9e159 [ 268.624313][T11574] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 268.624325][T11574] RBP: 00007f5b91a23090 R08: 0000000000000000 R09: 0000000000000000 [ 268.624337][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.624348][T11574] R13: 00007f5b90e26038 R14: 00007f5b90e25fa0 R15: 00007fffe6cc0418 [ 268.624380][T11574] [ 268.663840][T11570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.873902][T11573] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 269.289956][T11592] geneve4: entered promiscuous mode [ 269.767686][T11616] netlink: 'syz.4.1356': attribute type 1 has an invalid length. [ 269.768838][T11616] netlink: 'syz.4.1356': attribute type 3 has an invalid length. [ 269.768858][T11616] netlink: 'syz.4.1356': attribute type 16 has an invalid length. [ 270.005915][T11623] FAULT_INJECTION: forcing a failure. [ 270.005915][T11623] name failslab, interval 1, probability 0, space 0, times 0 [ 270.005939][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz.2.1358 Not tainted syzkaller #0 PREEMPT(full) [ 270.005953][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.005960][T11623] Call Trace: [ 270.005965][T11623] [ 270.005971][T11623] dump_stack_lvl+0xe8/0x150 [ 270.005992][T11623] should_fail_ex+0x410/0x560 [ 270.006009][T11623] should_failslab+0xa8/0x100 [ 270.006025][T11623] __kmalloc_noprof+0xfe/0x720 [ 270.006037][T11623] ? bpf_test_init+0x9f/0x150 [ 270.006052][T11623] ? bpf_test_init+0x9f/0x150 [ 270.006071][T11623] bpf_test_init+0x9f/0x150 [ 270.006090][T11623] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 270.006116][T11623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 270.006135][T11623] ? __fget_files+0x2a/0x420 [ 270.006153][T11623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 270.006171][T11623] bpf_prog_test_run+0x2c5/0x340 [ 270.006188][T11623] __sys_bpf+0xa22/0xd90 [ 270.006205][T11623] ? __pfx___sys_bpf+0x10/0x10 [ 270.006224][T11623] ? __fget_files+0x2a/0x420 [ 270.006249][T11623] ? ksys_write+0x242/0x270 [ 270.006266][T11623] ? __pfx_ksys_write+0x10/0x10 [ 270.006285][T11623] __x64_sys_bpf+0xba/0xd0 [ 270.006299][T11623] do_syscall_64+0x166/0x520 [ 270.006313][T11623] ? trace_irq_disable+0x3b/0x140 [ 270.006324][T11623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.006336][T11623] ? clear_bhb_loop+0x70/0xc0 [ 270.006350][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.006361][T11623] RIP: 0033:0x7fdb4df9e159 [ 270.006373][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.006385][T11623] RSP: 002b:00007fdb4c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.006401][T11623] RAX: ffffffffffffffda RBX: 00007fdb4e225fa0 RCX: 00007fdb4df9e159 [ 270.006410][T11623] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 270.006418][T11623] RBP: 00007fdb4c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.006425][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.006432][T11623] R13: 00007fdb4e226038 R14: 00007fdb4e225fa0 R15: 00007fff682767d8 [ 270.006451][T11623] [ 270.191361][T11597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.736839][T11639] bond6: option miimon: invalid value (18446744073357230079) [ 270.736868][T11639] bond6: option miimon: allowed values 0 - 2147483647 [ 270.762755][T11639] bond6 (unregistering): Released all slaves [ 270.998481][T11660] netlink: 'syz.3.1366': attribute type 11 has an invalid length. [ 271.107392][T11662] FAULT_INJECTION: forcing a failure. [ 271.107392][T11662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.107426][T11662] CPU: 0 UID: 0 PID: 11662 Comm: syz.2.1369 Not tainted syzkaller #0 PREEMPT(full) [ 271.107448][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.107458][T11662] Call Trace: [ 271.107466][T11662] [ 271.107475][T11662] dump_stack_lvl+0xe8/0x150 [ 271.107508][T11662] should_fail_ex+0x410/0x560 [ 271.107537][T11662] _copy_from_user+0x2d/0xb0 [ 271.107563][T11662] bpf_test_init+0xd8/0x150 [ 271.107598][T11662] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 271.107646][T11662] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 271.107683][T11662] ? __fget_files+0x2a/0x420 [ 271.107716][T11662] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 271.107749][T11662] bpf_prog_test_run+0x2c5/0x340 [ 271.107779][T11662] __sys_bpf+0xa22/0xd90 [ 271.107811][T11662] ? __pfx___sys_bpf+0x10/0x10 [ 271.107848][T11662] ? __fget_files+0x2a/0x420 [ 271.107894][T11662] ? ksys_write+0x242/0x270 [ 271.107927][T11662] ? __pfx_ksys_write+0x10/0x10 [ 271.107973][T11662] __x64_sys_bpf+0xba/0xd0 [ 271.107997][T11662] do_syscall_64+0x166/0x520 [ 271.108021][T11662] ? trace_irq_disable+0x3b/0x140 [ 271.108042][T11662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.108062][T11662] ? clear_bhb_loop+0x70/0xc0 [ 271.108087][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.108106][T11662] RIP: 0033:0x7fdb4df9e159 [ 271.108125][T11662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.108142][T11662] RSP: 002b:00007fdb4c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.108164][T11662] RAX: ffffffffffffffda RBX: 00007fdb4e225fa0 RCX: 00007fdb4df9e159 [ 271.108179][T11662] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 271.108191][T11662] RBP: 00007fdb4c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 271.108204][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.108216][T11662] R13: 00007fdb4e226038 R14: 00007fdb4e225fa0 R15: 00007fff682767d8 [ 271.108254][T11662] [ 271.512628][T11673] netlink: 'syz.2.1371': attribute type 11 has an invalid length. [ 271.512838][T11674] netlink: 'syz.2.1371': attribute type 11 has an invalid length. [ 271.683381][T11676] __nla_validate_parse: 17 callbacks suppressed [ 271.683414][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 272.118657][T11687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.586399][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1381'. [ 272.922078][T11719] netlink: 'syz.4.1384': attribute type 4 has an invalid length. [ 272.958930][T11719] openvswitch: netlink: IPv4 tun info is not correct [ 273.093945][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'. [ 273.187061][T11729] syzkaller0: entered promiscuous mode [ 273.187087][T11729] syzkaller0: entered allmulticast mode [ 273.383495][ T6203] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.988825][T11749] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1395'. [ 274.002115][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'. [ 274.071556][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 274.128641][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 274.431806][T11783] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1400'. [ 274.451144][T11783] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1400'. [ 274.524163][T11789] netlink: 'syz.2.1404': attribute type 1 has an invalid length. [ 274.525319][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 274.823087][T11809] netlink: 'syz.1.1405': attribute type 1 has an invalid length. [ 277.479513][T11802] veth6: entered allmulticast mode [ 277.495141][T11802] bond4: (slave veth6): Enslaving as an active interface with a down link [ 277.540293][T11809] bond2: (slave veth0_to_bond): Releasing active interface [ 277.578322][T11809] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 277.599370][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.869202][T11840] IPVS: set_ctl: invalid protocol: 38 0.0.0.0:20003 [ 278.173051][T11849] __nla_validate_parse: 27 callbacks suppressed [ 278.173076][T11849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1417'. [ 280.771170][T11833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.796013][T11843] netlink: 'syz.0.1416': attribute type 10 has an invalid length. [ 281.034542][T11860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1420'. [ 281.034580][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 281.391433][ T31] audit: type=1804 audit(1790173521.241:7): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1422" name="/newroot/297/memory.events" dev="tmpfs" ino=1546 res=1 errno=0 [ 281.444667][T11878] netlink: 'syz.4.1426': attribute type 8 has an invalid length. [ 281.457573][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 281.528020][T11878] veth11: entered allmulticast mode [ 281.544566][T11886] x_tables: duplicate underflow at hook 2 [ 281.652420][T11892] erspan0: left promiscuous mode [ 281.725293][T11892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.726991][T11892] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.782969][T11892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.892590][T11892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.892621][T11892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.896574][T11892] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 282.770187][T11933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1431'. [ 282.830978][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 282.873607][T11945] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.369206][T11961] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1441'. [ 283.515386][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 283.606450][T11976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'. [ 283.716695][T11981] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 283.768955][T11984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'. [ 283.819709][T11976] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1442'. [ 283.865138][T11981] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.925857][T11987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.944415][T11987] bond6: (slave batadv0): making interface the new active one [ 283.947701][T11987] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 284.286030][T11997] lo speed is unknown, defaulting to 1000 [ 284.715508][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'. [ 284.817135][T12024] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:0 [ 284.996421][T12038] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 284.996535][T12038] syzkaller0: linktype set to 8 [ 285.052252][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1458'. [ 285.743941][T12061] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1464'. [ 285.766039][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 285.766079][T12064] netlink: 'syz.3.1465': attribute type 10 has an invalid length. [ 285.766096][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'. [ 286.383771][T12093] lo speed is unknown, defaulting to 1000 [ 288.783111][T12068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.010086][T12107] netlink: 'syz.2.1477': attribute type 2 has an invalid length. [ 289.111531][T12113] __nla_validate_parse: 5 callbacks suppressed [ 289.111554][T12113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1477'. [ 289.293540][T12123] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1481'. [ 289.340186][T12107] : entered promiscuous mode [ 289.413725][T12123] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1481'. [ 289.427065][T12111] bond11: entered promiscuous mode [ 289.427689][T12111] 8021q: adding VLAN 0 to HW filter on device bond11 [ 289.444142][T12126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1481'. [ 289.734226][T12137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 290.163485][T12156] syzkaller0: entered promiscuous mode [ 290.163510][T12156] syzkaller0: entered allmulticast mode [ 290.469659][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'. [ 290.573204][T12180] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1497'. [ 290.823450][T12189] syzkaller0: entered promiscuous mode [ 290.823478][T12189] syzkaller0: entered allmulticast mode [ 290.893374][T12189] 0: reclassify loop, rule prio 0, protocol 700 [ 291.027596][T12193] xt_hashlimit: size too large, truncated to 1048576 [ 291.506999][T12207] syzkaller0: entered promiscuous mode [ 291.507027][T12207] syzkaller0: entered allmulticast mode [ 293.983683][T12226] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 294.008430][T12227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.054640][ T987] lo speed is unknown, defaulting to 1000 [ 294.054688][ T987] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 294.123662][T12235] lo speed is unknown, defaulting to 1000 [ 294.324132][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1518'. [ 294.378211][T12255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1518'. [ 294.378250][T12255] netlink: 'syz.0.1518': attribute type 4 has an invalid length. [ 294.378265][T12255] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 294.919479][T12278] netlink: 'syz.2.1521': attribute type 32 has an invalid length. [ 294.955316][T12268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.441715][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1524'. [ 295.541455][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 295.541521][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 295.618096][T12304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 295.618162][T12304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 295.676439][T12294] veth13: entered promiscuous mode [ 295.676464][T12294] veth13: entered allmulticast mode [ 295.677499][T12294] bridge2: port 1(veth13) entered blocking state [ 295.684088][T12294] bridge2: port 1(veth13) entered disabled state [ 295.699257][T12294] bridge2: port 1(veth13) entered blocking state [ 295.699381][T12294] bridge2: port 1(veth13) entered forwarding state [ 295.753791][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 295.753857][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 295.786833][T12304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 295.825331][T12292] veth15: entered promiscuous mode [ 295.825355][T12292] veth15: entered allmulticast mode [ 295.827438][T12292] bridge2: port 2(veth15) entered blocking state [ 295.827561][T12292] bridge2: port 2(veth15) entered disabled state [ 295.850742][T12292] bridge2: port 2(veth15) entered blocking state [ 295.850875][T12292] bridge2: port 2(veth15) entered forwarding state [ 295.903600][ T6203] bridge2: port 1(veth13) entered disabled state [ 295.905672][ T6203] bridge2: port 2(veth15) entered disabled state [ 296.138374][T12313] netlink: 'syz.0.1527': attribute type 11 has an invalid length. [ 296.825638][T12339] nbd: must specify at least one socket [ 297.158303][T12349] netlink: 'syz.0.1540': attribute type 83 has an invalid length. [ 297.813966][ T31] audit: type=1800 audit(1790173537.671:8): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1542" name="memory.events" dev="tmpfs" ino=1507 res=0 errno=0 [ 298.214096][T12391] netlink: 'syz.1.1550': attribute type 5 has an invalid length. [ 298.854406][T12418] openvswitch: netlink: Missing valid actions attribute. [ 298.854458][T12418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.365192][T12438] __nla_validate_parse: 15 callbacks suppressed [ 299.365241][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1567'. [ 299.494634][T12446] pim6reg1: entered promiscuous mode [ 299.494674][T12446] pim6reg1: entered allmulticast mode [ 299.604002][T12445] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 300.099085][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 300.417384][T12491] openvswitch: netlink: Flow actions attr not present in new flow. [ 300.489218][T12493] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20000 [ 301.127179][T12510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.288930][T12513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.312467][T12526] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 302.628288][T12532] x_tables: duplicate underflow at hook 2 [ 302.678527][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 303.188554][T12478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.313861][T12547] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1604'. [ 303.435780][T12549] x_tables: duplicate entry at hook 2 [ 303.441101][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 303.457681][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 303.461962][T12549] x_tables: duplicate entry at hook 2 [ 303.472221][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 303.477228][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 303.711687][T12560] netlink: 'syz.3.1609': attribute type 23 has an invalid length. [ 304.251177][T12574] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 304.251893][T12574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 304.565409][T12588] netlink: 'syz.4.1616': attribute type 1 has an invalid length. [ 304.565436][T12588] netlink: 'syz.4.1616': attribute type 2 has an invalid length. [ 305.139253][T12616] syzkaller1: entered promiscuous mode [ 305.139279][T12616] syzkaller1: entered allmulticast mode [ 305.189929][T12606] syzkaller0: entered promiscuous mode [ 305.189956][T12606] syzkaller0: entered allmulticast mode [ 305.498705][T12623] netlink: 'syz.2.1623': attribute type 1 has an invalid length. [ 305.498730][T12623] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1623'. [ 305.598321][T12623] geneve1: entered promiscuous mode [ 305.882528][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 306.124582][T12651] syzkaller0: entered promiscuous mode [ 306.124608][T12651] syzkaller0: entered allmulticast mode [ 306.168086][T12651] tipc: Enabled bearer , priority 0 [ 306.185888][T12651] tipc: Resetting bearer [ 306.222852][T12650] tipc: Resetting bearer [ 306.263497][T12659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1631'. [ 306.281493][T12650] tipc: Disabling bearer [ 306.299171][T12659] IPVS: set_ctl: invalid protocol: 0 172.20.20.23:20000 [ 306.439053][T12665] xt_TCPMSS: Only works on TCP SYN packets [ 306.457062][T12665] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 306.480697][T12667] syzkaller0: entered allmulticast mode [ 306.483309][T12667] tipc: Enabled bearer , priority 0 [ 306.506142][T12667] tipc: Resetting bearer [ 306.534918][T12663] tipc: Disabling bearer [ 306.717551][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'. [ 306.717588][T12678] veth0: entered promiscuous mode [ 306.717604][T12678] veth0: entered allmulticast mode [ 306.726310][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1640'. [ 307.166122][T12700] netlink: 'syz.2.1645': attribute type 2 has an invalid length. [ 307.294142][T12704] netlink: 'syz.4.1646': attribute type 2 has an invalid length. [ 307.338117][T12704] : entered promiscuous mode [ 307.577256][T12720] netlink: 'syz.4.1649': attribute type 10 has an invalid length. [ 307.625921][T12720] team0: Port device dummy0 added [ 307.649918][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1649'. [ 308.357027][T12751] veth1_macvtap: left promiscuous mode [ 308.357059][T12751] macsec0: entered promiscuous mode [ 308.358089][ T31] audit: type=1800 audit(1790173548.211:9): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1656" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1762 res=0 errno=0 [ 308.401334][T12751] veth1_macvtap: entered promiscuous mode [ 308.409967][T12751] macsec0: left promiscuous mode [ 308.802031][T12767] xt_hashlimit: max too large, truncated to 1048576 [ 308.802123][T12767] xt_hashlimit: overflow, try lower: 137438953472/8 [ 308.904205][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 309.082505][T12773] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1664'. [ 309.439886][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 309.439916][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 309.479389][T12762] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 310.812077][T12835] lo speed is unknown, defaulting to 1000 [ 312.148776][T12857] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 312.148803][T12857] netlink: 'syz.1.1683': attribute type 2 has an invalid length. [ 312.148817][T12857] netlink: 'syz.1.1683': attribute type 3 has an invalid length. [ 312.148829][T12857] __nla_validate_parse: 2 callbacks suppressed [ 312.148842][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 312.196946][T12857] netlink: 'syz.1.1683': attribute type 10 has an invalid length. [ 312.196987][T12857] syz_tun: entered promiscuous mode [ 312.225332][T12857] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 312.591250][T12874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1687'. [ 312.594372][T12875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1688'. [ 313.000214][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 313.193106][T12900] syzkaller0: entered promiscuous mode [ 313.193132][T12900] syzkaller0: entered allmulticast mode [ 313.406722][T12906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1693'. [ 314.243452][T12923] netlink: 'syz.2.1697': attribute type 10 has an invalid length. [ 314.546381][T12940] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 314.710882][T12951] netlink: 'syz.3.1702': attribute type 21 has an invalid length. [ 314.786747][T12951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1702'. [ 315.054578][T12951] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 315.071145][T12951] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 315.159164][T12966] FAULT_INJECTION: forcing a failure. [ 315.159164][T12966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.159200][T12966] CPU: 1 UID: 0 PID: 12966 Comm: syz.4.1706 Not tainted syzkaller #0 PREEMPT(full) [ 315.159223][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.159235][T12966] Call Trace: [ 315.159244][T12966] [ 315.159252][T12966] dump_stack_lvl+0xe8/0x150 [ 315.159288][T12966] should_fail_ex+0x410/0x560 [ 315.159318][T12966] _copy_from_iter+0x1d3/0x1660 [ 315.159342][T12966] ? __alloc_skb+0x27a/0x7a0 [ 315.159368][T12966] ? __alloc_skb+0x27a/0x7a0 [ 315.159403][T12966] ? __alloc_skb+0x27a/0x7a0 [ 315.159427][T12966] ? __pfx__copy_from_iter+0x10/0x10 [ 315.159449][T12966] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 315.159479][T12966] ? __alloc_skb+0x27a/0x7a0 [ 315.159499][T12966] ? __alloc_skb+0x27a/0x7a0 [ 315.159534][T12966] ? netlink_sendmsg+0x650/0xb40 [ 315.159553][T12966] ? skb_put+0x112/0x210 [ 315.159582][T12966] netlink_sendmsg+0x6c0/0xb40 [ 315.159612][T12966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.159641][T12966] ? apparmor_socket_sendmsg+0x98/0x360 [ 315.159667][T12966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.159686][T12966] sock_sendmsg_nosec+0x13a/0x180 [ 315.159711][T12966] ____sys_sendmsg+0x54e/0x850 [ 315.159745][T12966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.159783][T12966] ? import_iovec+0x73/0xa0 [ 315.159812][T12966] ___sys_sendmsg+0x2a5/0x360 [ 315.159838][T12966] ? __lock_acquire+0x747/0x2de0 [ 315.159865][T12966] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.159931][T12966] ? __fget_files+0x2a/0x420 [ 315.159958][T12966] ? __fget_files+0x3a2/0x420 [ 315.159996][T12966] __x64_sys_sendmsg+0x1b1/0x290 [ 315.160027][T12966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.160079][T12966] do_syscall_64+0x166/0x520 [ 315.160103][T12966] ? trace_irq_disable+0x3b/0x140 [ 315.160124][T12966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.160145][T12966] ? clear_bhb_loop+0x70/0xc0 [ 315.160168][T12966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.160185][T12966] RIP: 0033:0x7f140cd9e159 [ 315.160204][T12966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.160221][T12966] RSP: 002b:00007f140dbae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.160244][T12966] RAX: ffffffffffffffda RBX: 00007f140d025fa0 RCX: 00007f140cd9e159 [ 315.160259][T12966] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 315.160272][T12966] RBP: 00007f140dbae090 R08: 0000000000000000 R09: 0000000000000000 [ 315.160285][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.160296][T12966] R13: 00007f140d026038 R14: 00007f140d025fa0 R15: 00007ffeca606fd8 [ 315.160328][T12966] [ 315.346986][T12968] netlink: 'syz.0.1707': attribute type 21 has an invalid length. [ 315.347010][T12968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1707'. [ 315.467730][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 315.687681][T12951] Dev vda: unable to read RDB block 8 [ 315.688887][T12951] vda: unable to read partition table [ 316.965161][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'. [ 317.075083][T13037] syzkaller0: left promiscuous mode [ 317.075110][T13037] syzkaller0: left allmulticast mode [ 317.310077][T13041] syzkaller0: entered promiscuous mode [ 317.310106][T13041] syzkaller0: entered allmulticast mode [ 317.343317][T13049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1728'. [ 317.343346][T13049] openvswitch: netlink: Invalid VLAN frame [ 317.465471][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.515094][T13052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1730'. [ 317.768219][T13042] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 317.773939][ T1054] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.776177][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.776212][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.781376][ T1166] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.149745][T13069] gre0: entered promiscuous mode [ 318.149772][T13069] gre0: entered allmulticast mode [ 318.159571][T13069] netlink: 'syz.1.1733': attribute type 11 has an invalid length. [ 319.170840][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'. [ 319.853879][T13119] syzkaller0: entered promiscuous mode [ 319.853905][T13119] syzkaller0: entered allmulticast mode [ 319.865390][T13115] tipc: Started in network mode [ 319.865427][T13115] tipc: Node identity eaa446ace4f4, cluster identity 4711 [ 319.865689][T13115] tipc: Enabled bearer , priority 0 [ 319.904575][T13115] tipc: Resetting bearer [ 320.003029][T13123] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 320.006791][T13114] tipc: Resetting bearer [ 320.088299][T13123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1750'. [ 320.110137][T13114] tipc: Disabling bearer [ 320.148441][T13126] sysfs: cannot create duplicate filename '/class/ieee80211/.�PÑè'óG!DEÒSˆ' [ 320.148469][T13126] CPU: 0 UID: 0 PID: 13126 Comm: syz.2.1751 Not tainted syzkaller #0 PREEMPT(full) [ 320.148496][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.148507][T13126] Call Trace: [ 320.148515][T13126] [ 320.148526][T13126] dump_stack_lvl+0xe8/0x150 [ 320.148564][T13126] sysfs_warn_dup+0x8e/0xa0 [ 320.148599][T13126] sysfs_do_create_link_sd+0xc0/0x110 [ 320.148632][T13126] device_add_class_symlinks+0x1cf/0x240 [ 320.148659][T13126] device_add+0x467/0xb80 [ 320.148686][T13126] wiphy_register+0x1fc8/0x2ff0 [ 320.148727][T13126] ? __pfx_wiphy_register+0x10/0x10 [ 320.148749][T13126] ? __pfx_netdev_run_todo+0x10/0x10 [ 320.148779][T13126] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 320.148817][T13126] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 320.148846][T13126] ieee80211_register_hw+0x3d7c/0x4b40 [ 320.148887][T13126] ? ieee80211_register_hw+0x1991/0x4b40 [ 320.148943][T13126] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 320.148974][T13126] ? __asan_memset+0x22/0x50 [ 320.149008][T13126] ? __hrtimer_setup+0x1b7/0x260 [ 320.149036][T13126] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 320.149066][T13126] mac80211_hwsim_new_radio+0x3264/0x5720 [ 320.149132][T13126] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 320.149155][T13126] ? kstrndup+0xbd/0x160 [ 320.149186][T13126] ? kstrndup+0xbd/0x160 [ 320.149212][T13126] hwsim_new_radio_nl+0xd8b/0xf90 [ 320.149257][T13126] genl_family_rcv_msg_doit+0x233/0x340 [ 320.149330][T13126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.149375][T13126] ? bpf_lsm_capable+0x9/0x20 [ 320.149395][T13126] ? security_capable+0x7e/0x2c0 [ 320.149427][T13126] genl_rcv_msg+0x614/0x7a0 [ 320.149461][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.149486][T13126] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 320.149529][T13126] netlink_rcv_skb+0x226/0x4a0 [ 320.149561][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.149588][T13126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.149641][T13126] ? down_read+0x2be/0x330 [ 320.149676][T13126] genl_rcv+0x28/0x40 [ 320.149699][T13126] netlink_unicast+0x7bd/0x940 [ 320.149743][T13126] netlink_sendmsg+0x813/0xb40 [ 320.149777][T13126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.149807][T13126] ? apparmor_socket_sendmsg+0x98/0x360 [ 320.149835][T13126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.149854][T13126] sock_sendmsg_nosec+0x13a/0x180 [ 320.149881][T13126] ____sys_sendmsg+0x54e/0x850 [ 320.149918][T13126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.149959][T13126] ? import_iovec+0x73/0xa0 [ 320.149990][T13126] ___sys_sendmsg+0x2a5/0x360 [ 320.150018][T13126] ? __lock_acquire+0x747/0x2de0 [ 320.150046][T13126] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.150080][T13126] ? futex_wait+0x2a2/0x390 [ 320.150150][T13126] ? __fget_files+0x2a/0x420 [ 320.150179][T13126] ? __fget_files+0x3a2/0x420 [ 320.150221][T13126] __x64_sys_sendmsg+0x1b1/0x290 [ 320.150254][T13126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.150317][T13126] do_syscall_64+0x166/0x520 [ 320.150343][T13126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.150364][T13126] ? clear_bhb_loop+0x70/0xc0 [ 320.150392][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.150413][T13126] RIP: 0033:0x7fdb4df9e159 [ 320.150435][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.150451][T13126] RSP: 002b:00007fdb4c1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.150476][T13126] RAX: ffffffffffffffda RBX: 00007fdb4e225fa0 RCX: 00007fdb4df9e159 [ 320.150491][T13126] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 320.150505][T13126] RBP: 00007fdb4e03506b R08: 0000000000000000 R09: 0000000000000000 [ 320.150517][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.150530][T13126] R13: 00007fdb4e226038 R14: 00007fdb4e225fa0 R15: 00007fff682767d8 [ 320.150570][T13126] [ 321.071323][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 321.250216][T13165] bond14: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 321.277129][T13165] bond14 (unregistering): Released all slaves [ 321.636971][T13185] bond14: option arp_validate: invalid value (8192) [ 321.663621][T13185] bond14 (unregistering): Released all slaves [ 321.776860][T13192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.984263][T13173] 1·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 322.075786][T13200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1771'. [ 322.218604][T13213] netlink: 'syz.4.1773': attribute type 4 has an invalid length. [ 322.621392][T13231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1777'. [ 322.808204][T13242] syzkaller0: entered promiscuous mode [ 322.808230][T13242] syzkaller0: entered allmulticast mode [ 322.840460][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 322.907830][T13247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1780'. [ 322.939843][T13247] ipvlan0: entered promiscuous mode [ 322.947308][T13247] ipvlan0: left promiscuous mode [ 323.308344][T13266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1785'. [ 323.308385][T13266] netlink: 'syz.4.1785': attribute type 8 has an invalid length. [ 323.308400][T13266] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1785'. [ 323.628146][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 324.206004][T13286] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1792'. [ 324.206033][T13286] openvswitch: netlink: Flow key attr not present in new flow. [ 324.383806][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 324.449553][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 324.522525][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 325.123539][ T5635] Bluetooth: hci4: ISO packet too small [ 325.379737][T13329] syzkaller0: entered promiscuous mode [ 325.379765][T13329] syzkaller0: entered allmulticast mode [ 325.759413][T13357] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”à�I�ƺ¥þ àø§% [ 325.759720][T13349] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 325.759752][T13349] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 325.759788][T13349] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 325.899657][T13349] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 326.010275][T13349] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 326.356841][T13359] smbdirect: ib_dev[syz_device_name_32_chars_1234567] renamed to [sys] [ 326.985589][T13385] netlink: 'syz.1.1813': attribute type 10 has an invalid length. [ 327.815172][T13420] __nla_validate_parse: 4 callbacks suppressed [ 327.815195][T13420] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1824'. [ 328.025822][T13429] veth0_to_bond: entered allmulticast mode [ 328.053213][T13429] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1827'. [ 328.304150][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1828'. [ 328.456164][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.500764][T13440] bridge1: left promiscuous mode [ 328.501233][T13440] bridge0: port 1(macvlan2) entered disabled state [ 328.504458][T13440] geneve4: left promiscuous mode [ 328.513772][T13439] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1828'. [ 329.155089][T13461] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 329.269722][T13462] bond7: option xmit_hash_policy: invalid value (10) [ 329.312424][T13462] bond7 (unregistering): Released all slaves [ 329.487601][T13479] x_tables: duplicate underflow at hook 3 [ 329.487708][T13479] x_tables: duplicate underflow at hook 3 [ 329.487792][T13479] x_tables: duplicate underflow at hook 3 [ 329.487874][T13479] x_tables: duplicate underflow at hook 3 [ 329.487968][T13479] x_tables: duplicate underflow at hook 3 [ 329.488053][T13479] x_tables: duplicate underflow at hook 3 [ 329.488136][T13479] x_tables: duplicate underflow at hook 3 [ 329.488240][T13479] x_tables: duplicate underflow at hook 3 [ 329.488325][T13479] x_tables: duplicate underflow at hook 3 [ 329.488413][T13479] x_tables: duplicate underflow at hook 3 [ 329.527991][T13483] netlink: 'syz.3.1840': attribute type 2 has an invalid length. [ 329.528013][T13483] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1840'. [ 329.621037][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 329.685568][T13469] bond7: option xmit_hash_policy: invalid value (10) [ 329.711689][T13469] bond7 (unregistering): Released all slaves [ 329.905934][T13497] FAULT_INJECTION: forcing a failure. [ 329.905934][T13497] name failslab, interval 1, probability 0, space 0, times 0 [ 329.905968][T13497] CPU: 1 UID: 0 PID: 13497 Comm: syz.2.1842 Not tainted syzkaller #0 PREEMPT(full) [ 329.905990][T13497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.906004][T13497] Call Trace: [ 329.906013][T13497] [ 329.906022][T13497] dump_stack_lvl+0xe8/0x150 [ 329.906059][T13497] should_fail_ex+0x410/0x560 [ 329.906089][T13497] should_failslab+0xa8/0x100 [ 329.906115][T13497] ? security_inode_alloc+0x39/0x310 [ 329.906142][T13497] kmem_cache_alloc_noprof+0xa1/0x600 [ 329.906176][T13497] ? security_inode_alloc+0x39/0x310 [ 329.906210][T13497] security_inode_alloc+0x39/0x310 [ 329.906240][T13497] inode_init_always_gfp+0x97e/0xd30 [ 329.906274][T13497] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 329.906295][T13497] alloc_inode+0x82/0x1b0 [ 329.906323][T13497] new_inode+0x1f/0x170 [ 329.906355][T13497] __debugfs_create_file+0xb8/0x400 [ 329.906389][T13497] debugfs_create_file_full+0x3f/0x60 [ 329.906425][T13497] ref_tracker_dir_debugfs+0x197/0x360 [ 329.906454][T13497] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 329.906511][T13497] ? __kvmalloc_node_noprof+0x52f/0x820 [ 329.906535][T13497] ? __kvmalloc_node_noprof+0x345/0x820 [ 329.906563][T13497] ? __raw_spin_lock_init+0x45/0x100 [ 329.906592][T13497] alloc_netdev_mqs+0x275/0x12a0 [ 329.906620][T13497] ? __pfx_snprintf+0x10/0x10 [ 329.906639][T13497] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 329.906674][T13497] rtnl_create_link+0x321/0xd70 [ 329.906702][T13497] rtnl_newlink_create+0x258/0x7b0 [ 329.906736][T13497] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 329.906768][T13497] ? __pfx___mutex_lock+0x10/0x10 [ 329.906805][T13497] ? ns_capable+0x89/0xe0 [ 329.906837][T13497] rtnl_newlink+0x167a/0x1c30 [ 329.906890][T13497] ? __pfx_rtnl_newlink+0x10/0x10 [ 329.906911][T13497] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 329.906937][T13497] ? netlink_deliver_tap+0x19c/0x1b0 [ 329.906962][T13497] ? netlink_unicast+0x781/0x940 [ 329.906984][T13497] ? netlink_sendmsg+0x813/0xb40 [ 329.907001][T13497] ? sock_sendmsg_nosec+0x13a/0x180 [ 329.907019][T13497] ? ____sys_sendmsg+0x54e/0x850 [ 329.907043][T13497] ? ___sys_sendmsg+0x2a5/0x360 [ 329.907067][T13497] ? __x64_sys_sendmsg+0x1b1/0x290 [ 329.907092][T13497] ? do_syscall_64+0x166/0x520 [ 329.907114][T13497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.907182][T13497] ? kasan_quarantine_put+0xbb/0x1f0 [ 329.907202][T13497] ? lockdep_hardirqs_on+0x7b/0x110 [ 329.907232][T13497] ? nlmon_xmit+0xb0/0x100 [ 329.907252][T13497] ? kmem_cache_free+0x182/0x650 [ 329.907284][T13497] ? __lock_acquire+0x747/0x2de0 [ 329.907315][T13497] ? __dev_queue_xmit+0x29b/0x3820 [ 329.907349][T13497] ? __local_bh_enable_ip+0xd6/0x140 [ 329.907375][T13497] ? lockdep_hardirqs_on+0x7b/0x110 [ 329.907431][T13497] ? __pfx_rtnl_newlink+0x10/0x10 [ 329.907454][T13497] rtnetlink_rcv_msg+0x802/0xc00 [ 329.907484][T13497] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 329.907508][T13497] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.907536][T13497] ? __copy_skb_header+0xa3/0x4a0 [ 329.907579][T13497] netlink_rcv_skb+0x226/0x4a0 [ 329.907611][T13497] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.907638][T13497] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.907685][T13497] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.907715][T13497] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.907752][T13497] netlink_unicast+0x7bd/0x940 [ 329.907794][T13497] netlink_sendmsg+0x813/0xb40 [ 329.907826][T13497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.907856][T13497] ? apparmor_socket_sendmsg+0x98/0x360 [ 329.907891][T13497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.907909][T13497] sock_sendmsg_nosec+0x13a/0x180 [ 329.907935][T13497] ____sys_sendmsg+0x54e/0x850 [ 329.907969][T13497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.908008][T13497] ? import_iovec+0x73/0xa0 [ 329.908039][T13497] ___sys_sendmsg+0x2a5/0x360 [ 329.908064][T13497] ? __lock_acquire+0x747/0x2de0 [ 329.908092][T13497] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.908164][T13497] ? __fget_files+0x2a/0x420 [ 329.908190][T13497] ? __fget_files+0x3a2/0x420 [ 329.908231][T13497] __x64_sys_sendmsg+0x1b1/0x290 [ 329.908262][T13497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.908316][T13497] do_syscall_64+0x166/0x520 [ 329.908341][T13497] ? trace_irq_disable+0x3b/0x140 [ 329.908361][T13497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.908381][T13497] ? clear_bhb_loop+0x70/0xc0 [ 329.908407][T13497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.908427][T13497] RIP: 0033:0x7fdb4df9e159 [ 329.908447][T13497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.908463][T13497] RSP: 002b:00007fdb4c1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.908486][T13497] RAX: ffffffffffffffda RBX: 00007fdb4e225fa0 RCX: 00007fdb4df9e159 [ 329.908500][T13497] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 329.908512][T13497] RBP: 00007fdb4c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 329.908523][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.908534][T13497] R13: 00007fdb4e226038 R14: 00007fdb4e225fa0 R15: 00007fff682767d8 [ 329.908566][T13497] [ 329.989738][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1843'. [ 329.998430][T13501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1844'. [ 330.017606][T13501] sctp: [Deprecated]: syz.0.1844 (pid 13501) Use of int in max_burst socket option. [ 330.017606][T13501] Use struct sctp_assoc_value instead [ 330.028826][T13502] netlink: 'syz.0.1844': attribute type 10 has an invalid length. [ 330.117504][T13497] debugfs: out of free dentries, can not create file 'netdev@ffff888027d40700' [ 330.223416][T13502] team0 (unregistering): Port device team_slave_0 removed [ 330.384383][T13502] team0 (unregistering): Port device team_slave_1 removed [ 330.651070][T13528] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1850'. [ 330.656666][T13523] tipc: Cannot configure node identity twice [ 330.657750][T13524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1848'. [ 330.696836][T13530] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1849'. [ 331.189045][T13548] netlink: 'syz.0.1854': attribute type 27 has an invalid length. [ 331.189074][T13548] netlink: 'syz.0.1854': attribute type 4 has an invalid length. [ 331.857917][T13575] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 331.857943][T13575] netlink: 'syz.1.1862': attribute type 2 has an invalid length. [ 331.881421][T13575] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 331.881446][T13575] netlink: 'syz.1.1862': attribute type 2 has an invalid length. [ 331.981762][T13588] wg2 speed is unknown, defaulting to 1000 [ 331.981834][T13588] wg2 speed is unknown, defaulting to 1000 [ 332.059355][T13588] wg2 speed is unknown, defaulting to 1000 [ 332.074500][T13588] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 332.074576][T13588] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 332.074617][T13588] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 332.131637][T13588] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 332.186036][T13588] wg2 speed is unknown, defaulting to 1000 [ 332.198509][T13588] wg2 speed is unknown, defaulting to 1000 [ 332.209612][T13588] wg2 speed is unknown, defaulting to 1000 [ 332.222340][T13588] wg2 speed is unknown, defaulting to 1000 [ 332.229126][T13588] wg2 speed is unknown, defaulting to 1000 [ 332.927663][T13612] __nla_validate_parse: 2 callbacks suppressed [ 332.927687][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 332.927780][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 333.005312][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 333.005439][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 333.034993][T13606] batman_adv: batadv0: Adding interface: syzkaller0 [ 333.035013][T13606] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.035043][T13606] batman_adv: batadv0: Interface activated: syzkaller0 [ 333.038703][T13603] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 333.122432][T13603] batman_adv: batadv0: Removing interface: syzkaller0 [ 333.240231][T13623] pimreg: entered allmulticast mode [ 333.373385][T13623] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1876'. [ 333.509616][T13637] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 333.518750][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 333.519987][T13637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1879'. [ 333.520020][T13637] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 333.706299][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 333.706583][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 333.706825][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 333.810192][T13622] pimreg: left allmulticast mode [ 335.121453][T13701] bridge0: port 1(erspan0) entered blocking state [ 335.121894][T13701] bridge0: port 1(erspan0) entered disabled state [ 335.122071][T13701] erspan0: entered allmulticast mode [ 335.134630][T13701] erspan0: left allmulticast mode [ 335.173156][ T6011] s`z1: Port: 1 Link DOWN [ 335.239826][T13701] syzkaller1: entered promiscuous mode [ 335.239863][T13701] syzkaller1: entered allmulticast mode [ 335.366297][T13712] ip_tables: iptables: counters copy to user failed while replacing table [ 335.931305][T13727] netlink: 'syz.1.1900': attribute type 1 has an invalid length. [ 336.807726][T13761] bond0: (slave veth1_virt_wifi): Error: Device is in use and cannot be enslaved [ 337.185100][T13773] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 337.446872][T13792] ip_tables: iptables: counters copy to user failed while replacing table [ 337.692230][ T31] audit: type=1800 audit(1790173577.551:10): pid=13798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1919" name="memory.events" dev="tmpfs" ino=2074 res=0 errno=0 [ 337.911067][T13804] netlink: 'syz.2.1921': attribute type 1 has an invalid length. [ 338.016220][T13804] bond7: entered promiscuous mode [ 338.016739][T13804] 8021q: adding VLAN 0 to HW filter on device bond7 [ 338.061454][T13807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.071772][T13807] bond0: (slave gtp1): The slave device specified does not support setting the MAC address [ 338.072607][T13807] bond0: (slave gtp1): Error -95 calling set_mac_address [ 338.150512][T13775] netlink: 'syz.3.1915': attribute type 10 has an invalid length. [ 338.196643][T13809] 8021q: adding VLAN 0 to HW filter on device bond7 [ 338.200217][T13809] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 338.200247][T13809] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 338.248905][T13809] bond7: (slave ip6gre2): making interface the new active one [ 338.249202][T13809] ip6gre2: entered promiscuous mode [ 338.268724][T13809] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 338.408224][T13812] __nla_validate_parse: 36 callbacks suppressed [ 338.408247][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1924'. [ 338.502686][T13812] 8021q: adding VLAN 0 to HW filter on device bond8 [ 338.548672][T13815] pim6reg: entered allmulticast mode [ 339.057044][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 339.158221][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'. [ 339.173208][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'. [ 339.192657][T13846] netlink: 'syz.3.1934': attribute type 1 has an invalid length. [ 339.208190][T13853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1935'. [ 339.259568][T13855] bond3: entered promiscuous mode [ 339.259962][T13855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.295393][T13855] bridge5: entered promiscuous mode [ 339.296483][T13855] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 339.310226][T13858] netlink: 'syz.0.1936': attribute type 1 has an invalid length. [ 339.343805][T13853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1935'. [ 339.343832][T13853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1935'. [ 339.344373][T13853] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1935'. [ 339.344630][T13859] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1935'. [ 339.382071][ T50] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 339.500777][ T59] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 339.541176][T13864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1936'. [ 339.936094][T13854] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 339.965409][T13846] bridge6: entered promiscuous mode [ 339.965970][T13846] bond3: (slave bridge6): Enslaving as a backup interface with a down link [ 340.001481][T13858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 340.057239][T13861] bond7: (slave veth3): Enslaving as an active interface with a down link [ 340.109479][T13862] veth0: left promiscuous mode [ 340.109505][T13862] veth0: left allmulticast mode [ 340.136368][T13862] veth0_to_bond: left allmulticast mode [ 340.156559][T13862] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 340.169737][T13863] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 340.176982][T13863] bond7: (slave batadv2): making interface the new active one [ 340.185346][T13863] batadv2: entered promiscuous mode [ 340.194165][T13863] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 340.274978][T13846] bridge7: entered promiscuous mode [ 340.277406][T13846] bond3: (slave bridge7): Enslaving as a backup interface with a down link [ 340.278912][ T6007] s`z1: Port: 1 Link ACTIVE [ 340.794032][T13894] lo: entered promiscuous mode [ 340.794244][T13894] tunl0: entered promiscuous mode [ 340.794390][T13894] gre0: entered promiscuous mode [ 340.794518][T13894] gretap0: entered promiscuous mode [ 340.794643][T13894] erspan0: entered promiscuous mode [ 340.794815][T13894] ip_vti0: entered promiscuous mode [ 340.794984][T13894] ip6_vti0: entered promiscuous mode [ 340.795111][T13894] sit0: entered promiscuous mode [ 340.795241][T13894] ip6tnl0: entered promiscuous mode [ 340.795374][T13894] ip6gre0: entered promiscuous mode [ 340.799750][T13894] syz_tun: entered promiscuous mode [ 340.799958][T13894] ip6gretap0: entered promiscuous mode [ 340.800091][T13894] bridge0: entered promiscuous mode [ 340.800229][T13894] vcan0: entered promiscuous mode [ 340.841532][T13894] bond0: entered promiscuous mode [ 340.841672][T13894] team0: entered promiscuous mode [ 340.841839][T13894] dummy0: entered promiscuous mode [ 340.841995][T13894] nlmon0: entered promiscuous mode [ 340.842154][T13894] batadv0: entered promiscuous mode [ 340.855254][T13894] veth0: entered promiscuous mode [ 340.855475][T13894] veth1: entered promiscuous mode [ 340.855648][T13894] wg0: entered promiscuous mode [ 340.855813][T13894] wg1: entered promiscuous mode [ 340.858059][T13894] wg2: entered promiscuous mode [ 340.858209][T13894] veth0_to_bridge: entered promiscuous mode [ 340.858357][T13894] bridge_slave_0: entered promiscuous mode [ 340.862355][T13894] veth1_to_bridge: entered promiscuous mode [ 340.865892][T13894] bridge_slave_1: entered promiscuous mode [ 340.866049][T13894] veth0_to_bond: entered promiscuous mode [ 340.866420][T13894] bond_slave_0: entered promiscuous mode [ 340.866567][T13894] veth1_to_bond: entered promiscuous mode [ 340.866709][T13894] bond_slave_1: entered promiscuous mode [ 340.866861][T13894] veth0_to_team: entered promiscuous mode [ 340.867021][T13894] team_slave_0: entered promiscuous mode [ 340.867189][T13894] veth1_to_team: entered promiscuous mode [ 340.877390][T13894] team_slave_1: entered promiscuous mode [ 340.877570][T13894] veth0_to_batadv: entered promiscuous mode [ 340.877760][T13894] batadv_slave_0: entered promiscuous mode [ 340.877931][T13894] veth1_to_batadv: entered promiscuous mode [ 340.879305][T13894] batadv_slave_1: entered promiscuous mode [ 340.879453][T13894] xfrm0: entered promiscuous mode [ 340.879614][T13894] veth0_to_hsr: entered promiscuous mode [ 340.966025][T13894] veth1_to_hsr: entered promiscuous mode [ 341.062434][T13894] hsr0: entered promiscuous mode [ 341.081404][T13894] veth1_virt_wifi: entered promiscuous mode [ 341.116380][T13909] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 341.156023][T13894] veth0_virt_wifi: entered promiscuous mode [ 341.174280][T13894] virt_wifi0: entered promiscuous mode [ 341.174672][T13894] veth0_vlan: entered promiscuous mode [ 341.174840][T13894] vlan0: entered promiscuous mode [ 341.175182][T13894] vlan1: entered promiscuous mode [ 341.177331][T13894] veth1_vlan: left allmulticast mode [ 341.215598][T13894] macvlan1: entered promiscuous mode [ 341.217526][T13894] ipvlan0: entered promiscuous mode [ 341.238403][T13894] ipvlan1: entered promiscuous mode [ 341.246288][T13894] macvtap0: entered promiscuous mode [ 341.246506][T13894] geneve0: entered promiscuous mode [ 341.246979][T13894] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 341.247121][T13894] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 341.247249][T13894] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 341.249018][T13894] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 341.249195][T13894] macsec1: entered promiscuous mode [ 341.249331][T13894] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 341.249492][T13894] gre1: entered promiscuous mode [ 341.249625][T13894] ip6gre1: entered promiscuous mode [ 341.249759][T13894] geneve2: entered promiscuous mode [ 341.249927][T13894] geneve3: entered promiscuous mode [ 341.250084][T13894] veth2: entered promiscuous mode [ 341.250248][T13894] veth3: entered promiscuous mode [ 341.310863][T13894] mac80211_hwsim hwsim24 wlan3: entered promiscuous mode [ 341.311027][T13894] bond2: entered promiscuous mode [ 341.311251][T13894] gtp0: entered promiscuous mode [ 341.316055][T13894] bond3: entered promiscuous mode [ 341.356145][T13894] veth4: entered promiscuous mode [ 341.373510][T13894] mac80211_hwsim hwsim57 wlan4: entered promiscuous mode [ 341.404385][T13894] vsockmon0: entered promiscuous mode [ 341.407787][T13894] batman_adv: batadv0: Interface deactivated: macvlan2 [ 341.409417][T13894] macvlan2: entered promiscuous mode [ 341.480795][T13894] mac80211_hwsim hwsim61 wlan5: entered promiscuous mode [ 341.481779][T13894] bond5: entered promiscuous mode [ 341.481797][T13894] veth7: entered promiscuous mode [ 341.483506][T13894] veth6: entered promiscuous mode [ 341.488656][T13894] bond6: entered promiscuous mode [ 341.489426][T13894] syzkaller0: entered promiscuous mode [ 341.572557][T13894] dummy0.0: entered promiscuous mode [ 341.573126][T13894] xfrm1: entered promiscuous mode [ 341.610063][T13894] mac80211_hwsim hwsim70 wlan6: entered promiscuous mode [ 341.653053][T13894] bond8: entered promiscuous mode [ 341.659643][T13926] netlink: zone id is out of range [ 341.659660][T13926] netlink: zone id is out of range [ 341.659669][T13926] netlink: zone id is out of range [ 341.659676][T13926] netlink: zone id is out of range [ 341.659685][T13926] netlink: zone id is out of range [ 341.659692][T13926] netlink: zone id is out of range [ 341.666317][T13894] ip6tnl1: entered promiscuous mode [ 341.883286][T13914] bond8: (slave veth0_to_bond): making interface the new active one [ 341.884939][T13914] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 341.912942][T13916] macvlan4: entered promiscuous mode [ 341.912967][T13916] macvlan4: entered allmulticast mode [ 341.913699][T13916] bond8: entered promiscuous mode [ 341.913717][T13916] veth0_to_bond: entered promiscuous mode [ 341.914849][T13916] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 341.915664][T13916] bond8: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 341.915755][T13916] bond8: left promiscuous mode [ 341.915769][T13916] veth0_to_bond: left promiscuous mode [ 342.036933][T13935] bridge3: entered promiscuous mode [ 342.036950][T13935] bridge3: entered allmulticast mode [ 342.050900][T13935] team0: Port device bridge3 added [ 343.168280][T13981] netlink: 'syz.4.1967': attribute type 16 has an invalid length. [ 343.168309][T13981] netlink: 'syz.4.1967': attribute type 17 has an invalid length. [ 343.675548][T13981] bridge0: port 3(veth0) entered disabled state [ 343.675907][T13981] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.676617][T13981] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.755777][T14007] af_packet: packet size is too long (32 > 22) [ 344.042906][T13981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.068959][T13981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.245076][T13981] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 344.451831][T13981] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 344.452337][T13981] ip6gretap1: left allmulticast mode [ 344.458056][T13981] bond6: left promiscuous mode [ 344.458072][T13981] bond6: left allmulticast mode [ 344.492423][T13981] veth11: left allmulticast mode [ 344.492853][T13981] bond11: left promiscuous mode [ 344.520471][T13981] bridge3: left promiscuous mode [ 344.520498][T13981] bridge3: left allmulticast mode [ 344.559778][T14008] syzkaller0: entered allmulticast mode [ 344.708354][ T1054] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.708394][ T1054] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 344.708419][ T1054] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.708475][ T1054] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.708500][ T1054] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 344.708524][ T1054] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.708571][ T1054] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.708595][ T1054] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 344.708618][ T1054] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.708652][ T1054] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.708676][ T1054] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 344.708700][ T1054] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.847977][T14020] netlink: 'syz.1.1974': attribute type 17 has an invalid length. [ 344.988455][T14020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.001576][T14020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.039814][T14030] netlink: 'syz.0.1978': attribute type 25 has an invalid length. [ 345.050700][T14030] xt_l2tp: v2 sid > 0xffff: 33554432 [ 345.092979][T14020] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.093009][T14020] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.104269][T14020] net_ratelimit: 500 callbacks suppressed [ 345.104287][T14020] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 345.148454][ T5982] wg2 speed is unknown, defaulting to 1000 [ 345.148496][ T5982] syz2: Port: 1 Link ACTIVE [ 345.200954][ T5978] syz_tun: tun_net_xmit 130 [ 345.304096][T14032] v: renamed from veth0_vlan [ 345.560444][T14041] tipc: Enabled bearer , priority 20 [ 345.830715][ T6011] syz_tun: tun_net_xmit 130 [ 345.861794][ T59] syz_tun: tun_net_xmit 86 [ 346.202733][T14055] __nla_validate_parse: 18 callbacks suppressed [ 346.202764][T14055] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1987'. [ 346.237549][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 346.246389][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1989'. [ 346.255545][T14061] netlink: 'syz.2.1989': attribute type 8 has an invalid length. [ 346.255935][T14061] sch_fq: defrate 0 ignored. [ 346.259038][T14062] openvswitch: netlink: IP tunnel dst address not specified [ 346.290687][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 346.610265][ T5984] tipc: Node number set to 961578782 [ 346.740388][ T5984] page_pool_release_retry() stalled pool shutdown: id 88, 1 inflight 60 sec [ 347.038678][ T6205] syz_tun: tun_net_xmit 90 [ 347.038980][ T6205] syz_tun: tun_net_xmit 70 [ 347.454763][T14092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1999'. [ 347.871694][ T6006] syz_tun: tun_net_xmit 90 [ 347.890545][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 348.665427][T14151] veth1_to_bond: entered allmulticast mode [ 348.668038][T14151] veth1_to_bond: entered promiscuous mode [ 348.668521][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 348.717464][T14151] veth1_to_bond (unregistering): left promiscuous mode [ 348.717512][T14151] veth1_to_bond (unregistering): left allmulticast mode [ 348.790934][T14151] bond0: (slave bond_slave_1): Releasing backup interface [ 348.863707][T14158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2016'. [ 349.307980][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 349.432442][T14172] macvlan2: left allmulticast mode [ 349.432472][T14172] dummy0: left allmulticast mode [ 349.433063][T14172] macvlan2: left promiscuous mode [ 349.433460][T14172] bridge0: port 1(macvlan2) entered disabled state [ 349.475395][T14172] bridge_slave_1: left promiscuous mode [ 349.475664][T14172] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.554936][T14182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2023'. [ 349.620189][T14177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 350.234800][T14212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 350.252634][T14212] gre0: entered promiscuous mode [ 350.252661][T14212] gre0: entered allmulticast mode [ 350.594540][T14229] syzkaller0: left promiscuous mode [ 350.594565][T14229] syzkaller0: left allmulticast mode [ 350.740556][ C1] syz_tun: tun_net_xmit 70 [ 351.295321][T14267] ip_tables: iptables: counters copy to user failed while replacing table [ 351.305864][T14267] netlink: 'syz.4.2046': attribute type 34 has an invalid length. [ 351.305889][T14267] __nla_validate_parse: 8 callbacks suppressed [ 351.305901][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 351.354783][T14267] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 351.504869][ T1054] batadv2: left promiscuous mode [ 351.655919][T14281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2049'. [ 351.862914][T14296] syzkaller0: entered promiscuous mode [ 351.862941][T14296] syzkaller0: entered allmulticast mode [ 351.889283][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 351.934361][T14290] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2051'. [ 351.934449][T14290] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2051'. [ 351.936295][T14300] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 352.729247][T14339] netlink: 'syz.0.2063': attribute type 1 has an invalid length. [ 352.977777][T14349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2068'. [ 353.045494][T14350] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2067'. [ 353.269697][T14364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2067'. [ 353.269742][T14364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2067'. [ 353.487760][T14361] tipc: Resetting bearer [ 353.538881][T14361] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 353.623695][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2074'. [ 354.855650][T14371] gre0: left promiscuous mode [ 354.856724][T14371] syz_tun: left promiscuous mode [ 354.870149][T14371] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 354.892204][ T6013] syz_tun: tun_net_xmit 90 [ 355.085826][T14401] netlink: 'syz.1.2081': attribute type 2 has an invalid length. [ 355.191791][T14401] : entered promiscuous mode [ 355.206794][T14405] sysfs: cannot create duplicate filename '/class/ieee80211/.�PÑè'óG!DEÒSˆ' [ 355.206816][T14405] CPU: 1 UID: 0 PID: 14405 Comm: syz.2.2082 Not tainted syzkaller #0 PREEMPT(full) [ 355.206841][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.206854][T14405] Call Trace: [ 355.206863][T14405] [ 355.206872][T14405] dump_stack_lvl+0xe8/0x150 [ 355.206911][T14405] sysfs_warn_dup+0x8e/0xa0 [ 355.206942][T14405] sysfs_do_create_link_sd+0xc0/0x110 [ 355.206977][T14405] device_add_class_symlinks+0x1cf/0x240 [ 355.207007][T14405] device_add+0x467/0xb80 [ 355.207031][T14405] wiphy_register+0x1fc8/0x2ff0 [ 355.207073][T14405] ? __pfx_wiphy_register+0x10/0x10 [ 355.207102][T14405] ? __pfx_netdev_run_todo+0x10/0x10 [ 355.207133][T14405] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 355.207174][T14405] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 355.207205][T14405] ieee80211_register_hw+0x3d7c/0x4b40 [ 355.207256][T14405] ? ieee80211_register_hw+0x1991/0x4b40 [ 355.207309][T14405] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 355.207338][T14405] ? __asan_memset+0x22/0x50 [ 355.207366][T14405] ? __hrtimer_setup+0x1b7/0x260 [ 355.207391][T14405] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 355.207420][T14405] mac80211_hwsim_new_radio+0x3264/0x5720 [ 355.207475][T14405] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 355.207499][T14405] ? kstrndup+0xbd/0x160 [ 355.207529][T14405] ? kstrndup+0xbd/0x160 [ 355.207551][T14405] hwsim_new_radio_nl+0xd8b/0xf90 [ 355.207594][T14405] genl_family_rcv_msg_doit+0x233/0x340 [ 355.207627][T14405] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 355.207665][T14405] ? bpf_lsm_capable+0x9/0x20 [ 355.207684][T14405] ? security_capable+0x7e/0x2c0 [ 355.207718][T14405] genl_rcv_msg+0x614/0x7a0 [ 355.207752][T14405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.207776][T14405] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 355.207817][T14405] netlink_rcv_skb+0x226/0x4a0 [ 355.207851][T14405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.207878][T14405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.207928][T14405] ? down_read+0x2be/0x330 [ 355.207963][T14405] genl_rcv+0x28/0x40 [ 355.207986][T14405] netlink_unicast+0x7bd/0x940 [ 355.208028][T14405] netlink_sendmsg+0x813/0xb40 [ 355.208060][T14405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.208100][T14405] ? apparmor_socket_sendmsg+0x98/0x360 [ 355.208128][T14405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.208146][T14405] sock_sendmsg_nosec+0x13a/0x180 [ 355.208171][T14405] ____sys_sendmsg+0x54e/0x850 [ 355.208208][T14405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.208249][T14405] ? import_iovec+0x73/0xa0 [ 355.208280][T14405] ___sys_sendmsg+0x2a5/0x360 [ 355.208308][T14405] ? __lock_acquire+0x747/0x2de0 [ 355.208336][T14405] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.208370][T14405] ? futex_wait+0x2a2/0x390 [ 355.208436][T14405] ? __fget_files+0x2a/0x420 [ 355.208464][T14405] ? __fget_files+0x3a2/0x420 [ 355.208505][T14405] __x64_sys_sendmsg+0x1b1/0x290 [ 355.208536][T14405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.208590][T14405] do_syscall_64+0x166/0x520 [ 355.208613][T14405] ? trace_irq_disable+0x3b/0x140 [ 355.208633][T14405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.208654][T14405] ? clear_bhb_loop+0x70/0xc0 [ 355.208679][T14405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.208699][T14405] RIP: 0033:0x7fdb4df9e159 [ 355.208720][T14405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.208739][T14405] RSP: 002b:00007fdb4c1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.208763][T14405] RAX: ffffffffffffffda RBX: 00007fdb4e225fa0 RCX: 00007fdb4df9e159 [ 355.208778][T14405] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 355.208791][T14405] RBP: 00007fdb4e03506b R08: 0000000000000000 R09: 0000000000000000 [ 355.208804][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.208816][T14405] R13: 00007fdb4e226038 R14: 00007fdb4e225fa0 R15: 00007fff682767d8 [ 355.208851][T14405] [ 355.300791][ T6013] syz_tun: tun_net_xmit 90 [ 355.750162][T14428] netlink: 'syz.2.2088': attribute type 1 has an invalid length. [ 355.765123][T14431] openvswitch: netlink: IP tunnel dst address not specified [ 356.144359][T14448] netlink: 'syz.1.2095': attribute type 2 has an invalid length. [ 356.148700][T14448] netlink: 'syz.1.2095': attribute type 4 has an invalid length. [ 356.207289][T14448] netlink: 'syz.1.2095': attribute type 4 has an invalid length. [ 356.456533][T14463] xt_check_table_hooks: 23 callbacks suppressed [ 356.456574][T14463] x_tables: duplicate underflow at hook 3 [ 356.562211][T14464] __nla_validate_parse: 5 callbacks suppressed [ 356.562234][T14464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2097'. [ 356.715987][T14468] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 357.067542][T14478] syzkaller0: entered promiscuous mode [ 357.067569][T14478] syzkaller0: entered allmulticast mode [ 357.372402][T14488] netlink: 'syz.0.2108': attribute type 1 has an invalid length. [ 357.372430][T14488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2108'. [ 357.423891][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 357.505295][T14498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.506901][T14503] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2115'. [ 357.531021][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 357.904298][T14514] bond15: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 358.001055][T14528] ip_tables: iptables: counters copy to user failed while replacing table [ 358.011000][T14514] bond15 (unregistering): Released all slaves [ 358.206629][ T31] audit: type=1800 audit(1790173598.061:11): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2123" name="memory.events" dev="tmpfs" ino=2135 res=0 errno=0 [ 358.424639][ C1] syz_tun: tun_net_xmit 70 [ 358.606191][T14522] bond15: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 358.628227][T14522] bond15 (unregistering): Released all slaves [ 358.826292][T14538] syzkaller0: entered promiscuous mode [ 358.826321][T14538] syzkaller0: entered allmulticast mode [ 360.186980][T14588] FAULT_INJECTION: forcing a failure. [ 360.186980][T14588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.187016][T14588] CPU: 1 UID: 0 PID: 14588 Comm: syz.0.2131 Not tainted syzkaller #0 PREEMPT(full) [ 360.187038][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.187049][T14588] Call Trace: [ 360.187057][T14588] [ 360.187066][T14588] dump_stack_lvl+0xe8/0x150 [ 360.187098][T14588] should_fail_ex+0x410/0x560 [ 360.187139][T14588] _copy_from_user+0x2d/0xb0 [ 360.187163][T14588] ___sys_sendmsg+0x1c6/0x360 [ 360.187187][T14588] ? __lock_acquire+0x747/0x2de0 [ 360.187211][T14588] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.187274][T14588] ? __fget_files+0x2a/0x420 [ 360.187297][T14588] ? __fget_files+0x3a2/0x420 [ 360.187332][T14588] __x64_sys_sendmsg+0x1b1/0x290 [ 360.187358][T14588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.187407][T14588] do_syscall_64+0x166/0x520 [ 360.187428][T14588] ? trace_irq_disable+0x3b/0x140 [ 360.187446][T14588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.187465][T14588] ? clear_bhb_loop+0x70/0xc0 [ 360.187488][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.187506][T14588] RIP: 0033:0x7f034e19e159 [ 360.187524][T14588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.187540][T14588] RSP: 002b:00007f034c3d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.187561][T14588] RAX: ffffffffffffffda RBX: 00007f034e426090 RCX: 00007f034e19e159 [ 360.187575][T14588] RDX: 0000000000000880 RSI: 0000200000000000 RDI: 0000000000000004 [ 360.187587][T14588] RBP: 00007f034c3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 360.187599][T14588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.187610][T14588] R13: 00007f034e426128 R14: 00007f034e426090 R15: 00007ffdca57b208 [ 360.187643][T14588] [ 362.060460][T14603] ip_tables: iptables: counters copy to user failed while replacing table [ 362.255818][ T31] audit: type=1800 audit(1790173602.111:12): pid=14619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2135" name="memory.events" dev="tmpfs" ino=2151 res=0 errno=0 [ 365.714387][T14658] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 365.716242][T14658] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 365.716269][T14658] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 365.878050][T14670] netlink: 'syz.1.2153': attribute type 1 has an invalid length. [ 366.010664][T14670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 366.276267][T14673] bond5: (slave veth8): Enslaving as an active interface with a down link [ 366.403046][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 366.466049][T14673] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 366.496632][T14673] bond5: (slave batadv1): making interface the new active one [ 366.504696][T14673] batadv1: entered promiscuous mode [ 366.553570][T14673] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 366.557166][T14702] ip_tables: iptables: counters copy to user failed while replacing table [ 366.764184][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'. [ 366.805773][ T31] audit: type=1800 audit(1790173606.661:13): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2157" name="memory.events" dev="tmpfs" ino=2167 res=0 errno=0 [ 366.993223][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2161'. [ 367.014237][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 367.014284][T14716] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2160'. [ 367.014303][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 367.524953][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2166'. [ 367.757643][T14750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2168'. [ 368.041488][T14756] ip_tables: iptables: counters copy to user failed while replacing table [ 368.123109][T14761] netlink: 'syz.0.2174': attribute type 21 has an invalid length. [ 368.123137][T14761] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2174'. [ 368.131761][ T31] audit: type=1800 audit(1790173607.981:14): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2172" name="memory.events" dev="tmpfs" ino=2233 res=0 errno=0 [ 368.268836][T14761] netlink: 'syz.0.2174': attribute type 4 has an invalid length. [ 368.268863][T14761] netlink: 'syz.0.2174': attribute type 3 has an invalid length. [ 368.268877][T14761] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2174'. [ 369.030104][T14799] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 369.666553][T14825] FAULT_INJECTION: forcing a failure. [ 369.666553][T14825] name failslab, interval 1, probability 0, space 0, times 0 [ 369.666589][T14825] CPU: 1 UID: 0 PID: 14825 Comm: syz.2.2194 Not tainted syzkaller #0 PREEMPT(full) [ 369.666614][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.666626][T14825] Call Trace: [ 369.666635][T14825] [ 369.666644][T14825] dump_stack_lvl+0xe8/0x150 [ 369.666679][T14825] should_fail_ex+0x410/0x560 [ 369.666709][T14825] should_failslab+0xa8/0x100 [ 369.666737][T14825] __kvmalloc_node_noprof+0x176/0x820 [ 369.666765][T14825] ? page_pool_create_percpu+0x2ef/0xc70 [ 369.666786][T14825] ? page_pool_create_percpu+0x2ef/0xc70 [ 369.666815][T14825] page_pool_create_percpu+0x2ef/0xc70 [ 369.666842][T14825] bpf_test_run_xdp_live+0x23a/0x1c20 [ 369.666877][T14825] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 369.666906][T14825] ? __mutex_unlock_slowpath+0x731/0x900 [ 369.666939][T14825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 369.666971][T14825] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 369.667001][T14825] ? bpf_dispatcher_xdp+0x800/0x1000 [ 369.667071][T14825] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 369.667102][T14825] ? _copy_from_user+0x94/0xb0 [ 369.667128][T14825] ? bpf_test_init+0x113/0x150 [ 369.667156][T14825] ? xdp_convert_md_to_buff+0x5b/0x330 [ 369.667190][T14825] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 369.667237][T14825] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.667272][T14825] ? __fget_files+0x2a/0x420 [ 369.667304][T14825] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.667339][T14825] bpf_prog_test_run+0x2c5/0x340 [ 369.667366][T14825] __sys_bpf+0xa22/0xd90 [ 369.667398][T14825] ? __pfx___sys_bpf+0x10/0x10 [ 369.667434][T14825] ? __fget_files+0x2a/0x420 [ 369.667481][T14825] ? ksys_write+0x242/0x270 [ 369.667521][T14825] ? __pfx_ksys_write+0x10/0x10 [ 369.667557][T14825] __x64_sys_bpf+0xba/0xd0 [ 369.667581][T14825] do_syscall_64+0x166/0x520 [ 369.667606][T14825] ? trace_irq_disable+0x3b/0x140 [ 369.667626][T14825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.667647][T14825] ? clear_bhb_loop+0x70/0xc0 [ 369.667673][T14825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.667693][T14825] RIP: 0033:0x7fdb4df9e159 [ 369.667713][T14825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.667731][T14825] RSP: 002b:00007fdb4c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.667754][T14825] RAX: ffffffffffffffda RBX: 00007fdb4e225fa0 RCX: 00007fdb4df9e159 [ 369.667769][T14825] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 369.667783][T14825] RBP: 00007fdb4c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 369.667796][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.667808][T14825] R13: 00007fdb4e226038 R14: 00007fdb4e225fa0 R15: 00007fff682767d8 [ 369.667843][T14825] [ 369.684645][T14827] žÿ: renamed from team_slave_1 (while UP) [ 369.813779][T14825] page_pool_create_percpu() gave up with errno -12 [ 370.076742][T14839] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 370.076783][T14839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.123606][T14838] xt_CT: No such helper "snmp_trap" [ 370.147506][T14841] netlink: 'syz.0.2199': attribute type 1 has an invalid length. [ 370.216624][ T9074] tipc: Subscription rejected, illegal request [ 370.278542][T14841] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.602092][T14859] tipc: Enabling of bearer rejected, failed to enable media [ 370.818403][T14872] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 370.966902][T14874] 8021q: adding VLAN 0 to HW filter on device bond15 [ 370.993538][T14874] team0: Port device bond15 added [ 371.066517][T14879] netlink: 'syz.3.2209': attribute type 1 has an invalid length. [ 371.128227][T14879] bond5: entered promiscuous mode [ 371.128911][T14879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 371.214358][T14882] veth9: entered allmulticast mode [ 371.246114][T14882] bond5: (slave veth9): making interface the new active one [ 371.246142][T14882] veth9: entered promiscuous mode [ 371.276262][T14882] bond5: (slave veth9): Enslaving as an active interface with an up link [ 371.732911][T14901] netlink: 'syz.4.2215': attribute type 21 has an invalid length. [ 371.732937][T14901] __nla_validate_parse: 6 callbacks suppressed [ 371.732958][T14901] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2215'. [ 371.733039][T14901] netlink: 'syz.4.2215': attribute type 4 has an invalid length. [ 371.733052][T14901] netlink: 'syz.4.2215': attribute type 3 has an invalid length. [ 371.733064][T14901] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2215'. [ 371.788923][T14903] batman_adv: batadv0: Adding interface: syzkaller0 [ 371.788946][T14903] batman_adv: batadv0: Interface activated: syzkaller0 [ 371.859088][ T5982] lo speed is unknown, defaulting to 1000 [ 371.926127][T14906] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 371.926152][T14906] netlink: 'syz.0.2217': attribute type 12 has an invalid length. [ 371.926165][T14906] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2217'. [ 372.003232][T14908] tipc: Failed to remove unknown binding: 66,0,0/0:2796122806/2796122808 [ 372.003266][T14908] tipc: Failed to remove unknown binding: 66,0,0/0:2796122806/2796122807 [ 372.003943][T14908] tipc: Failed to remove unknown binding: 66,0,0/0:2796122806/2796122808 [ 372.003969][T14908] tipc: Failed to remove unknown binding: 66,0,0/0:2796122806/2796122807 [ 372.355433][T14933] IPVS: rr: UDP [::1]:8080 - no destination available [ 372.680955][T14947] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2226'. [ 372.853554][T14956] syzkaller0: entered promiscuous mode [ 372.853579][T14956] syzkaller0: entered allmulticast mode [ 372.905088][T14958] sysfs: cannot create duplicate filename '/class/ieee80211/.�PÑè'óG!DEÒSˆ' [ 372.905117][T14958] CPU: 0 UID: 0 PID: 14958 Comm: syz.4.2229 Not tainted syzkaller #0 PREEMPT(full) [ 372.905145][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.905158][T14958] Call Trace: [ 372.905168][T14958] [ 372.905178][T14958] dump_stack_lvl+0xe8/0x150 [ 372.905218][T14958] sysfs_warn_dup+0x8e/0xa0 [ 372.905252][T14958] sysfs_do_create_link_sd+0xc0/0x110 [ 372.905288][T14958] device_add_class_symlinks+0x1cf/0x240 [ 372.905319][T14958] device_add+0x467/0xb80 [ 372.905345][T14958] wiphy_register+0x1fc8/0x2ff0 [ 372.905391][T14958] ? __pfx_wiphy_register+0x10/0x10 [ 372.905414][T14958] ? __pfx_netdev_run_todo+0x10/0x10 [ 372.905447][T14958] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 372.905486][T14958] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 372.905517][T14958] ieee80211_register_hw+0x3d7c/0x4b40 [ 372.905563][T14958] ? ieee80211_register_hw+0x1991/0x4b40 [ 372.905620][T14958] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 372.905652][T14958] ? __asan_memset+0x22/0x50 [ 372.905687][T14958] ? __hrtimer_setup+0x1b7/0x260 [ 372.905716][T14958] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 372.905747][T14958] mac80211_hwsim_new_radio+0x3264/0x5720 [ 372.905812][T14958] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 372.905836][T14958] ? kstrndup+0xbd/0x160 [ 372.905865][T14958] ? kstrndup+0xbd/0x160 [ 372.905888][T14958] hwsim_new_radio_nl+0xd8b/0xf90 [ 372.905933][T14958] genl_family_rcv_msg_doit+0x233/0x340 [ 372.905969][T14958] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 372.906026][T14958] ? bpf_lsm_capable+0x9/0x20 [ 372.906047][T14958] ? security_capable+0x7e/0x2c0 [ 372.906081][T14958] genl_rcv_msg+0x614/0x7a0 [ 372.906117][T14958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.906143][T14958] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 372.906186][T14958] netlink_rcv_skb+0x226/0x4a0 [ 372.906221][T14958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.906249][T14958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.906301][T14958] ? down_read+0x2be/0x330 [ 372.906337][T14958] genl_rcv+0x28/0x40 [ 372.906361][T14958] netlink_unicast+0x7bd/0x940 [ 372.906405][T14958] netlink_sendmsg+0x813/0xb40 [ 372.906438][T14958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.906471][T14958] ? apparmor_socket_sendmsg+0x98/0x360 [ 372.906497][T14958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.906517][T14958] sock_sendmsg_nosec+0x13a/0x180 [ 372.906549][T14958] ____sys_sendmsg+0x54e/0x850 [ 372.906586][T14958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.906627][T14958] ? import_iovec+0x73/0xa0 [ 372.906657][T14958] ___sys_sendmsg+0x2a5/0x360 [ 372.906679][T14958] ? __lock_acquire+0x747/0x2de0 [ 372.906707][T14958] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.906742][T14958] ? futex_wait+0x2a2/0x390 [ 372.906812][T14958] ? __fget_files+0x2a/0x420 [ 372.906841][T14958] ? __fget_files+0x3a2/0x420 [ 372.906883][T14958] __x64_sys_sendmsg+0x1b1/0x290 [ 372.906917][T14958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.906974][T14958] do_syscall_64+0x166/0x520 [ 372.907009][T14958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.907031][T14958] ? clear_bhb_loop+0x70/0xc0 [ 372.907060][T14958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.907082][T14958] RIP: 0033:0x7f140cd9e159 [ 372.907105][T14958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.907124][T14958] RSP: 002b:00007f140db8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.907150][T14958] RAX: ffffffffffffffda RBX: 00007f140d026090 RCX: 00007f140cd9e159 [ 372.907166][T14958] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 372.907180][T14958] RBP: 00007f140ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 372.907192][T14958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.907205][T14958] R13: 00007f140d026128 R14: 00007f140d026090 R15: 00007ffeca606fd8 [ 372.907243][T14958] [ 373.144465][ C1] syz_tun: tun_net_xmit 70 [ 373.651624][T14974] syz.4.2235 (14974) used obsolete PPPIOCDETACH ioctl [ 373.775659][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2236'. [ 373.882668][T14986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2236'. [ 373.983098][T14992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2238'. [ 374.094098][T14996] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2238'. [ 374.284039][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2241'. [ 374.306319][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2241'. [ 374.572422][T15019] sctp: [Deprecated]: syz.4.2244 (pid 15019) Use of int in max_burst socket option deprecated. [ 374.572422][T15019] Use struct sctp_assoc_value instead [ 374.580612][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 375.788159][T15069] lo speed is unknown, defaulting to 1000 [ 375.849357][T15069] wg2 speed is unknown, defaulting to 1000 [ 375.945829][T15078] Cannot find del_set index 0 as target [ 376.597007][T15100] ip_tables: iptables: counters copy to user failed while replacing table [ 376.825089][ T31] audit: type=1800 audit(1790173616.681:15): pid=15115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2270" name="memory.events" dev="tmpfs" ino=2456 res=0 errno=0 [ 377.501809][T15141] FAULT_INJECTION: forcing a failure. [ 377.501809][T15141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.501843][T15141] CPU: 0 UID: 0 PID: 15141 Comm: syz.2.2279 Not tainted syzkaller #0 PREEMPT(full) [ 377.501866][T15141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 377.501878][T15141] Call Trace: [ 377.501886][T15141] [ 377.501895][T15141] dump_stack_lvl+0xe8/0x150 [ 377.501926][T15141] should_fail_ex+0x410/0x560 [ 377.501955][T15141] _copy_from_user+0x2d/0xb0 [ 377.501982][T15141] kstrtouint_from_user+0xd6/0x180 [ 377.502012][T15141] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 377.502044][T15141] ? lock_acquire+0x115/0x350 [ 377.502072][T15141] proc_fail_nth_write+0x8e/0x210 [ 377.502093][T15141] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 377.502122][T15141] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 377.502142][T15141] vfs_write+0x296/0xba0 [ 377.502183][T15141] ? __pfx_vfs_write+0x10/0x10 [ 377.502214][T15141] ? __fget_files+0x2a/0x420 [ 377.502257][T15141] ? __fget_files+0x3a2/0x420 [ 377.502283][T15141] ? __fget_files+0x2a/0x420 [ 377.502322][T15141] ksys_write+0x150/0x270 [ 377.502354][T15141] ? __pfx_ksys_write+0x10/0x10 [ 377.502399][T15141] do_syscall_64+0x166/0x520 [ 377.502423][T15141] ? trace_irq_disable+0x3b/0x140 [ 377.502443][T15141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.502464][T15141] ? clear_bhb_loop+0x70/0xc0 [ 377.502491][T15141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.502511][T15141] RIP: 0033:0x7fdb4df5e98e [ 377.502532][T15141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 377.502549][T15141] RSP: 002b:00007fdb4c1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.502571][T15141] RAX: ffffffffffffffda RBX: 00007fdb4c1f66c0 RCX: 00007fdb4df5e98e [ 377.502586][T15141] RDX: 0000000000000001 RSI: 00007fdb4c1f60a0 RDI: 0000000000000008 [ 377.502599][T15141] RBP: 00007fdb4c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.502611][T15141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.502623][T15141] R13: 00007fdb4e226038 R14: 00007fdb4e225fa0 R15: 00007fff682767d8 [ 377.502659][T15141] [ 377.561500][ T12] batadv1: left promiscuous mode [ 377.817188][T15147] __nla_validate_parse: 5 callbacks suppressed [ 377.817212][T15147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2281'. [ 377.817235][T15147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2281'. [ 377.821436][T15147] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 377.824080][T15148] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 377.884129][T15151] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2281'. [ 377.954159][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2281'. [ 378.539971][T15183] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2286'. [ 378.620910][T15195] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2289'. [ 378.907525][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.854596][T15227] syzkaller0: entered promiscuous mode [ 379.854623][T15227] syzkaller0: entered allmulticast mode [ 380.306676][T15233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.429775][T15241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2298'. [ 380.429799][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'. [ 380.439880][T15241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2298'. [ 380.439902][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'. [ 380.545669][T15243] syzkaller0: entered promiscuous mode [ 380.545694][T15243] syzkaller0: entered allmulticast mode [ 381.478299][T15280] syzkaller0: mtu less than device minimum [ 381.478417][T15281] syzkaller0: mtu less than device minimum [ 381.848835][T15262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.204361][T15337] ip_tables: iptables: counters copy to user failed while replacing table [ 383.232325][T15340] tipc: Enabled bearer , priority 0 [ 383.234775][T15340] syzkaller0: mtu less than device minimum [ 383.511960][ T31] audit: type=1800 audit(1790173623.371:16): pid=15349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2324" name="memory.events" dev="tmpfs" ino=2458 res=0 errno=0 [ 383.799474][T15361] netlink: 'syz.4.2329': attribute type 30 has an invalid length. [ 384.354572][ T6013] tipc: Node number set to 1562336034 [ 384.462527][T15386] netlink: 'syz.2.2336': attribute type 1 has an invalid length. [ 384.619991][T15388] netlink: 'syz.1.2337': attribute type 1 has an invalid length. [ 384.620016][T15388] __nla_validate_parse: 126 callbacks suppressed [ 384.620028][T15388] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2337'. [ 384.638746][T15389] netlink: 'syz.1.2337': attribute type 1 has an invalid length. [ 384.638768][T15389] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2337'. [ 384.705583][T15388] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 384.892239][T15397] syzkaller1: entered promiscuous mode [ 384.892263][T15397] syzkaller1: entered allmulticast mode [ 384.897427][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2340'. [ 385.241504][T15406] netdevsim0: mtu less than device minimum [ 385.682520][T15444] ip_tables: iptables: counters copy to user failed while replacing table [ 385.732182][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2350'. [ 386.139628][T15464] ip_tables: iptables: counters copy to user failed while replacing table [ 386.263969][T15465] syzkaller0: entered promiscuous mode [ 386.263995][T15465] syzkaller0: entered allmulticast mode [ 386.348267][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 386.445536][T15469] syzkaller1: entered promiscuous mode [ 386.445563][T15469] syzkaller1: entered allmulticast mode [ 386.558572][T15478] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 387.169868][T15506] netlink: 'syz.1.2367': attribute type 1 has an invalid length. [ 387.181841][T15507] netlink: 'syz.1.2367': attribute type 1 has an invalid length. [ 387.304851][T15511] ip_tables: iptables: counters copy to user failed while replacing table [ 390.243898][T15505] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 390.255846][T15514] bridge6: entered promiscuous mode [ 390.326647][T15515] bridge6: entered promiscuous mode [ 390.378185][T15518] bridge6: entered promiscuous mode [ 390.414736][T15542] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2374'. [ 390.414764][T15542] openvswitch: netlink: Message has 512 unknown bytes. [ 390.416290][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 391.668828][T15593] syzkaller0: entered promiscuous mode [ 391.668853][T15593] syzkaller0: entered allmulticast mode [ 391.673108][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2390'. [ 391.680954][T15599] tipc: Enabled bearer , priority 0 [ 391.681297][T15593] tipc: Enabling of bearer rejected, already enabled [ 391.724285][T15592] tipc: Resetting bearer [ 391.809619][T15592] tipc: Disabling bearer [ 392.003059][T15612] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2393'. [ 392.493654][T15633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2402'. [ 392.669938][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 392.856175][T15644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.077669][T15657] tipc: Enabling of bearer rejected, failed to enable media [ 393.215361][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'. [ 393.354917][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 393.395597][T15670] xt_hashlimit: size too large, truncated to 1048576 [ 393.525231][T15677] Bluetooth: MGMT ver 1.23 [ 393.708958][T15684] netlink: 380 bytes leftover after parsing attributes in process `syz.3.2417'. [ 393.708988][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 394.119780][T15700] 8021q: VLANs not supported on ip6tnl0 [ 394.130547][T15697] syzkaller1: entered promiscuous mode [ 394.130574][T15697] syzkaller1: entered allmulticast mode [ 394.261521][T15704] netlink: 'syz.1.2420': attribute type 32 has an invalid length. [ 395.658850][T15768] syzkaller0: left promiscuous mode [ 395.658876][T15768] syzkaller0: left allmulticast mode [ 396.242189][T15785] __nla_validate_parse: 5 callbacks suppressed [ 396.242213][T15785] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2441'. [ 396.652612][T15804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2447'. [ 396.652989][T15808] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2447'. [ 396.826866][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 396.826891][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2451'. [ 397.420600][T15836] netlink: 'syz.3.2452': attribute type 4 has an invalid length. [ 397.420618][T15836] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2452'. [ 397.477515][T15836] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 397.761695][T15848] x_tables: duplicate entry at hook 1 [ 397.929122][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'. [ 397.929150][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2458'. [ 399.203330][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 399.203383][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 399.229733][T15869] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 399.425442][T15871] IPVS: Scheduler module ip_vs_sip not found [ 400.660626][ C1] syz_tun: tun_net_xmit 70 [ 400.849899][T15881] ip6gre1: entered promiscuous mode [ 400.849923][T15881] ip6gre1: entered allmulticast mode [ 400.922337][ T6205] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.922591][ T6205] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.951114][ T5982] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.006293][T15893] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 401.110663][T15893] 8021q: adding VLAN 0 to HW filter on device bond10 [ 401.301471][T15905] ip_tables: iptables: counters copy to user failed while replacing table [ 401.337970][T15905] gre0: entered allmulticast mode [ 401.361454][T15905] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 401.397767][T15903] bridge0: left promiscuous mode [ 401.419075][T15903] ip_tables: iptables: counters copy to user failed while replacing table [ 401.432645][ T6004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.572445][T15895] syzkaller1: entered promiscuous mode [ 401.572471][T15895] syzkaller1: entered allmulticast mode [ 401.649975][T15921] syzkaller0: left promiscuous mode [ 401.650001][T15921] syzkaller0: left allmulticast mode [ 401.861967][ T6004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.156397][T15948] x_tables: ip_tables: osf match: only valid for protocol 6 [ 402.643668][T15976] __nla_validate_parse: 4 callbacks suppressed [ 402.643690][T15976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2489'. [ 402.643720][T15976] netlink: 'syz.1.2489': attribute type 8 has an invalid length. [ 402.643735][T15976] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2489'. [ 403.135137][T15997] ip_tables: iptables: counters copy to user failed while replacing table [ 403.454085][T15972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.606262][T16069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2506'. [ 404.958893][T16087] netlink: 'syz.1.2511': attribute type 34 has an invalid length. [ 404.958921][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 405.021596][T16091] netlink: 'syz.1.2511': attribute type 34 has an invalid length. [ 405.021622][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 405.175395][T16093] sctp: [Deprecated]: syz.4.2512 (pid 16093) Use of int in max_burst socket option deprecated. [ 405.175395][T16093] Use struct sctp_assoc_value instead [ 405.292556][T16096] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2513'. [ 405.292639][T16096] netlink: 'syz.0.2513': attribute type 9 has an invalid length. [ 405.292654][T16096] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2513'. [ 405.292670][T16096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2513'. [ 405.300571][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.623244][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'. [ 405.623476][T16104] tipc: Resetting bearer [ 405.694263][T16104] tipc: Disabling bearer [ 405.726339][T16106] syzkaller0: entered promiscuous mode [ 405.726366][T16106] syzkaller0: entered allmulticast mode [ 405.766105][T16117] netlink: 'syz.1.2518': attribute type 10 has an invalid length. [ 405.766131][T16117] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2518'. [ 405.808101][T16117] team0: Port device wg2 added [ 405.808427][ T5982] wg2 speed is unknown, defaulting to 1000 [ 405.808506][ T6004] wg2 speed is unknown, defaulting to 1000 [ 405.914232][T16111] batman_adv: batadv0: Adding interface: macvtap4 [ 405.914254][T16111] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.914282][T16111] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active [ 406.264955][T16135] netlink: 'syz.1.2523': attribute type 21 has an invalid length. [ 407.885888][T16200] bond17: Unable to set up delay as MII monitoring is disabled [ 407.914077][T16200] bond17 (unregistering): Released all slaves [ 408.028616][T16207] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 408.246780][T16225] ipt_REJECT: ECHOREPLY no longer supported. [ 408.571417][T16231] __nla_validate_parse: 4 callbacks suppressed [ 408.571441][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 408.594695][T16231] IPv6: sit3: Disabled Multicast RS [ 408.792309][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2541'. [ 408.792690][T16239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2541'. [ 408.792709][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 408.845334][T16242] C: renamed from veth1_to_team (while UP) [ 408.848788][T16242] netlink: 'syz.1.2541': attribute type 4 has an invalid length. [ 408.848812][T16242] netlink: 'syz.1.2541': attribute type 1 has an invalid length. [ 408.848825][T16242] netlink: 'syz.1.2541': attribute type 2 has an invalid length. [ 408.848838][T16242] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2541'. [ 408.849205][T16242] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 409.047737][T16245] netlink: 'syz.2.2543': attribute type 11 has an invalid length. [ 409.056580][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2543'. [ 409.153778][T16249] sctp: [Deprecated]: syz.2.2543 (pid 16249) Use of int in max_burst socket option. [ 409.153778][T16249] Use struct sctp_assoc_value instead [ 409.190253][T16248] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2544'. [ 409.597890][T16272] netlink: 4564 bytes leftover after parsing attributes in process `syz.3.2551'. [ 409.598018][T16272] netlink: 4564 bytes leftover after parsing attributes in process `syz.3.2551'. [ 409.957399][T16292] netlink: Invalid conntrack timeout [ 409.957435][T16292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.007334][T16297] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2560'. [ 410.062112][T16297] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 410.329613][T16308] netlink: 'syz.4.2564': attribute type 1 has an invalid length. [ 410.371256][T16308] bond17: option mode: invalid value (9) [ 410.374173][T16308] bond17 (unregistering): Released all slaves [ 410.707528][T16317] syzkaller1: entered promiscuous mode [ 410.707563][T16317] syzkaller1: entered allmulticast mode [ 411.512510][T16346] syzkaller0: entered promiscuous mode [ 411.512536][T16346] syzkaller0: entered allmulticast mode [ 412.074043][T16365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.521396][T16382] netlink: 'syz.3.2580': attribute type 3 has an invalid length. [ 412.541467][T16388] netlink: 'syz.3.2580': attribute type 3 has an invalid length. [ 412.693077][T16390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.714083][T16390] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 413.016400][T16400] xt_CT: No such helper "snmp" [ 414.100547][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.988566][T16506] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 415.003569][T16504] __nla_validate_parse: 11 callbacks suppressed [ 415.003590][T16504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2612'. [ 415.008166][T16504] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2612'. [ 415.137851][T16511] netlink: 'syz.3.2615': attribute type 1 has an invalid length. [ 415.137898][T16511] netlink: 'syz.3.2615': attribute type 1 has an invalid length. [ 415.432362][T16533] IPv6: Can't replace route, no match found [ 415.432750][T16533] IPv6: Can't replace route, no match found [ 415.461864][ T6006] page_pool_release_retry() stalled pool shutdown: id 189, 1 inflight 60 sec [ 415.549022][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'. [ 415.570020][T16536] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2623'. [ 415.676816][ T31] audit: type=1804 audit(1790173655.531:17): pid=16546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2626" name="/newroot/529/cgroup.controllers" dev="tmpfs" ino=2739 res=1 errno=0 [ 415.677103][ T31] audit: type=1800 audit(1790173655.531:18): pid=16546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2626" name="cgroup.controllers" dev="tmpfs" ino=2739 res=0 errno=0 [ 416.031510][T16572] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 418.887489][T16568] bond0 (unregistering): Released all slaves [ 418.936084][T16572] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 419.335840][T16588] smbdirect: ib_dev[sys] removed [ 419.427117][T16608] syzkaller0: entered promiscuous mode [ 419.427144][T16608] syzkaller0: entered allmulticast mode [ 419.467660][T16608] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2635'. [ 419.517922][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2638'. [ 419.672947][T16628] syzkaller0: entered promiscuous mode [ 419.672972][T16628] syzkaller0: entered allmulticast mode [ 419.694385][T16619] netlink: 'syz.4.2639': attribute type 5 has an invalid length. [ 420.332321][T16649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2649'. [ 420.397405][T16650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2649'. [ 420.432101][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'. [ 420.494278][T16655] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 420.561986][T16660] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 420.586768][T16660] netlink: 'syz.1.2650': attribute type 1 has an invalid length. [ 420.773607][T16671] netlink: 'syz.3.2652': attribute type 40 has an invalid length. [ 420.816919][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'. [ 420.856450][T16675] ip_tables: iptables: counters copy to user failed while replacing table [ 420.866671][T16660] 8021q: adding VLAN 0 to HW filter on device bond10 [ 420.883633][T16652] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 420.887557][T16652] virtio_blk virtio5: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 421.013855][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 421.091967][T16679] ip6gre1: entered promiscuous mode [ 421.091990][T16679] ip6gre1: entered allmulticast mode [ 421.214407][T16686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2656'. [ 421.232284][T16673] bond10: (slave gretap1): making interface the new active one [ 421.234744][T16673] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 421.462719][T16693] netlink: 'syz.4.2659': attribute type 5 has an invalid length. [ 421.708777][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2661'. [ 421.893161][T16708] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2662'. [ 422.078331][T16715] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2664'. [ 422.123551][T16719] netlink: 'syz.3.2666': attribute type 2 has an invalid length. [ 422.364425][T16726] x_tables: duplicate entry at hook 1 [ 422.465497][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2668'. [ 422.535587][T16718] netlink: 'syz.2.2665': attribute type 10 has an invalid length. [ 422.622853][T16740] ip_tables: iptables: counters copy to user failed while replacing table [ 422.765774][ T31] audit: type=1800 audit(1790173662.621:19): pid=16741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2672" name="memory.events" dev="tmpfs" ino=2761 res=0 errno=0 [ 423.058425][ T31] audit: type=1804 audit(1790173662.911:20): pid=16752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2676" name="/newroot/553/cgroup.controllers" dev="tmpfs" ino=2874 res=1 errno=0 [ 423.058689][ T31] audit: type=1800 audit(1790173662.911:21): pid=16752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2676" name="cgroup.controllers" dev="tmpfs" ino=2874 res=0 errno=0 [ 423.124591][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.124617][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.155212][T16755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.441662][T16766] gre0: left allmulticast mode [ 423.471251][T16766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 423.805038][T16783] nbd1: detected capacity change from 0 to 63 [ 423.808314][T16783] vlan0: entered promiscuous mode [ 423.808336][T16783] bridge0: entered promiscuous mode [ 423.813303][ T1951] block nbd1: Send control failed (result -32) [ 423.813398][ T1951] block nbd1: Request send failed, requeueing [ 423.818898][ T5635] block nbd1: Receive control failed (result -32) [ 423.831393][ T1951] block nbd1: Dead connection, failed to find a fallback [ 423.831419][ T1951] block nbd1: shutting down sockets [ 423.831515][ T1951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.831593][ T1951] Buffer I/O error on dev nbd1, logical block 0, async page read [ 423.832206][ T1951] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 423.832235][ T1951] Buffer I/O error on dev nbd1, logical block 1, async page read [ 423.832325][ T1951] Buffer I/O error on dev nbd1, logical block 2, async page read [ 423.832339][ T1951] Buffer I/O error on dev nbd1, logical block 3, async page read [ 423.834164][ T1951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 423.834190][ T1951] Buffer I/O error on dev nbd1, logical block 0, async page read [ 423.834205][ T1951] Buffer I/O error on dev nbd1, logical block 1, async page read [ 423.834219][ T1951] Buffer I/O error on dev nbd1, logical block 2, async page read [ 423.834232][ T1951] Buffer I/O error on dev nbd1, logical block 3, async page read [ 423.834374][ T1951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 423.834396][ T1951] Buffer I/O error on dev nbd1, logical block 0, async page read [ 423.834410][ T1951] Buffer I/O error on dev nbd1, logical block 1, async page read [ 423.834560][ T1951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 423.834713][ T1951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 423.834890][ T1951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 423.835063][ T1951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 423.835218][ T1951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 423.835274][ T5642] ldm_validate_partition_table(): Disk read failed. [ 423.835357][ T1951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.838916][ T5642] Dev nbd1: unable to read RDB block 0 [ 423.841422][ T5642] nbd1: unable to read partition table [ 423.853301][ T5642] ldm_validate_partition_table(): Disk read failed. [ 423.854466][ T5642] Dev nbd1: unable to read RDB block 0 [ 423.857279][ T5642] nbd1: unable to read partition table [ 424.330381][T16788] netlink: 'syz.3.2688': attribute type 10 has an invalid length. [ 424.392993][T16799] netlink: NAT attribute has 8 unknown bytes [ 424.393033][T16799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.303177][T16838] syzkaller1: entered promiscuous mode [ 425.303203][T16838] syzkaller1: entered allmulticast mode [ 425.430105][T16843] __nla_validate_parse: 8 callbacks suppressed [ 425.430128][T16843] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2703'. [ 425.636097][T16847] netlink: 13439 bytes leftover after parsing attributes in process `syz.1.2705'. [ 426.087530][T16876] veth1_to_team: entered promiscuous mode [ 426.090149][T16876] veth1_to_team: left promiscuous mode [ 426.191966][ T50] wlan0: Trigger new scan to find an IBSS to join [ 426.671343][T16898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2717'. [ 426.913786][T16907] syzkaller0: entered promiscuous mode [ 426.913806][T16907] syzkaller0: entered allmulticast mode [ 426.953083][T16914] ip_tables: iptables: counters copy to user failed while replacing table [ 427.002432][T16912] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2721'. [ 427.053952][ T31] audit: type=1800 audit(1790173666.911:22): pid=16917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2722" name="memory.events" dev="tmpfs" ino=2689 res=0 errno=0 [ 427.412512][T16929] ip_tables: iptables: counters copy to user failed while replacing table [ 427.539309][ T31] audit: type=1800 audit(1790173667.391:23): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2726" name="memory.events" dev="tmpfs" ino=2933 res=0 errno=0 [ 427.879040][T16942] ip_tables: iptables: counters copy to user failed while replacing table [ 428.235783][T16949] netlink: 'syz.0.2728': attribute type 16 has an invalid length. [ 428.235809][T16949] netlink: 'syz.0.2728': attribute type 17 has an invalid length. [ 430.336528][T16948] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.441901][T16949] gre0: left promiscuous mode [ 430.441920][T16949] gre0: left allmulticast mode [ 430.455940][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.456072][T16949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.474117][T16949] veth0_vlan: left promiscuous mode [ 430.475851][T16949] veth0_vlan: entered promiscuous mode [ 430.477136][T16949] macvlan0: left promiscuous mode [ 430.486029][T16949] veth1_macvtap: left promiscuous mode [ 430.489268][T16949] veth0_macvtap: left promiscuous mode [ 430.493846][T16949] veth0_macvtap: entered promiscuous mode [ 430.497372][T16949] veth1_macvtap: entered promiscuous mode [ 430.568567][T16949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.592062][T16949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.593706][T16949] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 430.595428][T16949] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 430.625244][T16949] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 430.641288][T16949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.645219][T16949] ip6gretap0: entered promiscuous mode [ 430.679950][T16949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.686302][T16949] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.699021][T16949] macvtap3: left allmulticast mode [ 430.699049][T16949] veth0_to_bridge: left allmulticast mode [ 430.732501][T16949] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 430.766233][T16949] 8021q: adding VLAN 0 to HW filter on device bond8 [ 430.788121][T16949] 8021q: adding VLAN 0 to HW filter on device eth0 [ 430.803456][T16949] 8021q: adding VLAN 0 to HW filter on device eth1 [ 430.806189][T16949] 8021q: adding VLAN 0 to HW filter on device eth2 [ 430.808871][T16949] 8021q: adding VLAN 0 to HW filter on device eth3 [ 430.838611][T16949] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 430.839381][T16949] batman_adv: batadv0: Interface activated: macvtap4 [ 430.858736][T16949] ip6gre1: left promiscuous mode [ 430.858762][T16949] ip6gre1: left allmulticast mode [ 430.972546][ T9075] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.976965][ T9075] bond7: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 431.072103][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.072756][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.072799][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.144640][ T9075] wlan0: Trigger new scan to find an IBSS to join [ 431.297366][T16988] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2737'. [ 431.845959][T17017] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2741'. [ 432.020533][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.059517][ T6203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.391718][T17036] netlink: 'syz.3.2747': attribute type 9 has an invalid length. [ 432.458356][T17043] netlink: Setting conntrack mark requires 'commit' flag. [ 432.458396][T17043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.568998][T17034] wg2 speed is unknown, defaulting to 1000 [ 432.603896][T17036] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2747'. [ 432.768596][T17052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2752'. [ 432.996115][T17052] [ 432.998521][T17052] ====================================================== [ 433.005574][T17052] WARNING: possible circular locking dependency detected [ 433.012621][T17052] syzkaller #0 Not tainted [ 433.017058][T17052] ------------------------------------------------------ [ 433.024166][T17052] syz.0.2752/17052 is trying to acquire lock: [ 433.030231][T17052] ffff88802b77cf18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 433.039121][T17052] [ 433.039121][T17052] but task is already holding lock: [ 433.046517][T17052] ffff8880213662a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 433.056019][T17052] [ 433.056019][T17052] which lock already depends on the new lock. [ 433.056019][T17052] [ 433.066434][T17052] [ 433.066434][T17052] the existing dependency chain (in reverse order) is: [ 433.075454][T17052] [ 433.075454][T17052] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 433.083293][T17052] __mutex_lock+0x19d/0x1550 [ 433.088426][T17052] elevator_change+0x1af/0x480 [ 433.093769][T17052] elevator_set_none+0xb5/0x140 [ 433.099152][T17052] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 433.105497][T17052] nbd_start_device+0x189/0xb30 [ 433.110904][T17052] nbd_genl_connect+0x167d/0x1cd0 [ 433.116462][T17052] genl_family_rcv_msg_doit+0x233/0x340 [ 433.122538][T17052] genl_rcv_msg+0x614/0x7a0 [ 433.127566][T17052] netlink_rcv_skb+0x226/0x4a0 [ 433.132861][T17052] genl_rcv+0x28/0x40 [ 433.137468][T17052] netlink_unicast+0x7bd/0x940 [ 433.142761][T17052] netlink_sendmsg+0x813/0xb40 [ 433.148047][T17052] sock_sendmsg_nosec+0x13a/0x180 [ 433.153608][T17052] ____sys_sendmsg+0x54e/0x850 [ 433.158935][T17052] ___sys_sendmsg+0x2a5/0x360 [ 433.164171][T17052] __x64_sys_sendmsg+0x1b1/0x290 [ 433.169673][T17052] do_syscall_64+0x166/0x520 [ 433.174921][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.175150][T17062] syzkaller0: entered promiscuous mode [ 433.175171][T17062] syzkaller0: entered allmulticast mode [ 433.192410][T17052] [ 433.192410][T17052] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 433.201034][T17052] blk_alloc_queue+0x544/0x690 [ 433.206439][T17052] __blk_mq_alloc_disk+0x194/0x390 [ 433.212091][T17052] nbd_dev_add+0x494/0xb60 [ 433.217033][T17052] nbd_init+0x168/0x1f0 [ 433.221840][T17052] do_one_initcall+0x250/0x870 [ 433.227142][T17052] do_initcall_level+0x10a/0x1a0 [ 433.232706][T17052] do_initcalls+0x59/0xa0 [ 433.237567][T17052] kernel_init_freeable+0x29d/0x3e0 [ 433.243299][T17052] kernel_init+0x22/0x1d0 [ 433.248258][T17052] ret_from_fork+0x514/0xb70 [ 433.253380][T17052] ret_from_fork_asm+0x1a/0x30 [ 433.258775][T17052] [ 433.258775][T17052] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 433.266028][T17052] fs_reclaim_acquire+0x71/0x100 [ 433.271491][T17052] __kmalloc_cache_node_noprof+0x66/0x620 [ 433.277742][T17052] create_worker+0x112/0x7c0 [ 433.282869][T17052] workqueue_prepare_cpu+0xe4/0x170 [ 433.288686][T17052] cpuhp_invoke_callback+0x434/0x810 [ 433.294501][T17052] _cpu_up+0x2ce/0x5b0 [ 433.299097][T17052] cpu_up+0x1d2/0x220 [ 433.303612][T17052] cpuhp_bringup_mask+0xb2/0x1a0 [ 433.309194][T17052] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 433.315557][T17052] bringup_nonboot_cpus+0x17/0x30 [ 433.321122][T17052] smp_init+0x32/0x110 [ 433.325777][T17052] kernel_init_freeable+0x27f/0x3e0 [ 433.331614][T17052] kernel_init+0x22/0x1d0 [ 433.336471][T17052] ret_from_fork+0x514/0xb70 [ 433.341588][T17052] ret_from_fork_asm+0x1a/0x30 [ 433.346882][T17052] [ 433.346882][T17052] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 433.354650][T17052] cpus_read_lock+0x42/0x160 [ 433.359768][T17052] static_key_slow_inc+0x12/0x30 [ 433.365399][T17052] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 433.371731][T17052] nbd_genl_foreach_sock+0x265/0x450 [ 433.377979][T17052] nbd_genl_reconfigure+0xbbb/0x1040 [ 433.383984][T17052] genl_family_rcv_msg_doit+0x233/0x340 [ 433.390078][T17052] genl_rcv_msg+0x614/0x7a0 [ 433.395355][T17052] netlink_rcv_skb+0x226/0x4a0 [ 433.400681][T17052] genl_rcv+0x28/0x40 [ 433.405225][T17052] netlink_unicast+0x7bd/0x940 [ 433.410540][T17052] netlink_sendmsg+0x813/0xb40 [ 433.415844][T17052] sock_sendmsg_nosec+0x13a/0x180 [ 433.421398][T17052] ____sys_sendmsg+0x54e/0x850 [ 433.426777][T17052] ___sys_sendmsg+0x2a5/0x360 [ 433.431988][T17052] __x64_sys_sendmsg+0x1b1/0x290 [ 433.437451][T17052] do_syscall_64+0x166/0x520 [ 433.442572][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.449103][T17052] [ 433.449103][T17052] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 433.457215][T17052] __mutex_lock+0x19d/0x1550 [ 433.462450][T17052] nbd_queue_rq+0x373/0xff0 [ 433.467763][T17052] blk_mq_dispatch_rq_list+0x499/0x1990 [ 433.473849][T17052] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 433.480818][T17052] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 433.487350][T17052] blk_mq_run_work_fn+0x16c/0x300 [ 433.492908][T17052] process_scheduled_works+0xc3d/0x1630 [ 433.498983][T17052] worker_thread+0xa47/0xfb0 [ 433.504109][T17052] kthread+0x38b/0x480 [ 433.508711][T17052] ret_from_fork+0x514/0xb70 [ 433.513828][T17052] ret_from_fork_asm+0x1a/0x30 [ 433.519124][T17052] [ 433.519124][T17052] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 433.526343][T17052] __mutex_lock+0x19d/0x1550 [ 433.531483][T17052] nbd_queue_rq+0xc1/0xff0 [ 433.536447][T17052] blk_mq_dispatch_rq_list+0x499/0x1990 [ 433.542523][T17052] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 433.549378][T17052] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 433.555891][T17052] blk_mq_run_work_fn+0x16c/0x300 [ 433.561478][T17052] process_scheduled_works+0xc3d/0x1630 [ 433.567549][T17052] worker_thread+0xa47/0xfb0 [ 433.572668][T17052] kthread+0x38b/0x480 [ 433.577260][T17052] ret_from_fork+0x514/0xb70 [ 433.582369][T17052] ret_from_fork_asm+0x1a/0x30 [ 433.587661][T17052] [ 433.587661][T17052] -> #0 (set->srcu){.+.+}-{0:0}: [ 433.594820][T17052] __lock_acquire+0x164c/0x2de0 [ 433.600193][T17052] lock_sync+0xb3/0x130 [ 433.604878][T17052] __synchronize_srcu+0xc9/0x2f0 [ 433.610355][T17052] elevator_switch+0x1e8/0x7b0 [ 433.615640][T17052] elevator_change+0x2fa/0x480 [ 433.620928][T17052] elevator_set_default+0x375/0x440 [ 433.626649][T17052] blk_register_queue+0x3f3/0x4e0 [ 433.632284][T17052] __add_disk+0x6b8/0xdb0 [ 433.637156][T17052] add_disk_fwnode+0x100/0x3a0 [ 433.642619][T17052] nbd_dev_add+0x733/0xb60 [ 433.647905][T17052] nbd_genl_connect+0x96c/0x1cd0 [ 433.653363][T17052] genl_family_rcv_msg_doit+0x233/0x340 [ 433.659530][T17052] genl_rcv_msg+0x614/0x7a0 [ 433.664569][T17052] netlink_rcv_skb+0x226/0x4a0 [ 433.669859][T17052] genl_rcv+0x28/0x40 [ 433.674384][T17052] netlink_unicast+0x7bd/0x940 [ 433.679861][T17052] netlink_sendmsg+0x813/0xb40 [ 433.685403][T17052] sock_sendmsg_nosec+0x13a/0x180 [ 433.690988][T17052] ____sys_sendmsg+0x54e/0x850 [ 433.696295][T17052] ___sys_sendmsg+0x2a5/0x360 [ 433.701507][T17052] __x64_sys_sendmsg+0x1b1/0x290 [ 433.707068][T17052] do_syscall_64+0x166/0x520 [ 433.712193][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.718642][T17052] [ 433.718642][T17052] other info that might help us debug this: [ 433.718642][T17052] [ 433.728903][T17052] Chain exists of: [ 433.728903][T17052] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 433.728903][T17052] [ 433.742757][T17052] Possible unsafe locking scenario: [ 433.742757][T17052] [ 433.750229][T17052] CPU0 CPU1 [ 433.755616][T17052] ---- ---- [ 433.760988][T17052] lock(&q->elevator_lock); [ 433.765630][T17052] lock(&q->q_usage_counter(io)#49); [ 433.773532][T17052] lock(&q->elevator_lock); [ 433.780644][T17052] sync(set->srcu); [ 433.784539][T17052] [ 433.784539][T17052] *** DEADLOCK *** [ 433.784539][T17052] [ 433.792681][T17052] locks held by syz.0.2752/17052: 6, last CPU#0: [ 433.799183][T17052] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.807375][T17052] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 433.816362][T17052] #2: ffff888054ffe9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 433.826831][T17052] #3: ffff888021366330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 433.836701][T17052] #4: ffff888021365db8 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 433.847597][T17052] #5: ffff8880213662a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 433.857443][T17052] [ 433.857443][T17052] stack backtrace: [ 433.863351][T17052] CPU: 0 UID: 0 PID: 17052 Comm: syz.0.2752 Not tainted syzkaller #0 PREEMPT(full) [ 433.872733][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.882804][T17052] Call Trace: [ 433.886158][T17052] [ 433.889130][T17052] dump_stack_lvl+0xe8/0x150 [ 433.893753][T17052] print_circular_bug+0x2e2/0x300 [ 433.898791][T17052] check_noncircular+0x12f/0x150 [ 433.903767][T17052] __lock_acquire+0x164c/0x2de0 [ 433.908665][T17052] ? lockdep_unlock+0x5c/0xd0 [ 433.913373][T17052] ? __lock_acquire+0x1511/0x2de0 [ 433.918590][T17052] lock_sync+0xb3/0x130 [ 433.922776][T17052] ? __synchronize_srcu+0xb5/0x2f0 [ 433.927914][T17052] ? __synchronize_srcu+0xb5/0x2f0 [ 433.933131][T17052] __synchronize_srcu+0xc9/0x2f0 [ 433.938289][T17052] ? __pfx___synchronize_srcu+0x10/0x10 [ 433.944010][T17052] ? do_raw_spin_lock+0x12b/0x2f0 [ 433.949049][T17052] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 433.954862][T17052] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 433.960416][T17052] ? synchronize_srcu+0x20a/0x260 [ 433.965442][T17052] elevator_switch+0x1e8/0x7b0 [ 433.970221][T17052] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 433.976196][T17052] elevator_change+0x2fa/0x480 [ 433.981082][T17052] ? do_raw_spin_unlock+0xf5/0x200 [ 433.986245][T17052] elevator_set_default+0x375/0x440 [ 433.991621][T17052] ? __pfx_elevator_set_default+0x10/0x10 [ 433.997365][T17052] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 434.004398][T17052] ? blk_crypto_sysfs_register+0x11c/0x170 [ 434.010208][T17052] blk_register_queue+0x3f3/0x4e0 [ 434.015330][T17052] __add_disk+0x6b8/0xdb0 [ 434.019668][T17052] add_disk_fwnode+0x100/0x3a0 [ 434.024440][T17052] nbd_dev_add+0x733/0xb60 [ 434.029039][T17052] ? __pfx_nbd_dev_add+0x10/0x10 [ 434.033985][T17052] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 434.039802][T17052] ? bpf_lsm_capable+0x9/0x20 [ 434.044477][T17052] ? security_capable+0x7e/0x2c0 [ 434.049418][T17052] ? radix_tree_lookup+0x25c/0x290 [ 434.054536][T17052] nbd_genl_connect+0x96c/0x1cd0 [ 434.059485][T17052] ? __pfx_nbd_genl_connect+0x10/0x10 [ 434.064865][T17052] ? rcu_is_watching+0x16/0xb0 [ 434.069732][T17052] ? trace_kmalloc+0x2a/0xf0 [ 434.074328][T17052] ? __kmalloc_noprof+0x38c/0x720 [ 434.079370][T17052] ? __nla_parse+0x40/0x60 [ 434.083795][T17052] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 434.090215][T17052] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 434.096553][T17052] genl_family_rcv_msg_doit+0x233/0x340 [ 434.102285][T17052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 434.108369][T17052] ? __lock_acquire+0x747/0x2de0 [ 434.113311][T17052] genl_rcv_msg+0x614/0x7a0 [ 434.117820][T17052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.122846][T17052] ? __pfx_nbd_genl_connect+0x10/0x10 [ 434.128227][T17052] netlink_rcv_skb+0x226/0x4a0 [ 434.133049][T17052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.138075][T17052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.143384][T17052] ? down_read+0x2be/0x330 [ 434.147828][T17052] genl_rcv+0x28/0x40 [ 434.151818][T17052] netlink_unicast+0x7bd/0x940 [ 434.156610][T17052] netlink_sendmsg+0x813/0xb40 [ 434.161377][T17052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.166687][T17052] ? apparmor_socket_sendmsg+0x98/0x360 [ 434.172347][T17052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.177633][T17052] sock_sendmsg_nosec+0x13a/0x180 [ 434.182664][T17052] ____sys_sendmsg+0x54e/0x850 [ 434.187443][T17052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.192925][T17052] ? import_iovec+0x73/0xa0 [ 434.197467][T17052] ___sys_sendmsg+0x2a5/0x360 [ 434.202342][T17052] ? __lock_acquire+0x747/0x2de0 [ 434.207399][T17052] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.212643][T17052] ? futex_wait+0x2a2/0x390 [ 434.217202][T17052] ? __fget_files+0x2a/0x420 [ 434.221917][T17052] ? __fget_files+0x3a2/0x420 [ 434.226623][T17052] __x64_sys_sendmsg+0x1b1/0x290 [ 434.231586][T17052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.237072][T17052] do_syscall_64+0x166/0x520 [ 434.241675][T17052] ? trace_irq_disable+0x3b/0x140 [ 434.246702][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.252775][T17052] ? clear_bhb_loop+0x70/0xc0 [ 434.257461][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.263364][T17052] RIP: 0033:0x7f034e19e159 [ 434.267820][T17052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.287548][T17052] RSP: 002b:00007f034c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.296166][T17052] RAX: ffffffffffffffda RBX: 00007f034e425fa0 RCX: 00007f034e19e159 [ 434.304154][T17052] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 434.312152][T17052] RBP: 00007f034e23506b R08: 0000000000000000 R09: 0000000000000000 [ 434.320136][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.328286][T17052] R13: 00007f034e426038 R14: 00007f034e425fa0 R15: 00007ffdca57b208 [ 434.336272][T17052] [ 434.558024][ T5634] udevd[5634]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 440.341487][ T1314] ieee802154 phy1 wpan1: encryption failed: -22