last executing test programs: 5.55284646s ago: executing program 4 (id=3576): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000400000000000000000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4.611481967s ago: executing program 0 (id=3586): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@getchain={0x34, 0x66, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xe}, {0x1ffe8, 0x4}, {0x6, 0xfff1}}, [{0x8, 0xb, 0x81}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x24000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x6}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40400d4) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x14, r1, 0x1, 0x70bd2c, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040810) 4.32268898s ago: executing program 0 (id=3588): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58000000090a01040000000000000000070000000900010073797a300000000014000980100002800c0001800800014000000003080005400000000408000a40000000010900020073797a3100000000080003400000003970c8cd001000010000000000000000000084000a"], 0x80}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x110, 0x220, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000200), {[{{@arp={@multicast2, @remote, 0xff000000, 0xffffffff, 0xd, 0x10, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xea6e775e6b45d119, 0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x8, 0x6a96, 0x9d, 0x6, 0x1, 'veth0_to_hsr\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x121}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @rand_addr=0x64010102, 0x0, 0xff000000, 0xf, 0x10, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x7f, 0x7, 0x17c9, 0x100, 0x1, 0x6, 'pim6reg0\x00', 'dummy0\x00', {}, {}, 0x0, 0x56}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @local, 0x6}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x8}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000dd0000a8000000000000000071102e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r7, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffff00}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x2}}, {0x8, 0x2, [0x2, 0x7]}}]}]}, 0x54}}, 0x4000080) (async) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async) listen(r8, 0x0) accept4(r8, &(0x7f0000000800)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000880)=0x80, 0x0) bind(r8, &(0x7f0000000240)=@ll={0x11, 0xf5, r6, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80) (async) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.076952628s ago: executing program 0 (id=3590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000080)="b9ff03076804268c989e14f788a830676bf5530251ce56e59b9b8806e3516a83d3b0dc1af53391042dd953990dee5388039dfb5c7ae97df7592dc331573d7c2b1eca952018d8ab781866", 0x0, 0x502, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x21) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ab00, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000d8e58e4b895aca4e2f40134c52102ed50614f324371757671f994a887eb679c461cb58da58d1b54760ea9f0412f681365c5bda00a876cb95e70d1ee5ebbd9aff896cba622d642822f834af9cbf4f2934ae77072d9a850a3b3ad9e59dfe55b495b72ee2933e36a6e09850e6e63221bf181dcd8570efa2011955", @ANYRES16=0x0, @ANYBLOB="070000000000000000000500000014000380100003800c0001800800010007000000"], 0x28}}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e010600f800fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xff}}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003880)=@newtfilter={0x46b8, 0x2c, 0xc3f, 0x30bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0xc, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x468c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x80000001}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe4, 0xc}}, @TCA_FW_ACT={0x425c, 0x4, [@m_police={0x29bc, 0x16, 0x0, 0x0, {{0xb}, {0x2990, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffeffffff1427}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x1, 0x91, 0x9, {0x6, 0x0, 0x9, 0x3, 0xfff9, 0x3}, {0x6, 0x0, 0x7fff, 0x8, 0x0, 0x5}, 0x4, 0x6, 0xffffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa759}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff3, 0x6, 0x9, 0x4, 0x8, {0x4, 0x2, 0x4, 0x0, 0x3, 0xfff}, {0xbe, 0x2, 0x7, 0xfff, 0x40, 0xffffff01}, 0x11, 0xb, 0x7f}}, @TCA_POLICE_RATE={0x404, 0x2, [0x23000, 0xffffffff, 0x10, 0x1, 0x8, 0x3ff, 0x0, 0x0, 0xf, 0xa, 0x100, 0x2, 0x75, 0x9, 0x0, 0x9, 0xffffffba, 0xa, 0x4, 0x59, 0x4, 0x3, 0x7, 0x3, 0xffffffff, 0x1, 0x3, 0x0, 0x5, 0xb254, 0x9, 0x6, 0x80, 0xb, 0x5, 0x2, 0x3, 0x3, 0x2, 0x6, 0xb63e, 0x1, 0xb, 0x8, 0x7238, 0x8, 0xf, 0x4, 0x8001, 0xffff, 0x7f, 0x3, 0xd, 0x7, 0x100, 0x8, 0xe701, 0x3, 0x2, 0x5ff1a96a, 0x1, 0xff, 0x4, 0x401, 0x0, 0x7, 0x3c84, 0x200, 0x5650a7a5, 0xca, 0x3, 0x8, 0x4, 0x10000, 0x6, 0xb843, 0xdd, 0x21a, 0x59a4, 0x40, 0x2, 0x8, 0x4, 0x1000, 0x6, 0x1000000, 0x9, 0x9, 0x2, 0x1ff, 0x24b368a2, 0x0, 0x8, 0x94b, 0xfffffff8, 0x7fff, 0xb3, 0xfffffff9, 0xb, 0xb8, 0x8000, 0x4, 0xe7a, 0x1, 0xa, 0x2, 0x8, 0x7, 0x7, 0x7, 0x9, 0x400000, 0x1, 0x5, 0x7ff, 0x3, 0x8, 0x1, 0x0, 0x8000, 0xffffffff, 0xe, 0x6, 0x5, 0x10001, 0x2, 0x7, 0x80, 0x8, 0x18e5, 0x6, 0x3, 0x6, 0x9, 0x7ff, 0x7, 0x7fff, 0xeb, 0x0, 0x9, 0x6322dc7b, 0x10, 0x78000000, 0xfff, 0xc000000, 0xc15, 0x9, 0x20, 0x400, 0x9b, 0x6e4, 0x7, 0x81, 0x0, 0x4, 0x0, 0xfffffffd, 0x1, 0x9, 0x7, 0x8, 0x2, 0x8000, 0xb2, 0x2, 0xd, 0x80000000, 0x40, 0x38e6, 0x400, 0x0, 0x0, 0x7b9, 0x9, 0x1000, 0x5, 0x3, 0xaa6, 0x6d, 0x2, 0x101, 0x7, 0x4b0, 0x2, 0x3, 0x8, 0x6, 0xffffffff, 0x0, 0x0, 0xffffff8c, 0x9, 0x1000, 0x9, 0x3, 0x8, 0x9, 0x4, 0xd851, 0x0, 0x7fffffff, 0x8, 0x8, 0xb, 0x9, 0x8000, 0x4, 0x9bcc, 0x7, 0x4, 0xb5, 0xea, 0x8000, 0x7f, 0x1, 0x1, 0x1, 0x7, 0x4, 0x4, 0xc8f, 0x1, 0x4, 0x0, 0x6, 0xfffffffb, 0x9f84, 0x1ff, 0xffffffff, 0x2, 0x8, 0x4, 0x1, 0x0, 0x2, 0x8, 0x3, 0x5, 0xb, 0x4, 0x80, 0x5, 0x3d110ccc, 0x7, 0x1, 0x0, 0x0, 0xe, 0x7ff, 0x3, 0x2, 0x0, 0x2, 0x7, 0x7, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x6, 0x9, 0x401, 0x7, 0xc09e, 0x3, 0x0, 0x7, 0x9, 0x4, 0x2, 0x9, 0x8, 0x2, 0x3, 0x9, 0x5, 0x5, 0x1e, 0x100, 0x400, 0xd, 0x1c1558b5, 0x6, 0x3, 0x40a, 0x5, 0x6, 0x9, 0x467, 0x3, 0x3, 0xa1, 0x3, 0x7, 0x10, 0xfffffffd, 0x27, 0x5, 0x0, 0x2, 0x7f, 0x3, 0x10, 0x0, 0x7, 0x78, 0x800, 0x10001, 0x6, 0x9, 0x7, 0x1, 0xffff889c, 0x10, 0x2, 0x6, 0x8ca, 0x8, 0x2, 0x1, 0x2, 0x4, 0x9, 0x2, 0x16, 0xffffffff, 0x5, 0x800, 0x2, 0x3, 0x1ff, 0xd659, 0x6, 0x730d, 0xf, 0x5, 0xd, 0x8000, 0x5f, 0x5, 0x3ba, 0x7, 0x1, 0x800, 0xfffffffe, 0xb0000000, 0x3, 0x20400000, 0x3, 0x3, 0x101, 0x18000000, 0x8, 0xd7b, 0x6, 0x2, 0x5, 0x9, 0x7, 0x0, 0xcfbe, 0xcb, 0x7, 0x4, 0x7, 0x7fff, 0x9, 0x7, 0xc1, 0x8000, 0x9, 0x8, 0x800, 0x9, 0x4, 0x6, 0x1, 0x2, 0xf7d, 0x4, 0x8, 0xfffffff7, 0x10001, 0x7fffffff, 0x1, 0x3, 0xca28, 0x5, 0x9, 0x4, 0x5, 0xc902, 0x1000, 0x0, 0x8c, 0x5, 0x6, 0xa, 0x0, 0x7, 0xb, 0xc, 0x9a7, 0xfffffff7, 0x81, 0x9, 0x0, 0x2, 0x1, 0x7, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, 0xf8, 0x4c0ef9c, 0x7, 0x1, 0x3, 0x8, 0xe99, 0x3, 0x1000, 0x9, 0x15b, 0x3, 0x6, 0x4, 0x8, 0xffffff01, 0x1, 0x604b, 0x9, 0x6, 0x9, 0x5, 0x2, 0x0, 0x5, 0x66e, 0x0, 0x20, 0x401, 0x20, 0x10001, 0x6, 0x81, 0x6, 0x4, 0x8, 0x3, 0x4, 0x6, 0x0, 0x0, 0xa24, 0x2, 0x1, 0x5, 0x3, 0x7d2b, 0x7, 0x6, 0x2, 0x5, 0x4, 0x1, 0x400, 0x0, 0x3, 0x8, 0x6, 0x8, 0x1, 0xd9, 0x28000000, 0x7f, 0x1, 0xe7, 0x7, 0x0, 0xa, 0x7fffffff, 0x5, 0xa1e4, 0x7, 0x10001, 0x1, 0xfffffff8, 0xff, 0xfffffff8, 0x8, 0x7, 0x0, 0x8, 0x9, 0x7, 0xf, 0x1, 0x8000000a, 0x2197, 0x8, 0x2, 0x80000001, 0x2, 0x9dc1, 0x3, 0x6, 0xf, 0x4, 0xfffffffb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x80000000, 0x6, 0x6b1, 0x1, 0x3, 0x3ff, 0x9, 0x5, 0x7, 0x9, 0x800, 0x7, 0x1, 0x8, 0x0, 0x1, 0x0, 0x800, 0x4, 0x6, 0x3, 0x8, 0xb5, 0x9, 0x3, 0x3, 0x0, 0x10000, 0xd2, 0x1, 0xdfc2, 0x9, 0x3, 0xabd, 0x2, 0x3, 0x31e2, 0x3, 0x8, 0x9443, 0x6, 0x1, 0x9, 0x2, 0x3, 0x1ff, 0x0, 0x1c, 0x800, 0x7, 0x5, 0x2, 0x10000, 0x0, 0xb67f, 0x7, 0x800, 0xfff, 0x0, 0x0, 0xfffffff7, 0x3, 0x832, 0x3, 0x80, 0x29, 0x510, 0x0, 0x9, 0x9, 0x1, 0x6, 0xa, 0xec73, 0x4, 0x8, 0x7, 0x3, 0x3, 0x3, 0xff, 0x17c, 0x3, 0x2e, 0x20, 0x5, 0x66ed, 0x0, 0x6, 0x6, 0xb, 0x9, 0x6, 0x9, 0x8000, 0xfffffd84, 0x0, 0x40, 0x5, 0x3, 0x75, 0x4, 0x40, 0x3, 0xffd7, 0x9, 0x8, 0x0, 0x6, 0x86, 0x10000, 0x6, 0x7, 0xa2f68d8, 0xffff, 0x1, 0x1, 0xa181, 0x5d, 0x0, 0x4, 0x7, 0x1ff, 0x5, 0x10000, 0x0, 0x8, 0xa9, 0x800, 0x7fff, 0x8000, 0xb, 0xb, 0x1, 0x0, 0x3, 0x7eac9c6, 0xded, 0x8001, 0x14, 0x0, 0x4, 0x646, 0x7, 0xffff, 0x7, 0xfffffeff, 0x3, 0x8, 0x0, 0x4, 0x8, 0x6, 0xf4, 0x4, 0x200, 0x4, 0x937, 0x4, 0xfff, 0xe, 0x8000, 0x6, 0x10, 0x1000, 0x7, 0x5, 0x0, 0x81, 0x4f, 0x3, 0x57, 0x5, 0x8, 0x1, 0x4, 0x8, 0xfffff000, 0x109, 0x9, 0x8, 0x101, 0x0, 0x179c, 0x7, 0xa, 0x1ff, 0xffff63da, 0x7, 0x8, 0x40000000, 0x11, 0xf, 0x3ff, 0x4, 0x100, 0x0, 0x7, 0xfffffff7, 0x3, 0x8, 0x1, 0x5, 0x4, 0x4, 0xa, 0x0, 0x6, 0x7, 0x9, 0x3, 0x9, 0x100, 0x4, 0x2bb0, 0xfffffff7, 0x20009, 0x80000001, 0x2, 0x7ff, 0xfff, 0x7, 0xee6b, 0xa, 0xe, 0xffffffff, 0x3, 0x7, 0xed5, 0x6, 0x9, 0x1ff, 0xe00000, 0x4, 0x4, 0x9, 0xc, 0x9, 0x62, 0x0, 0x8, 0x28, 0x0, 0x6, 0xc5, 0x6, 0x8, 0x5, 0xd, 0x6, 0x9, 0x9, 0x9, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1000, 0x6, 0x6, 0x7, 0xfffffffb, 0x1, 0x6, 0x5, 0x4, 0x64000000, 0x1c78, 0xf, 0x5, 0x6, 0x3f45, 0x6, 0x80000001, 0x4, 0x5, 0x4, 0xd9, 0x0, 0x5, 0x9, 0x45, 0x7, 0x7f, 0x3e, 0x4976, 0xfffffffd, 0x9, 0x1, 0x4ee9, 0xffffffff, 0x8, 0xddbd, 0x5, 0x1ff, 0xee78, 0x4, 0x6, 0x1, 0x1, 0x5c, 0xffffff81, 0x40, 0x1, 0x4, 0x6, 0x0, 0x2, 0x9, 0x5, 0x81, 0x9a3, 0x10, 0x81, 0x5, 0x2, 0x5, 0x181, 0x9, 0x1, 0xa376, 0x7, 0x8000, 0x8ae4, 0x7, 0x0, 0x20000000, 0x3, 0x502d, 0xff, 0x1000, 0xfffffff7, 0x618, 0x3, 0xffffffff, 0xffffffff, 0x80, 0x0, 0x2e, 0x7, 0x7ff, 0x100, 0x1, 0x7, 0xf, 0x764, 0x4, 0x1, 0xf, 0x200, 0xdf, 0x9, 0x7, 0x33592272, 0x8, 0x6, 0x4, 0x0, 0x100, 0x80000000, 0x80, 0x8001, 0x2, 0x3, 0x7, 0x401, 0x9, 0x5c, 0x8, 0x1, 0x7f, 0x1, 0x34b0a994, 0x6, 0x9, 0x8, 0x1ff, 0x81, 0x7, 0x0, 0x31e, 0x7, 0x91, 0x610f, 0xa, 0x9ae, 0x2, 0x8, 0x3, 0x7, 0x8, 0x480, 0x7f, 0x7, 0x0, 0x3, 0x4, 0x9, 0x100, 0x74f, 0x0, 0x0, 0x1, 0x8, 0x3000, 0x2, 0xfffffeff, 0x4, 0x5, 0xfffffffb, 0x800, 0x8, 0x3, 0x81, 0x80000000, 0x9, 0x2, 0x6, 0x37, 0x2, 0x8, 0x7, 0x61, 0x0, 0x7, 0x1, 0x0, 0x7, 0x7, 0x2, 0x8, 0xf950, 0xfffffff3, 0x1c000, 0x8, 0x5f5, 0x6, 0xfffffffe, 0x2, 0xff, 0x2, 0xfff, 0x100, 0x5, 0x8, 0x776, 0x9e15, 0x5, 0x40, 0x1, 0xfffffbff, 0x40, 0x1, 0x9, 0x4, 0x9, 0x5, 0x92, 0x5, 0x5, 0x10001, 0x2, 0x80000000, 0x9, 0x7, 0x6, 0x6, 0x0, 0x7, 0x6637, 0x6, 0x0, 0x7fff, 0x7, 0x3ff, 0x7, 0x1, 0x4, 0x3, 0x8541, 0x9, 0x300, 0x8, 0x100, 0x2, 0x9, 0x3, 0xffffffff, 0xfffffe00, 0x6b, 0x8, 0x7, 0x10000, 0x1, 0x5, 0x7, 0xba70, 0xffffffc0, 0x0, 0xffff, 0x6, 0x2, 0x7, 0x5, 0x7fffffff, 0x2dfb, 0x10001, 0x6, 0x167c, 0x800000, 0x0, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x1357, 0xfffff0e0, 0xa, 0x5, 0x0, 0x584, 0x5, 0x6, 0x10, 0x0, 0x10001, 0x7, 0x0, 0x0, 0xfffffff7, 0x6, 0xfffffff8, 0x3, 0x481, 0x97e9, 0x1, 0x5, 0x8, 0x3, 0xff, 0x0, 0xd, 0x9, 0x0, 0xa, 0x7fff, 0x7ff, 0x3, 0xfe70603, 0x0, 0x72, 0x3, 0x4, 0xf8000000, 0xe8, 0xb, 0x4, 0x5, 0x5, 0x80000001, 0x5a4c, 0x14, 0x2, 0x4, 0x7, 0x2, 0x4, 0x1ff, 0x401, 0x101, 0xfffffff9, 0xaa2f0000, 0x81, 0x7, 0x5, 0x5, 0xfffffffc, 0x9, 0x5, 0xc, 0x101, 0x0, 0x3, 0x3, 0x0, 0x5c7ec85e, 0x8, 0xc, 0x9, 0x80000001, 0x5b55, 0x0, 0xfff, 0x7, 0x7, 0x8000, 0x679, 0xffff, 0x6, 0xc06, 0xfff, 0x8, 0x9, 0x1, 0xffffffff, 0x3ff, 0x7ff, 0xa1, 0xa03, 0x6, 0xe, 0xffff, 0x1000, 0x8001, 0x9, 0x4c, 0x94, 0x1, 0x7, 0x40, 0x4, 0xab1f, 0x9, 0x3, 0x7, 0x2, 0x7fff, 0xe, 0x8000, 0x7, 0xffff, 0x9, 0x0, 0x757, 0x783b6af6, 0xae, 0x0, 0x6, 0x7f, 0x1, 0x2, 0x0, 0xc0, 0x8000, 0x8000, 0xb112, 0x5, 0x6, 0x0, 0x8, 0x4, 0x2, 0x4, 0x2, 0x2, 0x4, 0x9, 0x6, 0xb8, 0x8, 0x9, 0x8b, 0xf, 0xf, 0xf8f0, 0x0, 0xfffffffd, 0x44e8, 0x8, 0x0, 0xfffffff7, 0xfffff3c4, 0xffff, 0x1, 0x23f9c770, 0x4, 0x134, 0x0, 0x6, 0x7f, 0x80000001, 0x3, 0xf, 0xfffffff9, 0x2, 0x3, 0x6, 0xff, 0x4e96, 0x5, 0x9, 0x6, 0x4, 0x5, 0x8000, 0x4, 0x4, 0x1, 0x80000000, 0x5, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0xffff, 0x1, 0x5, 0x6, 0x8, 0x10001, 0x89e, 0x238, 0x1, 0x80000001, 0x5, 0x3, 0x7, 0x4, 0xffffffff, 0x8000, 0x2, 0xfffffffd, 0x7, 0x2, 0x401, 0x7, 0x1, 0x8000, 0x1, 0xc, 0x7ff, 0x3, 0x10, 0xb, 0x4, 0x6, 0x5, 0x0, 0xff, 0xffff, 0xe2, 0x9, 0x8, 0xbd, 0x41, 0x3, 0x2, 0xfff, 0x100, 0x7, 0x6, 0x0, 0xffffffff, 0x3, 0xb65c, 0x7f, 0x7f, 0x5, 0x7f, 0x9, 0x3, 0x9, 0x8, 0x80000000, 0x1ff, 0x7, 0x18455a4e]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfffffffe, 0x6cf0, 0x0, 0x1000, 0x8, 0x1, 0xaf98, 0xfff, 0x5, 0x6, 0x5, 0xefd, 0x5, 0x800, 0xfffffff0, 0x3ff, 0x1, 0x7, 0x1, 0xa276, 0x5389, 0x1, 0x4, 0x5, 0xffff, 0x5, 0xcfa8, 0x0, 0x6, 0x4b, 0x5, 0x6, 0x9d36, 0x400, 0x8, 0x0, 0xfffffff4, 0x6c, 0x3, 0x2a2072f9, 0x4, 0x0, 0x8, 0x9, 0x6, 0x80000000, 0x9, 0x14, 0x0, 0x10000, 0xf, 0x0, 0x4, 0x7f, 0x9, 0xffff, 0x5, 0xfff, 0x3, 0xc, 0x19, 0x1a, 0x4106, 0x80000001, 0x7, 0x6, 0x4, 0xf05, 0x9871, 0x9, 0x0, 0x2, 0x98, 0x1, 0x9, 0x400, 0x5, 0xd, 0x3, 0x8, 0x205, 0x0, 0x1, 0xed01, 0x9, 0x8, 0x9, 0x9a, 0x5, 0xfffffff9, 0x4, 0x8, 0x2, 0x8, 0x9, 0xffffffff, 0xc3, 0xbd14, 0x9a3c, 0xd, 0x9, 0x5, 0xfffffff3, 0x1d07, 0x7, 0x1, 0x80, 0x2, 0x8, 0x0, 0x6, 0xf8, 0x0, 0x10000, 0x8, 0x14b1, 0x1, 0xfff, 0x2e6d130f, 0x0, 0x0, 0x80, 0x6, 0x3, 0x1000, 0x5e, 0x5, 0xff, 0x2, 0x7fff, 0xffff0b3d, 0xc55, 0xff, 0x1000, 0x4, 0x5, 0xe90, 0x9, 0x7, 0x18a9, 0x9, 0x7, 0x8, 0x65597100, 0x2, 0x4, 0x6, 0xe, 0x7ff, 0x3, 0x2, 0xb2d, 0x6, 0x5c55, 0x7, 0x10, 0x5, 0xffffffe0, 0x1, 0x5, 0x8, 0x6, 0xa, 0xf, 0x3, 0x3, 0x40, 0x7, 0x15, 0x9, 0xfff, 0xffffffff, 0xf, 0x1ff, 0x3, 0x1000, 0x19, 0xf4, 0x5, 0xd90a, 0xc, 0xffff, 0xe8, 0x0, 0x1, 0x7, 0xf6c3, 0x0, 0x4, 0x7, 0x9e0b, 0xffff, 0x10, 0x8, 0x7, 0x8, 0xd, 0x1, 0x2b, 0xfffffff8, 0x1, 0x10, 0xb3, 0x6, 0x5, 0x3, 0x7, 0xc, 0x4, 0x2, 0x1, 0x80, 0x5, 0x8, 0x3, 0x2, 0x8000, 0x0, 0x3, 0xfff, 0x200000, 0x6, 0x9, 0xfffffff7, 0x3, 0x9, 0x7, 0x8, 0x1, 0x8728, 0x5, 0x8000, 0x5, 0x5, 0x8, 0x3a8, 0x2, 0x9, 0x3, 0x4, 0xff, 0x9, 0x9, 0x2, 0x16557b6a, 0x7, 0x4c9, 0x0, 0xffff, 0x5, 0x66fc, 0x8, 0x0, 0xf3, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x23}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x5, 0x8, 0x40, {0xb, 0x1, 0x3, 0x9b, 0x6, 0x9}, {0x0, 0x2, 0x2, 0x8, 0x7, 0x6}, 0xc29, 0x10, 0xa}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x7, 0x0, 0x6bbd, 0x6e, 0x10001, 0x10001, 0xe25, 0x2, 0xa, 0x5, 0x8, 0x282, 0x4, 0x6, 0x76, 0xc, 0xf9b5, 0x200, 0x7f, 0x80000001, 0x400, 0x0, 0x1, 0x3a, 0x5, 0x1, 0x4, 0x5ebe8cc1, 0xa, 0x1c3d, 0xaf52, 0x10001, 0x6, 0x0, 0x6, 0x4, 0x9, 0x800, 0x6, 0xc88, 0x44c6, 0x1, 0x3, 0xff, 0x152a, 0xfff, 0x17d04000, 0xffffffe1, 0xd80, 0x8, 0x6, 0x0, 0xc, 0xfffffff7, 0x5, 0x7, 0x4, 0x2c842234, 0x40000000, 0x5, 0x9, 0x5, 0x1, 0x673, 0x1, 0x1, 0xbe, 0x0, 0x7f, 0x55, 0x1, 0x3, 0x5, 0x3, 0x7, 0x6, 0x8001, 0x5, 0x80, 0x3, 0x1c26a08b, 0x49, 0x1, 0x9, 0x77, 0xffffffff, 0xea3, 0x8, 0xc, 0x1, 0x9cc0, 0xffff, 0x8000, 0x1, 0x1, 0x3, 0x3, 0x0, 0x77, 0x4bf8000, 0x6, 0xc, 0x3, 0x2, 0x0, 0x4, 0x9, 0x81, 0x8, 0x5, 0xeb64, 0x60, 0x9, 0x6, 0x0, 0x80, 0xffffad76, 0x2, 0x80000000, 0xfffffff8, 0x4, 0x8, 0x808, 0x8000, 0xf, 0x6f8, 0xffffbd38, 0x3ff, 0x6, 0x1cc, 0x51b8, 0x1000, 0x1, 0x5, 0x0, 0x200, 0x3, 0x33c, 0xfffffff9, 0xf9, 0x3, 0x2, 0x0, 0x5, 0x9, 0x9, 0x8, 0x89d, 0x6, 0x1, 0x8001, 0x171, 0xa0, 0x9, 0xa, 0x1, 0x10000, 0x2, 0x9e, 0x401, 0x7, 0x9, 0xc4, 0x9, 0x2bd57d9, 0x2, 0xdfa1, 0x1, 0xe7b2, 0x9, 0x9, 0xb7, 0x8, 0x8, 0x1ff, 0x2, 0x4, 0x2, 0x87, 0x0, 0x0, 0xfffff807, 0x661a, 0x81, 0x5, 0x6b5a, 0x7, 0x38f51660, 0xe, 0x10000, 0xb, 0x4, 0x1, 0x1, 0x3, 0x8, 0xf, 0x8, 0x8, 0xff, 0x1, 0x40, 0xeba1, 0x6, 0x13c2, 0x7fff, 0x1, 0x6, 0x3, 0x7, 0x7, 0x3, 0x43b2, 0x7, 0xa3b8, 0x200, 0x4, 0x29, 0x0, 0xfff, 0x5, 0x7, 0xfffffff1, 0x3, 0x5, 0x66f3, 0x3c8, 0x8, 0x7, 0x2, 0x9, 0x8, 0x10001, 0x101, 0x0, 0x1, 0x5, 0xce, 0x40, 0xfffffff7, 0x8, 0x404, 0x3, 0x3, 0x14, 0x1ff, 0x200, 0x0, 0x9, 0x3, 0xffffffff, 0x5, 0x401, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8, 0x3, 0x9, 0x2, 0x8, 0x200, 0x17800000, 0x100, 0xfffffffb, 0x3, 0x6d, 0x3, 0x0, 0x36d7, 0x401, 0xb5, 0x4, 0x2, 0x0, 0x2, 0x7fffffff, 0x7, 0x0, 0x9, 0x9, 0x9, 0x2, 0x7fffffff, 0x9, 0x4, 0xf, 0x8, 0xfb, 0x8, 0x9, 0x40, 0x4706f85e, 0x7ff, 0x7fff, 0x9, 0x0, 0xff, 0x4, 0x0, 0x4, 0x81, 0x7, 0x7, 0x7, 0x9, 0x7, 0x3919, 0x6, 0x3ff, 0xfffffff9, 0x0, 0x8001, 0x9, 0x1, 0x4, 0xd, 0x6, 0x0, 0x4, 0x8, 0xd, 0x1, 0x9, 0xf, 0x2, 0x6, 0x7d3, 0x4, 0x7, 0x9, 0x100, 0x401, 0x400, 0xca, 0x400, 0x1, 0x9, 0x0, 0x0, 0x7fffffff, 0xfffffff7, 0xfffffffb, 0x134, 0x4, 0x5, 0xd4d1, 0x1d7bcff6, 0x7f, 0x0, 0x9, 0x5, 0x7, 0x3ff, 0x5, 0x0, 0x100, 0x6, 0xdd, 0x6, 0x4, 0x3, 0xa, 0x7, 0xfff00, 0x9, 0x4, 0x40, 0x5, 0x81, 0x5, 0x6, 0x7, 0x10001, 0x2, 0x0, 0x80000000, 0x5, 0x2, 0x3, 0x9, 0x4, 0x3, 0x8, 0x3, 0xe773, 0x8, 0x4b02ed54, 0x5, 0xfff, 0xfffffffa, 0x1, 0x9, 0x8665, 0x4, 0x5, 0x7, 0xf, 0x9, 0x5, 0x3, 0x7, 0x5, 0x0, 0x9, 0x4, 0x7e5, 0xfffffff9, 0x200, 0x2, 0x4, 0x1, 0x1ff, 0x80000000, 0x4, 0x3ff, 0xfffffffc, 0x0, 0xc53, 0x8, 0x6, 0x1000, 0x7, 0x200, 0x200, 0x2, 0x0, 0x4, 0x7, 0x1ff, 0x3, 0x5, 0x1, 0x40a4, 0x9, 0x1, 0x6, 0x114, 0x5, 0xff, 0x4, 0x1, 0x0, 0xa57, 0x8, 0x9, 0x81, 0x101, 0x6, 0xa6, 0x3ff, 0x1, 0x7, 0x2, 0x401, 0xb8, 0x400, 0x4, 0xa, 0x8, 0x7, 0xff, 0x1ff, 0x2, 0x13fe, 0x7, 0x9, 0x636, 0x6, 0xb, 0xcf, 0x1, 0x2, 0x0, 0xf, 0x5, 0xe40f, 0xffffffff, 0xfffffffd, 0xb, 0xfffffffa, 0xfffffffe, 0xffff, 0x10001, 0x3, 0x2, 0x8, 0x771, 0x5, 0x7f, 0x9, 0xd, 0xc, 0x6, 0x8, 0x4639, 0x3, 0x7fffffff, 0x4, 0x2, 0xffffff81, 0x4, 0x2, 0x4, 0x81, 0x1, 0x7, 0x3, 0x6b483b64, 0x5, 0xf]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffff4, 0x3, 0xfffffff8, 0xfffffff9, 0x9, 0x64a, 0x6, 0x7, 0x7, 0xb9, 0xd, 0x8, 0x7, 0xc00000, 0xd21, 0x1, 0x7fff, 0x7, 0xa, 0x7ff, 0x4, 0x2, 0x8, 0x3, 0x0, 0x6, 0x3, 0x401, 0x9, 0x4, 0x7f, 0x80000001, 0x4, 0x6, 0x5, 0xfff, 0xffff, 0x40, 0x8, 0x2, 0x40, 0x1, 0x8, 0xd, 0x0, 0x9, 0x2f, 0x6, 0x0, 0xe5, 0x587d, 0x3, 0x0, 0xb78, 0x4, 0x3, 0x401, 0x10001, 0x18, 0x6ccb, 0x2, 0xb06d, 0xf9f, 0x6, 0x5, 0xd5ee, 0x4, 0x10000, 0x2, 0x9b, 0x1, 0x7, 0x7, 0xa46, 0x1ff, 0x6, 0x0, 0x3, 0x6, 0x5, 0xfffffff7, 0x800, 0x91, 0x0, 0x1d, 0x5, 0x3, 0x1, 0x3b, 0xa, 0x3, 0x8, 0xe, 0x7, 0x3, 0x1, 0x101, 0x8, 0xffffffff, 0x5, 0x9, 0x3, 0x9, 0x8, 0x43, 0x3, 0xfff, 0x3, 0x0, 0x1, 0x7, 0x9, 0xd, 0x3, 0x9, 0x10000, 0x2, 0xb1b, 0xfffffffc, 0x7, 0x7, 0x1, 0x101, 0x996, 0x5, 0xe704, 0xb3a4, 0x2, 0x333, 0x0, 0x0, 0xdde9, 0x6, 0x6, 0x6, 0x0, 0x9, 0x4, 0x4, 0x7, 0x800, 0xfff, 0x200, 0x40, 0x5, 0x8, 0x9, 0x2, 0x8, 0x401, 0x2, 0x4, 0x2800000, 0x1, 0x4149, 0x0, 0x6240000, 0x10001, 0x2, 0x7, 0x5, 0x80, 0x7, 0x4e, 0x1, 0x8001, 0x4, 0x9, 0x7, 0x8, 0x4cf8d3aa, 0xd, 0x6, 0xf7ce, 0x7fffffff, 0x7f, 0x1e5, 0x10000, 0x5, 0x6975, 0x10000000, 0x4, 0x7fff, 0x1ff, 0x8, 0x3, 0x4, 0x2, 0x4, 0x7, 0x2, 0x75f7, 0x6e5, 0x7, 0xffffee06, 0x2fd, 0x80000000, 0xf2b, 0xd, 0x7, 0x6, 0x80, 0x10, 0x2, 0xfffffeff, 0x6, 0xc80, 0x4, 0x1, 0x2, 0x800, 0x6, 0xd, 0x1, 0x5, 0x2, 0xd9e1, 0x10, 0x1d4, 0x7, 0x614, 0x1ff, 0x6, 0x5, 0x2, 0x0, 0xffff, 0x9, 0x2, 0x2, 0xf, 0x6, 0xfffffff7, 0x81, 0x101, 0x1, 0x7fffffff, 0x9, 0x8, 0x4, 0x71c8, 0x1, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1ff, 0x2, 0x400, 0xfffffff7, 0x5, 0x3, 0x76fa, 0x9, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x0, 0x7, 0x4, 0x1, 0x8001, 0xfffffffb, 0xfffffffa, 0x36, 0x40, 0x2, 0x6, 0x85, 0xc6, 0x9, 0x8, 0x5, 0x2, 0x1, 0x3, 0x40, 0x1, 0x6, 0x0, 0x5, 0x3, 0x81, 0x6, 0x7, 0xfffffc00, 0xb2f6, 0xc, 0x5e, 0x6b20, 0x7, 0x4, 0x800, 0x7, 0x9, 0x8, 0x8, 0xa, 0x56c1, 0x2, 0x39a32474, 0x11f943ba, 0x7, 0x1, 0x400, 0xfffffffd, 0x80000001, 0xffffffff, 0x1, 0x5, 0x5, 0x10, 0x7, 0x3, 0xfff, 0x9, 0x1ff, 0xffff0, 0x4, 0x10001, 0x1, 0x1, 0x1, 0x5, 0x5, 0x6, 0x4, 0xb94, 0x2, 0x64e, 0x5, 0x4, 0x3, 0x1, 0x6, 0x7, 0x4, 0x4d82, 0x28000000, 0x1, 0x8dd, 0xffffffff, 0xf682, 0x8, 0x4, 0xd6, 0x5, 0xa3, 0x9, 0x1, 0x100, 0xb, 0x7, 0x6, 0xeeea, 0x2, 0x3, 0x5, 0x4, 0x1, 0x0, 0x3, 0x59, 0x5, 0x3, 0x5, 0x80, 0xdd, 0x4, 0x398, 0x90, 0x8a38, 0x2, 0x100, 0x1, 0x20000000, 0x8, 0x7, 0x7, 0x101, 0x8, 0x6, 0x9, 0x1ff, 0x2, 0x6, 0xcf, 0x9, 0x7, 0xd, 0x8, 0xb86b, 0x8, 0x7fffffff, 0x5, 0x7, 0x1, 0x5, 0x37708240, 0x3, 0x8a, 0x3, 0xe, 0x5, 0x4, 0x100, 0x9, 0x7, 0x0, 0xb6a, 0x0, 0x1, 0xd34, 0x600, 0x8000, 0x0, 0x3, 0x2, 0x2, 0x5, 0xa, 0x10000, 0xff, 0x7, 0x3, 0x0, 0x0, 0x5, 0x3, 0xc, 0x4, 0x0, 0x5, 0xf6d, 0x3, 0x0, 0x2, 0x8, 0x9, 0x7fffffff, 0x8001, 0x3, 0xdf, 0x694f, 0x8, 0xa9, 0x3, 0x83e, 0x7ff, 0x7fffffff, 0x6, 0x1, 0x6, 0xfff, 0xfffffff9, 0x1, 0xfffffffc, 0x7, 0x3ff, 0x2, 0x0, 0x3, 0x6, 0x4, 0xffff, 0x100, 0x8, 0xc, 0xd90f, 0x7, 0xffffd575, 0x8, 0xfffffffe, 0xe, 0xa, 0xa, 0x3, 0x1, 0x5, 0x8, 0x3890, 0x7, 0x1d5, 0x2a2b, 0x5, 0x0, 0x3, 0xff, 0xbe12, 0x710a, 0x2, 0xe57, 0xff, 0x2, 0x1, 0x1, 0x5, 0x2, 0x5, 0x7, 0xf, 0x5, 0x4, 0xf, 0x4, 0x9, 0xfffffffd, 0x9, 0xd, 0x800, 0x3, 0x555f]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0xd8, 0x0, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x4, 0x7, 0x3ff, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}]}, {0x7a, 0x6, "ae40079faaabcf8cef8cf2fa821f5cd70ff6a6fbb0e6a1da8a83cec10b0cc0878a9768d51c3a958567ef2fc025220ef56eba7955df32f2588a1fc0751b802eb58e6861286fc7700a9a575720dbbfb1acf13513f18b86c353db65b58dfc32874f9d937c85a0463dd65d0bda980897f8b598122a8416b3"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0xd8, 0x1e, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb0, 0x2, 0x8, 0xb7, 0x3}, @empty, @multicast1, 0xff000000}}]}, {0x87, 0x6, "80463aeb1fd8e1a2bb4d3d73092651412024ae2b104a0fc939223ccf1f0c632edf20b5c09b5961c38f145815639d46ccb21772620a91ede91bf12654dd6a410d6c678ef4171bc41ac9b26c19831670b4cb3906931b19141b7b6e7d9267c7350d7f184da8035d261e4bf50527e1a01b10e894f1c8dd7f990f7bcfd08bf3a5d2b44cbf7a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0xb8, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x9, 0x4, 0x5, 0xfffffff7}, 0x64}}]}, {0x6f, 0x6, "d21bac931c8c41ce4c5229e94263bc8a980d21f8cf248bc4039b111e5bfa4e0f9c839ff44fe5323b3427a844df9644a1cf976480244591c30bd1b07b8fbd92db017af2003f1d3281ecccd6916ba15c3e38c12b7de5a525cf8cd031de834938688a9e1a093d8ee743bea224"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0xac, 0x16, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x3, 0x1, 0x8, 0x7}, 0x1}}]}, {0x21, 0x6, "0f8028f0bdb4b7b982789eb6f77e8386634db9bee6b0a4483539b6f6f9"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x188, 0x4, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x2d, 0x6, {0x0, 'security\x00', 0x7, 0x80, "f00512"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8000}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xf1, 0x6, "0f9aaa0c58ff030f392b75b049bae60ddfa3e0c7b0f8db1dca5a64dfe0137a1fecaf85a9ee8cc11c6236b972078b254f15122c8d662ff1990c107c6cb014c0633e390874e6a819c6e27abf5b5762dd19cd36fc3f6fbe95884bf76b5b8ae169295d4427243fc2f50237435063f85a00872089fd0fe496a1158af9c03a5f806d89b7c947cd8865f68de9a16112924aeb364b40033a9e0a77821a30bcdc4da37bd707c64b3589895eb82cefbfbc61c92a44cce2f64e0a476dc049a2d42649783825cdf537e6fa1c7a49f2d803e898acbfccfcb0dd6353aa32bf45c4f8fd3032a8819a696a4c58708182b2ad2dc4e3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}, @m_mirred={0x10f0, 0x6, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0xfff, 0x1, 0x7, 0x6}, 0x0, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x8, 0x2, 0x6}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x4, 0x6, 0x6661, 0x1}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x98b6, 0x6a8a, 0x4, 0x8}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x4, 0x2, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x101, 0x8, 0xd, 0x8}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_ctinfo={0x168, 0x19, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xffe0}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfd, 0x8dd5, 0x6, 0x625f, 0x2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x1a8, 0x13, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x40}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x62}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x36}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xde}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}]}, {0xf6, 0x6, "18c88493afc293a7aa31b59aabf6a9e458ad5a78c449be535e0a96a98170f8e02c21fb603cd120ef3c6bf438b173876587e95e3b0db476dcf2a992d2f98f40775ec2f0c91d77a3300c0dbc88b26349ec3adda9d1dcf5ba31e662d4304834def32b4828f7e3bdb7d6f02225c24bb7f25db8aece8aafad3df08a1f3cc7455cf0f340849087dfd87bc87ef29e2f5ab07ed9d3711ea80a1acbdab913a3defd7764b82e71c20a85c6034bfa6df2b4e980a356aa7418879e6e05bb352e7631490c1bb03d2a85f901aa6c0ca15ac0b9c03883b985ce21df194d32ae9109f39e01c8f7ebf6bc4f9862f4e528cc6eb67da55408ff22e9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan1\x00'}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x880b, 0x1398, 0x589a, 0x3, 0xfffffffc, 0x8001, 0x3, 0x0, 0x6, 0x2, 0x5, 0x2, 0x1, 0x4, 0x8c, 0x10, 0x6, 0x8, 0x8, 0x4, 0xfffffff7, 0x5, 0x7fff, 0x3, 0x80000000, 0x4, 0x2, 0xffff, 0x8, 0x0, 0x8, 0x2, 0x1, 0x4, 0xe, 0x6, 0xb, 0x15, 0x5, 0x40, 0x7337, 0x4b289ef, 0x4, 0x9b40, 0x400, 0x1042ce12, 0x8, 0x4, 0x0, 0x0, 0xd5, 0x9, 0x4bb, 0x2d, 0x7, 0x40, 0x401, 0x4aa, 0xd, 0x7ff, 0x2, 0x6, 0x6, 0x7ff, 0x1000, 0x2, 0x7, 0x6e3, 0x3, 0x3, 0x0, 0x4, 0x800, 0xfffffffc, 0x7, 0x3, 0x47c, 0x0, 0xc, 0x60a9, 0x43, 0x6cd8c0be, 0x8, 0xd98, 0x7ff, 0x8, 0x1, 0xfffffff8, 0x190a83d5, 0x6, 0x8, 0x2, 0x3, 0x200, 0x7, 0x1, 0x5, 0x5, 0x40, 0x131f8d61, 0x7ff, 0x6, 0x1, 0x1000, 0x0, 0x0, 0x9, 0x3ff, 0x10000, 0x6, 0x7fffffff, 0x8, 0x0, 0xfffff800, 0xa, 0x4, 0x5, 0x9, 0x1, 0x8, 0xc0, 0x3, 0x5fb, 0x7, 0x401, 0x6, 0x850, 0x5, 0x1, 0xc3, 0x3, 0x7, 0x6, 0x8, 0x4, 0x5, 0xd5, 0x62ea, 0x6, 0x9, 0x2, 0x7ff, 0x8, 0x6, 0x200, 0x1, 0x8, 0x0, 0x6, 0x4, 0x80000000, 0x81, 0x4, 0x9, 0x7fffffff, 0x2, 0x7, 0x3, 0x2, 0x1, 0x81, 0x60, 0x9, 0x7, 0xd44, 0x7, 0x6, 0x7, 0x3, 0xd, 0x4, 0xffff8000, 0xc, 0xffffffc8, 0x4, 0x0, 0x7ff, 0x9, 0x3, 0x7, 0x6, 0x6c, 0x0, 0x8, 0x200, 0x100, 0x16c, 0x6, 0xb62, 0x1ff, 0x5c, 0x401, 0x5f00, 0xb950, 0x6, 0x3, 0xb1e, 0xfffff42a, 0x1, 0x490, 0x8001, 0xfffffff8, 0x9f, 0xfffffffe, 0x8, 0x1ff, 0x5, 0x6, 0x9, 0xf9, 0x4, 0x3, 0xc63, 0x6, 0xfffffffb, 0x2, 0x100, 0x1, 0xfffffff9, 0x81, 0x9, 0x7fff, 0x85, 0x4, 0x6, 0x3, 0x9, 0x3, 0x5, 0x1, 0x9, 0x8, 0x1, 0x1ff, 0xcd, 0x7fff, 0x1, 0x6, 0x7fff, 0xff, 0x6, 0x5, 0x8, 0x80, 0x81, 0x4, 0x5, 0x9, 0x9, 0x9, 0x1ff, 0x3834aaa6, 0x4, 0x0, 0x7]}]}]}}]}, 0x46b8}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r9, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x400c804) (async) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) 3.985321724s ago: executing program 1 (id=3592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd2b, 0x70bd2b, 0x70bd2b, 0x8, [0x5]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x24000058) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) r4 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000003c0), 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @broadcast}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0xc, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x94, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) close(0x4) 3.967190457s ago: executing program 4 (id=3593): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x90, 0x43, 0xa0, 0x0, 0x98, 0x958, 0x178, 0x178, 0x958, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 3.82420989s ago: executing program 0 (id=3595): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x90, 0x43, 0xa0, 0x0, 0x98, 0x958, 0x178, 0x178, 0x958, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 3.668560498s ago: executing program 0 (id=3597): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) bind$rxrpc(r6, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x100, @empty, 0x700000}}, 0x24) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)={0x87, 0x4, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, 0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="010000000000000000002c00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write$nci(r2, &(0x7f00000002c0)=ANY=[], 0xcc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 3.668205119s ago: executing program 1 (id=3598): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0xc084) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000016c0)=0x8000007b, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x70bd25, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NDA_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000006040)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r6, 0x0, &(0x7f0000000540)=""/153}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) getgid() r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="98508fc4", @ANYRES16=r10, @ANYBLOB="01002bbd700000100000010000000c0002000900000000000000040007800c00050000000000000000000d000a006c6973743a736574000000000c0006000100000000000000"], 0x4c}}, 0x400400c) 3.301785979s ago: executing program 2 (id=3603): r0 = socket$inet6(0xa, 0x3, 0x5) close(0x3) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x5, 0x0, 0xc}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) close(0x3) 3.187787474s ago: executing program 2 (id=3605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70b529, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x80, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) (async) sendmmsg(r1, &(0x7f00000017c0)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x3, 0x4, 0x0, {0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000001300)}, {&(0x7f0000001340)="21d06c6271691b873e0589e53b847e5e", 0x10}, {&(0x7f0000001380)="fc645e8a4f56f466232f221384b6fbf62423220a6993a76face4bf69d09fd546e1fe45e2fb5c3b6a216a96104d1a5cea6627a27c46921e4d4db783854f6ebcdd1fe6e9411767ea83a8a7c2f625eb87cb983ad596177a11b17b0681547c71710b30c7f62a852d974584c06e2eb3b524d37feb40c147bb1b8e79ab9f249d9e3b4fb362060a03e30ba429c182ebdafc5db6f5986e752d4f01ec4a505f38cafe505686a1c3289e67961cbc598a7c86d7507a9304cdd48b467f6ea42103dd591f863987be44df0008", 0xc6}, {&(0x7f0000001480)="a73321f056fc59af34a28a022b83e9af94f96762dbf6b5a903faca62ac38cd614235c6c3de4ca3fb9651c09bd4f9173d8a109b3a05a5107cfd08372c0f4aade0a66027f6ca4ff54266c05ae9106ab2ac2e77870e4d761583f5ec0233fd995bb5f99ee8e57b5dc522e527d9ce2ca4f4349c42282fd9cb4c9765a4093d06e10c79d06ff59c0ccc50826df41e63f67fd368948ddebc6dea20623721eb9ce7f6bc07037bbdb9938932124b057976c2d7ff31b99d328edd4d3a4f29a15f7f0d969500980a7511b6d37719", 0xc8}], 0x5, &(0x7f0000001600)=[{0x90, 0x103, 0x8, "62a30f0647af61719dc894320cf70e9cf799e648dd9565525bdbe9f84e90ae5957eed1e52321b3a6e87838edc139744573ed2a037b8af407db9e158edf2a4ce01e278e416abbc9c716e7f0a691ea72e2123d760365df7b4f66f5f04b19edb56a24d41bb67ed22515d0b31460368ea616dcdda8a1b11dd71ae3b6fc8ace6e"}, {0x100, 0x116, 0x9, "734c186d904580a881bf5d6b66f2e08616740ab5c2081d7556558ec092826af19d5349ff452dbe00812c47428fc647fd4ecda1b1d3c9b4e1f84374585ca2038aa81195b7640e4485418b7f4456a2a0c66c4c5c8fda6a31572d00d6b12cf86ac7c9ea4ceac7b361f1a6e7f29d5ae44d831d59e4cd94f35e033dcb6fd905dd6f5081c318fe7113b8383927805860dc771f1d10a37e023e63edc46c7574dbea13ca099cad73632e4597af19a13fb02d52889dd68bfd8928a87af72ee7862e1dc85d8aef8b3ce041798c9dbb906ba713177520bba5e240f983d565146afcfb38a9f07177236a67486ef2a8a7fd"}], 0x190}}], 0x1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 3.137590291s ago: executing program 2 (id=3607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r0, 0x2000) unshare(0x8040480) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r1}, 0x38) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x90, 0x43, 0xa0, 0x0, 0x98, 0x958, 0x178, 0x178, 0x958, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 3.113235938s ago: executing program 3 (id=3608): r0 = socket$inet(0x2, 0x3, 0x33) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58010000100001000000000000000000fe8000000000000000000000000000bb00000000000000000000ffffe000000200000025000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0a00010000000000000000000000000000000032000000000000000000000000000000000000010000000000000000a3020000000000007f00000000000000ffffffffffffffff0000000000000000330000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00020100000000000000001c001700000000070000000000000000000000002bbd7000000000004c0014"], 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x0, 0x42, 0x93, 0xc0, 0x1, 0x1}, 0x50) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x2, 0xb0, 0x400, r2, 0xffffffff, '\x00', 0x0, r7, 0x3, 0x1, 0x1, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) 3.044062818s ago: executing program 4 (id=3609): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f2829"], 0xe0}]}, 0x40040) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x6, {0x20, 0x7, 0xffffffffc4560879, 0x7f, 0xbc6}}) 3.036470222s ago: executing program 2 (id=3610): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x8, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x61, 0x30, 0xe, 0x0, 0x7f81e8b2a5cd61e3]}}, &(0x7f0000000600)=""/222, 0x2f, 0xde, 0x1, 0x8, 0x10000}, 0x28) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xd30c, 0x10}, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r10, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x1f, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @generic={0xf5, 0xf, 0x8, 0x80, 0x9}, @alu={0x4, 0x0, 0x2, 0xb, 0xb, 0xffffffffffffffff, 0x8}, @ldst={0x3, 0x2, 0x2, 0x7, 0x5, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x15, 0x9, 0x5, 0x10, 0x4}, @call={0x85, 0x0, 0x0, 0x57}, @generic={0xeb, 0xe, 0x9, 0x5, 0x6a0}], {{}, {}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000400)='GPL\x00', 0x8, 0x45, &(0x7f0000000480)=""/69, 0x40f00, 0x0, '\x00', r7, @fallback=0x13, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0x0, 0x8}, 0x10, r3, r2, 0x0, &(0x7f0000000800)=[r9, r1, r1, r10, r1, r0, 0xffffffffffffffff, r11, r0, r1], &(0x7f0000000840), 0x10, 0x200}, 0x94) 2.945883976s ago: executing program 3 (id=3611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe80fffe000100000000000000000037000004d232000000fc020000000000000000030000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.945477001s ago: executing program 4 (id=3612): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'bond_slave_0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f0000000500)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r7, @ANYRES32=r6], 0x30}}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'hsr0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000001cc0), 0x400000000000026, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x30004083}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x5, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r11, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x105, 0x2000000, 0x0, {{}, {@void, @val={0xc, 0x99, {0xe96c, 0x5f}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x28}}, 0xc004) 2.908806869s ago: executing program 3 (id=3613): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000740)="756010cd", 0x4}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast1, 0x6}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000340)='/', 0x1}], 0x1}}], 0x2, 0x44) 2.843124093s ago: executing program 3 (id=3614): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async, rerun: 32) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async, rerun: 32) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x40, @mcast2, 0xa}, 0x1c) (rerun: 64) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x44) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x2, 0x5, 0x4d8, 0x220, 0xf0, 0xffffffff, 0x338, 0x338, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff, 0xffffffff], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x68, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@initdev={0xac, 0x1e, 0x2, 0x0}, @gre_key=0x5, @gre_key=0x8}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x0, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000235080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="830720000400000075330c00040000238520002b09e3c500"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="fd58390cf0a3f2288db61fdc17009300000000fb00160140", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0100000004001000040122000b00000001000000", @ANYRES32, @ANYBLOB="0000000000000000d61029e4f15300f1ff200003000000000000e4b128255e13169b3211a741b4708e7b0b0c913cacd0bcae99a2a7bd3c4ded512aa38a28f5c194323f0db304badf7764cea5d7a5b0d67e0ad8dfbfce9ab6d0e58b128399eb9dc7c2dcf49a974f4c0cab3c19837fe69899d3ed6d042dbb3b618a75a5254d925d6067e4bcdb9554a0ba7a7df8539d4a42b500aa4993dad142c462158fb6ed4dd3877db07d4f0224d61e4c5a445ce62132ef8c88c7c6cac2bb29cf32fc3c1752178ef348242df4d2fb1fbb5037f4678cdf1aad667aeee82a34d202f3ab8d1733283e92ff4504932463435caeb719b89843affa05", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8}, 0x38) (async) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000000)={r2, r7}) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.653255768s ago: executing program 3 (id=3615): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'vlan1\x00', {'wg1\x00'}, 0x4800}) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfb}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) 556.095661ms ago: executing program 1 (id=3616): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$netlink(r0, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00030064756d6d7930000008001f0004000000180012000a00010064756d6d79000000"], 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="30000000240005050000000000000000000000000300000000000100ffffffff000000000c00010063616b655f6d7100"], 0x30}], 0x1}, 0x0) 523.985017ms ago: executing program 0 (id=3617): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @remote}) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@getqdisc={0x2c, 0x26, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe}, {0xd, 0x7}, {0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x40) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x8100, r4, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x89, @private=0xa010101, 0x4e21, 0x0, 'dh\x00', 0xc, 0x5, 0x80}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0xe}], 0x1, 0x0, 0x16, 0x11000000}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="000008ec13f10000fe8800000000d6164ea077be806b4d97fd000040", @ANYRES32=0x0, @ANYRES16=r5], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="1588040003ad750000000008000d20080000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket(0x1e, 0x1, 0x0) 473.657088ms ago: executing program 2 (id=3618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0x19, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r1, &(0x7f0000000240)="44c3941d651145b583cdc8a208008a713ab14f83ec0e2e15a7c2c7fd72dec10318af218087", 0x25, 0x0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x100, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x41, 0x301, 0x70bd2b, 0x25dfdbfd, {0x3}, [@nested={0xc, 0x96, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x840) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f4, &(0x7f00000001c0)={'gretap0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94) 439.208988ms ago: executing program 4 (id=3619): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x0, 0x2005, 0xfffffffd, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xf3c42000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)='H', 0x1}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0xfffffffe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x6, 0x9, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast1}}}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x48) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x90, 0x43, 0xa0, 0x0, 0x98, 0x958, 0x178, 0x178, 0x958, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000000106010300000000000000000700000205000100070000000500010007000000050001000700000005000100070000000500010007000000050001000700000005000101000700000005000100070000000500010007000000"], 0x64}}, 0x4) 359.175482ms ago: executing program 3 (id=3620): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) socket(0xa, 0x3, 0xff) (async) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x2}, 0x20048b88) poll(&(0x7f0000000600)=[{r0, 0x8}, {r1, 0x21da}], 0x2, 0x5) (async) poll(&(0x7f0000000600)=[{r0, 0x8}, {r1, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) socket(0x400000010, 0x3, 0x0) (async) r2 = socket(0x400000010, 0x3, 0x0) write(r2, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) (async) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a01010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x120, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0xfffffffffffffe01, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r3, 0x0, 0x0, 0x800) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) (async) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffb0900030073797a32000000000900010073797a300000000008000a400000000420000000080a0104000000000000000001000000090001"], 0x9c}}, 0x0) 358.216484ms ago: executing program 1 (id=3621): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 227.079597ms ago: executing program 1 (id=3622): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x24060400) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00110015000100fdffffff0000000900180000", @ANYRES32=r2, @ANYBLOB="14000300766574683000"/20], 0x2c}}, 0x0) 160.105441ms ago: executing program 2 (id=3623): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe80fffe000100000000000000000037000004d232000000fc020000000000000000070000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 17.096577ms ago: executing program 1 (id=3624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}}], 0x3ffffffffffff8c, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0672ff1ee9e086ae1e6e842682ca5de509d806e976d282d8c329103c22c85292378822160710d993a5f", 0x2a, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 0s ago: executing program 4 (id=3625): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x3ce, @private1={0xfc, 0x1, '\x00', 0x5}, 0x7f}}, 0x0, 0x83}, 0x90) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x2, 0x1}, {0x0, 0x4}}}, 0x24}}, 0x890) kernel console output (not intermixed with test programs): process `syz.1.2391'. [ 407.725537][T13805] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2389'. [ 407.741031][T13801] lo speed is unknown, defaulting to 1000 [ 407.775703][T13810] bridge0: port 3(team0) entered disabled state [ 407.803228][T13810] team0 (unregistering): left allmulticast mode [ 407.825032][T13810] team_slave_0: left allmulticast mode [ 407.831351][T13810] team_slave_1: left allmulticast mode [ 407.837577][T13810] bridge1: left allmulticast mode [ 407.843817][T13810] team0 (unregistering): left promiscuous mode [ 407.850102][T13810] team_slave_0: left promiscuous mode [ 407.856808][T13810] team_slave_1: left promiscuous mode [ 407.865592][T13810] bridge1: left promiscuous mode [ 407.871062][T13810] bridge0: port 3(team0) entered disabled state [ 407.891893][T13810] team0 (unregistering): Port device team_slave_0 removed [ 407.921672][T13810] team0 (unregistering): Port device team_slave_1 removed [ 407.948154][T13810] team0 (unregistering): Port device bridge1 removed [ 407.962936][T13801] wlan0 speed is unknown, defaulting to 1000 [ 408.143599][T13827] bond15: entered promiscuous mode [ 408.156833][T13827] bond15: entered allmulticast mode [ 408.171653][T13827] 8021q: adding VLAN 0 to HW filter on device bond15 [ 408.434870][T13838] 8021q: adding VLAN 0 to HW filter on device bond16 [ 408.545605][T13809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.652275][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 408.691623][T13851] openvswitch: netlink: IP tunnel dst address not specified [ 408.730512][T13851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.154801][T13872] bond16: entered promiscuous mode [ 409.169730][T13872] bond16: entered allmulticast mode [ 409.188092][T13872] 8021q: adding VLAN 0 to HW filter on device bond16 [ 409.288061][T13880] tipc: Enabling of bearer rejected, failed to enable media [ 409.468203][T13887] syz.4.2412: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 409.556666][T13887] CPU: 1 UID: 0 PID: 13887 Comm: syz.4.2412 Not tainted syzkaller #0 PREEMPT(full) [ 409.556718][T13887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 409.556743][T13887] Call Trace: [ 409.556759][T13887] [ 409.556775][T13887] dump_stack_lvl+0xe8/0x150 [ 409.556837][T13887] warn_alloc+0x24c/0x270 [ 409.556891][T13887] ? stack_depot_save_flags+0x33/0x800 [ 409.557039][T13887] ? __pfx_warn_alloc+0x10/0x10 [ 409.557072][T13887] ? kasan_save_track+0x3e/0x80 [ 409.557101][T13887] ? __kasan_kmalloc+0x93/0xb0 [ 409.557137][T13887] ? xsk_setsockopt+0x52a/0x960 [ 409.557217][T13887] ? do_sock_setsockopt+0x17c/0x1b0 [ 409.557241][T13887] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 409.557263][T13887] ? do_syscall_64+0x174/0x580 [ 409.557290][T13887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.557322][T13887] __vmalloc_node_range_noprof+0x12c/0x1730 [ 409.557381][T13887] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.557415][T13887] ? __kasan_kmalloc+0x93/0xb0 [ 409.557447][T13887] ? __kmalloc_cache_noprof+0x32d/0x660 [ 409.557478][T13887] ? __kmalloc_cache_noprof+0x150/0x660 [ 409.557510][T13887] vmalloc_user_noprof+0xad/0xe0 [ 409.557538][T13887] ? xskq_create+0xbf/0x170 [ 409.557563][T13887] xskq_create+0xbf/0x170 [ 409.557591][T13887] xsk_init_queue+0x8a/0xe0 [ 409.557617][T13887] xsk_setsockopt+0x52a/0x960 [ 409.557640][T13887] ? __fget_files+0x2a/0x420 [ 409.557673][T13887] ? __pfx_xsk_setsockopt+0x10/0x10 [ 409.557696][T13887] ? __pfx_aa_sk_perm+0x10/0x10 [ 409.557762][T13887] ? aa_sock_opt_perm+0xff/0x1a0 [ 409.557788][T13887] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 409.557830][T13887] ? __pfx_xsk_setsockopt+0x10/0x10 [ 409.557856][T13887] do_sock_setsockopt+0x17c/0x1b0 [ 409.557887][T13887] __x64_sys_setsockopt+0x13d/0x1b0 [ 409.557914][T13887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.557940][T13887] do_syscall_64+0x174/0x580 [ 409.557965][T13887] ? trace_irq_disable+0x3b/0x140 [ 409.557995][T13887] ? clear_bhb_loop+0x40/0x90 [ 409.558030][T13887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.558052][T13887] RIP: 0033:0x7fb5f099de99 [ 409.558074][T13887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.558093][T13887] RSP: 002b:00007fb5eebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 409.558116][T13887] RAX: ffffffffffffffda RBX: 00007fb5f0c25fa0 RCX: 00007fb5f099de99 [ 409.558133][T13887] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 409.558146][T13887] RBP: 00007fb5f0a33eaf R08: 0000000000000004 R09: 0000000000000000 [ 409.558159][T13887] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.558173][T13887] R13: 00007fb5f0c26038 R14: 00007fb5f0c25fa0 R15: 00007fffbe7344d8 [ 409.558208][T13887] [ 409.859499][T13887] Mem-Info: [ 409.867859][T13887] active_anon:5748 inactive_anon:0 isolated_anon:0 [ 409.867859][T13887] active_file:0 inactive_file:43694 isolated_file:0 [ 409.867859][T13887] unevictable:768 dirty:275 writeback:0 [ 409.867859][T13887] slab_reclaimable:11079 slab_unreclaimable:172435 [ 409.867859][T13887] mapped:30744 shmem:1287 pagetables:1240 [ 409.867859][T13887] sec_pagetables:0 bounce:0 [ 409.867859][T13887] kernel_misc_reclaimable:0 [ 409.867859][T13887] free:1249140 free_pcp:9508 free_cma:0 [ 409.950013][T13887] Node 0 active_anon:23096kB inactive_anon:0kB active_file:0kB inactive_file:174572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122944kB dirty:1120kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15008kB pagetables:4868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 409.984649][T13887] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 410.021366][T13887] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.051633][T13887] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 410.058447][T13887] Node 0 DMA32 free:1047600kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23196kB inactive_anon:0kB active_file:0kB inactive_file:174572kB unevictable:1536kB writepending:1120kB zspages:0kB present:3129332kB managed:2548588kB mlocked:0kB bounce:0kB free_pcp:36956kB local_pcp:20508kB free_cma:0kB [ 410.092521][T13887] lowmem_reserve[]: 0 0 0 0 0 [ 410.097312][T13887] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.128406][T13887] lowmem_reserve[]: 0 0 0 0 0 [ 410.133337][T13887] Node 1 Normal free:3933760kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1256kB local_pcp:0kB free_cma:0kB [ 410.165837][T13887] lowmem_reserve[]: 0 0 0 0 0 [ 410.179195][T13887] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 410.206610][T13887] Node 0 DMA32: 1958*4kB (UME) 877*8kB (UM) 435*16kB (UME) 142*32kB (UM) 77*64kB (UM) 30*128kB (UM) 9*256kB (UM) 7*512kB (UME) 3*1024kB (UE) 6*2048kB (UME) 242*4096kB (UM) = 1047600kB [ 410.272871][T13887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 410.320661][T13887] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (UM) = 3933760kB [ 410.396550][T13887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.434067][T13887] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.461814][T13887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.475476][T13887] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.491860][T13887] 44977 total pagecache pages [ 410.497764][T13887] 0 pages in swap cache [ 410.517553][T13887] Free swap = 124996kB [ 410.527694][T13887] Total swap = 124996kB [ 410.536743][T13887] 2097051 pages RAM [ 410.544672][T13887] 0 pages HighMem/MovableOnly [ 410.556603][T13887] 428224 pages reserved [ 410.569508][T13887] 0 pages cma reserved [ 410.667657][T13925] __nla_validate_parse: 7 callbacks suppressed [ 410.667678][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2423'. [ 410.726244][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'. [ 410.765547][T13930] bond17: (slave macvlan1): Enslaving as an active interface with an up link [ 410.815809][T13925] bond17 (unregistering): (slave macvlan1): Releasing backup interface [ 410.845656][T13925] bond17 (unregistering): Released all slaves [ 410.887504][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 411.210917][T13942] geneve2: entered allmulticast mode [ 411.249707][T13944] netlink: 'syz.3.2428': attribute type 11 has an invalid length. [ 411.860458][T13966] bond17: entered promiscuous mode [ 411.884929][T13966] 8021q: adding VLAN 0 to HW filter on device bond17 [ 412.489020][T14002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 412.495689][T14002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 412.548947][T14002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 412.555500][T14002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 412.610868][T14002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 412.617530][T14002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 412.632088][T14008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2451'. [ 412.652550][T14002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 412.659047][T14002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 413.627964][T14029] bond0: (slave veth1_to_bond): Device is not bonding slave [ 413.637164][T14029] bond0: option active_slave: invalid value (veth1_to_bond) [ 413.668319][T14029] bond7: (slave batadv0): Releasing active interface [ 413.772043][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 413.779963][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.459202][T14068] netlink: 'syz.0.2471': attribute type 1 has an invalid length. [ 414.483151][T14068] netlink: 600 bytes leftover after parsing attributes in process `syz.0.2471'. [ 414.509599][T14068] net_ratelimit: 69 callbacks suppressed [ 414.509619][T14068] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 414.537399][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2471'. [ 414.667243][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2473'. [ 414.783311][T14071] lo speed is unknown, defaulting to 1000 [ 414.791190][T14071] wlan0 speed is unknown, defaulting to 1000 [ 415.098681][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2482'. [ 415.318343][T14096] pim6reg1: entered promiscuous mode [ 415.328017][T14096] pim6reg1: entered allmulticast mode [ 415.573398][T14113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2485'. [ 415.587339][T14113] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2485'. [ 415.598406][T14113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.820808][T14124] __nla_validate_parse: 1 callbacks suppressed [ 415.820828][T14124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2489'. [ 416.211968][T14134] veth0_macvtap: entered allmulticast mode [ 416.265663][T14142] netlink: 'syz.3.2493': attribute type 4 has an invalid length. [ 416.317831][T14143] netlink: 'syz.3.2493': attribute type 4 has an invalid length. [ 416.418812][T14133] veth0_macvtap: left allmulticast mode [ 416.545072][ T6747] lo speed is unknown, defaulting to 1000 [ 416.552642][ T6773] lo speed is unknown, defaulting to 1000 [ 416.588378][T14138] netlink: 'syz.3.2493': attribute type 4 has an invalid length. [ 416.612893][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'. [ 416.640645][ T5624] lo speed is unknown, defaulting to 1000 [ 416.656189][ T5624] syz2: Port: 1 Link DOWN [ 416.954329][T14164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2502'. [ 416.972566][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.369653][T14178] syzkaller0: entered promiscuous mode [ 417.390467][T14178] syzkaller0: entered allmulticast mode [ 417.666483][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2511'. [ 417.894870][T14202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2515'. [ 417.977519][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 418.245796][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2524'. [ 418.267411][T14219] netlink: 'syz.0.2523': attribute type 1 has an invalid length. [ 418.277271][T14219] netlink: 'syz.0.2523': attribute type 2 has an invalid length. [ 418.301988][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2523'. [ 418.324154][T14226] FAULT_INJECTION: forcing a failure. [ 418.324154][T14226] name failslab, interval 1, probability 0, space 0, times 0 [ 418.345472][T14220] 8021q: adding VLAN 0 to HW filter on device bond10 [ 418.369493][T14226] CPU: 1 UID: 0 PID: 14226 Comm: syz.1.2525 Not tainted syzkaller #0 PREEMPT(full) [ 418.369525][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 418.369539][T14226] Call Trace: [ 418.369547][T14226] [ 418.369556][T14226] dump_stack_lvl+0xe8/0x150 [ 418.369594][T14226] should_fail_ex+0x40c/0x560 [ 418.369625][T14226] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 418.369730][T14226] should_failslab+0xa8/0x100 [ 418.369765][T14226] __kvmalloc_node_noprof+0x176/0x860 [ 418.369802][T14226] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 418.369836][T14226] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 418.369868][T14226] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 418.369905][T14226] ? __mutex_unlock_slowpath+0x731/0x900 [ 418.370033][T14226] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 418.370073][T14226] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 418.370101][T14226] ? 0xffffffffa02057c0 [ 418.370172][T14226] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 418.370209][T14226] ? _copy_from_user+0x94/0xb0 [ 418.370231][T14226] ? bpf_test_init+0x113/0x150 [ 418.370254][T14226] ? xdp_convert_md_to_buff+0x5b/0x330 [ 418.370284][T14226] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 418.370328][T14226] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.370361][T14226] ? __fget_files+0x2a/0x420 [ 418.370397][T14226] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.370429][T14226] bpf_prog_test_run+0x2c5/0x340 [ 418.370475][T14226] __sys_bpf+0xa22/0xd90 [ 418.370514][T14226] ? __pfx___sys_bpf+0x10/0x10 [ 418.370555][T14226] ? __fget_files+0x2a/0x420 [ 418.370604][T14226] ? ksys_write+0x242/0x270 [ 418.370627][T14226] ? __pfx_ksys_write+0x10/0x10 [ 418.370655][T14226] __x64_sys_bpf+0xba/0xd0 [ 418.370682][T14226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.370706][T14226] do_syscall_64+0x174/0x580 [ 418.370734][T14226] ? clear_bhb_loop+0x40/0x90 [ 418.370761][T14226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.370783][T14226] RIP: 0033:0x7f6d5cf9de99 [ 418.370803][T14226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.370822][T14226] RSP: 002b:00007f6d5de29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.370845][T14226] RAX: ffffffffffffffda RBX: 00007f6d5d225fa0 RCX: 00007f6d5cf9de99 [ 418.370860][T14226] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 418.370874][T14226] RBP: 00007f6d5de29090 R08: 0000000000000000 R09: 0000000000000000 [ 418.370887][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.370900][T14226] R13: 00007f6d5d226038 R14: 00007f6d5d225fa0 R15: 00007ffc127c0178 [ 418.370935][T14226] [ 418.679170][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2528'. [ 418.688656][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2528'. [ 419.408088][T14258] netlink: 'syz.4.2534': attribute type 1 has an invalid length. [ 419.604670][T14251] Set syz1 is full, maxelem 65536 reached [ 419.972668][T14278] FAULT_INJECTION: forcing a failure. [ 419.972668][T14278] name failslab, interval 1, probability 0, space 0, times 0 [ 420.000901][T14278] CPU: 1 UID: 0 PID: 14278 Comm: syz.2.2541 Not tainted syzkaller #0 PREEMPT(full) [ 420.000931][T14278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 420.000944][T14278] Call Trace: [ 420.000952][T14278] [ 420.000961][T14278] dump_stack_lvl+0xe8/0x150 [ 420.000999][T14278] should_fail_ex+0x40c/0x560 [ 420.001029][T14278] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 420.001060][T14278] should_failslab+0xa8/0x100 [ 420.001095][T14278] __kvmalloc_node_noprof+0x176/0x860 [ 420.001131][T14278] ? __kvmalloc_node_noprof+0x35c/0x860 [ 420.001173][T14278] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 420.001207][T14278] bpf_test_run_xdp_live+0x220/0x1c20 [ 420.001237][T14278] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 420.001282][T14278] ? __mutex_unlock_slowpath+0x731/0x900 [ 420.001317][T14278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 420.001351][T14278] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 420.001379][T14278] ? 0xffffffffa02057c0 [ 420.001448][T14278] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 420.001484][T14278] ? _copy_from_user+0x94/0xb0 [ 420.001505][T14278] ? bpf_test_init+0x113/0x150 [ 420.001528][T14278] ? xdp_convert_md_to_buff+0x5b/0x330 [ 420.001557][T14278] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 420.001600][T14278] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 420.001631][T14278] ? __fget_files+0x2a/0x420 [ 420.001666][T14278] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 420.001694][T14278] bpf_prog_test_run+0x2c5/0x340 [ 420.001728][T14278] __sys_bpf+0xa22/0xd90 [ 420.001764][T14278] ? __pfx___sys_bpf+0x10/0x10 [ 420.001803][T14278] ? __fget_files+0x2a/0x420 [ 420.001846][T14278] ? ksys_write+0x242/0x270 [ 420.001869][T14278] ? __pfx_ksys_write+0x10/0x10 [ 420.001922][T14278] __x64_sys_bpf+0xba/0xd0 [ 420.001948][T14278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.001971][T14278] do_syscall_64+0x174/0x580 [ 420.001996][T14278] ? trace_irq_disable+0x3b/0x140 [ 420.002024][T14278] ? clear_bhb_loop+0x40/0x90 [ 420.002050][T14278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.002070][T14278] RIP: 0033:0x7fbb5c99de99 [ 420.002089][T14278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.002107][T14278] RSP: 002b:00007fbb5d8cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.002129][T14278] RAX: ffffffffffffffda RBX: 00007fbb5cc25fa0 RCX: 00007fbb5c99de99 [ 420.002144][T14278] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 420.002156][T14278] RBP: 00007fbb5d8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 420.002168][T14278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.002179][T14278] R13: 00007fbb5cc26038 R14: 00007fbb5cc25fa0 R15: 00007ffc8f5052b8 [ 420.002212][T14278] [ 420.407802][T14289] netlink: 'syz.2.2546': attribute type 12 has an invalid length. [ 420.903243][T14314] __nla_validate_parse: 4 callbacks suppressed [ 420.903264][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 421.175229][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 421.192610][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2560'. [ 421.233517][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 421.555894][T14338] veth0_macvtap: entered allmulticast mode [ 421.562357][T14338] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 421.649265][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2567'. [ 422.566986][T14354] FAULT_INJECTION: forcing a failure. [ 422.566986][T14354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.618021][T14354] CPU: 0 UID: 0 PID: 14354 Comm: syz.0.2569 Not tainted syzkaller #0 PREEMPT(full) [ 422.618052][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 422.618066][T14354] Call Trace: [ 422.618074][T14354] [ 422.618083][T14354] dump_stack_lvl+0xe8/0x150 [ 422.618122][T14354] should_fail_ex+0x40c/0x560 [ 422.618155][T14354] _copy_from_user+0x2d/0xb0 [ 422.618177][T14354] __sys_bpf+0x2e7/0xd90 [ 422.618214][T14354] ? vfs_write+0x980/0xba0 [ 422.618235][T14354] ? __pfx___sys_bpf+0x10/0x10 [ 422.618298][T14354] ? ksys_write+0x1fc/0x270 [ 422.618321][T14354] ? __pfx_ksys_write+0x10/0x10 [ 422.618349][T14354] __x64_sys_bpf+0xba/0xd0 [ 422.618376][T14354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.618401][T14354] do_syscall_64+0x174/0x580 [ 422.618427][T14354] ? trace_irq_disable+0x3b/0x140 [ 422.618456][T14354] ? clear_bhb_loop+0x40/0x90 [ 422.618483][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.618505][T14354] RIP: 0033:0x7f476519de99 [ 422.618525][T14354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.618552][T14354] RSP: 002b:00007f476609d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.618575][T14354] RAX: ffffffffffffffda RBX: 00007f4765425fa0 RCX: 00007f476519de99 [ 422.618590][T14354] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 422.618604][T14354] RBP: 00007f476609d090 R08: 0000000000000000 R09: 0000000000000000 [ 422.618617][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.618629][T14354] R13: 00007f4765426038 R14: 00007f4765425fa0 R15: 00007ffeac89ecf8 [ 422.618664][T14354] [ 422.815001][T14365] lo speed is unknown, defaulting to 1000 [ 422.830931][T14365] wlan0 speed is unknown, defaulting to 1000 [ 422.936949][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2577'. [ 423.955469][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2590'. [ 423.965940][T14418] tipc: Enabling of bearer rejected, failed to enable media [ 423.967580][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 424.558833][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2595'. [ 425.271113][T14396] Set syz1 is full, maxelem 65536 reached [ 425.294012][ T135] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.397661][T14445] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2598'. [ 425.527887][T14453] can: request_module (can-proto-0) failed. [ 427.107448][T14421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.117101][T14450] netlink: 'syz.0.2601': attribute type 1 has an invalid length. [ 427.127712][T14450] __nla_validate_parse: 4 callbacks suppressed [ 427.127730][T14450] netlink: 756 bytes leftover after parsing attributes in process `syz.0.2601'. [ 427.217658][T14477] netlink: 'syz.2.2610': attribute type 1 has an invalid length. [ 427.235611][T14477] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2610'. [ 427.248364][T14477] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 427.260351][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2611'. [ 427.442010][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 427.668941][T14501] netlink: 'syz.2.2617': attribute type 1 has an invalid length. [ 427.868279][T14501] 8021q: adding VLAN 0 to HW filter on device bond17 [ 427.888107][T14503] dummy0: left promiscuous mode [ 427.914670][T14503] bond17: (slave dummy0): making interface the new active one [ 427.950352][T14503] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 428.015616][T14503] netlink: 'syz.2.2617': attribute type 10 has an invalid length. [ 428.050430][T14503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2617'. [ 428.096457][T14503] dummy0: entered promiscuous mode [ 428.136499][T14503] bond17: (slave dummy0): Releasing active interface [ 428.534894][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'. [ 428.562401][T14532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2627'. [ 428.887183][T14547] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 429.074457][T14545] block nbd3: server does not support multiple connections per device. [ 429.102224][T14545] block nbd3: shutting down sockets [ 429.512624][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'. [ 429.613442][T14581] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 429.619983][T14581] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 429.665165][T14581] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 429.671674][T14581] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 429.742624][T14581] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 429.749117][T14581] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 429.811685][T14590] ip6gre2: entered allmulticast mode [ 429.825264][T14581] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 429.831814][T14581] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 429.862998][T14590] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 429.879637][T14585] lo speed is unknown, defaulting to 1000 [ 429.898583][T14585] wlan0 speed is unknown, defaulting to 1000 [ 430.223368][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2653'. [ 430.568582][T14611] sctp: [Deprecated]: syz.2.2655 (pid 14611) Use of int in max_burst socket option deprecated. [ 430.568582][T14611] Use struct sctp_assoc_value instead [ 430.764516][T14585] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2646'. [ 431.132828][T14629] macsec1: entered allmulticast mode [ 431.152407][T14629] dummy0: entered allmulticast mode [ 431.210616][T14629] dummy0: left allmulticast mode [ 431.298893][T14632] macsec1: entered allmulticast mode [ 431.325295][T14632] dummy0: entered allmulticast mode [ 431.337792][T14632] dummy0: left allmulticast mode [ 431.425085][T14652] netlink: 'syz.3.2665': attribute type 26 has an invalid length. [ 431.638543][T14659] pimreg: entered allmulticast mode [ 431.793063][T14667] net_ratelimit: 68 callbacks suppressed [ 431.793085][T14667] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 431.805384][T14667] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 431.895896][T14667] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 431.902451][T14667] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 431.950468][T14673] syzkaller0: entered promiscuous mode [ 431.960690][T14667] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 431.967189][T14667] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 431.974666][T14673] syzkaller0: entered allmulticast mode [ 432.016756][T14667] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.023291][T14667] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 432.072763][T14667] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.079303][T14667] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 432.517311][T14679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.580512][T14679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.858942][T14679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.896320][T14679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.114361][T14679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.126070][T14679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.151313][T14710] __nla_validate_parse: 6 callbacks suppressed [ 433.151334][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 433.255726][T14679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.278493][T14679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.515594][ T359] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.524649][ T359] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.540010][ T5628] block nbd3: Receive control failed (result -32) [ 433.550659][ T5632] block nbd3: Receive control failed (result -32) [ 433.621379][ T1126] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.643539][ T1126] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.719170][T12226] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.746127][T12226] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.773532][T12226] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.782686][T12226] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.992218][T14743] syzkaller0: entered promiscuous mode [ 433.997757][T14743] syzkaller0: entered allmulticast mode [ 434.199165][T14750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2700'. [ 434.500659][T14725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.958070][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2715'. [ 437.515956][T14813] net_ratelimit: 66 callbacks suppressed [ 437.515994][T14813] Set syz1 is full, maxelem 14 reached [ 437.882820][T14805] geneve3: entered promiscuous mode [ 438.348974][T14833] netlink: 'syz.4.2720': attribute type 2 has an invalid length. [ 438.670223][T14850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2723'. [ 440.017148][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.575631][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2740'. [ 440.779504][T14928] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 440.803817][T14928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.343525][T14948] Cannot find set identified by id 65534 to match [ 441.376870][T14948] netlink: 'syz.3.2747': attribute type 1 has an invalid length. [ 441.403981][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2748'. [ 441.423334][T14950] netlink: 'syz.4.2748': attribute type 1 has an invalid length. [ 442.040515][T14971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2754'. [ 442.081816][T14971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2754'. [ 442.135205][T14979] netlink: 'syz.4.2756': attribute type 9 has an invalid length. [ 442.491670][T14989] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2759'. [ 442.717065][T14994] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.243272][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2765'. [ 443.606785][T15016] tipc: Enabled bearer , priority 0 [ 443.671531][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2769'. [ 443.790222][T15018] syzkaller0: entered promiscuous mode [ 443.807760][T15018] syzkaller0: entered allmulticast mode [ 443.825900][T15018] tipc: Resetting bearer [ 443.926650][T15019] bond11: entered promiscuous mode [ 443.942495][T15019] 8021q: adding VLAN 0 to HW filter on device bond11 [ 444.046118][T15015] tipc: Resetting bearer [ 446.205998][T15015] tipc: Disabling bearer [ 446.224297][T15031] 8021q: adding VLAN 0 to HW filter on device bond11 [ 446.231525][T15031] bond11: (slave sit3): The slave device specified does not support setting the MAC address [ 446.243360][T15031] bond11: (slave sit3): Error -95 calling set_mac_address [ 446.262131][T15032] kthread_run failed with err -4 [ 446.412104][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 446.718479][T15071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2785'. [ 446.733366][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 446.758416][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2784'. [ 446.801659][T15072] block nbd4: Unsupported socket: should be TCP or UNIX. [ 447.021894][T15081] bond12: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 447.081111][T15081] bond12 (unregistering): Released all slaves [ 448.100532][T15132] xt_CT: No such helper "netbios-ns" [ 448.318619][T15166] syzkaller1: entered promiscuous mode [ 448.340245][T15166] syzkaller1: entered allmulticast mode [ 448.351057][T15166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2813'. [ 448.399460][T15171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2814'. [ 448.698325][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 448.783075][T15185] 8021q: adding VLAN 0 to HW filter on device bond12 [ 448.885320][T15196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2818'. [ 449.258403][T15218] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 449.795552][T15241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2832'. [ 450.245247][T15266] netlink: 64587 bytes leftover after parsing attributes in process `syz.4.2836'. [ 450.278433][T15266] unsupported nlmsg_type 40 [ 450.619093][ T30] audit: type=1804 audit(1785276488.983:4): pid=15284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2840" name="/newroot/571/cgroup.controllers" dev="tmpfs" ino=2916 res=1 errno=0 [ 450.677633][ T30] audit: type=1800 audit(1785276488.983:5): pid=15284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2840" name="cgroup.controllers" dev="tmpfs" ino=2916 res=0 errno=0 [ 451.149398][T15303] bond10: entered promiscuous mode [ 451.157791][T15303] bond10: entered allmulticast mode [ 451.164307][T15303] 8021q: adding VLAN 0 to HW filter on device bond10 [ 451.522502][T15325] sit0: entered promiscuous mode [ 451.529489][T15325] netlink: 'syz.1.2852': attribute type 1 has an invalid length. [ 451.556919][T15325] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2852'. [ 451.994492][T15351] __nla_validate_parse: 1 callbacks suppressed [ 451.994510][T15351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 452.010657][T15347] bond18: entered promiscuous mode [ 452.020495][T15347] bond18: entered allmulticast mode [ 452.028087][T15347] 8021q: adding VLAN 0 to HW filter on device bond18 [ 452.101466][T15355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2863'. [ 452.566009][T15382] sock: sock_timestamping_bind_phc: sock not bind to device [ 453.539673][T15423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2883'. [ 453.556626][T15426] netlink: 'syz.1.2885': attribute type 5 has an invalid length. [ 453.565003][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'. [ 453.638632][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'. [ 453.846119][T15445] netlink: 'syz.4.2887': attribute type 15 has an invalid length. [ 453.926663][T15446] netlink: 'syz.4.2887': attribute type 1 has an invalid length. [ 453.947665][T15446] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2887'. [ 453.980017][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'. [ 454.732310][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.960953][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 456.040663][T15499] netlink: 'syz.4.2904': attribute type 30 has an invalid length. [ 456.072728][T15499] bond19: option arp_missed_max: invalid value (0) [ 456.079329][T15499] bond19: option arp_missed_max: allowed values 1 - 255 [ 456.088941][T15499] bond19 (unregistering): Released all slaves [ 456.142214][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 456.286444][T15509] lo speed is unknown, defaulting to 1000 [ 456.294442][T15509] wlan0 speed is unknown, defaulting to 1000 [ 456.666756][T15434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.877589][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.897491][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.910899][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.927540][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.937893][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.292803][ T1174] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.349241][ T5640] bridge0: port 3(syz_tun) entered disabled state [ 457.457449][ T5640] syz_tun (unregistering): left allmulticast mode [ 457.475330][ T5640] syz_tun (unregistering): left promiscuous mode [ 457.485535][ T5640] bridge0: port 3(syz_tun) entered disabled state [ 457.884147][T15560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2917'. [ 458.038283][ T135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.066115][ T135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.249337][ T135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.282721][ T135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.392854][T15527] lo speed is unknown, defaulting to 1000 [ 458.407268][T15527] wlan0 speed is unknown, defaulting to 1000 [ 458.504003][ T135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.524899][ T135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.878277][ T135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.906312][ T135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.934098][T15578] tunl0: Caught tx_queue_len zero misconfig [ 458.972986][ T5632] Bluetooth: hci5: command tx timeout [ 459.262811][T15587] netlink: 'syz.1.2924': attribute type 28 has an invalid length. [ 459.276061][T15587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2924'. [ 459.625166][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2926'. [ 459.787412][T15527] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.817182][T15527] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.842335][T15527] bridge_slave_0: entered allmulticast mode [ 459.866217][T15527] bridge_slave_0: entered promiscuous mode [ 459.998155][T15527] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.009511][T15527] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.017502][T15527] bridge_slave_1: entered allmulticast mode [ 460.026278][T15527] bridge_slave_1: entered promiscuous mode [ 460.145512][T15527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.177572][T15527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.218655][T15613] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 460.269157][T15527] team0: Port device team_slave_0 added [ 460.310075][T15527] team0: Port device team_slave_1 added [ 460.355902][ T135] bridge_slave_1: left allmulticast mode [ 460.363333][ T135] bridge_slave_1: left promiscuous mode [ 460.373332][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.402168][ T135] bridge_slave_0: left allmulticast mode [ 460.409178][ T135] bridge_slave_0: left promiscuous mode [ 460.418084][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.459522][ T135] dvmrp8: left allmulticast mode [ 460.768894][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 460.846305][T15624] netlink: 'syz.0.2934': attribute type 11 has an invalid length. [ 460.868901][T15624] netlink: 'syz.0.2934': attribute type 4 has an invalid length. [ 460.897338][T15624] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2934'. [ 461.052026][ T5632] Bluetooth: hci5: command tx timeout [ 461.268000][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 461.349531][ T135] bond12 (unregistering): (slave erspan2): Releasing active interface [ 461.369148][ T135] erspan2 (unregistering): left promiscuous mode [ 461.773822][ T135] bond13 (unregistering): (slave bridge4): Releasing backup interface [ 461.787559][ T135] bridge4 (unregistering): left promiscuous mode [ 461.794181][ T135] bridge4 (unregistering): left allmulticast mode [ 461.816696][ T135]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.828697][ T135]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.844178][ T135]  (unregistering): Released all slaves [ 461.883432][ T135] bond0 (unregistering): (slave veth3): Releasing active interface [ 461.892388][ T135] batadv1: entered promiscuous mode [ 461.901061][ T135] bond0 (unregistering): (slave batadv1): Releasing active interface [ 461.917094][ T135] bond0 (unregistering): Released all slaves [ 461.939143][ T135] bond1 (unregistering): Released all slaves [ 461.961515][ T135] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 461.983954][ T135] bond2 (unregistering): Released all slaves [ 462.007032][ T135] bond3 (unregistering): (slave veth5): Releasing active interface [ 462.015903][ T135] veth0_to_bond: entered promiscuous mode [ 462.027821][ T135] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 462.043746][ T135] bond3 (unregistering): Released all slaves [ 462.066218][ T135] bond4 (unregistering): (slave batadv3): Releasing backup interface [ 462.076669][ T135] bond4 (unregistering): Released all slaves [ 462.107455][ T135] bond5 (unregistering): (slave batadv4): Releasing backup interface [ 462.118402][ T135] bond5 (unregistering): Released all slaves [ 462.153503][ T135] bond6 (unregistering): Released all slaves [ 462.186804][ T135] bond7 (unregistering): Released all slaves [ 462.214893][ T135] bond8 (unregistering): Released all slaves [ 462.244372][ T135] bond9 (unregistering): Released all slaves [ 462.274626][ T135] bond10 (unregistering): Released all slaves [ 462.296806][ T135] bond11 (unregistering): Released all slaves [ 462.324725][ T135] bond12 (unregistering): Released all slaves [ 462.353973][ T135] bond13 (unregistering): Released all slaves [ 462.388970][ T135] bond14 (unregistering): (slave team0): Releasing active interface [ 462.397748][ T135] team0: left promiscuous mode [ 462.404723][ T135] team_slave_0: left promiscuous mode [ 462.410378][ T135] team_slave_1: left promiscuous mode [ 462.417135][ T135] team0: left allmulticast mode [ 462.422395][ T135] team_slave_0: left allmulticast mode [ 462.427924][ T135] team_slave_1: left allmulticast mode [ 462.439337][ T135] bond14 (unregistering): Released all slaves [ 462.460564][ T135] bond15 (unregistering): Released all slaves [ 462.481648][ T135] bond16 (unregistering): Released all slaves [ 462.508776][ T135] bond17 (unregistering): Released all slaves [ 462.579527][T15637] netlink: 'syz.4.2937': attribute type 362 has an invalid length. [ 462.659937][T15527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.687442][T15527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.798753][T15527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.846433][T15527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.853949][T15527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.954504][T15527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.078463][ T135] tipc: Disabling bearer [ 463.124358][ T135] tipc: Left network mode [ 463.132728][ T5632] Bluetooth: hci5: command tx timeout [ 463.145148][T15651] netlink: 'syz.4.2942': attribute type 2 has an invalid length. [ 463.207976][T15654] netlink: 5016 bytes leftover after parsing attributes in process `syz.4.2942'. [ 463.242063][T15654] netlink: 9404 bytes leftover after parsing attributes in process `syz.4.2942'. [ 463.330536][T15527] hsr_slave_0: entered promiscuous mode [ 463.349248][T15527] hsr_slave_1: entered promiscuous mode [ 463.380773][T15527] debugfs: 'hsr0' already exists in 'hsr' [ 463.400537][T15527] Cannot create hsr debugfs directory [ 463.683316][ T135] IPVS: stopping backup sync thread 15218 ... [ 463.985519][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2946'. [ 464.111053][T15678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 464.117620][T15678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 464.202919][T15678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 464.209454][T15678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 464.290690][T15678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 464.297210][T15678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 464.309547][T15678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 464.316066][T15678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 464.324843][T15678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 464.331344][T15678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 464.617948][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2948'. [ 464.727886][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2948'. [ 464.775096][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 465.212194][ T5632] Bluetooth: hci5: command tx timeout [ 465.612042][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 465.935037][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2952'. [ 466.031440][T15720] 8021q: adding VLAN 0 to HW filter on device bond14 [ 466.155004][ T135] hsr_slave_0: left promiscuous mode [ 466.183871][ T135] hsr_slave_1: left promiscuous mode [ 466.214483][ T135] veth0_to_team: left promiscuous mode [ 466.229679][ T135] veth1_macvtap: left promiscuous mode [ 466.242163][ T135] veth0_macvtap: left promiscuous mode [ 466.259262][ T135] veth1_vlan: left promiscuous mode [ 466.270422][ T135] veth0_vlan: left promiscuous mode [ 466.932039][ T135] team0 (unregistering): Port device team_slave_1 removed [ 466.995402][ T135] team0 (unregistering): Port device team_slave_0 removed [ 467.674040][T15527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 467.718947][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.745292][T15527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.785031][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.819906][T15527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.869121][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.896176][T15527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.906627][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 467.940641][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.223732][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2963'. [ 468.407700][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2962'. [ 468.590324][T15762] 8021q: adding VLAN 0 to HW filter on device bond12 [ 468.603690][T15780] sit0: left promiscuous mode [ 468.845074][T15780] gre1: left allmulticast mode [ 468.850619][T15780] ip6gre1: left promiscuous mode [ 468.856322][T15780] ip6gre1: left allmulticast mode [ 468.861626][T15780] geneve2: left promiscuous mode [ 468.873152][T15780] bond4: left promiscuous mode [ 468.878118][T15780] erspan1: left promiscuous mode [ 468.883815][T15780] bond4: left allmulticast mode [ 468.889019][T15780] erspan1: left allmulticast mode [ 468.896683][T15780] vlan3: left promiscuous mode [ 468.901643][T15780] bond0: left promiscuous mode [ 468.907206][T15780] bond_slave_0: left promiscuous mode [ 468.914264][T15780] team0: left promiscuous mode [ 468.919208][T15780] team_slave_0: left promiscuous mode [ 468.925470][T15780] team_slave_1: left promiscuous mode [ 468.931231][T15780] bridge0: left promiscuous mode [ 468.937693][T15780] ip6erspan0: left allmulticast mode [ 468.967017][T15780] vxlan2: left promiscuous mode [ 468.978492][T15780] vxlan2: left allmulticast mode [ 468.989037][T15780] bond8: left promiscuous mode [ 468.994355][T15780] bond8: left allmulticast mode [ 469.029980][T15780] geneve3: left promiscuous mode [ 469.039761][T15780] geneve3: left allmulticast mode [ 469.063457][T15780] bond13: left promiscuous mode [ 469.068779][T15780] bond13: left allmulticast mode [ 469.078148][T15780] ip6gre2: left allmulticast mode [ 469.117380][ T9806] wlan0 speed is unknown, defaulting to 1000 [ 469.135909][ T9806] syz0: Port: 1 Link DOWN [ 469.175091][ T135] IPVS: stop unused estimator thread 0... [ 469.199610][T15790] tap0: tun_chr_ioctl cmd 1074025677 [ 469.244454][T15790] tap0: linktype set to 804 [ 469.266441][ T48] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.301557][ T48] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.325421][ T48] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.375517][ T48] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.406279][ T48] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.447879][ T48] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.460710][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2965'. [ 469.486014][ T48] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.510593][ T48] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.533255][T15527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.656573][T15527] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.693327][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.700579][ T7960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.784160][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.791394][ T7960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.471384][T15839] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2974'. [ 471.106370][T15864] bond13: entered promiscuous mode [ 471.128272][T15864] bond13: entered allmulticast mode [ 471.144371][T15864] 8021q: adding VLAN 0 to HW filter on device bond13 [ 471.779382][T15527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.959324][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2988'. [ 472.178115][T15904] veth6: entered allmulticast mode [ 472.189789][T15904] bond14: (slave veth6): Enslaving as an active interface with an up link [ 472.267753][T15915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2991'. [ 472.388073][T15527] veth0_vlan: entered promiscuous mode [ 472.411590][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'. [ 472.455733][T15527] veth1_vlan: entered promiscuous mode [ 472.488703][T15917] syzkaller0: entered promiscuous mode [ 472.498823][T15917] syzkaller0: entered allmulticast mode [ 472.533066][T15917] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2992'. [ 472.571132][T15527] veth0_macvtap: entered promiscuous mode [ 472.644087][T15527] veth1_macvtap: entered promiscuous mode [ 472.679549][T15527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.707697][T15527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.763558][ T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.801899][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.827198][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.844318][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.860828][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2996'. [ 472.905112][T15927] netlink: 'syz.3.2996': attribute type 1 has an invalid length. [ 472.923470][T15925] netlink: 'syz.3.2996': attribute type 1 has an invalid length. [ 472.961145][T15928] Cannot find add_set index 4 as target [ 472.974743][T15925] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2996'. [ 473.188022][T15847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.219071][T15847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.307808][T15936] net_ratelimit: 66 callbacks suppressed [ 473.307830][T15936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.356416][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 473.366995][T15936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.393713][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.404213][T15936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.420138][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.022546][T15954] bond13: option arp_all_targets: invalid value (3) [ 474.045535][T15954] bond13 (unregistering): Released all slaves [ 474.540683][T15974] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3009'. [ 474.673151][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 474.690493][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 474.701659][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 474.711358][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 474.725162][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 475.515890][T16000] bridge5: entered promiscuous mode [ 475.521411][T16000] bridge5: entered allmulticast mode [ 475.530559][T16000] team0: Port device bridge5 added [ 475.685501][T15977] lo speed is unknown, defaulting to 1000 [ 475.720954][T15977] wlan0 speed is unknown, defaulting to 1000 [ 475.852456][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.059477][T16028] can: request_module (can-proto-0) failed. [ 476.193291][T16035] tipc: Started in network mode [ 476.198215][T16035] tipc: Node identity , cluster identity 4711 [ 476.233497][T16035] tipc: Failed to obtain node identity [ 476.253801][T16035] tipc: Enabling of bearer rejected, failed to enable media [ 476.614795][T16058] bond15: entered promiscuous mode [ 476.620158][T16058] bond15: entered allmulticast mode [ 476.626678][T16058] 8021q: adding VLAN 0 to HW filter on device bond15 [ 476.660616][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.668051][T15977] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.675859][T15977] bridge_slave_0: entered allmulticast mode [ 476.684256][T15977] bridge_slave_0: entered promiscuous mode [ 476.694112][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.701440][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.709147][T15977] bridge_slave_1: entered allmulticast mode [ 476.717391][T15977] bridge_slave_1: entered promiscuous mode [ 476.778138][T15977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.812608][ T5632] Bluetooth: hci4: command tx timeout [ 476.832932][T15977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.947406][T16067] ip6_vti0: Caught tx_queue_len zero misconfig [ 477.038356][T16067] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3030'. [ 477.053369][T16067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3030'. [ 477.089464][T15977] team0: Port device team_slave_0 added [ 477.100636][T15977] team0: Port device team_slave_1 added [ 477.275046][T15977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.291010][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.325994][T15977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.385337][T15977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.412618][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.481962][T15977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.526044][T16084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.718611][T15977] hsr_slave_0: entered promiscuous mode [ 477.739909][T15977] hsr_slave_1: entered promiscuous mode [ 477.747118][T16090] netlink: 'syz.4.3038': attribute type 39 has an invalid length. [ 477.756248][T15977] debugfs: 'hsr0' already exists in 'hsr' [ 477.776316][T15977] Cannot create hsr debugfs directory [ 478.028294][T16094] bond15: entered promiscuous mode [ 478.033799][T16094] bond15: entered allmulticast mode [ 478.039645][T16094] 8021q: adding VLAN 0 to HW filter on device bond15 [ 478.089414][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 478.304632][T16109] netlink: 'syz.2.3047': attribute type 2 has an invalid length. [ 478.374691][T16109] ´: entered promiscuous mode [ 478.891872][ T5632] Bluetooth: hci4: command tx timeout [ 478.959873][T16125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3053'. [ 478.995704][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 479.117503][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3056'. [ 479.266495][T16133] dvmrp8: entered allmulticast mode [ 479.321663][T16142] ipip1: entered promiscuous mode [ 479.859168][T15977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 479.888492][T15977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.907014][T15977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 479.928748][T15977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.947393][T15977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 479.973147][T15977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.991538][T15977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.016023][T15977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.219651][T15977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.244525][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3064'. [ 480.269722][T15977] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.288622][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.297188][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.348183][T16166] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3065'. [ 480.357546][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'. [ 480.369510][T16166] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3065'. [ 480.381058][T16166] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3065'. [ 480.385630][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.397324][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.473256][T16168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 480.669378][T16179] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 480.973092][ T5632] Bluetooth: hci4: command tx timeout [ 480.999986][T16192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3071'. [ 481.329859][T15977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.452992][T15977] veth0_vlan: entered promiscuous mode [ 481.506732][T15977] veth1_vlan: entered promiscuous mode [ 481.583895][T15977] veth0_macvtap: entered promiscuous mode [ 481.606059][T15977] veth1_macvtap: entered promiscuous mode [ 481.665050][T15977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.705783][T15977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.729685][ T7958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.747277][ T7958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.772453][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.795561][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.960426][ T7958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.987477][ T7958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.057827][ T3307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.083477][ T3307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.109486][T16200] Set syz1 is full, maxelem 14 reached [ 482.608800][T16238] xt_connbytes: Forcing CT accounting to be enabled [ 482.775761][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 482.816370][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 482.827191][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 482.844967][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 482.856982][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.920403][ T7958] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.944643][ T7958] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.985281][ T7958] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.062100][ T5632] Bluetooth: hci4: command tx timeout [ 483.399967][ T7958] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.493161][ T5625] syz_tun (unregistering): left allmulticast mode [ 483.518515][ T5625] syz_tun (unregistering): left promiscuous mode [ 483.545113][ T5625] bridge0: port 3(syz_tun) entered disabled state [ 483.705671][T16278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 483.767250][T16286] xt_connbytes: Forcing CT accounting to be enabled [ 484.054234][T16243] lo speed is unknown, defaulting to 1000 [ 484.079991][T16243] wlan0 speed is unknown, defaulting to 1000 [ 484.390968][ T7958] IPVS: starting estimator thread 0... [ 484.521870][T16310] IPVS: using max 34 ests per chain, 81600 per kthread [ 484.641099][T16318] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 484.651635][T16318] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 484.664993][T16318] bond1: entered allmulticast mode [ 484.712932][T16319] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 484.722363][T16319] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 484.732568][T16319] bond2: entered allmulticast mode [ 484.972630][ T5632] Bluetooth: hci1: command tx timeout [ 485.099816][T16243] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.107392][T16243] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.115327][T16243] bridge_slave_0: entered allmulticast mode [ 485.124460][T16243] bridge_slave_0: entered promiscuous mode [ 485.134431][T16243] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.142029][T16243] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.149411][T16243] bridge_slave_1: entered allmulticast mode [ 485.158077][T16243] bridge_slave_1: entered promiscuous mode [ 485.209452][T16243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.224860][T16243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.275778][T16243] team0: Port device team_slave_0 added [ 485.285403][T16243] team0: Port device team_slave_1 added [ 485.335331][T16243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.343104][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.370051][T16243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.383998][T16243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.390995][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.417573][T16243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.573776][T16243] hsr_slave_0: entered promiscuous mode [ 485.588536][T16243] hsr_slave_1: entered promiscuous mode [ 485.612738][T16243] debugfs: 'hsr0' already exists in 'hsr' [ 485.628461][T16243] Cannot create hsr debugfs directory [ 485.976302][T16351] netlink: 'syz.2.3113': attribute type 1 has an invalid length. [ 486.105069][T16330] Set syz1 is full, maxelem 65536 reached [ 486.267048][T16359] netlink: 'syz.1.3114': attribute type 2 has an invalid length. [ 486.288121][T16359] netlink: 'syz.1.3114': attribute type 5 has an invalid length. [ 486.447252][T16243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.485627][T16243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.500077][T16243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 486.648656][T16243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.686034][T16243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.713734][T16243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 486.993337][T16243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.019981][T16243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.061772][ T5632] Bluetooth: hci1: command tx timeout [ 487.065733][T16243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 487.709647][T16243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.727074][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.753459][T16243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 487.769663][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.778933][T16243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 487.798994][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.807462][T16405] syzkaller0: entered promiscuous mode [ 487.821800][T16405] syzkaller0: entered allmulticast mode [ 487.837321][T16243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 487.854874][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.286943][T16243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.366132][T16243] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.396815][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.404088][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.449304][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.456577][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.564776][T16431] macvlan1: entered promiscuous mode [ 488.582600][T16431] macvlan1: entered allmulticast mode [ 488.613480][T16431] veth1_vlan: entered allmulticast mode [ 488.693699][T16438] bridge0: port 4(wlan1) entered blocking state [ 488.715328][T16438] bridge0: port 4(wlan1) entered disabled state [ 488.734054][T16438] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 488.772292][T16438] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 489.132190][ T5632] Bluetooth: hci1: command tx timeout [ 489.296951][T15847] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.915266][T16243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.058049][T16243] veth0_vlan: entered promiscuous mode [ 490.083147][T16243] veth1_vlan: entered promiscuous mode [ 490.157631][T16243] veth0_macvtap: entered promiscuous mode [ 490.168348][T16489] lo speed is unknown, defaulting to 1000 [ 490.184120][T16243] veth1_macvtap: entered promiscuous mode [ 490.201507][T16489] wlan0 speed is unknown, defaulting to 1000 [ 490.219638][T16243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.307599][T16243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.405815][ T359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.420757][ T359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.548497][ T359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.575484][T16490] dvmrp0: entered allmulticast mode [ 490.591954][ T359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.668885][T16489] tipc: Invalid UDP bearer configuration [ 490.668944][T16489] tipc: Enabling of bearer rejected, failed to enable media [ 490.844299][T15847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.872109][T15847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.965154][ T3307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.986701][ T3307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.103170][T16494] __nla_validate_parse: 5 callbacks suppressed [ 491.103191][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3148'. [ 491.213195][ T5632] Bluetooth: hci1: command tx timeout [ 491.245328][T16496] lo speed is unknown, defaulting to 1000 [ 491.266032][T16496] wlan0 speed is unknown, defaulting to 1000 [ 491.955388][T16502] syzkaller0: entered promiscuous mode [ 491.991291][T16502] syzkaller0: entered allmulticast mode [ 492.077453][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.099434][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.109005][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.121045][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.139479][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 494.173661][ T5632] Bluetooth: hci2: command tx timeout [ 494.337529][T16507] Cannot find set identified by id 0 to match [ 494.520671][ T48] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 494.603894][T16517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.439860][T16442] Set syz1 is full, maxelem 65536 reached [ 495.447543][T16468] Set syz1 is full, maxelem 65536 reached [ 495.712858][T16537] netlink: 'syz.0.3157': attribute type 11 has an invalid length. [ 496.252101][ T5632] Bluetooth: hci2: command tx timeout [ 497.826465][ T1174] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.839508][ T1174] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.071245][ T1174] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.088907][ T1174] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.213731][T16569] batman_adv: batadv0: Adding interface: macvtap1 [ 498.236186][T16569] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.297906][T16569] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 498.332013][ T5632] Bluetooth: hci2: command tx timeout [ 498.504419][ T1174] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.520065][ T1174] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.574015][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'. [ 498.731423][ T1174] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.779316][ T1174] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.959428][T16512] lo speed is unknown, defaulting to 1000 [ 498.985759][T16512] wlan0 speed is unknown, defaulting to 1000 [ 499.237893][T16599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3175'. [ 499.761403][ T1174] bridge_slave_1: left allmulticast mode [ 499.768660][ T1174] bridge_slave_1: left promiscuous mode [ 499.783645][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.847032][ T1174] bridge_slave_0: left allmulticast mode [ 499.854975][ T1174] bridge_slave_0: left promiscuous mode [ 499.861067][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.947371][ T1174] dvmrp8: left allmulticast mode [ 500.388554][ T1174] ip6gretap0 (unregistering): left promiscuous mode [ 500.412054][ T5632] Bluetooth: hci2: command tx timeout [ 500.644494][ T1174] erspan0 (unregistering): left promiscuous mode [ 500.911436][ T1174] bridge0 (unregistering): left promiscuous mode [ 500.977774][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.004696][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.021524][ T1174] bond0 (unregistering): Released all slaves [ 501.040092][ T1174] bond1 (unregistering): Released all slaves [ 501.069844][ T1174] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 501.088580][ T1174] bond2 (unregistering): Released all slaves [ 501.113688][ T1174] bond3 (unregistering): Released all slaves [ 501.139486][ T1174] bond4 (unregistering): Released all slaves [ 501.167495][ T1174] bond5 (unregistering): Released all slaves [ 501.194367][ T1174] bond6 (unregistering): Released all slaves [ 501.232889][ T1174] bond7 (unregistering): (slave batadv3): Releasing backup interface [ 501.270510][ T1174] bond7 (unregistering): Released all slaves [ 501.318577][ T1174] bond8 (unregistering): (slave batadv4): Releasing backup interface [ 501.350381][ T1174] bond8 (unregistering): Released all slaves [ 501.404149][ T1174] bond9 (unregistering): (slave batadv5): Releasing backup interface [ 501.434446][ T1174] bond9 (unregistering): Released all slaves [ 501.472869][ T1174] bond10 (unregistering): Released all slaves [ 501.518033][ T1174] bond11 (unregistering): (slave batadv6): Releasing backup interface [ 501.546557][ T1174] bond11 (unregistering): Released all slaves [ 501.575799][ T1174] bond12 (unregistering): (slave batadv7): Releasing backup interface [ 501.609575][ T1174] bond12 (unregistering): Released all slaves [ 501.645192][ T1174] bond13 (unregistering): (slave batadv8): Releasing backup interface [ 501.655476][ T1174] bond13 (unregistering): Released all slaves [ 501.677590][ T1174] bond14 (unregistering): (slave batadv9): Releasing backup interface [ 501.688202][ T1174] bond14 (unregistering): Released all slaves [ 501.716129][ T1174] bond15 (unregistering): Released all slaves [ 501.741772][ T1174] bond16 (unregistering): Released all slaves [ 501.773136][ T1174] bond17 (unregistering): Released all slaves [ 501.795944][ T1174] bond18 (unregistering): Released all slaves [ 501.941268][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 502.217881][ T1174] tipc: Left network mode [ 502.644337][T16654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3181'. [ 502.708734][T16654] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3181'. [ 502.970057][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.980241][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.991112][T16512] bridge_slave_0: entered allmulticast mode [ 503.000590][T16512] bridge_slave_0: entered promiscuous mode [ 503.010248][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.029398][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.036783][T16512] bridge_slave_1: entered allmulticast mode [ 503.046328][T16512] bridge_slave_1: entered promiscuous mode [ 503.094424][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3184'. [ 503.448398][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3186'. [ 503.544807][T16512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.717761][T16675] 8021q: adding VLAN 0 to HW filter on device bond16 [ 503.815430][T16512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.863675][T16567] Set syz1 is full, maxelem 65536 reached [ 504.096607][T16688] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3189'. [ 504.124920][T16690] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3189'. [ 504.144870][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3187'. [ 504.205589][T16512] team0: Port device team_slave_0 added [ 504.234948][T16512] team0: Port device team_slave_1 added [ 504.241667][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 504.385543][ T1174] hsr_slave_0: left promiscuous mode [ 504.406120][T16698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3190'. [ 504.419791][ T1174] hsr_slave_1: left promiscuous mode [ 504.431907][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.440170][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.452627][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.470985][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.490183][ T1174] batman_adv: batadv0: Interface deactivated: dummy0 [ 504.508928][ T1174] batman_adv: batadv0: Removing interface: dummy0 [ 504.566739][ T1174] veth1_macvtap: left promiscuous mode [ 504.574124][ T1174] veth0_macvtap: left promiscuous mode [ 504.581544][ T1174] veth1_vlan: left allmulticast mode [ 504.587528][ T1174] veth1_vlan: left promiscuous mode [ 504.599027][ T1174] veth0_vlan: left promiscuous mode [ 504.648366][T16708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3192'. [ 504.806318][ T5632] block nbd4: Receive control failed (result -32) [ 504.823388][T16713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3192'. [ 505.304918][T16712] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.349782][T16721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3196'. [ 505.359770][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3196'. [ 505.363184][T16722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3196'. [ 505.488490][T16512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.516612][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.552101][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3197'. [ 505.561630][T16724] netlink: 'syz.1.3199': attribute type 17 has an invalid length. [ 505.561993][T16512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.637018][T16512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.657090][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.722161][T16512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.894271][T16512] hsr_slave_0: entered promiscuous mode [ 505.924191][T16512] hsr_slave_1: entered promiscuous mode [ 506.589258][T16759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.908146][T16771] lo: entered allmulticast mode [ 506.925266][T16771] tunl0: entered allmulticast mode [ 506.953669][T16771] gre0: entered allmulticast mode [ 506.978241][T16771] gretap0: entered allmulticast mode [ 507.000291][T16771] erspan0: entered allmulticast mode [ 507.012601][T16771] ip_vti0: entered allmulticast mode [ 507.041619][T16771] ip6_vti0: entered allmulticast mode [ 507.058458][T16771] sit0: entered allmulticast mode [ 507.065197][T16771] ip6tnl0: entered allmulticast mode [ 507.071359][T16771] ip6gre0: entered allmulticast mode [ 507.098310][T16771] syz_tun: entered allmulticast mode [ 507.128911][T16771] ip6gretap0: entered allmulticast mode [ 507.149748][T16771] bridge0: entered allmulticast mode [ 507.173432][T16771] vcan0: entered allmulticast mode [ 507.182953][T16771] bond0: entered allmulticast mode [ 507.216990][T16771] bond_slave_0: entered allmulticast mode [ 507.243239][T16771] bond_slave_1: entered allmulticast mode [ 507.263558][T16771] team0: entered allmulticast mode [ 507.268848][T16771] team_slave_0: entered allmulticast mode [ 507.275190][T16771] team_slave_1: entered allmulticast mode [ 507.284140][T16771] dummy0: entered allmulticast mode [ 507.294815][T16771] nlmon0: entered allmulticast mode [ 507.301013][T16771] batadv0: entered allmulticast mode [ 507.313443][T16771] vxcan0: entered allmulticast mode [ 507.324131][T16771] vxcan1: entered allmulticast mode [ 507.336172][T16771] veth0: entered allmulticast mode [ 507.349589][T16771] veth1: entered allmulticast mode [ 507.366441][T16771] wg0: entered allmulticast mode [ 507.383993][T16771] wg1: entered allmulticast mode [ 507.397357][T16771] wg2: entered allmulticast mode [ 507.414734][T16771] veth0_to_bridge: entered allmulticast mode [ 507.434573][T16771] veth1_to_bridge: entered allmulticast mode [ 507.451041][T16771] veth0_to_bond: entered allmulticast mode [ 507.467859][T16771] veth1_to_bond: entered allmulticast mode [ 507.488623][T16771] veth0_to_team: entered allmulticast mode [ 507.513950][T16771] veth1_to_team: entered allmulticast mode [ 507.526599][T16771] veth0_to_batadv: entered allmulticast mode [ 507.533647][T16771] batadv_slave_0: entered allmulticast mode [ 507.540482][T16771] veth1_to_batadv: entered allmulticast mode [ 507.552905][T16771] batadv_slave_1: entered allmulticast mode [ 507.559620][T16771] xfrm0: entered allmulticast mode [ 507.567094][T16771] veth0_to_hsr: entered allmulticast mode [ 507.575116][T16771] hsr_slave_0: entered allmulticast mode [ 507.583025][T16771] veth1_to_hsr: entered allmulticast mode [ 507.589830][T16771] hsr_slave_1: entered allmulticast mode [ 507.596871][T16771] hsr0: entered allmulticast mode [ 507.613929][T16771] veth1_virt_wifi: entered allmulticast mode [ 507.625527][T16771] veth0_virt_wifi: entered allmulticast mode [ 507.642979][T16771] virt_wifi0: entered allmulticast mode [ 507.653615][T16771] veth1_vlan: entered allmulticast mode [ 507.659943][T16771] veth0_vlan: entered allmulticast mode [ 507.667798][T16771] vlan0: entered allmulticast mode [ 507.675017][T16771] vlan1: entered allmulticast mode [ 507.680994][T16771] macvlan0: entered allmulticast mode [ 507.687981][T16771] macvlan1: entered allmulticast mode [ 507.695729][T16771] ipvlan0: entered allmulticast mode [ 507.706353][T16771] ipvlan1: entered allmulticast mode [ 507.716297][T16771] veth1_macvtap: entered allmulticast mode [ 507.723820][T16771] veth0_macvtap: entered allmulticast mode [ 507.730271][T16771] macvtap0: entered allmulticast mode [ 507.737279][T16771] macsec0: entered allmulticast mode [ 507.743798][T16771] geneve0: entered allmulticast mode [ 507.749818][T16771] geneve1: entered allmulticast mode [ 507.757823][T16771] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 507.766980][T16771] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 507.776661][T16771] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 507.786618][T16771] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 507.795578][T16771] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 507.804821][T16771] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 507.856949][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 508.308167][T16803] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 508.315440][ T1174] IPVS: starting estimator thread 0... [ 508.371022][T16802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.412344][T16810] IPVS: using max 24 ests per chain, 57600 per kthread [ 508.688547][T16824] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.695110][T16824] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 508.815790][T16824] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.822334][T16824] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 508.953568][T16824] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.960173][T16824] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.052021][T16824] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.058550][T16824] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.094328][T16824] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.100956][T16824] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.210830][T16824] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.217396][T16824] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.291272][T16824] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.297945][T16824] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.471884][T16512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 509.559963][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.585857][T16512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 509.622214][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.651536][T16512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 509.700183][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.732744][T16512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.768997][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.809557][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.904216][T16873] __nla_validate_parse: 3 callbacks suppressed [ 509.904236][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3231'. [ 510.012660][T16873] 8021q: adding VLAN 0 to HW filter on device bond3 [ 510.248748][T16512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.305873][T16512] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.348922][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.356194][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.406717][T16892] vlan2: entered promiscuous mode [ 510.435115][T16892] bridge0: entered promiscuous mode [ 510.596119][T16893] Cannot find add_set index 2 as target [ 510.770331][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.777744][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.047562][T16916] netlink: 'syz.2.3239': attribute type 1 has an invalid length. [ 511.135936][T16916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.188887][T16924] bond3: (slave veth3): Enslaving as an active interface with a down link [ 511.324413][T16916] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 511.344680][T16916] bond3: (slave batadv1): making interface the new active one [ 511.387507][T16916] batadv1: entered promiscuous mode [ 511.454901][T16916] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 511.497805][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'. [ 511.530497][T16931] bridge0: entered allmulticast mode [ 511.578528][T16924] bond3 (unregistering): (slave veth3): Releasing active interface [ 511.646250][T16924] bond3 (unregistering): (slave batadv1): Releasing active interface [ 511.675786][T16924] bond3 (unregistering): Released all slaves [ 511.737614][T16934] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 511.799404][T16934] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 511.829297][T16934] bridge0: port 4(wlan1) entered disabled state [ 511.956612][T16934] bond7: left allmulticast mode [ 511.976166][T16934] bond7: left promiscuous mode [ 511.995525][T16934] bridge0: port 3(bond7) entered disabled state [ 512.038829][T16934] bridge_slave_1: left allmulticast mode [ 512.045478][T16934] bridge_slave_1: left promiscuous mode [ 512.051393][T16934] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.075895][T16934] bridge_slave_0: left allmulticast mode [ 512.086086][T16934] bridge_slave_0: left promiscuous mode [ 512.094495][T16934] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.700609][T16934] team0: Port device bridge0 removed [ 512.896690][T16944] tipc: Enabled bearer , priority 0 [ 512.918864][T16965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3251'. [ 512.941298][T16965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3251'. [ 512.959341][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3251'. [ 512.988014][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3251'. [ 513.048129][T16931] tipc: Disabling bearer [ 513.059535][T16989] FAULT_INJECTION: forcing a failure. [ 513.059535][T16989] name failslab, interval 1, probability 0, space 0, times 0 [ 513.094340][T16989] CPU: 1 UID: 0 PID: 16989 Comm: syz.3.3252 Not tainted syzkaller #0 PREEMPT(full) [ 513.094370][T16989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 513.094384][T16989] Call Trace: [ 513.094392][T16989] [ 513.094402][T16989] dump_stack_lvl+0xe8/0x150 [ 513.094442][T16989] should_fail_ex+0x40c/0x560 [ 513.094476][T16989] should_failslab+0xa8/0x100 [ 513.094512][T16989] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 513.094542][T16989] ? skb_clone+0x212/0x3a0 [ 513.094566][T16989] ? skb_clone+0x212/0x3a0 [ 513.094599][T16989] skb_clone+0x212/0x3a0 [ 513.094630][T16989] __netlink_deliver_tap+0x413/0x860 [ 513.094670][T16989] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.094698][T16989] netlink_deliver_tap+0x19c/0x1b0 [ 513.094724][T16989] __netlink_sendskb+0x47/0x90 [ 513.094749][T16989] netlink_dump+0xa8c/0xee0 [ 513.094788][T16989] ? __pfx_netlink_dump+0x10/0x10 [ 513.094828][T16989] ? genl_start+0x497/0x6d0 [ 513.094868][T16989] __netlink_dump_start+0x589/0x7b0 [ 513.094902][T16989] genl_family_rcv_msg_dumpit+0x213/0x310 [ 513.094940][T16989] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 513.094971][T16989] ? genl_get_cmd+0x82f/0x960 [ 513.095007][T16989] ? __pfx_genl_start+0x10/0x10 [ 513.095035][T16989] ? __pfx_genl_dumpit+0x10/0x10 [ 513.095064][T16989] ? __pfx_genl_done+0x10/0x10 [ 513.095097][T16989] ? __dev_queue_xmit+0x29b/0x3820 [ 513.095259][T16989] genl_rcv_msg+0x5e1/0x7a0 [ 513.095298][T16989] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.095328][T16989] ? __pfx_ovs_dp_cmd_dump+0x10/0x10 [ 513.095397][T16989] ? __pfx_ref_tracker_free+0x10/0x10 [ 513.095439][T16989] netlink_rcv_skb+0x226/0x4a0 [ 513.095467][T16989] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.095501][T16989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.095545][T16989] ? down_read+0x2be/0x330 [ 513.095580][T16989] genl_rcv+0x28/0x40 [ 513.095609][T16989] netlink_unicast+0x7bb/0x940 [ 513.095645][T16989] netlink_sendmsg+0x813/0xb40 [ 513.095684][T16989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.095716][T16989] ? aa_sock_msg_perm+0xf1/0x1b0 [ 513.095748][T16989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.095773][T16989] sock_sendmsg_nosec+0x13a/0x180 [ 513.095809][T16989] ____sys_sendmsg+0x54e/0x850 [ 513.095841][T16989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.095876][T16989] ? import_iovec+0x73/0xa0 [ 513.095914][T16989] ___sys_sendmsg+0x2a5/0x360 [ 513.095938][T16989] ? __lock_acquire+0x683/0x2cf0 [ 513.095974][T16989] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.096040][T16989] ? __fget_files+0x2a/0x420 [ 513.096071][T16989] ? __fget_files+0x3a2/0x420 [ 513.096112][T16989] __x64_sys_sendmsg+0x1b1/0x290 [ 513.096141][T16989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.096187][T16989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.096211][T16989] do_syscall_64+0x174/0x580 [ 513.096246][T16989] ? trace_irq_disable+0x3b/0x140 [ 513.096276][T16989] ? clear_bhb_loop+0x40/0x90 [ 513.096302][T16989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.096325][T16989] RIP: 0033:0x7fd0b419de99 [ 513.096345][T16989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.096364][T16989] RSP: 002b:00007fd0b4fef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.096388][T16989] RAX: ffffffffffffffda RBX: 00007fd0b4425fa0 RCX: 00007fd0b419de99 [ 513.096403][T16989] RDX: 0000000020000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 513.096416][T16989] RBP: 00007fd0b4fef090 R08: 0000000000000000 R09: 0000000000000000 [ 513.096429][T16989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.096441][T16989] R13: 00007fd0b4426038 R14: 00007fd0b4425fa0 R15: 00007ffef1d2de98 [ 513.096477][T16989] [ 513.930954][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 513.993761][T17019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 514.081360][T17028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3260'. [ 514.120813][ T1174] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.134349][ T1174] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.218509][ T1174] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.268983][ T1174] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.349319][T16512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.412731][T17066] syzkaller0: entered promiscuous mode [ 515.423840][T17066] syzkaller0: entered allmulticast mode [ 515.513898][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 515.633869][T16512] veth0_vlan: entered promiscuous mode [ 515.657514][T16512] veth1_vlan: entered promiscuous mode [ 515.729075][T16512] veth0_macvtap: entered promiscuous mode [ 515.775437][T16512] veth1_macvtap: entered promiscuous mode [ 515.846909][T16512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.887748][T16512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.934743][T15847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.962995][T15847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.982477][T15847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.007187][T15847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.193215][T17100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3273'. [ 516.204913][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3274'. [ 516.385919][ T7958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.403978][ T7958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.519757][ T7958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.538420][ T7958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.657643][T17119] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.3276'. [ 516.729301][T17119] netlink: 'syz.2.3276': attribute type 1 has an invalid length. [ 516.840657][T17130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3151'. [ 516.958355][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3151'. [ 517.300520][T17141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 517.319332][T17141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 517.329959][T17141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 517.345791][T17141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 517.374978][T17141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.609626][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'. [ 517.768968][T17158] tipc: Enabling of bearer rejected, failed to enable media [ 517.823981][T17158] netlink: 'syz.0.3288': attribute type 1 has an invalid length. [ 517.965794][T17166] net_ratelimit: 62 callbacks suppressed [ 517.965846][T17166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.049952][T17158] bond4: option mode: invalid value (7) [ 518.068345][T17158] bond4 (unregistering): Released all slaves [ 518.281181][T17165] tipc: Enabling of bearer rejected, failed to enable media [ 518.618629][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 518.709148][T17187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3293'. [ 518.783405][T17139] lo speed is unknown, defaulting to 1000 [ 518.841874][T17139] wlan0 speed is unknown, defaulting to 1000 [ 519.357954][T17208] netlink: 4564 bytes leftover after parsing attributes in process `syz.0.3299'. [ 519.452964][ T5632] Bluetooth: hci0: command tx timeout [ 519.502186][T17217] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 519.502208][T17217] sctp: [Deprecated]: syz.2.3301 (pid 17217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.502208][T17217] Use struct sctp_sack_info instead [ 519.597362][T17220] xfrm1: entered allmulticast mode [ 520.015221][T17139] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.027117][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.035265][T17139] bridge_slave_0: entered allmulticast mode [ 520.051044][T17139] bridge_slave_0: entered promiscuous mode [ 520.075098][T17139] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.082922][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.090510][T17139] bridge_slave_1: entered allmulticast mode [ 520.114514][T17139] bridge_slave_1: entered promiscuous mode [ 520.213264][T17212] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 520.219697][T17212] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 520.348859][T17139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.367059][T17139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.482701][T17139] team0: Port device team_slave_0 added [ 520.518510][T17212] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 520.534649][T17212] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 520.549633][T17248] syzkaller1: entered promiscuous mode [ 520.574019][T17248] syzkaller1: entered allmulticast mode [ 520.597491][T17139] team0: Port device team_slave_1 added [ 520.791677][T17268] __nla_validate_parse: 1 callbacks suppressed [ 520.798667][T17268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3312'. [ 520.828224][T17212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.842722][T17139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.866065][T17212] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 520.881936][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.915620][T17139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.933044][T17139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.940137][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.968996][T17139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.030949][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'. [ 521.090290][T17212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 521.110804][T17212] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 521.193175][T17139] hsr_slave_0: entered promiscuous mode [ 521.206612][T17139] hsr_slave_1: entered promiscuous mode [ 521.214950][T17139] debugfs: 'hsr0' already exists in 'hsr' [ 521.220882][T17139] Cannot create hsr debugfs directory [ 521.298745][T17212] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 521.315342][T17212] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 521.972679][T17139] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.118152][T17300] netlink: 79 bytes leftover after parsing attributes in process `syz.3.3324'. [ 522.147168][T17299] netlink: 79 bytes leftover after parsing attributes in process `syz.3.3324'. [ 522.175037][T17300] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3324'. [ 522.217396][T17139] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.303952][T17139] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.419973][T17139] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.084740][T17139] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 523.139102][T17139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.165842][T17139] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 523.229696][T17139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.261562][T17139] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 523.274380][T17332] xt_connbytes: Forcing CT accounting to be enabled [ 523.286516][T17139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.295572][T17139] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 523.337592][T17139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.450684][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 523.685586][T17139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.720965][T17139] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.743741][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.750967][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.793462][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.800787][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.389944][T17388] netlink: 'syz.4.3347': attribute type 1 has an invalid length. [ 524.447068][T17388] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3347'. [ 524.471573][T17391] ªªªªª!: renamed from virt_wifi0 [ 524.949357][T17415] netlink: 'syz.0.3355': attribute type 1 has an invalid length. [ 524.975660][T17417] xt_connbytes: Forcing CT accounting to be enabled [ 525.080484][T17426] Unsupported ieee802154 address type: 0 [ 525.106067][T17415] veth5: entered allmulticast mode [ 525.107693][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 525.131055][T17415] bond4: (slave veth5): Enslaving as an active interface with a down link [ 525.166321][T17420] netdevsim netdevsim4: Direct firmware load for á failed with error -2 [ 525.178353][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3354'. [ 525.178924][T17420] netdevsim netdevsim4: Falling back to sysfs fallback for: á [ 525.221328][T17415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3355'. [ 525.256986][T17429] bond4: (slave veth0_to_bond): making interface the new active one [ 525.267506][T17429] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 525.292370][T17415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.410390][T17432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.471609][T17440] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 525.592906][T17139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.753286][T17451] netlink: 'syz.2.3365': attribute type 1 has an invalid length. [ 525.778292][T17139] veth0_vlan: entered promiscuous mode [ 525.941119][T17456] ipvlan2: entered allmulticast mode [ 525.959566][T17456] bond4: entered allmulticast mode [ 526.037055][T17458] bond4: (slave bridge2): making interface the new active one [ 526.046154][T17458] bridge2: entered allmulticast mode [ 526.057531][T17458] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 526.101571][T17139] veth1_vlan: entered promiscuous mode [ 526.234039][T17139] veth0_macvtap: entered promiscuous mode [ 526.261257][T17139] veth1_macvtap: entered promiscuous mode [ 526.339109][T17139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.420519][T17139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.450825][ T359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.480621][ T359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.509146][ T359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.526221][ T359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.543836][T17476] __nla_validate_parse: 2 callbacks suppressed [ 526.543855][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'. [ 526.594086][T17478] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3374'. [ 526.623140][T17476] 8021q: adding VLAN 0 to HW filter on device bond5 [ 526.933713][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.955397][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.066425][ T359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.094099][ T359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.195363][T17491] sctp: [Deprecated]: syz.3.3379 (pid 17491) Use of int in max_burst socket option. [ 527.195363][T17491] Use struct sctp_assoc_value instead [ 527.306253][T17494] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3379'. [ 527.331264][T17494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3379'. [ 527.359974][T17495] SET target dimension over the limit! [ 527.368276][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3379'. [ 527.739346][T17512] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3385'. [ 527.756881][T17516] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 527.899763][T17521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3388'. [ 528.286878][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'. [ 528.297088][T17542] vlan0: entered promiscuous mode [ 528.364667][ T359] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.383818][ T359] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.399239][ T359] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.408466][ T359] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.421513][T17546] lo speed is unknown, defaulting to 1000 [ 528.430651][T17546] wlan0 speed is unknown, defaulting to 1000 [ 529.072162][T17572] netlink: 'syz.1.3403': attribute type 1 has an invalid length. [ 529.093349][T17572] netlink: 756 bytes leftover after parsing attributes in process `syz.1.3403'. [ 529.126596][T17575] netlink: 'syz.2.3406': attribute type 9 has an invalid length. [ 529.261444][T17586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3409'. [ 529.458076][T17591] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.464610][T17591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.534966][T17591] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.541470][T17591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.556517][T17588] Set syz1 is full, maxelem 14 reached [ 529.580999][T17591] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.587548][T17591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.639606][T17598] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 529.653456][T17591] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.660038][T17591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.679061][T17598] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 530.067133][T17614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.649398][T17654] x_tables: duplicate underflow at hook 1 [ 531.052273][T15847] IPVS: starting estimator thread 0... [ 531.159419][T17678] net_ratelimit: 68 callbacks suppressed [ 531.159443][T17678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 531.171805][T17678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.172582][T17674] IPVS: using max 27 ests per chain, 64800 per kthread [ 531.227322][T17682] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 531.259455][T17682] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 531.279326][T17678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 531.285891][T17678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.359880][T17678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 531.366482][T17678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.383850][T17678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 531.390433][T17678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.415730][T17678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 531.422330][T17678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.695929][T17701] __nla_validate_parse: 9 callbacks suppressed [ 531.695948][T17701] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3438'. [ 531.869005][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3439'. [ 531.984152][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 532.067021][T17714] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 532.107443][T17714] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 532.318459][T17727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3444'. [ 532.516381][T17732] netlink: 'syz.2.3446': attribute type 7 has an invalid length. [ 532.553766][T17732] netlink: 'syz.2.3446': attribute type 8 has an invalid length. [ 532.591185][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3448'. [ 532.749359][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3449'. [ 532.790820][T17745] netlink: 356 bytes leftover after parsing attributes in process `syz.4.3449'. [ 532.818976][T17745] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3449'. [ 532.840017][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3449'. [ 532.883505][T17749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3451'. [ 533.062842][T17749] lo speed is unknown, defaulting to 1000 [ 533.092322][T17749] wlan0 speed is unknown, defaulting to 1000 [ 534.323822][T17809] xt_connbytes: Forcing CT accounting to be enabled [ 534.466264][T17811] bond6 (unregistering): Released all slaves [ 535.851457][T17887] netlink: 'syz.4.3489': attribute type 13 has an invalid length. [ 535.858735][T17880] vlan1: entered promiscuous mode [ 535.874894][T17880] bridge0: entered promiscuous mode [ 536.507013][T17889] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.514702][T17889] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.976817][T17889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.059371][T17889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.521940][T17889] veth5: left allmulticast mode [ 537.538295][T17889] vlan1: left promiscuous mode [ 537.545680][T17889] bridge0: left promiscuous mode [ 537.597114][T12229] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.632329][T12229] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.653798][T12229] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.683404][T12229] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.713308][T12229] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.749583][T12229] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.769330][T12229] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.806916][T12229] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.898036][T17921] __nla_validate_parse: 15 callbacks suppressed [ 537.898056][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3499'. [ 537.978770][T17921] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 538.028781][T17921] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 538.171198][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'. [ 538.204463][T17933] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3504'. [ 538.233350][T17938] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3503'. [ 538.287642][T17938] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3503'. [ 538.428762][T17938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.653099][T17938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.700753][T17938] bond0 (unregistering): Released all slaves [ 539.038429][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3514'. [ 539.107248][T17975] netlink: 'syz.4.3517': attribute type 1 has an invalid length. [ 539.329105][T17975] bond2: entered promiscuous mode [ 539.354188][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 539.373627][T17975] bond2: entered allmulticast mode [ 539.387214][T17975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 539.417877][ T5632] block nbd5: Receive control failed (result -1) [ 539.428235][T17977] erspan1: entered allmulticast mode [ 539.476902][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3522'. [ 539.499124][T17977] bond2: (slave erspan1): making interface the new active one [ 539.538937][T17977] erspan1: entered promiscuous mode [ 539.569382][T17977] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 539.599225][T17995] netlink: 'syz.2.3521': attribute type 1 has an invalid length. [ 539.696022][T17998] pimreg: entered allmulticast mode [ 539.709782][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3523'. [ 539.736597][T17998] pimreg: left allmulticast mode [ 539.789732][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3525'. [ 568.367545][T18025] __nla_validate_parse: 2 callbacks suppressed [ 568.367567][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 568.407884][T18032] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3531'. [ 568.419283][T18033] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3531'. [ 568.709528][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'. [ 568.892217][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3535'. [ 568.920057][T18040] hsr_slave_0: left promiscuous mode [ 568.941592][T18040] hsr_slave_1: left promiscuous mode [ 569.010795][T18070] syzkaller0: entered promiscuous mode [ 569.020756][T18080] netlink: 'syz.4.3541': attribute type 5 has an invalid length. [ 569.025123][T18070] syzkaller0: entered allmulticast mode [ 569.354233][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3548'. [ 569.371839][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3548'. [ 569.392277][T18100] netlink: 'syz.4.3548': attribute type 7 has an invalid length. [ 569.461293][T15847] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.482433][T15847] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.507084][T15847] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.534421][T12226] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.966363][T18125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3557'. [ 570.454452][T18144] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.462244][T18144] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.749170][T18144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.788959][T18144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.798378][T18162] netlink: 'syz.4.3570': attribute type 39 has an invalid length. [ 570.882845][T18165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3571'. [ 570.927257][T18124] net_ratelimit: 221 callbacks suppressed [ 570.927278][T18124] Set syz1 is full, maxelem 65536 reached [ 571.001560][T18146] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 571.015148][T18146] bond1 (unregistering): Released all slaves [ 571.028855][T18169] netlink: 'syz.0.3571': attribute type 1 has an invalid length. [ 571.076142][T12226] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.101409][T12226] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.153115][T18169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.196437][T18165] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 571.211184][T12226] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.232537][T18176] netlink: 'syz.1.3573': attribute type 1 has an invalid length. [ 571.300756][T18168] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 571.360938][T18168] bond0 (unregistering): Released all slaves [ 571.484713][T18173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.494679][T18173] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.515587][T18173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.567441][T18173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.577385][T18173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.592197][T18173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 571.602943][T18173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 571.626260][T18173] veth1_vlan: left promiscuous mode [ 571.633168][T18173] veth0_vlan: left promiscuous mode [ 571.640000][T18173] veth0_vlan: entered promiscuous mode [ 571.647997][T18173] veth1_vlan: entered promiscuous mode [ 571.659488][T18173] veth1_macvtap: left promiscuous mode [ 571.666581][T18173] veth0_macvtap: left promiscuous mode [ 571.673849][T18173] veth0_macvtap: entered promiscuous mode [ 571.681182][T18173] veth1_macvtap: entered promiscuous mode [ 571.695729][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 571.705174][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.714390][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.729082][T18173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.738717][T18173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.749392][T18173] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 571.787890][T18174] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 571.839299][T18176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.897151][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.904413][T12229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.914658][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.921955][T12229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.948864][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'. [ 571.976966][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.077154][T18186] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 572.128036][T18186] bond5 (unregistering): Released all slaves [ 572.228105][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.277449][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.540743][T18206] sctp: [Deprecated]: syz.2.3581 (pid 18206) Use of int in maxseg socket option. [ 572.540743][T18206] Use struct sctp_assoc_value instead [ 572.924199][T18215] syzkaller1: entered promiscuous mode [ 572.949347][T18215] syzkaller1: entered allmulticast mode [ 573.078160][T18223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.188257][T18226] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 573.402164][T18226] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 573.697016][T18248] macvlan0: entered promiscuous mode [ 573.716165][T18248] macvlan0: entered allmulticast mode [ 573.722607][T18248] veth1_vlan: entered allmulticast mode [ 573.734169][T18248] __nla_validate_parse: 5 callbacks suppressed [ 573.734188][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'. [ 573.776635][T18248] veth1_vlan: left allmulticast mode [ 573.909236][T18260] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.915785][T18260] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.944743][T18260] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.951253][T18260] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.980774][T18260] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.987301][T18260] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 574.354249][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3605'. [ 574.387671][T18294] team1: entered promiscuous mode [ 574.393076][T18294] team1: entered allmulticast mode [ 574.399385][T18294] 8021q: adding VLAN 0 to HW filter on device team1 [ 574.773394][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3612'. [ 576.974561][T18265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.203964][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 577.223762][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3618'. [ 577.266466][T18335] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3620'. [ 577.289789][T18339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3621'. [ 577.299410][T18339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3621'. [ 577.316419][T18339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3621'. [ 577.326455][T18339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3621'. [ 577.657548][T18353] [ 577.659946][T18353] ====================================================== [ 577.666989][T18353] WARNING: possible circular locking dependency detected [ 577.674123][T18353] syzkaller #0 Not tainted [ 577.678565][T18353] ------------------------------------------------------ [ 577.685604][T18353] syz.4.3625/18353 is trying to acquire lock: [ 577.691717][T18353] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 577.700916][T18353] [ 577.700916][T18353] but task is already holding lock: [ 577.708311][T18353] ffff888054c9f678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 577.717864][T18353] [ 577.717864][T18353] which lock already depends on the new lock. [ 577.717864][T18353] [ 577.728298][T18353] [ 577.728298][T18353] the existing dependency chain (in reverse order) is: [ 577.737344][T18353] [ 577.737344][T18353] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 577.745035][T18353] __might_fault+0xcb/0x130 [ 577.750105][T18353] _copy_from_user+0x28/0xb0 [ 577.755232][T18353] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 577.761867][T18353] ip_generic_getfrag+0x149/0x2d0 [ 577.767537][T18353] __ip6_append_data+0x3b26/0x40c0 [ 577.773329][T18353] ip6_append_data+0x108/0x270 [ 577.778668][T18353] rawv6_sendmsg+0x1298/0x18c0 [ 577.784059][T18353] sock_sendmsg_nosec+0x10e/0x180 [ 577.789642][T18353] ____sys_sendmsg+0x54e/0x850 [ 577.794969][T18353] ___sys_sendmsg+0x2a5/0x360 [ 577.800216][T18353] __x64_sys_sendmsg+0x1b1/0x290 [ 577.805700][T18353] do_syscall_64+0x174/0x580 [ 577.810834][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.817295][T18353] [ 577.817295][T18353] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 577.825066][T18353] lock_sock_nested+0x41/0x100 [ 577.830379][T18353] inet_shutdown+0x6a/0x390 [ 577.835545][T18353] nbd_mark_nsock_dead+0x2cb/0x550 [ 577.841268][T18353] recv_work+0x1cee/0x1e10 [ 577.846221][T18353] process_scheduled_works+0xa8e/0x14e0 [ 577.852339][T18353] worker_thread+0xa47/0xfb0 [ 577.857476][T18353] kthread+0x388/0x470 [ 577.862096][T18353] ret_from_fork+0x514/0xb70 [ 577.867269][T18353] ret_from_fork_asm+0x1a/0x30 [ 577.872575][T18353] [ 577.872575][T18353] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 577.880252][T18353] __mutex_lock+0x19d/0x1550 [ 577.885396][T18353] nbd_queue_rq+0x373/0x1150 [ 577.890527][T18353] blk_mq_dispatch_rq_list+0x499/0x1990 [ 577.896722][T18353] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 577.903649][T18353] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 577.910175][T18353] blk_mq_run_work_fn+0x16c/0x300 [ 577.915739][T18353] process_scheduled_works+0xa8e/0x14e0 [ 577.921832][T18353] worker_thread+0xa47/0xfb0 [ 577.926962][T18353] kthread+0x388/0x470 [ 577.931596][T18353] ret_from_fork+0x514/0xb70 [ 577.936756][T18353] ret_from_fork_asm+0x1a/0x30 [ 577.942073][T18353] [ 577.942073][T18353] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 577.949308][T18353] __mutex_lock+0x19d/0x1550 [ 577.954448][T18353] nbd_queue_rq+0xc1/0x1150 [ 577.959492][T18353] blk_mq_dispatch_rq_list+0x499/0x1990 [ 577.965591][T18353] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 577.972487][T18353] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 577.979047][T18353] blk_mq_run_work_fn+0x16c/0x300 [ 577.984665][T18353] process_scheduled_works+0xa8e/0x14e0 [ 577.990768][T18353] worker_thread+0xa47/0xfb0 [ 577.995912][T18353] kthread+0x388/0x470 [ 578.000534][T18353] ret_from_fork+0x514/0xb70 [ 578.005683][T18353] ret_from_fork_asm+0x1a/0x30 [ 578.011081][T18353] [ 578.011081][T18353] -> #3 (set->srcu){.+.+}-{0:0}: [ 578.018241][T18353] __synchronize_srcu+0xc9/0x2f0 [ 578.023773][T18353] elevator_switch+0x1e8/0x7b0 [ 578.029154][T18353] elevator_change+0x2fa/0x480 [ 578.034470][T18353] elevator_set_default+0x375/0x440 [ 578.040217][T18353] blk_register_queue+0x3f3/0x4e0 [ 578.045848][T18353] __add_disk+0x6cb/0xe30 [ 578.050852][T18353] add_disk_fwnode+0x100/0x3a0 [ 578.056153][T18353] nbd_dev_add+0x733/0xb60 [ 578.061109][T18353] nbd_init+0x15f/0x1e0 [ 578.065910][T18353] do_one_initcall+0x250/0x870 [ 578.071228][T18353] do_initcall_level+0x10a/0x1a0 [ 578.076790][T18353] do_initcalls+0x59/0xa0 [ 578.081660][T18353] kernel_init_freeable+0x29d/0x3e0 [ 578.087469][T18353] kernel_init+0x1d/0x1d0 [ 578.092354][T18353] ret_from_fork+0x514/0xb70 [ 578.097504][T18353] ret_from_fork_asm+0x1a/0x30 [ 578.102810][T18353] [ 578.102810][T18353] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 578.110673][T18353] __mutex_lock+0x19d/0x1550 [ 578.115827][T18353] elevator_change+0x1af/0x480 [ 578.121154][T18353] elevator_set_none+0xb5/0x140 [ 578.126562][T18353] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 578.132924][T18353] nbd_start_device+0x189/0xb30 [ 578.138314][T18353] nbd_genl_connect+0x1597/0x1c10 [ 578.143898][T18353] genl_family_rcv_msg_doit+0x233/0x340 [ 578.149998][T18353] genl_rcv_msg+0x614/0x7a0 [ 578.155054][T18353] netlink_rcv_skb+0x226/0x4a0 [ 578.160356][T18353] genl_rcv+0x28/0x40 [ 578.164885][T18353] netlink_unicast+0x7bb/0x940 [ 578.170194][T18353] netlink_sendmsg+0x813/0xb40 [ 578.175504][T18353] sock_sendmsg_nosec+0x13a/0x180 [ 578.181079][T18353] ____sys_sendmsg+0x54e/0x850 [ 578.186388][T18353] ___sys_sendmsg+0x2a5/0x360 [ 578.191613][T18353] __x64_sys_sendmsg+0x1b1/0x290 [ 578.197105][T18353] do_syscall_64+0x174/0x580 [ 578.202242][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.208677][T18353] [ 578.208677][T18353] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 578.217346][T18353] blk_alloc_queue+0x544/0x690 [ 578.222666][T18353] __blk_mq_alloc_disk+0x194/0x390 [ 578.228321][T18353] nbd_dev_add+0x494/0xb60 [ 578.233278][T18353] nbd_init+0x15f/0x1e0 [ 578.237974][T18353] do_one_initcall+0x250/0x870 [ 578.243289][T18353] do_initcall_level+0x10a/0x1a0 [ 578.248766][T18353] do_initcalls+0x59/0xa0 [ 578.253634][T18353] kernel_init_freeable+0x29d/0x3e0 [ 578.259398][T18353] kernel_init+0x1d/0x1d0 [ 578.264285][T18353] ret_from_fork+0x514/0xb70 [ 578.269455][T18353] ret_from_fork_asm+0x1a/0x30 [ 578.274757][T18353] [ 578.274757][T18353] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 578.281993][T18353] __lock_acquire+0x1520/0x2cf0 [ 578.287402][T18353] lock_acquire+0x106/0x350 [ 578.292456][T18353] fs_reclaim_acquire+0x71/0x100 [ 578.297942][T18353] prepare_alloc_pages+0x15b/0x650 [ 578.303620][T18353] __alloc_frozen_pages_noprof+0x12f/0x380 [ 578.309977][T18353] alloc_pages_mpol+0x212/0x380 [ 578.315381][T18353] alloc_pages_noprof+0xac/0x2a0 [ 578.320870][T18353] __pud_alloc+0x3a/0x460 [ 578.325737][T18353] handle_mm_fault+0x1f85/0x3080 [ 578.331216][T18353] do_user_addr_fault+0x744/0x1340 [ 578.336915][T18353] exc_page_fault+0x6a/0xc0 [ 578.341967][T18353] asm_exc_page_fault+0x26/0x30 [ 578.347370][T18353] rep_movs_alternative+0x30/0xa0 [ 578.353014][T18353] _copy_from_user+0x7a/0xb0 [ 578.358143][T18353] vlan_ioctl_handler+0xbd/0x630 [ 578.363693][T18353] sock_ioctl+0x612/0x7e0 [ 578.368583][T18353] __se_sys_ioctl+0xfc/0x170 [ 578.373715][T18353] do_syscall_64+0x174/0x580 [ 578.378854][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.385288][T18353] [ 578.385288][T18353] other info that might help us debug this: [ 578.385288][T18353] [ 578.395528][T18353] Chain exists of: [ 578.395528][T18353] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 578.395528][T18353] [ 578.408163][T18353] Possible unsafe locking scenario: [ 578.408163][T18353] [ 578.415634][T18353] CPU0 CPU1 [ 578.421014][T18353] ---- ---- [ 578.426396][T18353] rlock(&mm->mmap_lock); [ 578.430834][T18353] lock(sk_lock-AF_INET6); [ 578.437872][T18353] lock(&mm->mmap_lock); [ 578.444755][T18353] lock(fs_reclaim); [ 578.448848][T18353] [ 578.448848][T18353] *** DEADLOCK *** [ 578.448848][T18353] [ 578.457124][T18353] 2 locks held by syz.4.3625/18353: [ 578.462361][T18353] #0: ffffffff9000de00 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 578.471731][T18353] #1: ffff888054c9f678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 578.481707][T18353] [ 578.481707][T18353] stack backtrace: [ 578.487620][T18353] CPU: 1 UID: 0 PID: 18353 Comm: syz.4.3625 Not tainted syzkaller #0 PREEMPT(full) [ 578.487643][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 578.487655][T18353] Call Trace: [ 578.487662][T18353] [ 578.487669][T18353] dump_stack_lvl+0xe8/0x150 [ 578.487698][T18353] print_circular_bug+0x2e1/0x300 [ 578.487719][T18353] check_noncircular+0x12e/0x150 [ 578.487739][T18353] __lock_acquire+0x1520/0x2cf0 [ 578.487769][T18353] ? __lock_acquire+0x683/0x2cf0 [ 578.487798][T18353] ? prepare_alloc_pages+0x15b/0x650 [ 578.487822][T18353] lock_acquire+0x106/0x350 [ 578.487846][T18353] ? prepare_alloc_pages+0x15b/0x650 [ 578.487875][T18353] fs_reclaim_acquire+0x71/0x100 [ 578.487897][T18353] ? prepare_alloc_pages+0x15b/0x650 [ 578.487921][T18353] prepare_alloc_pages+0x15b/0x650 [ 578.487948][T18353] __alloc_frozen_pages_noprof+0x12f/0x380 [ 578.487975][T18353] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 578.488003][T18353] ? __pfx_policy_nodemask+0x10/0x10 [ 578.488036][T18353] ? is_bpf_text_address+0x26/0x2b0 [ 578.488065][T18353] ? kernel_text_address+0xa5/0xe0 [ 578.488084][T18353] alloc_pages_mpol+0x212/0x380 [ 578.488114][T18353] alloc_pages_noprof+0xac/0x2a0 [ 578.488142][T18353] __pud_alloc+0x3a/0x460 [ 578.488163][T18353] handle_mm_fault+0x1f85/0x3080 [ 578.488186][T18353] ? __pfx_mt_find+0x10/0x10 [ 578.488300][T18353] ? handle_mm_fault+0xec/0x3080 [ 578.488322][T18353] ? __pfx_handle_mm_fault+0x10/0x10 [ 578.488346][T18353] ? __lock_acquire+0x683/0x2cf0 [ 578.488372][T18353] ? lock_mm_and_find_vma+0xa7/0x340 [ 578.488396][T18353] do_user_addr_fault+0x744/0x1340 [ 578.488430][T18353] exc_page_fault+0x6a/0xc0 [ 578.488451][T18353] asm_exc_page_fault+0x26/0x30 [ 578.488468][T18353] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 578.488499][T18353] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 61 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 578.488514][T18353] RSP: 0018:ffffc90006517c98 EFLAGS: 00050206 [ 578.488531][T18353] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 578.488557][T18353] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90006517d00 [ 578.488570][T18353] RBP: ffffc90006517db0 R08: ffffc90006517d37 R09: 1ffff92000ca2fa6 [ 578.488583][T18353] R10: dffffc0000000000 R11: fffff52000ca2fa7 R12: dffffc0000000000 [ 578.488596][T18353] R13: ffff88807e51cf00 R14: ffffc90006517d00 R15: 0000200000000000 [ 578.488617][T18353] _copy_from_user+0x7a/0xb0 [ 578.488635][T18353] vlan_ioctl_handler+0xbd/0x630 [ 578.488657][T18353] ? __pfx___mutex_lock+0x10/0x10 [ 578.488679][T18353] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 578.488700][T18353] ? hook_file_ioctl+0x1f0/0x5f0 [ 578.488755][T18353] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 578.488776][T18353] sock_ioctl+0x612/0x7e0 [ 578.488801][T18353] ? __pfx_sock_ioctl+0x10/0x10 [ 578.488824][T18353] ? __fget_files+0x2a/0x420 [ 578.488848][T18353] ? __fget_files+0x3a2/0x420 [ 578.488871][T18353] ? __fget_files+0x2a/0x420 [ 578.488896][T18353] ? bpf_lsm_file_ioctl+0x9/0x20 [ 578.488919][T18353] ? __pfx_sock_ioctl+0x10/0x10 [ 578.488941][T18353] __se_sys_ioctl+0xfc/0x170 [ 578.488959][T18353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.488977][T18353] do_syscall_64+0x174/0x580 [ 578.488997][T18353] ? trace_irq_disable+0x3b/0x140 [ 578.489020][T18353] ? clear_bhb_loop+0x40/0x90 [ 578.489046][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.489062][T18353] RIP: 0033:0x7f1c4cb9de99 [ 578.489078][T18353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.489093][T18353] RSP: 002b:00007f1c4dac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.489110][T18353] RAX: ffffffffffffffda RBX: 00007f1c4ce25fa0 RCX: 00007f1c4cb9de99 [ 578.489123][T18353] RDX: 0000200000000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 578.489135][T18353] RBP: 00007f1c4cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 578.489145][T18353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.489156][T18353] R13: 00007f1c4ce26038 R14: 00007f1c4ce25fa0 R15: 00007ffcd747cab8 [ 578.489176][T18353] [ 578.902132][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.966287][T18356] netlink: 'syz.3.3626': attribute type 1 has an invalid length. [ 579.016780][T18356] veth3: entered allmulticast mode