last executing test programs: 5.886522846s ago: executing program 1 (id=3930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x8, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x200000008}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x50}}, 0x0) (async) close(r1) (async) socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r6 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) 5.81185399s ago: executing program 3 (id=3932): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400000000efffffffffffffff", @ANYRES32=r4, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 5.042634103s ago: executing program 1 (id=3936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) preadv(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3, 0xfef, 0x800) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) 4.924626832s ago: executing program 3 (id=3938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="8a4301000000000018001680140001801000020001000080a90400002f05000014000300776c616e30000000000000000000000008000d000e000000", @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x56a, 0x4, 0xb2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r6, 0xe3634000) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_devices(r5, 0x0, 0x6) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0xe, 0x6031, r1, 0x66518000) mmap(&(0x7f0000b0d000/0x1000)=nil, 0x1000, 0xd, 0x12, r6, 0xa5a8c000) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000c00000000001811000012e692e81bf5c86e11b0a20cf223a89478e234b2e46adcb29194c537ae7737a152f51670a94edf271c9996bf1f8749a72d77eb48772c4304de5d7a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e22, @rand_addr=0x65010100}, {0x2, 0x4a2a, @remote}, {0x2, 0x4e27, @loopback}, 0x214, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x400200006, 0x6a2d, 0x2}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05da00b1fda7c7edbb00000000000000000000000919b4e0c4b8419c28817cfe3ce7cf15eb7195d90ed2360ef10ddd0cc335569baeb7318fe21213b44b6dc86b4f90f1146ad8abeb061f6ed66a1bf67f", @ANYRES32=0x1, @ANYBLOB="940e000000000000000000002100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007b703000008000000b70400000000000085000000c3000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000bf82343e17dbf8ce2d32b9b4e45b681492ec24e6b1410946051d07a9fe443f6743180a15b0744ae758fd4aed4301964d1f505dbdc2f2bc080ad27188793db9a97cf7d79342f3f11e5cf55a641d"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r12, r11}, 0xc) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 3.897236421s ago: executing program 1 (id=3945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70000007b8af8ff00000000ac9d5b2cccbfa20000001300000000b70400000000000085000000030000009500"/68], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="089500000000000000000006aa39000001000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000780)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x7, 0x9, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010100, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0xd9, 0x7, 0x62, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8, 0x5, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x268, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8c8d, 0x29, 0xe6, 0x10101408}, {0x87, 0x5, 0xf2, 0x2}, {0x2, 0x5, 0x6, 0x6094}, {0x9, 0x9, 0xae, 0xb139}, {0x6, 0x4, 0x8, 0x7}, {0xff73, 0x82, 0x0, 0x3ff}, {0x6, 0x3, 0x8, 0x7f}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x29b2e491}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x94}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) close(0x3) 3.763812493s ago: executing program 3 (id=3946): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x0, 0x6}, {0x10020002, 0x0, 0x0, 0x2}]}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r8) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="08009f0069cd000088002620237f9200050018011f0000009ac3c13f1f"], 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r10, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x149b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004404}, 0x4000082) ppoll(&(0x7f000000c040)=[{r9, 0x2391}], 0x1, 0x0, &(0x7f000000c240), 0x8) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f0000000340)=r14, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x48) 3.439902336s ago: executing program 3 (id=3950): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6d1}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)='n', 0x1}], 0x1}}], 0x2, 0x20004801) (async) shutdown(r0, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x78}}, 0x4000010) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) 3.426912962s ago: executing program 1 (id=3951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500400000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.293895801s ago: executing program 3 (id=3953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) preadv(r2, &(0x7f0000001a40)=[{&(0x7f0000000300)=""/6, 0x6}, {0x0}], 0x2, 0x4f, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r4, 0x2}, 0x20) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@empty, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3.18534118s ago: executing program 1 (id=3955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) preadv(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3, 0xfef, 0x800) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) 3.049769648s ago: executing program 4 (id=3956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff000000000100000065a4ff2c16fffc6497100007", @ANYRES32=r4, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x14, r3, 0x10, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0xc000) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r9, &(0x7f0000001a40)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000240)="e8", 0x1}], 0x1}, 0x20000081) listen(r9, 0x7) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), r10) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\b\x00', @ANYRES16=r11, @ANYBLOB="00012abd7000fcdbdf250200000008000200020000000800020002000000080002000200000008000100010000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.636360865s ago: executing program 2 (id=3957): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003200)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x5}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x6, 0x31, 0x1ff, 0xfffff371, 0x8d, 0x1002, 0x804, 0x7ff, 0x6, 0x7, 0x6, 0x6, 0xa, 0x74, 0x7, 0x8, 0x4, 0x4, 0x3, 0x9, 0x401, 0x400, 0x4, 0x8, 0x0, 0x7, 0x7fffffff, 0x9, 0x7, 0x80, 0x5, 0x4, 0x8, 0xa, 0x74ad, 0x3, 0x4, 0x4, 0x8001, 0xffff, 0x2, 0x5, 0xfffff000, 0x0, 0x200, 0x41, 0x4, 0x7, 0x7, 0x0, 0x800, 0x4da, 0x5, 0x8e, 0x1, 0x1, 0x96, 0x800, 0x4, 0x8, 0x4, 0xdf69f4, 0x56, 0xef, 0x60, 0x4, 0x9, 0x800, 0x1ff, 0x3, 0x4, 0x5, 0x1a, 0x100, 0x8, 0x3, 0xa, 0x60, 0x7, 0xce, 0xa000, 0x1, 0x1, 0x34, 0x9, 0x4, 0x5, 0x8, 0x7, 0x7f, 0x9, 0xf58, 0x5, 0x400, 0x9, 0xe, 0x3, 0x3, 0x279, 0x6, 0x9, 0x1, 0x2, 0x994, 0x2, 0x0, 0xe304, 0xc00000, 0x96, 0x8, 0xb, 0x1, 0x40000, 0x64f6, 0x3cb, 0x2, 0x3, 0xd5, 0x5, 0x1, 0x9, 0x10000, 0x401, 0x7, 0x7, 0xfffffff8, 0x3, 0x1, 0xaba8, 0xfffffff7, 0x9, 0xfffffffb, 0xffffff80, 0x1000, 0x1, 0xfff, 0x1, 0xd51, 0x5, 0x9, 0x1050c0, 0x10001, 0x8, 0x7, 0x7, 0xbf81, 0xc2b0, 0x1ff, 0x101, 0x5, 0x1, 0x2, 0x3, 0x5, 0x0, 0x7fffffff, 0xffff, 0x5, 0x4, 0x7ff, 0x891, 0x401, 0x8, 0x6, 0x40, 0x5, 0x9, 0x0, 0x1000008, 0x5, 0xebc, 0x4, 0x3, 0x9, 0xb5, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0x0, 0x9, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0x200, 0x7, 0xc, 0x7f, 0x80009, 0x1, 0x7, 0x0, 0x5, 0x3, 0x4, 0x7fff, 0x8, 0x1, 0x4, 0x1eb0, 0x0, 0x1, 0x7, 0x1000, 0x2, 0xc4, 0x7, 0x1, 0x5, 0x5, 0x0, 0x9, 0x5, 0x0, 0xda0, 0x9, 0x0, 0xffffffff, 0x8, 0x6, 0x0, 0x4, 0x2, 0xff, 0x2, 0x100, 0x7, 0x1, 0x1, 0x1, 0xb, 0x2, 0x0, 0x4, 0x10001, 0x2, 0x81, 0xfffffffd, 0x6, 0x0, 0x7, 0x7, 0x1ff, 0x1, 0x3ff, 0x7f, 0x4, 0x80000001, 0x5, 0x6, 0x3ff, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x100, 0x8, 0x9, 0x401, 0x1, 0x1, 0x7, 0x3, 0xb84d, 0x6, 0x2, 0x0, 0x8, 0x9, 0x3, 0x3, 0x2, 0xc, 0xb, 0x9a, 0x8, 0xfffffff7, 0x1, 0x74, 0x6, 0x6, 0x0, 0x401, 0x1, 0x83, 0xffff, 0x90000000, 0x3564, 0x0, 0x992, 0xd, 0x7, 0xf2, 0x2ba6, 0x8, 0x12, 0x1b5b, 0x5, 0x6, 0x800, 0x2, 0x1, 0x40, 0xfffffff8, 0x86, 0x3, 0x7, 0x3, 0x10, 0x90d4, 0x10000, 0x9, 0x5, 0x6, 0x5, 0x400, 0xa6, 0x6, 0x7, 0x7, 0x7fff, 0x81, 0x2, 0x5, 0x5, 0x40, 0xfffffff7, 0xb3, 0x2, 0x2, 0xa, 0x9, 0x10, 0x158, 0x5, 0x7fffffff, 0x7ff, 0x97, 0x8, 0x4, 0xd5, 0xffff, 0x2, 0x6, 0x9, 0x8, 0x6, 0x1, 0x401, 0x289, 0x5, 0x800, 0xf35, 0x7f, 0x9, 0x6, 0x1, 0x800, 0xd90, 0x9, 0x26b, 0x6217, 0x1009, 0x4, 0x7, 0x6, 0x2, 0x3, 0xf, 0x1, 0x4, 0x5, 0x4, 0x3, 0x7, 0x3, 0x7, 0x9, 0x400, 0x8, 0xffffff01, 0x9, 0x8, 0x7f1, 0x6, 0xc, 0x4, 0x5, 0x4, 0xb, 0x80000000, 0x7f, 0x3c, 0x5158, 0x3, 0x448, 0x9, 0x80, 0x4, 0x81, 0xf744, 0xd, 0x0, 0x3, 0x1, 0x9, 0xd3e, 0x4, 0x2, 0xd6d, 0x476cf286, 0x2, 0x105, 0xd6, 0x80000000, 0x6, 0x3, 0x6, 0x2, 0x5, 0x8, 0x0, 0x9, 0xf8, 0x0, 0x5, 0x800, 0x3, 0x3, 0xff, 0x6, 0x6, 0x6, 0x8b9d, 0x4104, 0x8000, 0x0, 0x6, 0x3, 0x56, 0x0, 0x2, 0x893e, 0x2, 0x3ff, 0x8, 0x1, 0x0, 0x80, 0x2, 0x8, 0x7f, 0x5, 0xa54, 0x2, 0x1, 0x2, 0x8, 0x97, 0x2e, 0x4023, 0x7, 0x9, 0x9, 0x20, 0x9, 0x2, 0x80000000, 0x100, 0x5, 0x1df, 0x9, 0x40e4, 0x7, 0x3, 0x609, 0x7, 0xd5c, 0xfffffffe, 0xfffffff9, 0x6, 0x19bd, 0x885, 0x7, 0x5, 0x9, 0xbe000000, 0xe9, 0x4, 0x61bf, 0x1, 0x100, 0x77, 0x81, 0x0, 0x0, 0x9, 0x8, 0x6, 0x4, 0x4, 0xfffffffc, 0x4, 0x5, 0x3, 0x0, 0x1, 0x7, 0x401, 0x69]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x4, 0x5, 0x3, 0x2, {0x2, 0x1, 0x3e, 0x0, 0xffff, 0x800}, {0x4, 0x1, 0x10, 0x9, 0x2, 0x2}, 0x7, 0x7, 0x800}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000000, 0x1}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400000000000000000000000074ccecb492b95826cc23fb38add19d601be7f820be04b5dacd68609907bfa5af9b50403ba7fee169e6aea13eae743bd39c669bbdd31559cd9b53be175e7ba963962f702bf267fceb6c8d522b46c7a19f35a10f00b8575b0872969bf0fe30d436c781c1256c2c7088af7762c8d7546b31011328989008e15778872bdc6e7a8dbbe203e7f6e9ba05fa10ec87e4cf65b41438c2ca22fdc4630221ad69ba0ba758466a8bce746e2e32", @ANYRES32=0x0, @ANYBLOB="1502000000001000140012800a00010069706f69620000000400028008000500", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x84e56105723e644b}, @TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) socket$inet_sctp(0x2, 0x1, 0x84) 2.504086836s ago: executing program 1 (id=3958): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000ff3f000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080180ffff0400000100000085000000b50200009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0c0023000200081851591804000000"], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0xc040) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r5, 0x89fd, &(0x7f0000000040)="26ba1c29d2931e8b322ecb7ce684e9a008a3c89bd58583942cc7a2bbbe629a82e1c85ac84e9603714616776245d049baaaf41d41b5be69df15c525b72386d283ba3cbf4151610b0b160ac486968831cb550424cf8ffde94195595ee76778131656457c4122ba2d4c65ee639503c3c1a95551f0554c618992123c2a81b64bf428e0f37d0ac398739556846df81f24431b6dbc1c7026db76a69643d61ff3e378595b4376bc1cb061030f964bcc13d72d434c7194f657767c266b61bcd89fd34d6034") 2.313494417s ago: executing program 0 (id=3959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="00f3ff0000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.060083774s ago: executing program 0 (id=3960): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90656}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_AD_USER_PORT_KEY={0xfffffffffffffef2, 0x19, 0x7}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x690}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) 2.041591513s ago: executing program 4 (id=3961): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x347}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) 1.938163178s ago: executing program 2 (id=3962): sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000a000000095000000000000009500a505000000005fcd68e5168ab0554faaa0d85fbb2fbcada325586454c9b45869548f500ac61a6755d474af6e1901e174636e994a224359c42066877de31f37531f60967d834efc078c0e7d5b2767088801dc94bca4a9097d915140a6bed4dc6eeb209b3fee010955a0ef664c16291cfdee7cd1786cf756dfca8132e38f38189455aac3b7401f2bedbabae2bb136b5aeb2b28787211a463fad7c4bed11e2165beaa0386ee6747e06427e96493536880632ab012002b69ccdbcd31a5e8543ee52a39c97ffedcf89bfffbff5e1aac487f403556b7a95d1c18fc97d3fa1c660a48691208e15109a991500665d0ce256dc62734c70d0f77f8018132696240aea67f0675e0f2c1a77365a9880beb287044704131b7f40da4c0e647e2fbad1f00c3c447ac500de519758773882f348b07"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x41000000, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5], 0x31) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff00fc040000000000000000000000000000ff02000000000000000000000000000100000000ff00000000002000000000000400"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r9, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4f, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1d, 0x1, 0x6, &(0x7f0000000b80)=[0x0], 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000b80), &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x150, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x946}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_LABELS_MASK={0x4}, @CTA_NAT_SRC={0xb4, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x54}, 0x20000880) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000c00)={@void, @val={0x3, 0x4, 0xa614, 0x401, 0x800, 0x5}, @ipv6=@icmpv6={0x9, 0x6, "0db318", 0x1fa, 0x3a, 0x0, @local, @mcast1, {[@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xbc}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc}, @jumbo={0xc2, 0x4, 0x1}]}, @dstopts, @srh={0x2e, 0x12, 0x4, 0x9, 0x3, 0x20, 0x9, [@dev={0xfe, 0x80, '\x00', 0x20}, @empty, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @loopback, @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x32, 0x2, 0x0, 0x4, 0x0, [@mcast1]}, @routing={0x21, 0xe, 0x1, 0x5, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback]}], @ndisc_ns={0x87, 0x0, 0x0, @remote, [{0x19, 0x11, "ea05f70cd530abf6a3c5c061520505d6f45aeed654f36574c648d82904d3633c36b1d66d5eaf8174eac70db1d04704434e29595a718daed03c496a797d61cf23b2d74e5997a9450fdfc7ea7a34822c31b3afda860ce5efd8f366b63df86fac0b7c85e51713e1d989a0a0fda4f40dc51014cab5dc750c6377ed3be2ba94ddecf66ec3ced758402fa7a9a6b7b6"}]}}}}, 0x22c) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000fc0)={0xffffffffffffff90, 0x0, 0x1, 0x70ad25, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x0, 0xd, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x0, 0xe, 0xa0}, @NFC_ATTR_IM_PROTOCOLS={0x0, 0xd, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x0, 0xd, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x0, 0xe, 0x84}, @NFC_ATTR_PROTOCOLS, @NFC_ATTR_DEVICE_INDEX, @NFC_ATTR_TM_PROTOCOLS={0x0, 0xe, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 1.713145604s ago: executing program 0 (id=3963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5, 0x1, 0xb, 0x1, 0xa, 0xffff}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.584408081s ago: executing program 2 (id=3964): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000001f7e4f038212550b9dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x150, 0x1403, 0x100, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4002090}, 0x8084) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x3ed, 0x4, 0x70bd2b, 0x25dfdbff, "df7082aa6b1584b55872730684108c1b9c1da63459235d378bb32fc1634a44607d0d4ea28b2e80248e0a467cbc447ca7492f27c03dd60c8d7ee2a5683743b007ac0bb1ebb26e1ad2daf427911d6b357022b6d4f80c9f7e8f14be674bf7e0bafdf3b1a2c679e70e23ba20437e6c67988d3812da316504bb1ba067116be45a95673356168586f41e1ba08107f789762ab026c4f99473f2db33ad9c4057250bfa37727089fd2c1c456e429664e39ad06e4b7e9424f7432954e7bd2d6043bf8e416f9489a7a81fdec6eca22a08dc72", [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x44005) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000500)={0x10}, 0x4) 1.542376349s ago: executing program 4 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000068c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@deltfilter={0x66b8, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0xf, 0x4}, {0x3, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x31}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_cgroup={{0xb}, {0x4a3c, 0x2, [@TCA_CGROUP_ACT={0x420c, 0x1, [@m_mirred={0x118, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xffffffff, 0x2, 0x8, 0x7fffffff}, 0x3, r2}}]}, {0xcc, 0x6, "36910170e9e7d56e8257ede1e8a13e388d6186c7ffdd7bda6e0aab3087f0bd752fc3849cffef2609b2898da17edc2826fba01524944e4a1b88cf2561c0c08704e01c6de029930a015e48b92078c8254e7172c10655141c8065c7710190d26ef1925f5fa9b5cf795c21bf10a0e5c39ae0857bec6a336f973e320e50d7570daef0c6be917d7835ca09386b706dfb97788615c84c682c0e23ae77a0627b518e6dd077b01f8f3d1a855d455f3ba7e5bbd13c6df09d80018e10b6b2a0f4dbb1e24295f0b6f9e0b9de7145"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xc8, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6135, 0x3, 0x3731cb05, 0x1}, 0x4, r3}}]}, {0x7a, 0x6, "19506ccf47b1687b6ff9ec3d2d3fb43fa68bbc11b4f7ec5462a5eda50b1d22163933f199a2526477b2616838dfab38c1b1405fbf1254419e21a9ecd6465d0ac30b153b2d35b25111f92d6ec05d752836bc25e414b11780d2397f2e4875dcc8a250658ebddba5cba6b2e7125fd228bb0d9dbfb7ed4812"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0xd39e62e7663f355b}}}}, @m_mirred={0xdc, 0x0, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0xffffffff, 0x20000000, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x20000000, 0x101, 0x4}, 0x4, r6}}]}, {0x6d, 0x6, "967da5b0e0f2cd9b63f5c09a3fb9a729b7ccecebf2b7a73740cdd9498886ad3865a5687f1515becf33874670b43ee4806bbd26b48af4a65d8ff3f391999121d28244919d0414e83038bd271330bbeb90460212b6cde52e89d63683137595a3dcac11db780c9a439355"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x10b0, 0x1c, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x40, 0x7, 0x0, 0x1}}, @TCA_DEF_DATA={0xf, 0x3, '\'\'{!{%/]&@\x00'}, @TCA_DEF_DATA={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x32d5709d, 0x1000, 0x0, 0xecb2, 0x2}}, @TCA_DEF_DATA={0x9, 0x3, '@\\[\\\x00'}, @TCA_DEF_DATA={0x9, 0x3, '#.$-\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x1e20, 0x0, 0x0, 0x0, {{0xb}, {0x1dd0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffb}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x5, 0x0, 0x9, 0x6, 0xffff, 0x1, 0x8000, 0x2, 0x2, 0x1, 0x3, 0x2, 0x2, 0x0, 0x9, 0x8, 0x4, 0x1, 0x200, 0x7, 0x5, 0x5, 0x401, 0x1, 0x6, 0x4, 0x84c1, 0x5253, 0x6, 0xffffff81, 0x2, 0x80, 0x7, 0x3559, 0xb, 0x4, 0x3, 0x9, 0x0, 0x24a, 0x6, 0xc995, 0x80000000, 0x200, 0x2, 0xd360, 0x101, 0x4, 0x2, 0xfffff262, 0x3, 0x9, 0x9, 0x3, 0x5, 0xfffff800, 0x0, 0x8, 0x3, 0x1, 0x100, 0xab, 0xfffffff8, 0xfffff8e0, 0x10001, 0x4b412a9a, 0x0, 0x0, 0x3, 0xb, 0x5, 0x5, 0x100, 0xfffffff7, 0x7, 0x196, 0xfffff2db, 0x81ac, 0x5, 0x814, 0x4, 0x61e1, 0xfffffffa, 0x8, 0x0, 0x6, 0x1, 0x2, 0x2, 0x3ff, 0x3, 0x7, 0x5, 0x7, 0x3, 0x1, 0x50000000, 0x658f, 0xffff, 0x7, 0x8, 0x5, 0x2, 0x10000, 0xa, 0xf, 0xe590, 0x4, 0x987, 0x5, 0x5, 0x1, 0x1, 0xc, 0x3, 0x8, 0x3, 0x81, 0x0, 0x1, 0xfffffff2, 0x3, 0x7f, 0x65, 0x3, 0x894, 0xe, 0xff, 0x0, 0x5, 0x0, 0xfffffff8, 0x10, 0xb9, 0x400, 0xfa2, 0x989f, 0x8001, 0x80000001, 0x8000, 0x6, 0x4e, 0x0, 0x3, 0x0, 0x400, 0x8, 0x0, 0x7, 0xe8, 0x6, 0x9, 0x1000, 0x3, 0xad, 0x3, 0x0, 0x9, 0xffffffff, 0x4, 0x1, 0x1, 0xff, 0x6, 0xfffffffa, 0xd, 0x9, 0x6, 0x3, 0x4, 0x1, 0x40, 0x7fff, 0xffffffff, 0x7f, 0x10001, 0x45cc, 0x9, 0x6f, 0x2, 0x3, 0x1, 0x0, 0x0, 0xfffff5a9, 0xfffffff7, 0x5, 0x0, 0x3, 0x1, 0x4, 0x7f, 0x6, 0x7, 0x7, 0x6e, 0x39, 0x4, 0x8001, 0x121, 0x0, 0x6, 0x2, 0x8001, 0x3, 0x2, 0x2, 0xffffffff, 0x3, 0xffffffc0, 0xd, 0x2, 0xf66, 0xff, 0x6, 0x401, 0x3, 0x1, 0x9, 0xfffffffc, 0x8, 0x9, 0x87f, 0x0, 0xfffffffb, 0xc9d, 0x0, 0xa5, 0xeb8, 0x8, 0x5, 0x0, 0x1, 0x8, 0xffffff01, 0x800, 0x5, 0x2, 0x7, 0xfaa, 0x2, 0x0, 0xfffffff8, 0x5, 0x4, 0x0, 0x7fff, 0x2, 0x5, 0xfffff517, 0x4, 0x80, 0x7ffe, 0x3, 0x80]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x14, 0x30, 0x101, 0xffffffff, 0x8, 0xffff9ab0, 0x7, 0xfffffff7, 0x7, 0xf62, 0x6, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x9, 0x2, 0x5, 0x3, 0x9, 0x3, 0x6, 0x3, 0x4, 0x8001, 0xffff, 0x2, 0x3, 0x2, 0x5, 0x3, 0x3, 0x0, 0x2, 0x7, 0xb0000000, 0x1, 0x8, 0x3, 0x0, 0x2, 0x0, 0xffff, 0x6, 0x2, 0x6, 0x8, 0x9, 0x0, 0x4, 0x5, 0x6, 0x3, 0x3, 0x877, 0x401, 0x7, 0x96, 0x4, 0x4, 0x200, 0x2a, 0x40, 0x4, 0x1, 0x8, 0xfffff091, 0x1, 0x3, 0x6, 0x81, 0xa4, 0x101, 0x1, 0x9, 0x1, 0x7, 0x1, 0xf44f, 0x3fb8, 0x9, 0x4, 0x0, 0xc, 0x9, 0x80000001, 0x3, 0x2, 0x7, 0x440, 0xac4107e, 0x272406cd, 0x0, 0x8, 0x5, 0x61, 0xb, 0x5, 0x8, 0x3, 0x8000, 0x8, 0x2, 0x1220223c, 0x5, 0x7, 0x4c5c, 0xe, 0x400, 0x2, 0x9, 0x3, 0x9e0, 0x4, 0x1000, 0xfffffffb, 0x0, 0x7, 0x2, 0xc53, 0xd8a3, 0x5, 0x101, 0x7b672f48, 0x6, 0x4, 0xd34a, 0x4, 0x5ed, 0x1, 0x5, 0x1, 0x0, 0x700, 0x5, 0x7fffffff, 0xc, 0x7, 0x2486, 0xedb, 0x0, 0x7f, 0x7fffffff, 0x4, 0x5, 0xe, 0x3, 0x9, 0x1, 0x1ff, 0x6, 0x2, 0x6, 0x7, 0x8, 0x4, 0x100, 0x7, 0x5, 0x7fffffff, 0x800, 0x7, 0x6, 0x5, 0x0, 0x1, 0xfff, 0x8, 0x10001, 0x400, 0x80000000, 0xb4a9, 0xfff, 0xb492, 0x8, 0x7736, 0x6, 0x8262, 0x6, 0x4, 0x3, 0x80000000, 0x5, 0x9, 0x401, 0x800, 0x1, 0x8, 0x200, 0xf, 0x5, 0x6, 0x2, 0x10, 0x5, 0x9, 0x0, 0x1, 0x0, 0x8, 0x200, 0x200, 0xfffff218, 0x1, 0x653, 0x101, 0x7, 0x4, 0x8, 0x8, 0x8, 0x7fff, 0x3, 0xc9b, 0xd9c, 0x6, 0x6, 0x3, 0x7f, 0xfffffbff, 0x8001, 0x5, 0x8, 0x7f, 0x2f, 0xff, 0x1, 0x42, 0x0, 0xfffffffb, 0x200, 0x9, 0x101, 0x0, 0x8, 0x65e9, 0x3, 0x2, 0x1, 0xffffefee, 0x0, 0x4, 0x7, 0x2, 0x1, 0xfffffffb, 0x0, 0x71, 0x0, 0x4, 0x4, 0x7, 0xf, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0x0, 0x74, 0x2, 0x1, 0x1, 0x7, 0x2827, 0x5, 0x1, 0x2, 0xcea, 0x0, 0x1c42355d, 0x8b, 0x4, 0x3, 0xfffffffc, 0x6, 0x5, 0x277c, 0x609cac98, 0x0, 0x10001, 0x400, 0x6, 0xffffffff, 0x200, 0x9, 0xd2, 0x9, 0xdb2, 0xc9, 0xc06, 0x200, 0x7, 0x4, 0x8001, 0x7fff, 0x7, 0xff, 0xd, 0x0, 0x9, 0xff, 0x4, 0x6, 0x4, 0x16, 0xad47, 0x3, 0xf, 0x3, 0x5, 0x9, 0x8, 0x8, 0x101, 0x101, 0x9, 0x80000000, 0x5, 0x7, 0x1ffc00, 0x3, 0x29c2, 0x800, 0x3, 0x9a, 0xddb, 0x6, 0x44, 0x6, 0x9, 0x1, 0x0, 0x6, 0x0, 0xa7, 0x0, 0x8, 0xb, 0x4, 0x2, 0x3a9f, 0x4765, 0x7f, 0xff, 0x5f6, 0x7, 0x7, 0x231, 0xb48, 0x6, 0x3, 0x4010, 0x7, 0xc, 0x0, 0xc, 0x80, 0x2, 0x7, 0x7ff, 0x3, 0xe, 0x0, 0x5dbf, 0xfdd, 0x8, 0x8, 0x8, 0xcb, 0x9, 0x1, 0xe, 0x6, 0x3, 0x800, 0x4, 0x7, 0x6, 0xc8, 0x5, 0x3, 0xa, 0xdc7, 0x4, 0x7, 0xd327, 0x2, 0x8, 0x8, 0x4, 0x3, 0x4, 0x80000001, 0x4, 0x8, 0x5, 0x9, 0x4, 0x5, 0xd0, 0xc03, 0xffffffff, 0x100, 0x6, 0x91, 0xeacf, 0xe85c, 0xb535, 0x9, 0x52, 0x0, 0x0, 0x4, 0x2, 0x7ff, 0x1943bdcf, 0x4, 0xfffffffa, 0x28, 0xa, 0x1ff, 0x7, 0x40, 0x6, 0xffffffeb, 0x400, 0x0, 0xef, 0x4, 0x8, 0x5, 0x18000000, 0x8, 0x4, 0xe, 0x14000, 0x24, 0x4, 0x3, 0x1, 0xfffffffb, 0x5, 0x10001, 0x401, 0x2, 0x6, 0x81, 0x1, 0x5, 0x580000, 0x9, 0xffffffff, 0x2, 0x0, 0x6, 0x9, 0xa, 0x63, 0x400, 0x0, 0x7, 0x5, 0x500, 0x9a6, 0x6, 0x1, 0x6, 0x10000, 0xace8, 0x5, 0x2, 0x4, 0xffffffff, 0x80000000, 0x2, 0x0, 0x6, 0x80000000, 0x80000001, 0x7, 0x2, 0x7fff, 0x100, 0x8, 0x7, 0x6, 0x0, 0x8, 0x80, 0x0, 0x2, 0x9, 0x9, 0x4, 0x7, 0x1, 0x8c7f, 0x0, 0x4, 0x2, 0x1a958, 0x0, 0x80000000, 0x0, 0x100, 0x7, 0xffffffff, 0x9, 0xffffff39, 0xe, 0x7fff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xceb}, @TCA_POLICE_RATE={0x404, 0x2, [0x5f0e, 0x8, 0x10000, 0xc47, 0x1, 0x3, 0x6, 0x0, 0x2, 0x6, 0xa6ff, 0x200, 0x9, 0xffff4d24, 0x5ba, 0x7fff, 0x10000, 0x2, 0x3, 0x6f, 0x9, 0xd4f, 0xaa, 0x1, 0x63e54dbe, 0x0, 0x3d67, 0x6, 0x1, 0xa, 0xd, 0x5, 0x9, 0x5be, 0x4, 0x1cd8, 0x6, 0xd28, 0x1, 0x8, 0x5, 0x4, 0x2, 0x4, 0x6, 0xd, 0x0, 0x5, 0xe, 0x9, 0x6, 0xa, 0x401, 0x7, 0x3, 0x6, 0x3, 0x1, 0x2f5f, 0x2, 0x2, 0x6, 0x7f, 0x303ee3cd, 0x3, 0x7, 0xe, 0x0, 0x4, 0x5, 0x3fe00000, 0x5, 0x3, 0x8001, 0x7, 0x7, 0x8000, 0x7, 0x6, 0xfffffff7, 0x3, 0x3, 0xe, 0x5, 0xe5e, 0xae, 0x1ff, 0xffffffff, 0x1, 0x9, 0xfffffff7, 0x3, 0xc, 0x4, 0x999c, 0xfffffff8, 0x7, 0xffffffb0, 0x6f, 0x9, 0x0, 0x62, 0xa5f, 0x6, 0xa, 0x200, 0x1, 0x1, 0x1, 0x6, 0x5, 0x3, 0x1ff, 0xfffffff9, 0x411, 0x8001, 0x3, 0x5, 0xfffffff4, 0x8, 0x2bf6e14, 0x2, 0xff, 0x9, 0x7, 0xb3, 0x10001, 0x3ff, 0x7, 0x2, 0x5, 0x4, 0x0, 0x0, 0x6, 0xffff, 0xfffffffe, 0x6, 0x6e0a568b, 0x0, 0x7, 0xb2, 0x7, 0x1, 0x4, 0x7ff, 0x25, 0x9, 0xffffffff, 0x59a, 0xfffffff7, 0x2, 0x3, 0x6ce2, 0x3, 0x8, 0xfffffff8, 0x1, 0x9, 0x3, 0x1, 0x0, 0x401, 0x7, 0x8, 0xf, 0x9a8, 0x4, 0x8, 0xeb81, 0x40, 0x0, 0x3, 0x5, 0x1, 0x5c6a6e22, 0x7, 0x8000, 0x0, 0x7, 0x8001, 0x48000000, 0xffff, 0x4, 0x6c, 0x8001, 0x7, 0xa, 0xa, 0x1, 0x4b4c, 0x8, 0x1138, 0xe, 0x7c, 0x979, 0x5, 0x7f, 0x5, 0x3ff, 0x9, 0xf60, 0xff, 0xf5c, 0x1ff, 0xfffffffc, 0x8, 0x9, 0x80, 0x44, 0xfffffffc, 0x9, 0x4, 0x2, 0x2, 0x3, 0x32d4, 0x9, 0x3, 0x7fff, 0x9, 0x9d7b, 0x6, 0x0, 0x6, 0x4, 0x6, 0x8, 0x4, 0x1, 0x5, 0xe8, 0x2, 0x4, 0x7fffffff, 0x1ff, 0x4, 0x81b, 0x1a3, 0x1ff, 0x100, 0x0, 0x3ff, 0x400, 0x3252, 0x9, 0x2, 0x991d, 0x14c, 0xe0000000, 0x9aa7, 0x5, 0x1, 0x6, 0x81, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0x4, 0xffff, 0x6, 0xffff, 0xfffff7d1, 0x4, 0x5, 0x5, 0x8, 0x40, 0x0, 0xf46, 0x1, 0x0, 0x3, 0x1e, 0x9, 0x30, 0x4700, 0x7, 0x267, 0x10, 0xc5e, 0x2, 0x3, 0x8, 0xb9, 0x3, 0xc, 0xfffffffe, 0x5, 0x5, 0x8, 0x81, 0x48a, 0x5, 0x4, 0x8000, 0x0, 0x6, 0x4, 0x9, 0x0, 0x4, 0x4, 0x7, 0x7, 0x6, 0xfffffffa, 0x58, 0x1c00000, 0xe, 0x9, 0x9, 0x5, 0x7fffffff, 0x7ff, 0x6a0b227b, 0x80000001, 0xffff0699, 0x400, 0xa, 0x6, 0xa0000, 0x5, 0x1, 0x3, 0x200, 0x5, 0xe, 0xf, 0x3, 0x4, 0x2, 0x6, 0x10001, 0x5, 0x4, 0xb, 0x4, 0x3, 0x5, 0x7, 0x7, 0x7d29b59a, 0xff, 0x8, 0x4d, 0x7f, 0x0, 0x7, 0x0, 0x5, 0x6, 0x100, 0xd, 0x2, 0x3, 0x5, 0x3, 0x0, 0x200000, 0x0, 0x8, 0x7fff, 0x9, 0x1cf, 0x2, 0xc, 0x6, 0x5, 0x2498, 0x0, 0x8, 0x0, 0x9, 0xcf4, 0xa, 0x6, 0x2, 0x9, 0x7, 0x9, 0x3773, 0x7, 0x4, 0x4e, 0xc, 0x4, 0x2, 0xa, 0x40, 0xc28d, 0x7, 0x6, 0x8, 0x9d0, 0x9f75, 0xfffffffa, 0xfffffff8, 0x800, 0xb, 0x6, 0x8, 0x8d, 0x6, 0xfffffff8, 0xfffffff7, 0x0, 0x2, 0x2, 0x6, 0x4, 0x7, 0x0, 0x0, 0x101, 0x2f, 0xa0, 0xfffffffe, 0x3, 0x800, 0x4, 0xffffffff, 0x6, 0x4e, 0x7, 0x1, 0x9, 0xf420, 0x80000000, 0x9, 0x2, 0xac1, 0x1, 0x10001, 0x9, 0x7, 0xff, 0x3, 0x101, 0x6, 0xae, 0x1c000000, 0xb9b7, 0x4, 0x4, 0x8, 0x1, 0xfff, 0x82, 0x10, 0x4, 0x69, 0x9, 0x8, 0x9, 0xda5, 0x4, 0x0, 0x1, 0x80000001, 0xd18, 0x13, 0xe, 0x2, 0x8, 0xb, 0x0, 0x4, 0x3740000, 0x8, 0xd22, 0x4, 0xf9d1, 0x3, 0x4, 0xc, 0x7, 0x6, 0x8, 0x10000, 0x9, 0x0, 0xa0bf, 0x5, 0xa, 0x2, 0x8, 0x6, 0xa8ea, 0x0, 0x9, 0x8, 0x9, 0x693, 0xe13, 0x7fffffff, 0x6, 0x2, 0x3ff, 0x7fff, 0x70, 0x6, 0x1, 0x0, 0x1, 0xc46, 0x1, 0x8, 0x1, 0x9, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x4, 0x5, 0x7ff, 0xffffffff, {0x5, 0x0, 0xf, 0x9, 0x800, 0x9000}, {0x6c, 0x0, 0x2, 0x2, 0x7, 0x1000}, 0x10000, 0x6, 0x2}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x3, 0x8, 0x1, {0xc, 0x3, 0x8, 0x1, 0x2, 0x5}, {0x2, 0x0, 0x5, 0x2, 0x3, 0x101}, 0x0, 0x6, 0x208}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffff26, 0x3, 0x1, 0x3, 0x0, {0x6, 0x0, 0x6, 0x2, 0x3, 0x91cf}, {0x6, 0x0, 0xffff, 0xde, 0x4, 0x2}, 0x3, 0x1, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0xfffffffd, 0xad, 0xa, 0x77d, 0xffffc852, 0x0, 0x7, 0x7, 0x6, 0x80000000, 0xb63, 0x7, 0x2, 0x10000, 0x2971a5dd, 0x4, 0x0, 0x67, 0xfffffe01, 0x7, 0x81, 0x5, 0x9, 0x3, 0xfffffffa, 0x4c, 0x3328ee13, 0xfcd, 0x5, 0x0, 0xb6f0, 0x0, 0xcd, 0x401, 0x8, 0x3ff, 0x5bec, 0xbd5e, 0xfff, 0x3, 0x2, 0xffffffc0, 0x3, 0x8, 0x7, 0x4, 0x9, 0x419, 0x2, 0x3, 0x0, 0x1, 0x6, 0xf, 0x40, 0x3, 0x7, 0xa, 0x8, 0x3, 0x2, 0x9d, 0x44a, 0x40, 0x7, 0xc3, 0x5, 0x8000, 0x0, 0xfbd, 0x101, 0x1, 0x9, 0x21, 0xe, 0x0, 0x7fffffff, 0xffff0000, 0xfffffff9, 0xfffffff7, 0x10, 0x4, 0x1000, 0x7d, 0x71, 0x75, 0x7, 0xfc3, 0x0, 0x2, 0xffffffff, 0x8, 0x7a, 0x400, 0x7fff, 0x100, 0x8, 0x6, 0x7, 0x800, 0x4, 0x5986, 0x838, 0x3, 0x9, 0xffff8000, 0xffff5069, 0x7d, 0xffff, 0x4, 0x2, 0x10000, 0x1, 0x101, 0x7, 0x2, 0x4, 0xfffffffa, 0xa945, 0xfd, 0xfffffff7, 0x10001, 0x7f, 0x8, 0x5, 0xc5e8, 0x81, 0x66, 0xfffff774, 0x8, 0x4, 0x6, 0x6, 0xfffffff9, 0x0, 0x6, 0x1, 0x47, 0xb, 0x9d, 0x6, 0x726, 0x3, 0x0, 0x8, 0x4, 0x80000000, 0x7, 0x1, 0x6, 0x1, 0xffff2604, 0xd7df, 0x6, 0x4, 0xcdf, 0x0, 0xc, 0xd, 0xf, 0x6000, 0x6, 0x6, 0x1, 0xfffffffb, 0x8, 0xa69, 0x2, 0x0, 0x272, 0xfffffff4, 0x9, 0x7, 0x9, 0x8, 0xfffffffd, 0xe, 0x2, 0xe0, 0x2, 0x7d, 0x6, 0xe, 0x800, 0x9, 0x8, 0x10000, 0x8, 0x9, 0xa88, 0xd, 0x0, 0x0, 0x8, 0xc, 0x9, 0x6, 0xfffffff7, 0x5, 0x8, 0x84, 0x9, 0x9, 0x0, 0x0, 0x81, 0x3, 0xe, 0x2, 0x73be2a58, 0x1000, 0x9, 0xd, 0x6, 0x4, 0x7, 0x5, 0x10001, 0x7, 0x8, 0x10, 0x0, 0x1ff, 0x8, 0x9, 0x5, 0x6, 0x5, 0x0, 0x6, 0x1, 0x1, 0x1, 0x5, 0x1, 0x4, 0x4, 0xfffffff3, 0x3, 0x50e44be4, 0x1, 0xfffffff9, 0x9, 0x726, 0x1ff, 0x70, 0x495, 0x6efd, 0xfff, 0xfffffffe, 0x1, 0x4, 0x5, 0x7, 0x800]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x4, 0x2, 0x2, 0xfffffffa, 0x5, 0x8, 0x80000001, 0x0, 0x6, 0x80, 0x9, 0x1, 0x6, 0x9, 0x6, 0x7, 0x2, 0x8000, 0xc, 0x5, 0x5, 0x2, 0x3f, 0x7, 0x5, 0x0, 0x2, 0x3, 0xffff, 0x35, 0x3, 0x6, 0x10000, 0x8, 0x7, 0x2, 0x6, 0x4, 0x4, 0x6, 0x4, 0x9, 0x3, 0x7a1, 0x5, 0xb, 0x8, 0x4, 0x2, 0x6, 0x0, 0x3, 0x6, 0x2, 0xc, 0x8, 0x0, 0x5, 0x7fff, 0x1, 0x4, 0x7, 0x8, 0xc00000, 0x4, 0x6, 0x80, 0x7, 0x0, 0x7, 0x6, 0x10000, 0xffff, 0x2, 0x4, 0xffffffff, 0xa0, 0x1000, 0x2, 0x7fff, 0x24, 0x23fb, 0x9, 0x9, 0x5, 0x3, 0x2, 0x100, 0x7f, 0x1, 0x7, 0x9, 0x4, 0x3, 0x401, 0x5, 0x0, 0x1, 0x5, 0x4, 0x7, 0x0, 0xfab5, 0x8, 0xffff, 0x1, 0xea, 0x2, 0xfbd, 0x591, 0x0, 0x0, 0xa0f, 0xfffffff8, 0x7f, 0x5, 0x36de4591, 0x3e, 0x9, 0x2, 0x8001, 0x8, 0x79, 0x12a0, 0x0, 0x4, 0x6, 0x1, 0x4, 0x7, 0x8b70, 0xe6d, 0x3cbd, 0x1, 0x1, 0x9, 0x8, 0x7, 0x3, 0xb, 0xa, 0x9, 0x6, 0x8, 0x6, 0x3, 0x7, 0xffff0001, 0x905, 0x6, 0x1, 0x101, 0x10, 0x6, 0x3aea, 0x1, 0x6, 0x80000001, 0xa8d, 0x1, 0x80, 0x42a, 0x50, 0x15c, 0x1c, 0xf, 0x1, 0x77, 0x9, 0x9, 0x8, 0xf60e, 0x8001, 0x5, 0x2, 0x3c, 0x5edc, 0x1, 0x5, 0x3, 0x2, 0x6, 0x0, 0x5, 0x6, 0x8001, 0xffff3f2f, 0x8, 0x1, 0x7, 0x600, 0x4, 0x8000, 0x3, 0x311e82c5, 0xfffffffd, 0x0, 0x8, 0x5, 0x1, 0x2, 0x4, 0x3, 0x8, 0x4, 0x8fa, 0x7fffffff, 0x4, 0x1, 0x9, 0x3, 0x1, 0xffffffff, 0x3ff, 0x5, 0x4, 0x4, 0x7, 0x958, 0x3009d4d8, 0xe77, 0x9, 0xf08f, 0x0, 0xcd, 0xf4, 0x4, 0x9f, 0x4649beca, 0x6, 0x2, 0x9, 0xc68, 0x4, 0xda8, 0x10, 0x5, 0x2, 0x0, 0x8, 0x7f, 0x3, 0x9, 0x9, 0x1, 0x0, 0xc2ee, 0x0, 0x1, 0xff, 0x3, 0x2, 0x4, 0x81]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x0, 0x0, 0xffffff80, {0x9, 0x0, 0x141a, 0x81, 0x1ff, 0x2}, {0xc4, 0x2, 0xcdf, 0x61, 0x990, 0x4}, 0x7, 0x1, 0x10}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x3, 0x1, 0x3, {0x8, 0x0, 0x0, 0x7f, 0x6, 0x120}, {0x0, 0x0, 0x7, 0xf, 0x9, 0xfffff001}, 0x4, 0x81}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]]}, {0x27, 0x6, "2e9ea72effb3b72d9cb96654c6bca50280c968118fbb6c6ad5cab21c6c20c106d1ea83"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x107c, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10000, 0x2159, 0x4, 0x6, 0x3}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_SMAC={0xa}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x82c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x4, 0x7, 0x3, 0x3, 0xab7, 0x8df, 0x0, 0x0, 0x3c1, 0x4, 0x4, 0xdf2, 0x6, 0x9, 0x1, 0xe51, 0x70000, 0x4, 0x79, 0x0, 0x2, 0x4, 0x6, 0x5b2, 0x6, 0x9, 0x4, 0x1, 0x3, 0x9, 0x7, 0x0, 0xbfe, 0x5, 0x9, 0x8, 0x8, 0xffffffff, 0x7, 0x8001, 0xfff, 0x5, 0x3, 0xfffffffe, 0x7, 0x2, 0x5, 0x2, 0xfffffe78, 0x10001, 0xfffffffe, 0x0, 0x0, 0x9, 0x7, 0x81, 0x7, 0x1, 0x3, 0x4, 0xb, 0x8, 0x7, 0x1, 0xfe7b, 0x7fffffff, 0x7, 0xffff, 0x5a, 0xfffffff1, 0xffff, 0x4, 0x40, 0x0, 0x0, 0xf, 0x7, 0x3, 0x6, 0xffffffff, 0x22e, 0xfffffffd, 0xfffffffe, 0x8, 0x200, 0x3, 0x2a, 0x0, 0x7fff, 0xf9c, 0x10001, 0x7, 0x8fa4, 0x81, 0x9, 0x6, 0x7fff, 0x5, 0x7, 0x9, 0xa, 0xd, 0x7, 0x7, 0x5, 0x2, 0x1, 0x7, 0xffffffff, 0x9, 0x8, 0x1, 0x4, 0x1, 0x80000000, 0x800, 0x4, 0x5, 0x6, 0x1, 0x9, 0x80, 0xfffffff9, 0x10001, 0xfffffff9, 0xff, 0x0, 0x4, 0x5, 0x6, 0x80, 0x101, 0xe17c, 0x6, 0x3, 0x1, 0x4, 0x0, 0x68, 0x5, 0x9, 0x1, 0x1, 0x3, 0x6, 0x9, 0x7, 0x6, 0x2, 0x9, 0x4, 0x5, 0xeba8, 0x5, 0x7acf, 0x4, 0x5, 0x7fffffff, 0x0, 0x886, 0xd, 0x2, 0x7fffffff, 0x3, 0x9, 0x3, 0x9, 0x81, 0xfffffffb, 0x1, 0x2f, 0x5, 0x4, 0xba, 0x1, 0x7, 0xb, 0x7ff, 0x1, 0xfff, 0x4, 0x2000, 0x7f, 0xf0, 0x8, 0x4, 0x0, 0x2, 0x7fff, 0x3, 0x5, 0x4, 0x9, 0x0, 0xe, 0x0, 0x0, 0x9, 0x8, 0x8, 0x7, 0x7, 0x2, 0x5, 0x5, 0x489, 0x7fffffff, 0x3, 0x6, 0x5, 0x4, 0x8, 0x49, 0x3, 0x4, 0x9c, 0x3, 0x0, 0x9, 0x8, 0xfffffff9, 0x9, 0x7, 0x9, 0xb, 0x6, 0x5, 0xffffffff, 0x502, 0x1000, 0x3, 0x6, 0x9, 0x5, 0x9b8, 0x32b8, 0xfff, 0x3, 0x3, 0x8001, 0x24, 0x4, 0x2, 0xff, 0xffff, 0x40, 0x101, 0x2, 0x101, 0x1, 0x3ff, 0x0, 0x7ff, 0xfffffffb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffe, 0x7, 0xed1a, 0x64f, 0x7881, 0x9, 0xfffffff9, 0x359fb0d6, 0x788ec682, 0x19, 0x7, 0x1, 0x5, 0xd1, 0xfffff53e, 0x1, 0xffffffff, 0x0, 0x12, 0x0, 0x8, 0x3, 0x80000000, 0x9, 0x8001, 0x4, 0x5, 0x1, 0x5, 0x4, 0x3, 0x6, 0xc, 0x6, 0x7, 0x81, 0x7ff, 0x1000, 0x8, 0x9, 0x6, 0x8, 0x7, 0x599, 0x2db, 0x1, 0x8, 0x10001, 0x8, 0x0, 0x9aa1, 0xe04, 0x62ef, 0x4, 0x6, 0x7, 0x3, 0x2, 0xfffffffe, 0x400000, 0x24, 0x6, 0x4, 0x2, 0x1ff, 0x4, 0x40, 0x7, 0x40, 0x5, 0x8, 0x4, 0xfffffeff, 0xfffffffb, 0x8, 0xbccb, 0x401, 0xfe9, 0xffff0001, 0x0, 0x800, 0x2, 0x0, 0x7f, 0x101, 0x80000000, 0x7, 0x4, 0x3, 0x5, 0x1000, 0x1, 0x1000, 0x5, 0x9, 0x8, 0x7fff, 0x7, 0x6, 0x101, 0x8000, 0x800, 0xe00000, 0x100, 0xc, 0x8000, 0x3, 0x1, 0x4, 0x1, 0x4, 0x9, 0x10001, 0x8, 0x7c6c, 0x8, 0x8, 0x1ff, 0x6b916ce5, 0xe4af, 0x4, 0x10001, 0xffff9bbe, 0xf, 0xfffffffa, 0x6, 0x7, 0x4, 0x7, 0x10, 0x0, 0x7, 0x8, 0x8, 0x6, 0x800, 0xf015, 0x7, 0x3, 0x5, 0xfff, 0x7, 0x0, 0x1ff, 0xf5b, 0x2, 0x5, 0xf, 0x5, 0x3, 0xfffffffd, 0x0, 0xffff, 0xc, 0x7ff, 0x401, 0x4c, 0xe, 0x103, 0x5, 0x8, 0x8, 0x2, 0x0, 0xc, 0x8, 0x5d9, 0xd1, 0x29, 0x80000001, 0xfffffffd, 0xbc, 0x9, 0x5, 0x80, 0x100, 0x65, 0xfffffff3, 0xb484, 0x4, 0x9, 0x7fffffff, 0x10001, 0x1, 0x101, 0x4, 0x1, 0x7, 0x6, 0x7fff, 0x6, 0x7fff, 0x4, 0x2, 0x12f, 0x7f, 0x5, 0x9, 0xea, 0x7fffffff, 0x739, 0x3, 0xe, 0x4, 0x3, 0x8001, 0x2, 0xffff467d, 0x400, 0x3b, 0x5e9eb292, 0x4, 0x5, 0x3, 0x7, 0x6, 0xf, 0x0, 0x2, 0x200, 0x5, 0x9, 0xfffffff2, 0x6, 0x0, 0x5, 0x7, 0x6, 0xf, 0x1, 0xfffffea1, 0x1, 0x5, 0x6, 0x7, 0x8827, 0x10, 0x6, 0x2, 0x1, 0xffffffff, 0x6, 0xb, 0x0, 0x9, 0x6, 0x2, 0x3, 0x5, 0xad4, 0x6, 0x2, 0x1, 0x2, 0x0, 0x6]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x818}, @filter_kind_options=@f_route={{0xa}, {0x83c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x5}}, @TCA_ROUTE4_POLICE={0x820, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x0, 0x31, 0x33ff, 0x9, 0xaa, 0x1ff, 0xffffffff, 0xcfb, 0x101, 0x3, 0x0, 0x80, 0xfd2, 0x80000001, 0x80000000, 0x9e6, 0xe5, 0x2, 0x6, 0x2, 0xfffffff9, 0x8, 0x1ff, 0xb6, 0x2, 0x10, 0xfffffff8, 0xf, 0x8, 0x80, 0x6f, 0x6, 0xfffffff9, 0x10, 0x400, 0x9, 0x16d, 0x317, 0x3, 0x6, 0xfff, 0x9, 0x9, 0x1, 0x5, 0x3, 0xfffffffd, 0xf39, 0x401, 0xff, 0x4, 0x80, 0x7, 0x9, 0x1bff, 0x1800, 0xd8, 0x7fffffff, 0x8, 0x80000000, 0x612, 0xfffffffa, 0x3, 0xfffffffc, 0x2, 0x1, 0xffffffff, 0x4, 0xc, 0x8, 0x3, 0x4, 0x1800, 0x1ff, 0x80000000, 0x2, 0xa4, 0x4, 0x1750, 0x4, 0xa84, 0xb, 0x4, 0x4, 0x1, 0x1, 0xd, 0x0, 0x10000, 0x2, 0x2, 0x675, 0x0, 0xfff, 0x0, 0x81, 0x25f, 0x0, 0x1, 0x0, 0x400, 0xc8a, 0x9, 0x1, 0x3017, 0x4, 0x8, 0x5cb1, 0x5, 0xfffeffff, 0x6, 0xffffffff, 0x7a, 0x767b, 0x3a4, 0x451b, 0x6, 0x4, 0x0, 0x1, 0x8, 0x6a4, 0x7, 0xfffffff9, 0x2, 0x4, 0x5, 0x9, 0x4, 0x7ff, 0x0, 0x3, 0xff, 0x2, 0x8867, 0x1000, 0x0, 0x3, 0x1, 0x0, 0xa, 0x8, 0x80000001, 0x2, 0xfffff9a5, 0x7ff, 0x5, 0x37, 0x9d88, 0x4, 0xb3cb, 0x0, 0x2, 0x3, 0x9, 0xffffff7f, 0x6, 0x81, 0x80, 0x4b, 0x2, 0x800d8d7, 0x7ff, 0xd99, 0x2000, 0x5, 0xc, 0x0, 0xffff0001, 0x8001, 0x1, 0x2, 0x393, 0x4, 0x9, 0x80000000, 0x8, 0x3ff, 0x3, 0x5, 0x8, 0x9, 0x1, 0x100, 0xa93, 0x0, 0xfd0, 0x3, 0x4, 0x5, 0x4, 0x400, 0xc0000000, 0x66db, 0x6, 0x81, 0x784, 0x7, 0x6118, 0x9, 0x6, 0x6, 0x9, 0x200, 0x5, 0x81, 0x9, 0x200, 0x0, 0x8, 0xec, 0xfffffffa, 0x80000000, 0x1, 0x9, 0xc2b, 0x71, 0x353, 0x7fffffff, 0x3, 0x6, 0x5, 0x1ff, 0x0, 0xffff, 0x3, 0x80000001, 0x2, 0x4, 0x3, 0x2, 0x5, 0x1000, 0x5, 0x9, 0x1bbaac32, 0x7, 0x5, 0x6, 0x5, 0x8, 0x4, 0x1, 0x4, 0x7, 0x401, 0x5, 0x6, 0xa, 0x6, 0x7, 0x4, 0xf5d, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x800, 0x1, 0x3, 0x7, 0x4, 0x1000, 0x455cf51, 0x8, 0x0, 0xa7b, 0x7ff, 0x5, 0x7, 0x7, 0x1, 0xc9, 0xd703, 0x2, 0x2, 0x3, 0xfffffffc, 0x40, 0x1, 0x80000001, 0x3, 0x6, 0x4, 0xfffffffc, 0x0, 0xda, 0xd, 0x3, 0xffffffff, 0x16ee1388, 0xea00, 0x65e, 0x5, 0x7, 0x3, 0x1, 0x2, 0x7, 0x2, 0x2, 0x3ff, 0x9, 0x7, 0x6, 0xa777, 0x0, 0x3, 0x40, 0xfffff800, 0x0, 0x80000001, 0x0, 0x6, 0x800, 0xfffffffb, 0x5c, 0x9, 0x6, 0x7, 0x3ff, 0xe, 0x6, 0x0, 0x1, 0x1309, 0x2, 0x1000, 0x4, 0x5, 0xc, 0x9, 0x4, 0x401, 0x6, 0x1, 0x9, 0x8, 0x6, 0x7, 0x80, 0x7, 0x1, 0x4, 0x6, 0x5, 0x1, 0x2, 0xf, 0x6, 0x0, 0x10000, 0xfffffffe, 0xcb, 0xffffffff, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x7ff, 0x3, 0x2, 0x4, 0xcef3, 0x796, 0x2, 0xfffffff4, 0x47, 0x7, 0x7, 0x7ff, 0x0, 0x400, 0x9, 0xaf, 0x5, 0x2, 0x6, 0x2, 0x81, 0xfffff90c, 0xfffffffe, 0x31, 0x7, 0x3, 0x10001, 0x2, 0x1, 0x9, 0x5ce, 0x8, 0x0, 0x4, 0x8, 0x1, 0x3, 0x7, 0xbe, 0xd1b7, 0x7, 0x0, 0x9, 0x4fe87f85, 0x8000, 0xfffff001, 0xb668, 0x3, 0x2, 0x4, 0x5, 0xfffff023, 0x3, 0xfffffffa, 0x4, 0x4af2, 0x2a1, 0x80000000, 0x8, 0x1, 0x7, 0x0, 0x6, 0x6a48, 0x8, 0x0, 0xa3, 0x401, 0xfffffffd, 0x7, 0x10001, 0x10, 0xff, 0xfc66, 0xffff, 0x8, 0x7, 0xb, 0x8000, 0x1, 0x1, 0x8, 0x6, 0x6992f2f3, 0x400, 0x1, 0x6, 0x7, 0xd0, 0x50000, 0x1, 0x5, 0xc6, 0x4, 0x10001, 0x0, 0x80000001, 0x2, 0x800, 0x7ff, 0xa6a9, 0x3, 0xd8aa, 0xb2, 0x1, 0x7, 0x4, 0xfffffffb, 0x8a1, 0x3, 0x3ff, 0x10000, 0x7c, 0x8, 0x2, 0x8001, 0x800, 0x8, 0x9, 0x16b1, 0x2, 0xe6, 0x5, 0x3, 0x8001, 0x400, 0x3, 0x7fff, 0x3ff, 0x6460, 0xfffffffd, 0x6, 0x8, 0x2, 0x80000001, 0xc6d9, 0xfffeffff, 0x8, 0xf683, 0xb, 0x9, 0x1, 0x2, 0x9, 0x3ff, 0x8, 0xfffffffd, 0x80000000, 0x2, 0x2172, 0xfffffff2, 0x4d9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd9}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5c}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xfff3}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x13d8, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1e7d2}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_ACT={0x139c, 0x9, 0x0, 0x1, [@m_nat={0x188, 0x16, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4e, 0x2, 0x4, 0x0, 0x80000001}, @local, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x0, 0x2, 0x40}, @private=0xa010101, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7, 0x6, 0x7, 0xfffff0ec}, @loopback, @private=0xa010100, 0xff000000}}]}, {0xe7, 0x6, "da087d07566f41d5952cba7b16f327067dd289cd5a70ba3b942cc19056ea5bf4dd5468fd641366858b1a9c36b7ebe8a57e97da8abc73a1410957fddee1fc080368d7011c971c2789a96498c163b610749efccd9d4f4cabe123b03c3905365355c226a457bfd677cddb126693581f99d75c4b46451b14f3a3c612d7f2b6cfe7301903c8bc8b27f7af45705fc05e97a1ecf407f4a01e3efd77786d4c355db99b6920006e6253da215eb8408556ff7e5ce6f511152a789b791992cddb1facc75c76f16b551c9a05c6f99ab66e2b9e11fe7437e1afa90f20f1b005edaf7f327b4bf362ea37"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x11a0, 0x9, 0x0, 0x0, {{0x7}, {0x10f4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x6b, 0x6, {0x1, 'mangle\x00', 0xcb, 0x800, "03f46fcca666ea1e70597240eb0078333aebd48f99086817b46818352f4f1366d7a34304ebf0926ba570a97e715e7ce7d6b5d84b379f98c087d167aaf4d6b48825"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x0, 'mangle\x00', 0x4, 0x1000, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x86, 0x6, "f96d7a8fdc25c7ad263a23c315d771bb822d8bde884373641bf277f0cc60a77a02f464b79c970a627ed258587346e73cc03780a6ed9748ad908e5a0bba769da7316dcaed250fd7cfaaa0824becdfc736d7ec1eb7d151ae701ff3d8ad8a33b109b9b2aae869321e017a94de22bd0005a17b1de7b390654910781a24cceb0d8dd82b94"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x70, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1ff, 0x4, 0x1, 0x5, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1faf}]}, {0x23, 0x6, "bcbe99fcbbb90689a45bd46fe6d2973258d2784239e06918b97a0e36abf853"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xb8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x66b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040840) 1.526677338s ago: executing program 0 (id=3966): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 1.379939607s ago: executing program 0 (id=3967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6(0xa, 0x3, 0x76) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000086", @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="23003300e09802000802110000000802110000012ded0600a3eeb6071800cdc0070103000600cd00ffff0000"], 0x48}}, 0x4000000) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r5) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES64=r1, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r10}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180800001800000000000000010000ffaf57f700", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.316443166s ago: executing program 2 (id=3968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) preadv(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3, 0xfef, 0x800) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) 1.280058841s ago: executing program 4 (id=3969): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000180)=0xfffffe80) 1.0708103s ago: executing program 4 (id=3970): unshare(0x24030000) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x48000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e00)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="3c59520147129d5cf32c829e64b37ce822b49c3db07222166ec0f3cf43455ebe735f3bcac1aafb3e65c8f0a9ba5201bf3b2861a98f71d542c0de57b6c01c323cde87c757bd0500000000000000f567045189f6884073d382d7b886ccec3ea10c95d98d7f3b7913ca5a455746a92eecb312bb10c987f614978b188f0cecd06018cc082078a1d0effcbc585b7144382b8698cc01354ee4a155ca1dd6960e09c8d841b418a45c2a757470a8b870ff165344abcddaeb5d8aa2847b94982ecc42a3ae163b571b67d33ee3b564c2ec9bec1e1f18f0bfab2847513b6dc00b4a5ec38a5bf6bfca8880eb0e1c69a2c8dc4d6c8621a0a846891fb9b3d08b77cce0e5e58be1e3a71be1fa7cede9fda0fe3006cef6856304add7d2c4a1297ad7d22c4b17f02d29510e90911b2192845ed1a19ee763ec60d6c644cc45ef4eac2f65c32118c9400603f9be92dbce3bf3c9fc6360a2046c99b946b46e1fc07b328b7ba5d5a5ef18f4f3fb73586d4ba47d0f7ec71b03675438b207b022442aa8ec2e23f8a55802a9a47ba67bc7ddc95252ed7a8800b5a2171c3eea38b200efbcbf6ddcac5a19ee9f08d0872b8ef3b686ee6d73cad96febc5515721d419e6d0aee8cd5e1be800c27d0e4b78c2b062d37012eb164ee7b1bcd3b2e0855ceeaff97471"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 408.697789ms ago: executing program 0 (id=3971): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="58000000020605000000000000000000040000010500010006000000050005000200000005000400000000000900020073797a31000000000c000780080008400000009011000300686173683a69702c6d61726b000000000105002f6bcdcec324c6a877228ec130ff5378a9b60ab148f1a15bd53da2eeb809b173a201541cc2d18df9d4ceb74f1c44974d88d14cd978c37d1830fc9ddfdce66518804ac5090c191617a40b3d0478fb566b31fee9e6739f"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x35471edb37b5d8c9}, 0x40c0080) r1 = socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c0002800800", @ANYRES64=r4], 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0xc000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080a0}, 0x40800) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000540)=@req={0x28, &(0x7f0000000400)={'geneve1\x00', @ifru_names='team_slave_0\x00'}}) 348.104591ms ago: executing program 4 (id=3972): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r3, 0x0, 0x20000000002) 212.959522ms ago: executing program 2 (id=3973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) 15.037944ms ago: executing program 2 (id=3974): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffffffffffe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRESDEC=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000003700010026bd700004000000010000000c00018006001980bd6caf138a96d2fbaf96bdf59cfdd68cff2917ded68289776a9c1201776ee51aa3d63448de37c9a1a28bfd1b750b8646178ce0261fb51789789d4918135f4c47ea5e84e4de3b6da0d093be9ea99296714b9fda7866bbf88183141ef709865487ec1ab0d921823cedfff202c712afd3eeda3f8f028a804f27e44c1c2a4b05a83b406a"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x2, 0x7}, {0x0, 0x5}, 0x2400000, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@private=0xa010101, 0x8, 0x32}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x10000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe6}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404a045}, 0x20000841) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}}, 0x4000800) 0s ago: executing program 3 (id=3975): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x7f}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001140)={0x5, 0xe, 0xab2a, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000001180)=[{0x0, 0x5, 0xc, 0xd}, {0x2, 0x3, 0xc, 0x1}], 0x10, 0x7}, 0x94) ioctl$FIBMAP(r0, 0x1, &(0x7f0000001280)=0xff) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000012c0)={0x1, 0x4, 0x4, 0x2, 0x9}) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@iter={&(0x7f0000001300)=@map_fd=0x1, 0x10}}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001380)={r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r0, 0x0, 0x50, 0xd8, &(0x7f00000013c0)="2ac71b3d6037baf6c1e8b98688d96f84b89b15d8edb05ec58e97bcb1b6f822dca4e8f1e9700d930aa2693513784d9341edf659c24e476aa773fa034274d22ec414d1c85cfe510f69481e9d49c55545ea", &(0x7f0000001440)=""/216, 0x4, 0x0, 0xdf, 0xe2, &(0x7f0000001540)="9061bbc967484fa151899398b3cab4976a61dec8c569555bb4b8bb3ee60fd5efba8a960edb557c3ab49211bd21b15263c505bed92eac33b8a9347e117fb686d0df4f55a5d01982ef19eca96970f344ce628c8232b58255796f272569b2eeea714663d19bedfcec49fedd9adaa9f89f4982f3c903748b8255be4a2f5e710d3baf2ce4a2a34edee01d8adbe721e0dc80b709d3fdefdaf4ec96cdcab034ad447577e49c14a3dcbfe26300acdb1e1488a04bc9f74be3d3b877581089385e2336e6bd86590ccb9e7fe59a1686cd6b819a3bf91e7c006a1e4124807c849a764d941c", &(0x7f0000001640)="0776388086926b58bf16077aa938123536efd16af5a9407ff537ddfca12050fed32e30362971d2bf7ad32566989309a6607a41373f0a7aacc613a5792c1a72a485d9b0352021aafa8734865a2cd12c47a813ce8df477a696c1be011dd1f1f2d9a8bcd2c86ef9b9363434453e8af755cdf96b8edb3e7268b0d378ce7af3bd6f914926bb3bbfc49cc74c45e62ecbbe21c36f08e4260a96f119ab5e488b3a38d22782bb17a495683cbbbceb010b410704e03ac6a1a75ab0726eb3cd9ada2d2d7a3ce023ee908c17e78eadb3b7a49ee8b0437e80367cda2649ee510f4d84d5a996197554"}, 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000017c0)={0x3, 0x2, 0x1, 0x3d000, 0x6, 0x0, [{0x91, 0xc69, 0x9, '\x00', 0x1}, {0x40, 0x1, 0x4, '\x00', 0x205}, {0xd38, 0x4, 0x5, '\x00', 0x2004}, {0xa, 0x401, 0x7, '\x00', 0x2d0a}, {0x7, 0xffffffffffff6a8f, 0xfffffffffffffffd}, {0x2, 0x9, 0x9, '\x00', 0x30c}]}) close(r1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000001940)={0x3, 0x5, 0x2}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'vcan0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000002b40)={{r2, &(0x7f00000019c0)='\x00', 0x503200, &(0x7f0000001a00)={@_ha_fsid={[0x8, 0x2]}, {0x9, 0x19, 0x1, 0x7}}, 0x78, &(0x7f0000001a40)={@_ha_fsid}, &(0x7f0000001a80)=0x6f27}, 0x1, &(0x7f0000002b00)=[{0x1, 0x5, &(0x7f0000001ac0)='\x00', &(0x7f0000001b00)="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", 0x1000}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002bc0)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x7fffffff, '\x00', r4, r5, 0x0, 0x5}, 0x50) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000002c40)={r6, 0x0, 0xc, 0xec2, 0xa, 0x8, [0x200000002, 0xf3, 0x5, 0x10, 0x0, 0xfffffffffffffff8]}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002cc0)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @remote}}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000002dc0)=0xe8) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000002e00)=0x3) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000002e40), 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000003080)={{r7, &(0x7f0000002e80)='\\\x00', 0x490400, &(0x7f0000002ec0)={@align=0x7fffffff, {0xb05f, 0x4, 0x1, 0x4}}, 0x1ff, &(0x7f0000002f00)={@_ha_fsid}, &(0x7f0000002f40)=0x80}, {[0x403, 0x7fff, 0x5, 0xfffffffb]}, 0x7, 0xe2, &(0x7f0000002f80)=""/226}) syz_emit_ethernet(0xc3, &(0x7f0000003100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@x25={0x805, {0x3, 0x2, 0x13, "2540b340fc28545b786565bd3790eabad5e712325584b9e65b2b0aee707bd1c20f9f0e6195151c9d72ec1ec20dcff1fe58270b56ff8fa45aa1f5bd1de902d02656427e3c97c51ce95dbc07a21f9feac42c589865debc971174c78e808c49bc94d77f2326b552313ce797b876491d2ac9b48f74fdda71cb169ee110aa71f53a9506fbe8bb237e842bd99df9650dd570724cc8ff9a4d316a857dff96998d38808ab31eb80286f3e1bb99fde2a33f3b"}}}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000003200)={0x6, 'nr0\x00', {0x9}, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f0000003240)={0x5, 0x6, 0x0, 0x5, 0x6, [0xfffffffb, 0x774, 0x7, 0x7]}) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000003380)={0x1, 0x3, 0x1000, 0x2, &(0x7f0000003280)="a10b", 0x96, 0x0, &(0x7f00000032c0)="df35bd58d514f38e8f42e6754e5fc4627cbc1aafa06b4099baa9240cb0f48f5474ef7d5cd076f3091684bac482f4bb3275f9ebf84bfe61d97c90046fd9370c208b3703e06298332e0e72a0b91d37b17441dc1acc30127449d849a9214d7fa181e231a8c18ae06a517f70e2783e0b16520687e94ddaafd92d40058d31c5e8151d83a285459ba93963bdca800222c2b1156b00607f79f8"}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003400)) socket$pppoe(0x18, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000003540)={&(0x7f0000003440), 0xc, &(0x7f0000003500)={&(0x7f0000003480)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810) socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): 26] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.527164][T16526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 438.562209][T16526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.586758][T16757] ip6tnl1: entered allmulticast mode [ 438.806296][T16771] IPVS: Unknown mcast interface: macsec0 [ 438.824011][T16771] bridge0: entered allmulticast mode [ 438.852249][T16771] bridge_slave_1: left allmulticast mode [ 438.862255][T16771] bridge_slave_1: left promiscuous mode [ 438.874816][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.935303][T16771] bridge_slave_0: left allmulticast mode [ 438.963394][T16771] bridge_slave_0: left promiscuous mode [ 438.978690][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.130880][T16782] syz.4.2986: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 439.155874][T16782] CPU: 0 UID: 0 PID: 16782 Comm: syz.4.2986 Not tainted syzkaller #0 PREEMPT(full) [ 439.155899][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.155910][T16782] Call Trace: [ 439.155918][T16782] [ 439.155926][T16782] dump_stack_lvl+0xe8/0x150 [ 439.155962][T16782] warn_alloc+0x24c/0x270 [ 439.155987][T16782] ? stack_depot_save_flags+0x33/0x800 [ 439.156011][T16782] ? __pfx_warn_alloc+0x10/0x10 [ 439.156038][T16782] ? kasan_save_track+0x3e/0x80 [ 439.156062][T16782] ? __kasan_kmalloc+0x93/0xb0 [ 439.156088][T16782] ? xsk_setsockopt+0x52a/0x960 [ 439.156109][T16782] ? do_sock_setsockopt+0x17c/0x1b0 [ 439.156136][T16782] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 439.156162][T16782] ? do_syscall_64+0x174/0x580 [ 439.156187][T16782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.156214][T16782] __vmalloc_node_range_noprof+0x12c/0x1730 [ 439.156262][T16782] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 439.156289][T16782] ? __kasan_kmalloc+0x93/0xb0 [ 439.156315][T16782] ? __kmalloc_cache_noprof+0x32d/0x660 [ 439.156340][T16782] ? __kmalloc_cache_noprof+0x150/0x660 [ 439.156367][T16782] vmalloc_user_noprof+0xad/0xe0 [ 439.156390][T16782] ? xskq_create+0xbf/0x170 [ 439.156414][T16782] xskq_create+0xbf/0x170 [ 439.156441][T16782] xsk_init_queue+0x8a/0xe0 [ 439.156467][T16782] xsk_setsockopt+0x52a/0x960 [ 439.156488][T16782] ? __fget_files+0x2a/0x420 [ 439.156514][T16782] ? __pfx_xsk_setsockopt+0x10/0x10 [ 439.156537][T16782] ? __pfx_aa_sk_perm+0x10/0x10 [ 439.156570][T16782] ? aa_sock_opt_perm+0xff/0x1a0 [ 439.156592][T16782] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 439.156611][T16782] ? __pfx_xsk_setsockopt+0x10/0x10 [ 439.156635][T16782] do_sock_setsockopt+0x17c/0x1b0 [ 439.156667][T16782] __x64_sys_setsockopt+0x13d/0x1b0 [ 439.156697][T16782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.156718][T16782] do_syscall_64+0x174/0x580 [ 439.156743][T16782] ? trace_irq_disable+0x3b/0x140 [ 439.156779][T16782] ? clear_bhb_loop+0x40/0x90 [ 439.156804][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.156824][T16782] RIP: 0033:0x7f36af19de59 [ 439.156844][T16782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.156861][T16782] RSP: 002b:00007f36b0133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 439.156882][T16782] RAX: ffffffffffffffda RBX: 00007f36af425fa0 RCX: 00007f36af19de59 [ 439.156896][T16782] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 439.156909][T16782] RBP: 00007f36af233e6f R08: 0000000000000004 R09: 0000000000000000 [ 439.156921][T16782] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.156934][T16782] R13: 00007f36af426038 R14: 00007f36af425fa0 R15: 00007ffc755c2498 [ 439.156966][T16782] [ 439.157073][T16782] Mem-Info: [ 439.178173][T16526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.181449][T16782] active_anon:6622 inactive_anon:3 isolated_anon:0 [ 439.181449][T16782] active_file:0 inactive_file:43690 isolated_file:0 [ 439.181449][T16782] unevictable:768 dirty:262 writeback:0 [ 439.181449][T16782] slab_reclaimable:11582 slab_unreclaimable:109457 [ 439.181449][T16782] mapped:30814 shmem:1296 pagetables:1476 [ 439.181449][T16782] sec_pagetables:0 bounce:0 [ 439.181449][T16782] kernel_misc_reclaimable:0 [ 439.181449][T16782] free:1307529 free_pcp:10200 free_cma:0 [ 439.247201][T16526] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.254676][T16782] Node 0 active_anon:26488kB inactive_anon:12kB active_file:0kB inactive_file:174564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123256kB dirty:1044kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17344kB pagetables:5780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 439.285220][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.290915][T16782] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 439.292546][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.297078][T16782] Node 0 [ 439.343285][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.347791][ T4938] Bluetooth: hci5: command tx timeout [ 439.350609][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.355774][T16782] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.431932][ T9118] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.434580][T16782] lowmem_reserve[]: [ 439.454969][ T9118] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.495211][T16782] 0 [ 439.509083][ T5630] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.541405][T16782] 2489 2489 2489 2489 [ 439.677037][T16782] Node 0 DMA32 free:1273788kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26388kB inactive_anon:12kB active_file:0kB inactive_file:174564kB unevictable:1536kB writepending:1044kB zspages:0kB present:3129332kB managed:2548816kB mlocked:0kB bounce:0kB free_pcp:40864kB local_pcp:21220kB free_cma:0kB [ 439.716003][T16782] lowmem_reserve[]: 0 0 0 0 0 [ 439.725536][T16782] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.755678][T16782] lowmem_reserve[]: 0 0 0 0 0 [ 439.761135][T16782] Node 1 Normal free:3940968kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 439.795393][T16782] lowmem_reserve[]: 0 0 0 0 0 [ 439.801101][T16782] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 439.815495][T16782] Node 0 DMA32: 1051*4kB (ME) 306*8kB (UME) 172*16kB (UME) 211*32kB (UM) 224*64kB (UME) 118*128kB (UME) 52*256kB (UM) 23*512kB (UME) 15*1024kB (UM) 8*2048kB (UM) 286*4096kB (UM) = 1273884kB [ 439.835890][T16782] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 439.849645][T16782] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3940968kB [ 439.866491][T16782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.877146][T16782] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.887149][T16782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.898113][T16782] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.908637][T16782] 44982 total pagecache pages [ 439.914045][T16782] 0 pages in swap cache [ 439.918273][T16782] Free swap = 124996kB [ 439.923309][T16782] Total swap = 124996kB [ 439.927513][T16782] 2097051 pages RAM [ 439.932419][T16782] 0 pages HighMem/MovableOnly [ 439.937257][T16782] 428165 pages reserved [ 439.942413][T16782] 0 pages cma reserved [ 440.012432][T16792] veth5: entered allmulticast mode [ 440.026944][T16792] bond20: (slave veth5): Enslaving as an active interface with an up link [ 440.123128][ T5630] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 440.294688][T16808] netlink: 'syz.1.2992': attribute type 13 has an invalid length. [ 440.373170][T11641] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 440.388603][T16816] __nla_validate_parse: 10 callbacks suppressed [ 440.388621][T16816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2995'. [ 440.501785][T16821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'. [ 440.555677][T16791] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 440.835613][T16841] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3001'. [ 440.874220][T16843] netlink: 'syz.4.3002': attribute type 13 has an invalid length. [ 440.950762][ T7847] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 441.017148][T16526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.186557][T16526] veth0_vlan: entered promiscuous mode [ 441.215281][T16526] veth1_vlan: entered promiscuous mode [ 441.223161][T16855] openvswitch: netlink: Actions may not be safe on all matching packets [ 441.300385][T16526] veth0_macvtap: entered promiscuous mode [ 441.337380][T16526] veth1_macvtap: entered promiscuous mode [ 441.363994][T16526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.387521][T16526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.409581][ T4938] Bluetooth: hci5: command tx timeout [ 441.425168][ T1177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.454607][ T1177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.488519][ T1177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.507214][ T1177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.893929][T11639] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 441.988521][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.012795][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.096182][ T9131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.115484][ T9131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.181896][T16880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3012'. [ 442.717933][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 442.738527][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 442.749540][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 442.763444][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 442.780560][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.023836][T16908] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3020'. [ 443.662595][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3025'. [ 443.695036][T16931] netlink: 'syz.2.3026': attribute type 4 has an invalid length. [ 443.786050][T16896] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 443.809223][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.814367][T16896] lo speed is unknown, defaulting to 1000 [ 443.841640][T16896] lo speed is unknown, defaulting to 1000 [ 444.054292][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.548044][T16958] tipc: Started in network mode [ 444.566637][T16958] tipc: Node identity 3ac34719becc, cluster identity 4711 [ 444.583696][T16958] tipc: Enabled bearer , priority 0 [ 444.625462][T16959] syzkaller0: entered promiscuous mode [ 444.653499][T16959] syzkaller0: entered allmulticast mode [ 444.746498][T16959] tipc: Resetting bearer [ 444.794488][T16959] tipc: Disabling bearer [ 444.855264][ T4938] Bluetooth: hci3: command tx timeout [ 444.947202][T16975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3037'. [ 444.964972][T16972] openvswitch: netlink: Actions may not be safe on all matching packets [ 445.106578][T16896] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.115331][T16896] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.124045][T16896] bridge_slave_0: entered allmulticast mode [ 445.132745][T16896] bridge_slave_0: entered promiscuous mode [ 445.142309][T16896] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.150151][T16896] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.157451][T16896] bridge_slave_1: entered allmulticast mode [ 445.166278][T16896] bridge_slave_1: entered promiscuous mode [ 445.420001][T16896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.447913][T16896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.607602][T16896] team0: Port device team_slave_0 added [ 445.632610][T16896] team0: Port device team_slave_1 added [ 445.718307][T16896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.738042][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.770507][T16896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.794327][T16896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.814275][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.843910][T16896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.868085][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 445.965301][T16896] hsr_slave_0: entered promiscuous mode [ 446.035194][T16896] hsr_slave_1: entered promiscuous mode [ 446.052847][T16896] debugfs: 'hsr0' already exists in 'hsr' [ 446.058751][T16896] Cannot create hsr debugfs directory [ 446.287818][T17012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3048'. [ 446.323983][T17013] gretap1: entered allmulticast mode [ 446.360796][T17012] bond14: Unable to set down delay as MII monitoring is disabled [ 446.370434][T17012] bond14 (unregistering): Released all slaves [ 446.510865][T17015] syzkaller0: entered promiscuous mode [ 446.528737][T17015] syzkaller0: entered allmulticast mode [ 446.544124][T17015] tipc: Enabled bearer , priority 0 [ 446.552505][T17025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3050'. [ 446.583459][T17024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3051'. [ 446.593922][T17024] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 446.663458][T17018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3049'. [ 446.663505][T17015] tipc: Resetting bearer [ 446.756787][T17027] tipc: Enabled bearer , priority 0 [ 446.768092][T17014] tipc: Resetting bearer [ 446.816607][T17014] tipc: Disabling bearer [ 446.860685][T17027] tipc: Resetting bearer [ 446.916722][T17026] tipc: Disabling bearer [ 446.931057][ T4938] Bluetooth: hci3: command tx timeout [ 446.962955][T17039] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 447.003566][T16896] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 447.014022][T16896] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 447.028728][T16896] bridge0: port 1(netdevsim1) entered disabled state [ 447.198712][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 447.292128][T17054] 8021q: adding VLAN 0 to HW filter on device bond14 [ 447.583960][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 447.608590][T17065] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 447.631383][T17065] lo speed is unknown, defaulting to 1000 [ 447.656539][T17065] lo speed is unknown, defaulting to 1000 [ 447.754816][T16896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 447.783382][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.821786][T16896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 447.895812][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.922361][T16896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.942017][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.964731][T16896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 448.027621][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.294297][T17088] netlink: 'syz.3.3068': attribute type 13 has an invalid length. [ 448.923679][T17112] nbd: socks must be embedded in a SOCK_ITEM attr [ 449.009603][ T4938] Bluetooth: hci3: command tx timeout [ 449.022229][T17116] FAULT_INJECTION: forcing a failure. [ 449.022229][T17116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.052825][T17116] CPU: 1 UID: 0 PID: 17116 Comm: syz.4.3074 Not tainted syzkaller #0 PREEMPT(full) [ 449.052851][T17116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.052860][T17116] Call Trace: [ 449.052867][T17116] [ 449.052875][T17116] dump_stack_lvl+0xe8/0x150 [ 449.052909][T17116] should_fail_ex+0x40c/0x560 [ 449.052936][T17116] _copy_from_user+0x2d/0xb0 [ 449.052965][T17116] generic_map_update_batch+0x651/0x9a0 [ 449.052995][T17116] ? __pfx_generic_map_update_batch+0x10/0x10 [ 449.053015][T17116] ? __fget_files+0x2a/0x420 [ 449.053046][T17116] ? __pfx_generic_map_update_batch+0x10/0x10 [ 449.053065][T17116] bpf_map_do_batch+0x391/0x630 [ 449.053097][T17116] __sys_bpf+0xbe5/0xd90 [ 449.053129][T17116] ? __pfx___sys_bpf+0x10/0x10 [ 449.053164][T17116] ? __fget_files+0x2a/0x420 [ 449.053203][T17116] ? ksys_write+0x242/0x270 [ 449.053234][T17116] ? __pfx_ksys_write+0x10/0x10 [ 449.053266][T17116] __x64_sys_bpf+0xba/0xd0 [ 449.053288][T17116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.053309][T17116] do_syscall_64+0x174/0x580 [ 449.053334][T17116] ? trace_irq_disable+0x3b/0x140 [ 449.053364][T17116] ? clear_bhb_loop+0x40/0x90 [ 449.053388][T17116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.053406][T17116] RIP: 0033:0x7f36af19de59 [ 449.053425][T17116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.053442][T17116] RSP: 002b:00007f36b0112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.053462][T17116] RAX: ffffffffffffffda RBX: 00007f36af426090 RCX: 00007f36af19de59 [ 449.053476][T17116] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 449.053488][T17116] RBP: 00007f36b0112090 R08: 0000000000000000 R09: 0000000000000000 [ 449.053500][T17116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.053511][T17116] R13: 00007f36af426128 R14: 00007f36af426090 R15: 00007ffc755c2498 [ 449.053542][T17116] [ 449.263052][T16896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.307577][T16896] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.358438][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.365719][ T9118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.408583][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.416000][ T9118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.524373][T17122] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 449.603987][T17122] 8021q: adding VLAN 0 to HW filter on device bond21 [ 449.823637][T17138] syzkaller0: entered promiscuous mode [ 449.869408][T17138] syzkaller0: entered allmulticast mode [ 449.894129][T17137] sit0: mtu less than device minimum [ 449.933214][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3081'. [ 449.978251][T17145] 8021q: adding VLAN 0 to HW filter on device bond23 [ 450.045403][T17145] bond17: (slave bridge0): Releasing backup interface [ 450.101347][T17145] bond23: (slave bridge0): Enslaving as an active interface with an up link [ 450.116242][T17156] FAULT_INJECTION: forcing a failure. [ 450.116242][T17156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.122554][T17146] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 450.134622][T17156] CPU: 0 UID: 0 PID: 17156 Comm: syz.1.3083 Not tainted syzkaller #0 PREEMPT(full) [ 450.134650][T17156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.134661][T17156] Call Trace: [ 450.134669][T17156] [ 450.134676][T17156] dump_stack_lvl+0xe8/0x150 [ 450.134709][T17156] should_fail_ex+0x40c/0x560 [ 450.134734][T17156] _copy_from_user+0x2d/0xb0 [ 450.134761][T17156] ___sys_sendmsg+0x1c6/0x360 [ 450.134787][T17156] ? __lock_acquire+0x683/0x2cf0 [ 450.134818][T17156] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.134876][T17156] ? __fget_files+0x2a/0x420 [ 450.134898][T17156] ? __fget_files+0x3a2/0x420 [ 450.134929][T17156] __x64_sys_sendmsg+0x1b1/0x290 [ 450.134958][T17156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.135001][T17156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.135021][T17156] do_syscall_64+0x174/0x580 [ 450.135045][T17156] ? trace_irq_disable+0x3b/0x140 [ 450.135067][T17156] ? clear_bhb_loop+0x40/0x90 [ 450.135088][T17156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.135107][T17156] RIP: 0033:0x7f8760b9de59 [ 450.135124][T17156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.135140][T17156] RSP: 002b:00007f8761af6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.135160][T17156] RAX: ffffffffffffffda RBX: 00007f8760e25fa0 RCX: 00007f8760b9de59 [ 450.135174][T17156] RDX: 00000000040040c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 450.135186][T17156] RBP: 00007f8761af6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.135197][T17156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.135215][T17156] R13: 00007f8760e26038 R14: 00007f8760e25fa0 R15: 00007ffd4d7cd058 [ 450.135244][T17156] [ 450.334680][T17146] lo speed is unknown, defaulting to 1000 [ 450.345498][T17159] FAULT_INJECTION: forcing a failure. [ 450.345498][T17159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.371251][T17146] lo speed is unknown, defaulting to 1000 [ 450.439934][T17159] CPU: 1 UID: 0 PID: 17159 Comm: syz.1.3084 Not tainted syzkaller #0 PREEMPT(full) [ 450.439960][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.439971][T17159] Call Trace: [ 450.439979][T17159] [ 450.439987][T17159] dump_stack_lvl+0xe8/0x150 [ 450.440020][T17159] should_fail_ex+0x40c/0x560 [ 450.440047][T17159] _copy_from_user+0x2d/0xb0 [ 450.440074][T17159] generic_map_update_batch+0x6a3/0x9a0 [ 450.440102][T17159] ? __pfx_generic_map_update_batch+0x10/0x10 [ 450.440121][T17159] ? __fget_files+0x2a/0x420 [ 450.440151][T17159] ? __pfx_generic_map_update_batch+0x10/0x10 [ 450.440169][T17159] bpf_map_do_batch+0x391/0x630 [ 450.440199][T17159] __sys_bpf+0xbe5/0xd90 [ 450.440230][T17159] ? __pfx___sys_bpf+0x10/0x10 [ 450.440264][T17159] ? __fget_files+0x2a/0x420 [ 450.440303][T17159] ? ksys_write+0x242/0x270 [ 450.440331][T17159] ? __pfx_ksys_write+0x10/0x10 [ 450.440356][T17159] __x64_sys_bpf+0xba/0xd0 [ 450.440380][T17159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.440399][T17159] do_syscall_64+0x174/0x580 [ 450.440421][T17159] ? trace_irq_disable+0x3b/0x140 [ 450.440443][T17159] ? clear_bhb_loop+0x40/0x90 [ 450.440464][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.440482][T17159] RIP: 0033:0x7f8760b9de59 [ 450.440501][T17159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.440516][T17159] RSP: 002b:00007f8761ad5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 450.440536][T17159] RAX: ffffffffffffffda RBX: 00007f8760e26090 RCX: 00007f8760b9de59 [ 450.440550][T17159] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 450.440561][T17159] RBP: 00007f8761ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 450.440571][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.440580][T17159] R13: 00007f8760e26128 R14: 00007f8760e26090 R15: 00007ffd4d7cd058 [ 450.440615][T17159] [ 451.055142][T17172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3087'. [ 451.066036][T17172] tipc: Invalid UDP bearer configuration [ 451.066092][T17172] tipc: Enabling of bearer rejected, failed to enable media [ 451.094352][ T4938] Bluetooth: hci3: command tx timeout [ 451.346848][T16896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.515961][T16896] veth0_vlan: entered promiscuous mode [ 451.552288][T16896] veth1_vlan: entered promiscuous mode [ 451.637047][T16896] veth0_macvtap: entered promiscuous mode [ 451.682974][T16896] veth1_macvtap: entered promiscuous mode [ 451.741816][T16896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.777143][T16896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.827259][ T9148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.866919][ T9148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.918369][ T9148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.948360][ T9148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.182386][ T9118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.207830][ T9118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.304000][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.330751][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.369277][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 452.996023][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.008278][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.024474][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.039703][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.055950][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 453.214872][T17249] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 453.807171][T17246] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 453.870845][T17246] lo speed is unknown, defaulting to 1000 [ 453.886952][T17246] lo speed is unknown, defaulting to 1000 [ 454.978755][T17246] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.987427][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.995618][T17246] bridge_slave_0: entered allmulticast mode [ 455.004448][T17246] bridge_slave_0: entered promiscuous mode [ 455.019979][T17246] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.027347][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.035576][T17246] bridge_slave_1: entered allmulticast mode [ 455.046480][T17246] bridge_slave_1: entered promiscuous mode [ 455.050279][T17320] netlink: 'syz.1.3125': attribute type 13 has an invalid length. [ 455.105524][ T30] audit: type=1804 audit(1783623745.994:16): pid=17322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3131" name="/newroot/33/cgroup.controllers" dev="tmpfs" ino=184 res=1 errno=0 [ 455.169937][ T4938] Bluetooth: hci1: command tx timeout [ 455.177719][T17327] openvswitch: netlink: Actions may not be safe on all matching packets [ 455.181626][ T30] audit: type=1800 audit(1783623746.024:17): pid=17322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3131" name="cgroup.controllers" dev="tmpfs" ino=184 res=0 errno=0 [ 455.537590][T17342] Bluetooth: MGMT ver 1.23 [ 455.662474][T17246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.676180][T17342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3135'. [ 455.715956][T17246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.850713][T17246] team0: Port device team_slave_0 added [ 455.872470][T17246] team0: Port device team_slave_1 added [ 455.980260][T17246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.998396][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.048961][T17246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.082312][T17246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.090105][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.149929][T17246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.176781][T17363] syzkaller0: entered promiscuous mode [ 456.191559][T17363] syzkaller0: entered allmulticast mode [ 456.271556][ T30] audit: type=1804 audit(1783623747.164:18): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3142" name="/newroot/8/cgroup.controllers" dev="tmpfs" ino=60 res=1 errno=0 [ 456.294552][ T30] audit: type=1800 audit(1783623747.164:19): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3142" name="cgroup.controllers" dev="tmpfs" ino=60 res=0 errno=0 [ 456.341389][T17369] tipc: Enabling of bearer rejected, failed to enable media [ 456.362579][T17246] hsr_slave_0: entered promiscuous mode [ 456.372050][T17246] hsr_slave_1: entered promiscuous mode [ 456.378748][T17246] debugfs: 'hsr0' already exists in 'hsr' [ 456.384964][T17246] Cannot create hsr debugfs directory [ 456.664664][T17383] openvswitch: netlink: Actions may not be safe on all matching packets [ 456.806147][T17246] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.836570][T17246] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.253270][ T4938] Bluetooth: hci1: command tx timeout [ 457.287587][T17416] netlink: 'syz.2.3153': attribute type 1 has an invalid length. [ 457.322312][T17416] 8021q: adding VLAN 0 to HW filter on device bond15 [ 457.354690][T17246] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.380028][T17246] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.404917][T17416] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 457.431854][T17419] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 457.442934][T17419] bond1 (unregistering): Released all slaves [ 457.496707][T17246] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.510186][T17246] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.603959][T17246] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.630978][T17246] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.307068][T17246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 458.342118][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.365781][T17246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 458.395387][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.418584][T17246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 458.445349][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.472011][T17246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.495877][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.507718][T17450] openvswitch: netlink: Actions may not be safe on all matching packets [ 458.606317][T17440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.716615][T17246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.786479][T17246] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.825715][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3166'. [ 458.841988][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.849372][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.850661][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3168'. [ 458.907248][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.914511][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.129644][T17482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3169'. [ 459.329437][ T4938] Bluetooth: hci1: command tx timeout [ 460.079875][T17519] openvswitch: netlink: Actions may not be safe on all matching packets [ 460.111227][T17522] netlink: 'syz.0.3180': attribute type 1 has an invalid length. [ 460.152379][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'. [ 460.183560][T17246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.209232][T17524] netlink: 'syz.1.3181': attribute type 1 has an invalid length. [ 460.237912][T17524] netlink: 'syz.1.3181': attribute type 2 has an invalid length. [ 460.604413][T17534] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.674081][T17543] team0: entered promiscuous mode [ 460.694193][T17543] team_slave_0: entered promiscuous mode [ 460.702104][T17543] team_slave_1: entered promiscuous mode [ 460.713995][T17543] team0: entered allmulticast mode [ 460.730340][T17543] team_slave_0: entered allmulticast mode [ 460.754327][T17543] team_slave_1: entered allmulticast mode [ 460.794734][T17549] netlink: 'syz.2.3187': attribute type 12 has an invalid length. [ 461.184841][T17246] veth0_vlan: entered promiscuous mode [ 461.251389][T17246] veth1_vlan: entered promiscuous mode [ 461.322320][T17573] netlink: 'syz.0.3193': attribute type 210 has an invalid length. [ 461.347793][T17246] veth0_macvtap: entered promiscuous mode [ 461.382464][T17246] veth1_macvtap: entered promiscuous mode [ 461.409555][ T4938] Bluetooth: hci1: command tx timeout [ 461.468536][T17246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.503434][T17246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.527928][ T9118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.560855][ T9118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.611903][ T9118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.640547][ T9118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.006106][ T9131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.036755][ T9131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.313175][T17592] netlink: 'syz.3.3196': attribute type 1 has an invalid length. [ 462.327556][T17592] netlink: 'syz.3.3196': attribute type 2 has an invalid length. [ 462.373115][ T9131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.391737][ T9131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.417043][ T5283] netdevsim netdevsim3 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 462.458816][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.501266][T17601] netlink: 'syz.1.3197': attribute type 1 has an invalid length. [ 462.506118][T17598] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 462.586613][T17598] lo speed is unknown, defaulting to 1000 [ 462.596263][T17602] bond22: entered promiscuous mode [ 462.601907][T17602] bond22: entered allmulticast mode [ 462.610928][T17602] 8021q: adding VLAN 0 to HW filter on device bond22 [ 462.656444][T17598] lo speed is unknown, defaulting to 1000 [ 462.787532][T17601] bridge0: entered promiscuous mode [ 462.811420][T17601] bridge0: entered allmulticast mode [ 462.824153][ T757] bond22: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 462.868690][T17614] netlink: 'syz.4.3106': attribute type 13 has an invalid length. [ 462.895195][T17601] bond22: (slave bridge0): Enslaving as an active interface with an up link [ 462.971267][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3106'. [ 463.020955][ T757] bond22: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 463.247614][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 463.264468][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 463.280935][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 463.282439][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3198'. [ 463.302138][T17606] bridge4: entered promiscuous mode [ 463.312311][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 463.322675][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 463.336701][T17606] bridge4: entered allmulticast mode [ 463.360400][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3198'. [ 463.379853][T17606] bond22: (slave bridge4): Enslaving as a backup interface with a down link [ 463.834626][ T5624] syz_tun (unregistering): left allmulticast mode [ 463.852115][ T5624] syz_tun (unregistering): left promiscuous mode [ 463.869163][ T5624] bridge0: port 1(syz_tun) entered disabled state [ 463.905117][ T7847] IPVS: starting estimator thread 0... [ 463.928867][T17636] bridge0: port 1(dummy0) entered blocking state [ 463.956519][T17641] netlink: 'syz.4.3204': attribute type 1 has an invalid length. [ 463.961579][T17636] bridge0: port 1(dummy0) entered disabled state [ 463.992257][T17636] dummy0: entered allmulticast mode [ 464.000742][T17638] IPVS: using max 36 ests per chain, 86400 per kthread [ 464.004070][T17636] dummy0: entered promiscuous mode [ 464.474673][T17620] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 464.488710][T17620] lo speed is unknown, defaulting to 1000 [ 464.497892][T17620] lo speed is unknown, defaulting to 1000 [ 464.588003][T17665] tipc: Enabled bearer , priority 0 [ 464.602420][T17665] syzkaller0: entered promiscuous mode [ 464.621680][T17665] syzkaller0: entered allmulticast mode [ 464.632198][T17665] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 464.712431][T17665] tipc: Resetting bearer [ 464.723725][T17669] tipc: Enabled bearer , priority 0 [ 464.781290][T17669] syzkaller0: entered promiscuous mode [ 464.787647][T17669] syzkaller0: entered allmulticast mode [ 464.796907][T17669] tipc: Resetting bearer [ 464.805033][T17664] tipc: Resetting bearer [ 464.869687][T17664] tipc: Disabling bearer [ 465.157358][T17681] netlink: 'syz.3.3213': attribute type 13 has an invalid length. [ 465.240478][ T9151] tipc: Resetting bearer [ 465.327064][ T809] IPVS: starting estimator thread 0... [ 465.357087][T17668] tipc: Resetting bearer [ 465.425932][ T4938] Bluetooth: hci4: command tx timeout [ 465.445910][T17687] IPVS: using max 40 ests per chain, 96000 per kthread [ 467.500069][ T4938] Bluetooth: hci4: command tx timeout [ 467.781458][T17668] tipc: Disabling bearer [ 467.799073][T17690] bond0: (slave bond_slave_1): Releasing backup interface [ 468.077130][T17703] x_tables: duplicate underflow at hook 3 [ 468.122453][T17703] batadv_slave_0: Caught tx_queue_len zero misconfig [ 468.367349][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3220'. [ 468.375069][T17620] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.384188][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 468.394467][T17620] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.402668][T17620] bridge_slave_0: entered allmulticast mode [ 468.412057][T17620] bridge_slave_0: entered promiscuous mode [ 468.471724][T17713] 8021q: adding VLAN 0 to HW filter on device bond23 [ 468.499773][T17620] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.520764][T17620] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.535670][T17620] bridge_slave_1: entered allmulticast mode [ 468.551968][T17620] bridge_slave_1: entered promiscuous mode [ 468.564461][T17715] erspan0: entered promiscuous mode [ 468.570095][T17715] erspan0: entered allmulticast mode [ 468.721343][T17620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.762269][T17620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.847519][T17620] team0: Port device team_slave_0 added [ 468.959877][T17620] team0: Port device team_slave_1 added [ 469.076382][T17620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.104525][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.142811][T17620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.168281][T17620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.190669][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.257969][T17620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.291235][T17744] geneve1: Caught tx_queue_len zero misconfig [ 469.374600][T17620] hsr_slave_0: entered promiscuous mode [ 469.396918][T17620] hsr_slave_1: entered promiscuous mode [ 469.413089][T17620] debugfs: 'hsr0' already exists in 'hsr' [ 469.422534][T17620] Cannot create hsr debugfs directory [ 469.436793][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3233'. [ 469.465299][T17753] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 469.519608][T17754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.564304][T17758] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.572003][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.590378][ T4938] Bluetooth: hci4: command tx timeout [ 469.602200][T17758] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.609579][T17758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.617527][T17758] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.624766][T17758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.732010][T17758] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 470.235549][T17791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3238'. [ 470.305101][T17791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3238'. [ 470.435777][T17620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.473653][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3242'. [ 470.616350][T17620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.772953][T17819] netlink: 'syz.0.3248': attribute type 1 has an invalid length. [ 470.784238][T17620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.787594][T17819] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3248'. [ 470.836079][T17819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3248'. [ 470.888450][T17825] openvswitch: netlink: Actions may not be safe on all matching packets [ 470.906919][T17819] erspan0: entered promiscuous mode [ 470.923306][T17819] vlan2: entered promiscuous mode [ 471.157795][T17620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.181789][T17830] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 471.281007][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 471.292269][T17830] bond24: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 471.334628][T17830] bond24 (unregistering): Released all slaves [ 471.482326][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'. [ 471.536454][T17842] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 471.601232][T17842] lo speed is unknown, defaulting to 1000 [ 471.651136][ T4938] Bluetooth: hci4: command tx timeout [ 471.806369][T17855] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 471.812974][T17842] lo speed is unknown, defaulting to 1000 [ 471.855476][T17867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'. [ 472.054375][T17867] bond24: Unable to set down delay as MII monitoring is disabled [ 472.085028][T17867] bond24 (unregistering): Released all slaves [ 472.116893][T17879] openvswitch: netlink: Actions may not be safe on all matching packets [ 472.667519][T17620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 472.698165][T17620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.723842][T17620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 472.743052][T17620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.778619][T17620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 472.789999][T17893] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 472.806188][T17620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.833417][T17893] 8021q: adding VLAN 0 to HW filter on device bond24 [ 472.844525][T17620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 472.872321][T17620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.902250][T17893] macvlan2: entered promiscuous mode [ 472.907630][T17893] macvlan2: entered allmulticast mode [ 472.931436][T17893] bond24: entered promiscuous mode [ 472.942245][T17899] netlink: 'syz.4.3269': attribute type 1 has an invalid length. [ 472.949675][T17893] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 472.976114][T17893] bond24: left promiscuous mode [ 473.106394][T17899] bond1: entered promiscuous mode [ 473.112107][T17899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.144839][T17900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.155736][T17900] bond1: (slave bond2): making interface the new active one [ 473.163958][T17900] bond2: entered promiscuous mode [ 473.174310][T17900] bond1: (slave bond2): Enslaving as an active interface with an up link [ 473.197096][T17911] netlink: 'syz.1.3270': attribute type 13 has an invalid length. [ 473.310273][T17620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.387040][T17620] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.460926][T17917] __nla_validate_parse: 2 callbacks suppressed [ 473.460946][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3271'. [ 473.608170][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.615391][ T9131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.653272][ T9146] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.660591][ T9146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.906722][T17926] netlink: 'syz.1.3274': attribute type 13 has an invalid length. [ 473.994094][T17933] openvswitch: netlink: Actions may not be safe on all matching packets [ 474.304431][T17946] netlink: 'syz.4.3278': attribute type 3 has an invalid length. [ 474.320271][T17946] netlink: 'syz.4.3278': attribute type 16 has an invalid length. [ 474.340341][T17946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3278'. [ 474.563520][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3279'. [ 474.678329][T17950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.727690][T17957] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.735225][T17957] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.751841][T17957] bond1: (slave bridge0): Releasing backup interface [ 474.763877][T17957] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.771123][T17957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.778662][T17957] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.785888][T17957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.823217][T17957] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 474.875931][T17620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.193117][T17983] netlink: 'syz.1.3286': attribute type 1 has an invalid length. [ 475.327915][T17620] veth0_vlan: entered promiscuous mode [ 475.352196][T17982] bond25: (slave geneve4): making interface the new active one [ 475.361046][T17982] bond25: (slave geneve4): Enslaving as an active interface with an up link [ 475.405000][T17991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.450420][ T757] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 475.487356][ T757] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 475.513516][T17999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3289'. [ 475.534957][ T757] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 475.555338][T17620] veth1_vlan: entered promiscuous mode [ 475.573271][ T757] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 475.608708][T17985] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3285'. [ 475.703169][T17620] veth0_macvtap: entered promiscuous mode [ 475.754225][T17620] veth1_macvtap: entered promiscuous mode [ 475.804905][T17620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.846477][T17620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.886392][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.928368][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.938452][T18014] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 475.979345][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.016372][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.284058][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.318553][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.373051][T18036] FAULT_INJECTION: forcing a failure. [ 476.373051][T18036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.415103][T18036] CPU: 1 UID: 0 PID: 18036 Comm: syz.3.3296 Not tainted syzkaller #0 PREEMPT(full) [ 476.415129][T18036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.415140][T18036] Call Trace: [ 476.415148][T18036] [ 476.415156][T18036] dump_stack_lvl+0xe8/0x150 [ 476.415189][T18036] should_fail_ex+0x40c/0x560 [ 476.415215][T18036] _copy_from_user+0x2d/0xb0 [ 476.415242][T18036] __sys_bpf+0x2e7/0xd90 [ 476.415272][T18036] ? __pfx___sys_bpf+0x10/0x10 [ 476.415305][T18036] ? __fget_files+0x2a/0x420 [ 476.415345][T18036] ? ksys_write+0x242/0x270 [ 476.415374][T18036] ? __pfx_ksys_write+0x10/0x10 [ 476.415406][T18036] __x64_sys_bpf+0xba/0xd0 [ 476.415428][T18036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.415448][T18036] do_syscall_64+0x174/0x580 [ 476.415472][T18036] ? trace_irq_disable+0x3b/0x140 [ 476.415500][T18036] ? clear_bhb_loop+0x40/0x90 [ 476.415523][T18036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.415542][T18036] RIP: 0033:0x7f742719de59 [ 476.415560][T18036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.415577][T18036] RSP: 002b:00007f7427fad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 476.415597][T18036] RAX: ffffffffffffffda RBX: 00007f7427425fa0 RCX: 00007f742719de59 [ 476.415610][T18036] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 476.415622][T18036] RBP: 00007f7427fad090 R08: 0000000000000000 R09: 0000000000000000 [ 476.415634][T18036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.415645][T18036] R13: 00007f7427426038 R14: 00007f7427425fa0 R15: 00007fff7a9d3f08 [ 476.415675][T18036] [ 476.445326][ T9148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.697039][ T9148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.739948][T18046] erspan0: entered allmulticast mode [ 476.742833][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 476.757827][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 476.788994][ T30] audit: type=1800 audit(1783623767.674:20): pid=18050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3301" name="memory.events" dev="tmpfs" ino=414 res=0 errno=0 [ 476.821472][T18052] bridge_slave_1: left allmulticast mode [ 476.836479][T18052] bridge_slave_1: left promiscuous mode [ 476.857950][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 476.878498][T18052] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.879032][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 476.914528][T18052] bridge_slave_0: left allmulticast mode [ 476.921162][T18052] bridge_slave_0: left promiscuous mode [ 476.930750][T18052] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.083041][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 477.220651][T18063] kthread_run failed with err -4 [ 477.268431][T18075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.783940][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 477.802426][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 477.818330][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 477.833069][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 477.842525][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 477.921569][T18108] syzkaller0: entered promiscuous mode [ 477.980046][T18108] syzkaller0: entered allmulticast mode [ 478.197636][T18115] tipc: Started in network mode [ 478.224575][T18115] tipc: Node identity f2c497ecb467, cluster identity 4711 [ 478.282522][T18115] tipc: Enabled bearer , priority 0 [ 478.335145][T18125] erspan0: entered promiscuous mode [ 478.385604][T18125] erspan0: entered allmulticast mode [ 478.398608][T18106] tipc: Resetting bearer [ 478.450332][T18106] tipc: Disabling bearer [ 478.482782][T18128] tipc: Enabled bearer , priority 10 [ 478.502396][T18133] __nla_validate_parse: 2 callbacks suppressed [ 478.502413][T18133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3316'. [ 478.575277][T18135] bond3 (unregistering): Released all slaves [ 478.647495][T18129] tipc: Enabling of bearer rejected, already enabled [ 478.836923][ T9148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 478.893095][T18155] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3321'. [ 479.016913][T18149] bond1 (unregistering): Released all slaves [ 479.066832][T18171] nicvf0: tun_chr_ioctl cmd 2148553947 [ 479.124044][T18175] syz.4.3324 (18175) used obsolete PPPIOCDETACH ioctl [ 479.165382][ T9148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 479.234530][T18102] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 479.331830][ T9148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 479.371175][T18102] lo speed is unknown, defaulting to 1000 [ 479.387440][T18102] lo speed is unknown, defaulting to 1000 [ 479.503309][ T9148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 479.621591][T18177] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3325'. [ 479.645917][ T7847] tipc: Node number set to 2215593753 [ 479.664144][T18180] tipc: Enabling of bearer rejected, failed to enable media [ 479.971393][ T5631] Bluetooth: hci0: command tx timeout [ 480.016723][T18190] siw: device registration error -23 [ 480.406838][ T9148] dummy0: left allmulticast mode [ 480.437285][ T9148] dummy0: left promiscuous mode [ 480.455491][T18219] sctp: [Deprecated]: syz.4.3334 (pid 18219) Use of int in max_burst socket option. [ 480.455491][T18219] Use struct sctp_assoc_value instead [ 480.463640][ T9148] bridge0: port 1(dummy0) entered disabled state [ 480.664858][T18227] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3335'. [ 480.768547][T18237] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3335'. [ 480.788287][T18236] x_tables: duplicate underflow at hook 3 [ 480.901208][ T9148] bond9 (unregistering): (slave gretap1): Releasing active interface [ 480.927488][ T9148] gretap1 (unregistering): left allmulticast mode [ 481.046088][ T9148] bond25 (unregistering): (slave geneve4): Releasing active interface [ 481.082176][ T9148] bond15 (unregistering): (slave geneve3): Releasing active interface [ 481.240015][ T9148] bond22 (unregistering): (slave bridge0): Removing an active aggregator [ 481.253681][ T9148] bond22 (unregistering): (slave bridge0): Releasing backup interface [ 481.274201][ T9148] bond22 (unregistering): (slave bridge0): the permanent HWaddr of slave - 0a:e9:05:95:09:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 481.293514][ T9148] bridge0 (unregistering): left promiscuous mode [ 481.300235][ T9148] bridge0 (unregistering): left allmulticast mode [ 481.313089][ T9148] bond22 (unregistering): (slave bridge4): Releasing backup interface [ 481.321865][ T9148] bridge4 (unregistering): left promiscuous mode [ 481.328217][ T9148] bridge4 (unregistering): left allmulticast mode [ 481.345302][ T9148] bond0 (unregistering): (slave 30): Releasing backup interface [ 481.355893][ T9148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.366925][ T9148] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 481.377816][ T9148] bond0 (unregistering): Released all slaves [ 481.388615][ T9148] bond1 (unregistering): Released all slaves [ 481.402879][ T9148] bond2 (unregistering): Released all slaves [ 481.417049][ T9148] bond3 (unregistering): Released all slaves [ 481.434026][ T9148] bond4 (unregistering): Released all slaves [ 481.453747][ T9148] bond5 (unregistering): Released all slaves [ 481.468231][ T9148] bond6 (unregistering): Released all slaves [ 481.483596][ T9148] bond7 (unregistering): Released all slaves [ 481.505344][ T9148] bond8 (unregistering): Released all slaves [ 481.519095][ T9148] bond9 (unregistering): Released all slaves [ 481.534573][ T9148] bond10 (unregistering): Released all slaves [ 481.548211][ T9148] bond11 (unregistering): Released all slaves [ 481.566008][ T9148] bond12 (unregistering): Released all slaves [ 481.587797][ T9148] bond13 (unregistering): Released all slaves [ 481.611832][ T9148] bond14 (unregistering): Released all slaves [ 481.626313][ T9148] bond15 (unregistering): Released all slaves [ 481.643291][ T9148] bond16 (unregistering): Released all slaves [ 481.667501][ T9148] bond17 (unregistering): Released all slaves [ 481.681788][ T9148] bond18 (unregistering): Released all slaves [ 481.696470][ T9148] bond19 (unregistering): Released all slaves [ 481.713639][ T9148] bond20 (unregistering): (slave veth5): Releasing backup interface [ 481.734747][ T9148] bond20 (unregistering): Released all slaves [ 481.748158][ T9148] bond21 (unregistering): Released all slaves [ 481.762952][ T9148] bond22 (unregistering): Released all slaves [ 481.776845][ T9148] bond23 (unregistering): Released all slaves [ 481.790908][ T9148] bond24 (unregistering): Released all slaves [ 481.804483][ T9148] bond25 (unregistering): Released all slaves [ 481.827631][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'. [ 481.947026][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 482.049791][ T5631] Bluetooth: hci0: command tx timeout [ 482.092261][ T9148] : left promiscuous mode [ 482.248208][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3341'. [ 482.404836][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3342'. [ 482.504277][T18283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3342'. [ 482.810056][ T9148] tipc: Disabling bearer [ 482.846661][ T9148] tipc: Left network mode [ 483.676876][T18323] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3352'. [ 483.981919][T18322] tipc: Enabling of bearer rejected, failed to enable media [ 484.169723][T18102] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.189366][T18346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3354'. [ 484.201139][ T5631] Bluetooth: hci0: command tx timeout [ 484.210618][T18102] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.238010][T18102] bridge_slave_0: entered allmulticast mode [ 484.246614][T18102] bridge_slave_0: entered promiscuous mode [ 484.306106][T18102] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.315771][T18102] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.325885][T18102] bridge_slave_1: entered allmulticast mode [ 484.336811][T18102] bridge_slave_1: entered promiscuous mode [ 484.594609][T18102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.662956][T18102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.953810][T18102] team0: Port device team_slave_0 added [ 485.015132][T18102] team0: Port device team_slave_1 added [ 485.313057][T18102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.344180][T18102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.406918][T18102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.444073][T18102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.468477][T18102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.563935][T18102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.664196][ T9148] hsr_slave_0: left promiscuous mode [ 485.682124][ T9148] hsr_slave_1: left promiscuous mode [ 485.688265][ T9148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.709372][ T9148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.087419][ T9148] team_slave_1 (unregistering): left promiscuous mode [ 486.111675][ T9148] team0 (unregistering): Port device team_slave_1 removed [ 486.142682][ T9148] team_slave_0 (unregistering): left promiscuous mode [ 486.160528][ T9148] team0 (unregistering): Port device team_slave_0 removed [ 486.209647][ T5631] Bluetooth: hci0: command tx timeout [ 486.397305][ T9119] smc: removing ib device syz1 [ 486.424814][T18394] tipc: Enabling of bearer rejected, failed to enable media [ 486.489911][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 486.575816][T18102] hsr_slave_0: entered promiscuous mode [ 486.612549][T18102] hsr_slave_1: entered promiscuous mode [ 486.643014][T18102] debugfs: 'hsr0' already exists in 'hsr' [ 486.645470][ T9119] smbdirect: ib_dev[syz1] removed [ 486.666100][T18102] Cannot create hsr debugfs directory [ 486.701605][T18421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3368'. [ 486.737989][T18420] xt_hashlimit: size too large, truncated to 1048576 [ 486.855670][T18432] netlink: 'syz.4.3367': attribute type 11 has an invalid length. [ 486.889927][T18432] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3367'. [ 487.240830][T18424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3369'. [ 487.726217][T18444] syzkaller1: entered promiscuous mode [ 487.757632][T18444] syzkaller1: entered allmulticast mode [ 487.865022][T18458] batman_adv: batadv0: Adding interface: gretap1 [ 487.878369][T18458] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.909547][T18458] batman_adv: batadv0: Interface activated: gretap1 [ 488.346253][T18478] tipc: Enabling of bearer rejected, failed to enable media [ 488.932288][T18512] erspan0: left promiscuous mode [ 489.326573][T18528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3385'. [ 489.366775][T18528] netlink: 'syz.3.3385': attribute type 7 has an invalid length. [ 489.406311][T18528] netlink: 'syz.3.3385': attribute type 8 has an invalid length. [ 489.445475][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3385'. [ 489.664605][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 490.141602][T18543] netlink: 'syz.2.3388': attribute type 16 has an invalid length. [ 490.161489][T18543] netlink: 'syz.2.3388': attribute type 17 has an invalid length. [ 490.251397][T18543] erspan0: left allmulticast mode [ 490.316473][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3391'. [ 490.342600][T18551] netlink: 'syz.0.3392': attribute type 17 has an invalid length. [ 490.386012][T18543] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.398522][T18543] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.588010][T18551] erspan0: left allmulticast mode [ 490.665001][T18551] team0: left promiscuous mode [ 490.679374][T18551] team_slave_0: left promiscuous mode [ 490.685299][T18551] team_slave_1: left promiscuous mode [ 490.693070][T18551] team0: left allmulticast mode [ 490.698234][T18551] team_slave_0: left allmulticast mode [ 490.706219][T18551] team_slave_1: left allmulticast mode [ 491.235044][T18564] tipc: Enabling of bearer rejected, failed to enable media [ 491.295041][T18566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3394'. [ 491.333170][T18566] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.118348][ T9148] IPVS: stop unused estimator thread 0... [ 492.168329][T18600] netlink: 'syz.0.3402': attribute type 1 has an invalid length. [ 492.306709][T18600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.354633][T18102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 492.378437][T18102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.392096][T18102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 492.412397][T18102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.451496][T18603] macvlan2: entered promiscuous mode [ 492.468070][T18603] macvlan2: entered allmulticast mode [ 492.481918][T18603] bond1: entered promiscuous mode [ 492.489458][T18603] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.524362][T18603] bond1: left promiscuous mode [ 492.648593][ T9148] dvmrp0: left allmulticast mode [ 493.392230][ T9148] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 493.495340][ T9148] bond21 (unregistering): (slave bridge6): Releasing backup interface [ 493.557550][ T9148] bond0 (unregistering): Released all slaves [ 493.610163][ T9148] bond1 (unregistering): Released all slaves [ 493.638244][ T9148] bond2 (unregistering): Released all slaves [ 493.660794][T18629] IPVS: length: 35 != 24 [ 493.668741][ T9148] bond3 (unregistering): Released all slaves [ 493.725682][ T9148] bond4 (unregistering): Released all slaves [ 493.776164][ T9148] bond5 (unregistering): Released all slaves [ 493.790571][T18632] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 493.825031][ T9148] bond6 (unregistering): Released all slaves [ 493.871549][ T9148] bond7 (unregistering): Released all slaves [ 493.915531][ T9148] bond8 (unregistering): Released all slaves [ 493.962334][ T9148] bond9 (unregistering): Released all slaves [ 493.992674][ T9148] bond10 (unregistering): Released all slaves [ 494.012323][ T9148] bond11 (unregistering): Released all slaves [ 494.036649][ T9148] bond12 (unregistering): Released all slaves [ 494.075762][ T9148] bond13 (unregistering): (slave dummy0): Releasing active interface [ 494.115925][ T9148] bond13 (unregistering): Released all slaves [ 494.141796][ T9148] bond14 (unregistering): Released all slaves [ 494.169500][ T9148] bond15 (unregistering): Released all slaves [ 494.191696][ T9148] bond16 (unregistering): Released all slaves [ 494.244085][ T9148] bond17 (unregistering): Released all slaves [ 494.279894][ T9148] bond18 (unregistering): Released all slaves [ 494.310366][ T9148] bond19 (unregistering): Released all slaves [ 494.331395][ T9148] bond20 (unregistering): Released all slaves [ 494.356710][ T9148] bond21 (unregistering): Released all slaves [ 494.397599][T18102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 494.430159][T18102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.535880][T18632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.581392][T18102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.688435][T18102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.747928][T18650] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 494.760656][ T9148] : left promiscuous mode [ 494.900903][ T9148] tipc: Disabling bearer [ 494.907690][ T9148] tipc: Disabling bearer [ 494.940835][ T9148] tipc: Left network mode [ 494.997914][T18666] tipc: Enabling of bearer rejected, failed to enable media [ 495.391237][T18102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.506487][T18683] batadv_slave_0: entered promiscuous mode [ 495.550453][T18680] batadv_slave_0: left promiscuous mode [ 495.625799][T18102] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.821402][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.828687][ T9119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.895112][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.902414][ T9118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.982267][T18690] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 496.113759][T18690] lo speed is unknown, defaulting to 1000 [ 496.265430][ T9148] hsr_slave_0: left promiscuous mode [ 496.326196][ T9148] hsr_slave_1: left promiscuous mode [ 496.852103][ T9148] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 497.866819][T18102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.932724][T18102] veth0_vlan: entered promiscuous mode [ 497.947875][T18102] veth1_vlan: entered promiscuous mode [ 497.997784][T18102] veth0_macvtap: entered promiscuous mode [ 498.010345][T18102] veth1_macvtap: entered promiscuous mode [ 498.038364][T18102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.062444][T18102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.084189][ T9148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.114994][ T9148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.138515][ T9148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.178907][ T9148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.235496][ T9137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.245880][ T9137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.304402][ T9137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.314689][ T9137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.089463][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 505.491473][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 505.500894][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.727743][T18845] GUP no longer grows the stack in syz.3.3422 (18845): 200000003000-20000000a000 (200000001000) [ 513.803589][T18845] CPU: 1 UID: 0 PID: 18845 Comm: syz.3.3422 Not tainted syzkaller #0 PREEMPT(full) [ 513.803613][T18845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.803624][T18845] Call Trace: [ 513.803631][T18845] [ 513.803639][T18845] dump_stack_lvl+0xe8/0x150 [ 513.803671][T18845] __get_user_pages+0x238c/0x2720 [ 513.803701][T18845] ? __gup_longterm_locked+0xc3b/0x15c0 [ 513.803747][T18845] __gup_longterm_locked+0xd52/0x15c0 [ 513.803769][T18845] ? lock_acquire+0x106/0x350 [ 513.803811][T18845] gup_fast_fallback+0x1d8c/0x20e0 [ 513.803862][T18845] ? __pfx_gup_fast_fallback+0x10/0x10 [ 513.803884][T18845] ? is_valid_gup_args+0x11f/0x200 [ 513.803904][T18845] ? get_user_pages_fast+0x4d/0xb0 [ 513.803926][T18845] __iov_iter_get_pages_alloc+0x378/0xa40 [ 513.803958][T18845] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 513.803990][T18845] iov_iter_get_pages2+0x5e/0xa0 [ 513.804015][T18845] __se_sys_vmsplice+0x7b5/0x1660 [ 513.804060][T18845] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 513.804086][T18845] ? handle_mm_fault+0x2f33/0x3080 [ 513.804116][T18845] ? do_raw_spin_lock+0x12b/0x2f0 [ 513.804175][T18845] ? exc_page_fault+0x6a/0xc0 [ 513.804202][T18845] ? do_user_addr_fault+0xc4a/0x1340 [ 513.804234][T18845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.804255][T18845] do_syscall_64+0x174/0x580 [ 513.804276][T18845] ? trace_irq_disable+0x3b/0x140 [ 513.804298][T18845] ? clear_bhb_loop+0x40/0x90 [ 513.804321][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.804339][T18845] RIP: 0033:0x7f742719de59 [ 513.804356][T18845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.804371][T18845] RSP: 002b:00007f74253f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 513.804390][T18845] RAX: ffffffffffffffda RBX: 00007f7427426180 RCX: 00007f742719de59 [ 513.804404][T18845] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 513.804415][T18845] RBP: 00007f7427233e6f R08: 0000000000000000 R09: 0000000000000000 [ 513.804427][T18845] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 513.804436][T18845] R13: 00007f7427426218 R14: 00007f7427426180 R15: 00007fff7a9d3f08 [ 513.804467][T18845] [ 514.360173][T18864] tipc: Enabling of bearer rejected, failed to enable media [ 514.647147][T18885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3431'. [ 514.855121][T18909] netlink: 'syz.2.3434': attribute type 9 has an invalid length. [ 515.306071][T18933] Cannot find add_set index 2 as target [ 515.386428][T18933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3442'. [ 515.493310][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3440'. [ 515.515199][T18949] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3440'. [ 515.580883][T18941] tipc: Enabling of bearer rejected, failed to enable media [ 515.804310][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3448'. [ 515.846582][T18959] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3446'. [ 515.963332][T18969] syzkaller0: entered promiscuous mode [ 515.972479][T18969] syzkaller0: entered allmulticast mode [ 515.986817][T18970] syzkaller0: entered promiscuous mode [ 515.999090][T18970] syzkaller0: entered allmulticast mode [ 516.017235][T18972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3451'. [ 516.098543][T18975] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.106274][T18975] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.249980][T18975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.264754][T18993] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3451'. [ 516.285033][T18975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.383659][T18970] netlink: 774 bytes leftover after parsing attributes in process `syz.1.3449'. [ 516.429800][ T9134] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.458753][ T9134] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.485091][ T9134] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.506781][ T9134] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.626868][T18996] bond4: option xmit_hash_policy: invalid value (10) [ 516.674477][T18996] bond4 (unregistering): Released all slaves [ 516.773146][T19004] lo: Caught tx_queue_len zero misconfig [ 516.779217][T19004] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 516.973535][T19011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3460'. [ 517.089864][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.135700][T19028] tipc: Enabling of bearer rejected, failed to enable media [ 517.139329][T19024] netlink: 'syz.2.3463': attribute type 4 has an invalid length. [ 517.714554][T19063] erspan0: entered promiscuous mode [ 517.729836][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.745861][T19063] erspan0: entered allmulticast mode [ 517.787860][T19066] netlink: 'syz.1.3473': attribute type 1 has an invalid length. [ 517.804021][T19066] hsr_slave_1: entered allmulticast mode [ 517.896246][T19071] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.904010][T19071] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.037629][T19078] netlink: 'syz.1.3477': attribute type 1 has an invalid length. [ 518.128821][T19080] vlan2: entered allmulticast mode [ 518.134428][T19080] bridge0: entered allmulticast mode [ 518.369253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.769819][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.942861][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.809806][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.447839][T19045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.813041][T19104] tipc: Enabling of bearer rejected, failed to enable media [ 520.852797][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.868841][T19103] bridge_slave_0: left allmulticast mode [ 520.909981][T19103] bridge_slave_0: left promiscuous mode [ 520.956528][T19109] __nla_validate_parse: 6 callbacks suppressed [ 520.956546][T19109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3482'. [ 520.963192][T19103] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.011797][T19103] bridge_slave_1: left allmulticast mode [ 521.067319][T19103] bridge_slave_1: left promiscuous mode [ 521.095111][T19103] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.140223][T19103] bond0: (slave bond_slave_0): Releasing backup interface [ 521.186282][T19103] bond0: (slave bond_slave_1): Releasing backup interface [ 521.242526][T19103] team0: Port device team_slave_0 removed [ 521.281827][T19103] team0: Port device team_slave_1 removed [ 521.294094][T19103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.312513][T19103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.333064][T19103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.350075][T19103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.370946][T19103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 521.526699][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.598184][T19116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3487'. [ 521.699445][T19120] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 521.725595][T19120] lo speed is unknown, defaulting to 1000 [ 521.894913][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.031797][T19139] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3493'. [ 522.067250][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'. [ 522.094817][T19136] netlink: 'syz.2.3491': attribute type 25 has an invalid length. [ 522.203628][T19139] team0: Port device team_slave_0 removed [ 522.385614][T18886] udevd[18886]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 522.487650][T19145] erspan0: entered promiscuous mode [ 522.495087][T19145] erspan0: entered allmulticast mode [ 522.837646][T19170] netlink: 'syz.1.3500': attribute type 1 has an invalid length. [ 522.878625][T19173] sctp: [Deprecated]: syz.2.3501 (pid 19173) Use of int in max_burst socket option. [ 522.878625][T19173] Use struct sctp_assoc_value instead [ 522.926014][T19177] tipc: Enabling of bearer rejected, failed to enable media [ 522.937013][T11641] net_ratelimit: 1 callbacks suppressed [ 522.937028][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.967837][T19173] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3501'. [ 523.073348][T19183] tipc: Enabling of bearer rejected, failed to enable media [ 523.256622][T19193] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 523.273756][T11641] IPVS: starting estimator thread 0... [ 523.285912][T19193] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3505'. [ 523.379010][T19199] IPVS: using max 31 ests per chain, 74400 per kthread [ 523.410869][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.970290][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.023562][T19243] syzkaller0: entered promiscuous mode [ 524.046768][T19243] syzkaller0: entered allmulticast mode [ 524.117037][T19246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3522'. [ 524.147680][T19253] erspan0: entered promiscuous mode [ 524.170300][T19253] erspan0: entered allmulticast mode [ 524.421777][T19267] ip6tnl0: Caught tx_queue_len zero misconfig [ 524.428255][T19267] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3528'. [ 524.490821][T19264] nbd3: detected capacity change from 0 to 127 [ 524.528664][T19264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3527'. [ 524.728775][T19270] syzkaller0: entered promiscuous mode [ 524.743501][T19270] syzkaller0: entered allmulticast mode [ 524.907948][T19284] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3531'. [ 524.965150][T19286] syzkaller0: entered promiscuous mode [ 524.972023][T19286] syzkaller0: entered allmulticast mode [ 525.009782][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.017978][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.144384][T19291] erspan0: left promiscuous mode [ 525.158854][T19291] erspan0: left allmulticast mode [ 525.203342][ T5631] block nbd3: Receive control failed (result -104) [ 525.316983][T19291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.335185][T19291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.362366][T19291] hsr_slave_1: left allmulticast mode [ 525.448635][T19293] geneve2: entered promiscuous mode [ 525.524144][ T9119] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.579947][ T9119] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.607927][ T9119] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.638220][ T9119] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.682749][ T9119] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 58964 - 0 [ 525.706728][ T9119] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 58964 - 0 [ 525.730625][ T9119] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 58964 - 0 [ 525.855079][ T9119] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 58964 - 0 [ 526.000129][T19343] netlink: 'syz.4.3548': attribute type 1 has an invalid length. [ 526.025643][T19343] __nla_validate_parse: 5 callbacks suppressed [ 526.025661][T19343] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3548'. [ 526.051841][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.077032][ T5742] IPVS: starting estimator thread 0... [ 526.082902][T19351] IPVS: sed: FWM 3 0x00000003 - no destination available [ 526.189596][T19356] IPVS: using max 34 ests per chain, 81600 per kthread [ 526.535468][T19381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3557'. [ 526.585540][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'. [ 526.594884][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'. [ 526.650728][T19384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3559'. [ 526.754129][T19390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3561'. [ 526.789265][T19394] netlink: 'syz.2.3562': attribute type 2 has an invalid length. [ 526.917509][T19399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3563'. [ 526.956312][T19399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.095154][T19399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.133212][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.183699][T19408] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.300377][T18902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.314411][T18902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.351728][T19411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.367049][T19414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3565'. [ 527.392899][T19409] bond0: entered promiscuous mode [ 527.414743][T19409] bond_slave_0: entered promiscuous mode [ 527.429483][T19409] bond_slave_1: entered promiscuous mode [ 527.442194][T19409] bond0: entered allmulticast mode [ 527.447899][T19409] bond_slave_0: entered allmulticast mode [ 527.455348][T19409] bond_slave_1: entered allmulticast mode [ 527.464259][T19409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.574898][T19424] bridge0: port 1(syz_tun) entered blocking state [ 527.584782][T19424] bridge0: port 1(syz_tun) entered disabled state [ 527.591652][T19424] syz_tun: entered allmulticast mode [ 527.600561][T19424] syz_tun: entered promiscuous mode [ 527.647250][T19432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.671739][T19432] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.725306][T19432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.812096][ T1733] block nbd3: Connection timed out, retrying (0/1 alive) [ 527.821133][ T1733] block nbd3: Connection timed out, retrying (0/1 alive) [ 527.832151][ T1733] block nbd3: Connection timed out, retrying (0/1 alive) [ 527.839485][ T1733] block nbd3: Connection timed out, retrying (0/1 alive) [ 527.849884][ T1733] block nbd3: Dead connection, failed to find a fallback [ 527.850814][T19437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3572'. [ 527.861370][ T1733] block nbd3: shutting down sockets [ 527.876371][ T1733] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.887166][ T1733] Buffer I/O error on dev nbd3, logical block 3, async page read [ 527.900155][ T1733] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.909952][ T1733] Buffer I/O error on dev nbd3, logical block 2, async page read [ 527.917815][ T1733] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.927057][ T1733] Buffer I/O error on dev nbd3, logical block 1, async page read [ 527.934993][ T1733] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.944211][ T1733] Buffer I/O error on dev nbd3, logical block 0, async page read [ 527.954834][ T1733] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.965288][ T1733] Buffer I/O error on dev nbd3, logical block 0, async page read [ 527.976977][ T1733] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 527.986208][ T1733] Buffer I/O error on dev nbd3, logical block 1, async page read [ 527.994135][ T1733] Buffer I/O error on dev nbd3, logical block 2, async page read [ 527.998352][T19432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.002039][ T1733] Buffer I/O error on dev nbd3, logical block 3, async page read [ 528.020884][ T1640] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 528.032090][ T1640] Buffer I/O error on dev nbd3, logical block 0, async page read [ 528.042812][ T1640] Buffer I/O error on dev nbd3, logical block 1, async page read [ 528.049231][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.062311][ T1640] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 528.072603][ T1640] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 528.083158][ T1640] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 528.094712][T18886] ldm_validate_partition_table(): Disk read failed. [ 528.106611][T18886] Dev nbd3: unable to read RDB block 0 [ 528.117933][T18886] nbd3: unable to read partition table [ 528.136080][T18886] ldm_validate_partition_table(): Disk read failed. [ 528.143761][T19432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.145857][T18886] Dev nbd3: unable to read RDB block 0 [ 528.164280][T18886] nbd3: unable to read partition table [ 528.210981][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.276376][T19432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.349650][T19432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.371071][T19432] veth1_vlan: left promiscuous mode [ 528.378141][T19432] veth0_vlan: left promiscuous mode [ 528.386361][T19432] veth0_vlan: entered promiscuous mode [ 528.408824][T19432] veth1_vlan: entered promiscuous mode [ 528.432279][T19432] veth1_macvtap: left promiscuous mode [ 528.440084][T19432] veth0_macvtap: left promiscuous mode [ 528.447054][T19432] veth0_macvtap: entered promiscuous mode [ 528.454768][T19432] veth1_macvtap: entered promiscuous mode [ 528.481375][T19432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.491923][T19432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.501986][T19432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.511323][T19432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.576021][T18901] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.583613][T18901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.607864][T18901] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.615091][T18901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.717290][T18902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.733690][T18902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.766028][T18902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.792387][T18902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.827463][T19455] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3575'. [ 528.852670][T19458] netlink: zone id is out of range [ 528.869296][T19458] netlink: zone id is out of range [ 528.883463][T19458] netlink: zone id is out of range [ 528.909077][T19458] netlink: zone id is out of range [ 528.942192][T19458] netlink: zone id is out of range [ 528.960848][T19458] netlink: zone id is out of range [ 528.984198][T19458] netlink: zone id is out of range [ 529.016293][T19458] netlink: zone id is out of range [ 529.020935][T19461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.037024][T19461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.056260][T19461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.067553][T19461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.378212][T19484] netlink: 'syz.2.3584': attribute type 13 has an invalid length. [ 529.431049][T19490] sctp: [Deprecated]: syz.3.3585 (pid 19490) Use of int in max_burst socket option. [ 529.431049][T19490] Use struct sctp_assoc_value instead [ 529.578205][T19484] netlink: 'syz.2.3584': attribute type 13 has an invalid length. [ 529.619157][T19487] netlink: 'syz.4.3583': attribute type 1 has an invalid length. [ 529.645130][ T9119] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.659449][ T9119] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.712437][T19477] bond4 (unregistering): Released all slaves [ 529.752459][ T9119] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.762503][ T9119] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.108755][T19519] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 530.135241][T19519] lo speed is unknown, defaulting to 1000 [ 530.666306][T19543] FAULT_INJECTION: forcing a failure. [ 530.666306][T19543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.711700][T19543] CPU: 1 UID: 0 PID: 19543 Comm: syz.1.3599 Not tainted syzkaller #0 PREEMPT(full) [ 530.711727][T19543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 530.711737][T19543] Call Trace: [ 530.711745][T19543] [ 530.711753][T19543] dump_stack_lvl+0xe8/0x150 [ 530.711787][T19543] should_fail_ex+0x40c/0x560 [ 530.711814][T19543] _copy_to_user+0x31/0xb0 [ 530.711844][T19543] simple_read_from_buffer+0xe1/0x170 [ 530.711880][T19543] proc_fail_nth_read+0x1bb/0x230 [ 530.711908][T19543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.711936][T19543] ? rw_verify_area+0x24a/0x4c0 [ 530.711965][T19543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.711994][T19543] vfs_read+0x213/0xa80 [ 530.712025][T19543] ? __pfx___mutex_lock+0x10/0x10 [ 530.712052][T19543] ? __pfx_vfs_read+0x10/0x10 [ 530.712081][T19543] ? __fget_files+0x2a/0x420 [ 530.712109][T19543] ? __fget_files+0x3a2/0x420 [ 530.712131][T19543] ? __fget_files+0x2a/0x420 [ 530.712163][T19543] ksys_read+0x150/0x270 [ 530.712192][T19543] ? __pfx_ksys_read+0x10/0x10 [ 530.712227][T19543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.712247][T19543] do_syscall_64+0x174/0x580 [ 530.712271][T19543] ? trace_irq_disable+0x3b/0x140 [ 530.712294][T19543] ? clear_bhb_loop+0x40/0x90 [ 530.712314][T19543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.712330][T19543] RIP: 0033:0x7fe62815e68e [ 530.712347][T19543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.712360][T19543] RSP: 002b:00007fe6290fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.712377][T19543] RAX: ffffffffffffffda RBX: 00007fe6290ff6c0 RCX: 00007fe62815e68e [ 530.712389][T19543] RDX: 000000000000000f RSI: 00007fe6290ff0a0 RDI: 0000000000000004 [ 530.712403][T19543] RBP: 00007fe6290ff090 R08: 0000000000000000 R09: 0000000000000000 [ 530.712413][T19543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.712422][T19543] R13: 00007fe628426038 R14: 00007fe628425fa0 R15: 00007fff86635c68 [ 530.712450][T19543] [ 531.174859][T19548] __nla_validate_parse: 4 callbacks suppressed [ 531.174876][T19548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3600'. [ 531.214141][T19548] bond3: option min_links: invalid value (18446744073709551612) [ 531.226673][T19548] bond3: option min_links: allowed values 0 - 2147483647 [ 531.241465][T19548] bond3 (unregistering): Released all slaves [ 531.353496][T19549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3600'. [ 531.365509][T19551] syzkaller0: entered promiscuous mode [ 531.382853][T19551] syzkaller0: entered allmulticast mode [ 531.433773][T19553] smbdirect: ib_dev[syú2] removed [ 531.514726][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3604'. [ 531.749756][T19575] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3607'. [ 531.888285][T19587] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 531.991777][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3613'. [ 532.086289][T19602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.236519][T19612] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3618'. [ 532.374755][T19624] netlink: 'syz.0.3621': attribute type 1 has an invalid length. [ 532.489992][T19624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 533.409235][T11641] net_ratelimit: 24 callbacks suppressed [ 533.409255][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.458823][T19635] erspan0: entered promiscuous mode [ 533.469182][T19635] erspan0: entered allmulticast mode [ 533.656171][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.740103][T19657] netlink: 'syz.0.3631': attribute type 11 has an invalid length. [ 533.769276][T19657] netlink: 'syz.0.3631': attribute type 4 has an invalid length. [ 533.783007][T19657] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3631'. [ 533.800307][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3630'. [ 534.012934][T19664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 534.035264][T19670] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3637'. [ 534.086395][T19664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.106899][T19673] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 534.450795][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.626392][T19698] tunl0: Caught tx_queue_len zero misconfig [ 534.756718][T19698] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 534.929867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.941972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.950370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.178414][T19729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.183662][T19726] lo speed is unknown, defaulting to 1000 [ 535.195638][T19717] team0: renamed from lo (while UP) [ 535.250699][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.491079][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.627682][T19747] tipc: Started in network mode [ 535.637632][T19747] tipc: Node identity 722122999b32, cluster identity 4711 [ 535.657411][T19747] tipc: Enabled bearer , priority 0 [ 535.775400][T19748] tipc: Resetting bearer [ 535.880350][T19746] tipc: Disabling bearer [ 535.916145][T19757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.929440][T19757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.020641][T19764] xt_hashlimit: size too large, truncated to 1048576 [ 536.241581][T19776] __nla_validate_parse: 3 callbacks suppressed [ 536.241598][T19776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3666'. [ 536.494387][T19784] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3666'. [ 536.587693][T19786] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3670'. [ 536.977659][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3675'. [ 537.068200][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3676'. [ 537.110712][T19804] hsr_slave_1 (unregistering): left promiscuous mode [ 537.130863][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'. [ 537.137486][T19814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3679'. [ 537.151713][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 537.178174][T19812] xt_hashlimit: size too large, truncated to 1048576 [ 537.282982][T19818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'. [ 537.303181][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 537.416471][T19824] netlink: 'syz.3.3681': attribute type 3 has an invalid length. [ 537.647477][T19829] xt_TCPMSS: Only works on TCP SYN packets [ 538.071468][T19854] netlink: 'syz.3.3693': attribute type 1 has an invalid length. [ 538.513115][T19877] netlink: 'syz.2.3698': attribute type 2 has an invalid length. [ 538.614777][ T809] net_ratelimit: 45 callbacks suppressed [ 538.614797][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.668642][T19877] : entered promiscuous mode [ 538.787417][T19885] tipc: Started in network mode [ 538.800942][T19885] tipc: Node identity 0a7f16b7c552, cluster identity 4711 [ 538.839475][T19891] netlink: 'syz.3.3702': attribute type 1 has an invalid length. [ 538.865210][T19885] tipc: Enabled bearer , priority 0 [ 538.875954][T19892] syzkaller0: entered promiscuous mode [ 538.882649][T19892] syzkaller0: entered allmulticast mode [ 538.915563][T19891] geneve2: entered promiscuous mode [ 539.060726][T19895] tipc: Resetting bearer [ 539.095790][T19884] tipc: Resetting bearer [ 539.202281][T19884] tipc: Disabling bearer [ 539.525031][T19918] netlink: 'syz.2.3709': attribute type 1 has an invalid length. [ 539.625887][T19918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.649717][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.689905][T19918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.778856][T19918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.833082][T19918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.867395][T19926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.897453][T19926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.929010][T19926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.951395][T19926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.992637][T19887] infiniband syz0: set down [ 540.004885][T19887] infiniband syz0: added bond_slave_0 [ 540.072759][T19887] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 540.141340][T19887] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 540.170638][T19887] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 540.216517][T19887] RDS/IB: syz0: added [ 540.227726][T19887] smc: adding ib device syz0 with port count 1 [ 540.245648][T19887] smc: ib device syz0 port 1 has no pnetid [ 540.538403][T19945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.614211][T19949] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 541.478156][T19965] Unsupported ieee802154 address type: 0 [ 541.536878][T19969] syzkaller0: entered promiscuous mode [ 541.579579][T19969] syzkaller0: entered allmulticast mode [ 541.665682][T19969] tipc: Started in network mode [ 541.682981][T19969] tipc: Node identity b28390cfcb28, cluster identity 4711 [ 541.725378][T19969] tipc: Enabled bearer , priority 0 [ 541.742674][T19970] tipc: Resetting bearer [ 541.781670][T19968] tipc: Resetting bearer [ 541.855912][T19968] tipc: Disabling bearer [ 541.887441][T19979] tap0: tun_chr_ioctl cmd 1074025677 [ 541.921275][T19979] tap0: linktype set to 780 [ 542.104635][T19983] __nla_validate_parse: 16 callbacks suppressed [ 542.104652][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3728'. [ 542.135295][T19984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3729'. [ 542.196392][T19983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.260877][T19984] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 542.277772][T19984] bond4 (unregistering): Released all slaves [ 542.384053][T19983] bond2: (slave bridge0): Releasing backup interface [ 542.430613][T19983] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 542.651443][T20012] netlink: 'syz.2.3734': attribute type 1 has an invalid length. [ 542.678413][T20012] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3734'. [ 543.121537][T20032] vcan0: tx drop: invalid sa for name 0x0000000100000000 [ 543.151828][T20032] netlink: 'syz.4.3740': attribute type 32 has an invalid length. [ 543.166223][T20032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3740'. [ 543.398649][T20045] netlink: 'syz.3.3745': attribute type 5 has an invalid length. [ 543.543703][T20053] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3748'. [ 543.566134][T20053] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3748'. [ 543.894376][T11641] net_ratelimit: 130 callbacks suppressed [ 543.894395][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.167069][T20084] netlink: 'syz.4.3755': attribute type 1 has an invalid length. [ 544.336422][T20084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 544.370965][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.442373][T20096] bond4: (slave geneve3): making interface the new active one [ 544.466482][T20096] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 544.930336][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.068468][T20131] netlink: 'syz.2.3768': attribute type 1 has an invalid length. [ 545.436069][T20150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.445350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.531245][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3775'. [ 545.563664][T20158] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 545.602543][T20156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.631781][T20166] netlink: 'syz.2.3777': attribute type 32 has an invalid length. [ 545.969634][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.154077][T20199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3786'. [ 546.185543][T20199] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3786'. [ 546.307376][T20206] lo speed is unknown, defaulting to 1000 [ 546.307780][T20201] syzkaller1: entered promiscuous mode [ 546.320803][T20201] syzkaller1: entered allmulticast mode [ 546.486286][T20218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3793'. [ 546.536748][T20218] ip6tnl2: entered allmulticast mode [ 546.616129][T20221] syzkaller0: entered promiscuous mode [ 546.630459][T20221] syzkaller0: entered allmulticast mode [ 547.009745][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.234439][T20243] syzkaller0: entered promiscuous mode [ 547.255043][T20243] syzkaller0: entered allmulticast mode [ 547.281961][T20253] syzkaller0: entered promiscuous mode [ 547.303646][T20253] syzkaller0: entered allmulticast mode [ 547.413880][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.437613][T20243] tipc: Enabled bearer , priority 0 [ 547.478642][T20243] tipc: Resetting bearer [ 547.510824][T20242] tipc: Resetting bearer [ 547.575021][T20242] tipc: Disabling bearer [ 547.895106][T20287] __nla_validate_parse: 2 callbacks suppressed [ 547.895124][T20287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3816'. [ 548.050199][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.157473][T20298] syzkaller0: entered promiscuous mode [ 548.163488][T20298] syzkaller0: entered allmulticast mode [ 548.350288][T20288] netlink: 'syz.3.3814': attribute type 1 has an invalid length. [ 548.358822][T20311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3824'. [ 549.097252][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.143129][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.299955][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.177582][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.244833][T20288] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 551.257508][T20311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.274326][T20314] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.281890][T20314] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.303539][T20314] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.310803][T20314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.318428][T20314] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.325675][T20314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.348466][T20314] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 551.566001][T20335] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 551.646000][T20339] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 551.661965][T20339] bond4 (unregistering): Released all slaves [ 552.027769][T20362] syzkaller0: entered promiscuous mode [ 552.033447][T20362] syzkaller0: entered allmulticast mode [ 552.049804][T20367] Cannot find add_set index 0 as target [ 552.056421][T20367] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3841'. [ 552.222217][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.868306][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.275524][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.335967][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.303672][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.774498][T20373] syzkaller0: entered promiscuous mode [ 554.781838][T20373] syzkaller0: entered allmulticast mode [ 554.988089][T20389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3844'. [ 555.037853][T20392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3845'. [ 555.055053][T20391] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3846'. [ 555.330023][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.412743][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.430744][T20404] erspan0: left promiscuous mode [ 555.435860][T20404] erspan0: left allmulticast mode [ 555.493918][T20404] bond1: left promiscuous mode [ 555.500997][T20404] bond2: left promiscuous mode [ 555.527550][T20404] geneve2: left promiscuous mode [ 555.554483][T20404] ip6tnl2: left allmulticast mode [ 556.014738][T20418] xt_hashlimit: size too large, truncated to 1048576 [ 556.211189][T20426] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3852'. [ 556.254112][T20426] Bluetooth: MGMT ver 1.23 [ 556.370545][ T7847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.398525][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.212046][T20411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.269818][T20411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.411971][T11642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.911386][T20422] @0Ù: renamed from bond_slave_1 (while UP) [ 557.978830][ T9131] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.001729][ T9131] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 58964 - 0 [ 558.028971][ T9131] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.043999][ T9131] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 58964 - 0 [ 558.096648][ T9131] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.126781][ T9131] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 58964 - 0 [ 558.166246][ T9131] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.187330][ T9131] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 58964 - 0 [ 558.450754][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.516362][T20473] netlink: 'syz.4.3862': attribute type 1 has an invalid length. [ 558.536452][T20473] ip6tnl3: entered promiscuous mode [ 558.537201][T20472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3861'. [ 558.593579][T20479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3861'. [ 558.694222][T20479] bond5: Unable to set down delay as MII monitoring is disabled [ 558.718715][T20479] bond5 (unregistering): Released all slaves [ 558.790219][T20478] syzkaller1: entered promiscuous mode [ 558.801200][T20478] syzkaller1: entered allmulticast mode [ 558.823576][T20500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3869'. [ 558.920527][T20500] xt_CT: No such helper "netbios-ns" [ 559.145903][T20493] syzkaller0: entered promiscuous mode [ 559.156859][T20493] syzkaller0: entered allmulticast mode [ 559.409597][T11640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.450344][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'. [ 559.489917][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.542849][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.552743][ T7847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.573566][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.410978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.420988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.429452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.659800][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.132836][T20526] team1: entered promiscuous mode [ 562.143900][T20526] team1: entered allmulticast mode [ 562.149611][T20526] 8021q: adding VLAN 0 to HW filter on device team1 [ 562.377281][T20553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3880'. [ 562.397496][T20553] ip6gre1: entered promiscuous mode [ 562.405085][T20553] ip6gre1: entered allmulticast mode [ 562.413971][T20555] IPv6: addrconf: prefix option has invalid lifetime [ 562.512436][T20561] netlink: 'syz.0.3883': attribute type 9 has an invalid length. [ 562.550481][T20561] netlink: 'syz.0.3883': attribute type 6 has an invalid length. [ 562.558261][T20561] netlink: 'syz.0.3883': attribute type 7 has an invalid length. [ 562.599849][T20561] netlink: 'syz.0.3883': attribute type 8 has an invalid length. [ 562.840792][T20581] netlink: 'syz.3.3887': attribute type 1 has an invalid length. [ 562.918136][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3888'. [ 562.962813][T20581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 562.989885][T20585] macvlan2: entered promiscuous mode [ 562.995556][T20585] macvlan2: entered allmulticast mode [ 563.003463][T20585] bond4: entered promiscuous mode [ 563.011835][T20585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 563.207299][T20585] bond4: left promiscuous mode [ 563.333453][T20586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.482640][T20603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3894'. [ 563.540814][T20616] sctp: [Deprecated]: syz.3.3896 (pid 20616) Use of int in max_burst socket option. [ 563.540814][T20616] Use struct sctp_assoc_value instead [ 563.606947][T20620] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3898'. [ 563.620609][T20620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3898'. [ 563.652630][T20622] netlink: 'syz.2.3899': attribute type 1 has an invalid length. [ 563.756768][T20627] team0: entered promiscuous mode [ 563.763343][T20627] team0: entered allmulticast mode [ 563.788567][T20627] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.818780][T20627] bond5: (slave team0): Enslaving as an active interface with a down link [ 563.945622][T20633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3903'. [ 563.993059][T20638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3905'. [ 564.009638][T20633] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3903'. [ 564.020887][T20633] nbd: must specify at least one socket [ 564.027688][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3905'. [ 564.065442][T20633] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 564.433728][T20661] syzkaller1: entered promiscuous mode [ 564.444031][T20661] syzkaller1: entered allmulticast mode [ 564.457177][T20661] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.655664][T20674] syzkaller0: entered promiscuous mode [ 564.663789][T20674] syzkaller0: entered allmulticast mode [ 564.780215][T11641] net_ratelimit: 4 callbacks suppressed [ 564.780235][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.822784][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.317691][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e307800: rx timeout, send abort [ 566.326560][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e307800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 566.614376][T11639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.861088][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.934177][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 566.944040][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 566.954016][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.332321][T20693] netlink: 'syz.1.3921': attribute type 1 has an invalid length. [ 567.341104][T20693] netlink: 'syz.1.3921': attribute type 2 has an invalid length. [ 567.551321][T20704] openvswitch: netlink: Actions may not be safe on all matching packets [ 567.712287][T20717] netlink: 'syz.0.3929': attribute type 1 has an invalid length. [ 567.762660][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 567.780405][T20726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3932'. [ 567.801173][T20727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3929'. [ 567.870588][T20732] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.890425][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.018003][T20735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3933'. [ 568.253561][T20732] bond2: (slave bridge0): Releasing backup interface [ 568.354501][T20726] 8021q: adding VLAN 0 to HW filter on device bond5 [ 568.490998][T20735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 568.521675][T20736] bond3: (slave bridge0): Releasing backup interface [ 568.542396][T20736] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 568.644807][T20754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3939'. [ 568.655438][T20754] netlink: 'syz.2.3939': attribute type 1 has an invalid length. [ 568.664377][T20754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3939'. [ 568.931019][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.015058][T19280] Bluetooth: hci5: command 0x0406 tx timeout [ 569.501541][T20768] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3942'. [ 569.651757][T11639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.864609][T20781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3946'. [ 569.875081][T20786] netlink: 'syz.0.3948': attribute type 1 has an invalid length. [ 569.980882][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.003027][T20786] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.014854][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 570.051765][T20794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3949'. [ 570.083286][T20790] bond7: (slave veth3): Enslaving as an active interface with a down link [ 570.131712][T11639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.149424][T20793] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 570.176041][T20793] bond7: (slave batadv1): making interface the new active one [ 570.206931][T20793] batadv1: entered promiscuous mode [ 570.216982][T20793] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 570.358007][T20794] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.485969][T20792] bond6: (slave bridge0): Releasing backup interface [ 570.538577][T20792] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 570.552398][T20819] nbd: must specify at least one socket [ 570.772682][ T7847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.875823][T20807] lo speed is unknown, defaulting to 1000 [ 571.009586][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.303084][T20837] lo speed is unknown, defaulting to 1000 [ 571.542085][T20845] bond8: Unable to set down delay as MII monitoring is disabled [ 571.553754][T20845] bond8 (unregistering): Released all slaves [ 571.633371][T20853] netlink: 'syz.4.3961': attribute type 13 has an invalid length. [ 571.781929][T20850] dvmrp0: entered allmulticast mode [ 572.053197][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.693133][ T7847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.846197][T20879] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 572.866754][T20879] bond6 (unregistering): Released all slaves [ 573.091326][T11641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.249361][T20885] openvswitch: netlink: Actions may not be safe on all matching packets [ 573.296252][T20887] __nla_validate_parse: 5 callbacks suppressed [ 573.296270][T20887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3972'. [ 573.558104][T20898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3974'. [ 574.129185][T19280] Bluetooth: hci3: command 0x0406 tx timeout [ 574.129749][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.286248][ T5631] block nbd4: Receive control failed (result -1) [ 574.295292][ T5631] [ 574.297665][ T5631] ====================================================== [ 574.304674][ T5631] WARNING: possible circular locking dependency detected [ 574.311702][ T5631] syzkaller #0 Not tainted [ 574.316103][ T5631] ------------------------------------------------------ [ 574.323098][ T5631] kworker/u9:3/5631 is trying to acquire lock: [ 574.329231][ T5631] ffff88802c23d360 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 574.338624][ T5631] [ 574.338624][ T5631] but task is already holding lock: [ 574.345966][ T5631] ffff88802994dc68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 574.354832][ T5631] [ 574.354832][ T5631] which lock already depends on the new lock. [ 574.354832][ T5631] [ 574.365233][ T5631] [ 574.365233][ T5631] the existing dependency chain (in reverse order) is: [ 574.374340][ T5631] [ 574.374340][ T5631] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 574.381983][ T5631] __mutex_lock+0x19d/0x1550 [ 574.387091][ T5631] nbd_queue_rq+0x373/0x1150 [ 574.392198][ T5631] blk_mq_dispatch_rq_list+0x499/0x1990 [ 574.398251][ T5631] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 574.405090][ T5631] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 574.411587][ T5631] blk_mq_run_work_fn+0x16c/0x300 [ 574.417116][ T5631] process_scheduled_works+0xa8e/0x14e0 [ 574.423165][ T5631] worker_thread+0xa47/0xfb0 [ 574.428272][ T5631] kthread+0x388/0x470 [ 574.432875][ T5631] ret_from_fork+0x514/0xb70 [ 574.438079][ T5631] ret_from_fork_asm+0x1a/0x30 [ 574.443352][ T5631] [ 574.443352][ T5631] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 574.450572][ T5631] __mutex_lock+0x19d/0x1550 [ 574.455681][ T5631] nbd_queue_rq+0xc1/0x1150 [ 574.460709][ T5631] blk_mq_dispatch_rq_list+0x499/0x1990 [ 574.466767][ T5631] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 574.473630][ T5631] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 574.480118][ T5631] blk_mq_run_work_fn+0x16c/0x300 [ 574.485649][ T5631] process_scheduled_works+0xa8e/0x14e0 [ 574.491699][ T5631] worker_thread+0xa47/0xfb0 [ 574.496797][ T5631] kthread+0x388/0x470 [ 574.501385][ T5631] ret_from_fork+0x514/0xb70 [ 574.506502][ T5631] ret_from_fork_asm+0x1a/0x30 [ 574.511773][ T5631] [ 574.511773][ T5631] -> #4 (set->srcu){.+.+}-{0:0}: [ 574.518891][ T5631] __synchronize_srcu+0xc9/0x2f0 [ 574.524350][ T5631] elevator_switch+0x1e8/0x7b0 [ 574.529621][ T5631] elevator_change+0x2fa/0x480 [ 574.534893][ T5631] elevator_set_default+0x375/0x440 [ 574.540595][ T5631] blk_register_queue+0x3f3/0x4e0 [ 574.546131][ T5631] __add_disk+0x6cb/0xe30 [ 574.550975][ T5631] add_disk_fwnode+0xfb/0x4b0 [ 574.556160][ T5631] nbd_dev_add+0x733/0xb60 [ 574.561085][ T5631] nbd_init+0x15f/0x1e0 [ 574.565753][ T5631] do_one_initcall+0x250/0x870 [ 574.571035][ T5631] do_initcall_level+0x10a/0x1a0 [ 574.576480][ T5631] do_initcalls+0x59/0xa0 [ 574.581312][ T5631] kernel_init_freeable+0x29d/0x3e0 [ 574.587018][ T5631] kernel_init+0x1d/0x1d0 [ 574.591852][ T5631] ret_from_fork+0x514/0xb70 [ 574.596952][ T5631] ret_from_fork_asm+0x1a/0x30 [ 574.602220][ T5631] [ 574.602220][ T5631] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 574.610028][ T5631] __mutex_lock+0x19d/0x1550 [ 574.615156][ T5631] elevator_change+0x1af/0x480 [ 574.620429][ T5631] elevator_set_none+0xb5/0x140 [ 574.625808][ T5631] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 574.632127][ T5631] nbd_start_device+0x189/0xb30 [ 574.637486][ T5631] nbd_genl_connect+0x1597/0x1c10 [ 574.643018][ T5631] genl_family_rcv_msg_doit+0x233/0x340 [ 574.649079][ T5631] genl_rcv_msg+0x614/0x7a0 [ 574.654103][ T5631] netlink_rcv_skb+0x226/0x4a0 [ 574.659383][ T5631] genl_rcv+0x28/0x40 [ 574.663870][ T5631] netlink_unicast+0x7bb/0x940 [ 574.669140][ T5631] netlink_sendmsg+0x813/0xb40 [ 574.674414][ T5631] sock_sendmsg_nosec+0x13a/0x180 [ 574.679943][ T5631] ____sys_sendmsg+0x54e/0x850 [ 574.685217][ T5631] ___sys_sendmsg+0x2a5/0x360 [ 574.690406][ T5631] __x64_sys_sendmsg+0x1b1/0x290 [ 574.695852][ T5631] do_syscall_64+0x174/0x580 [ 574.700951][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.707353][ T5631] [ 574.707353][ T5631] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 574.715945][ T5631] blk_alloc_queue+0x544/0x690 [ 574.721216][ T5631] __blk_mq_alloc_disk+0x194/0x390 [ 574.726843][ T5631] nbd_dev_add+0x494/0xb60 [ 574.731772][ T5631] nbd_init+0x15f/0x1e0 [ 574.736438][ T5631] do_one_initcall+0x250/0x870 [ 574.741713][ T5631] do_initcall_level+0x10a/0x1a0 [ 574.747161][ T5631] do_initcalls+0x59/0xa0 [ 574.752001][ T5631] kernel_init_freeable+0x29d/0x3e0 [ 574.757715][ T5631] kernel_init+0x1d/0x1d0 [ 574.762547][ T5631] ret_from_fork+0x514/0xb70 [ 574.767649][ T5631] ret_from_fork_asm+0x1a/0x30 [ 574.772918][ T5631] [ 574.772918][ T5631] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 574.780203][ T5631] fs_reclaim_acquire+0x71/0x100 [ 574.785652][ T5631] __kmalloc_noprof+0xbc/0x720 [ 574.790921][ T5631] tls_sw_sendmsg+0x599/0x2860 [ 574.796191][ T5631] sock_sendmsg_nosec+0x90/0x180 [ 574.801638][ T5631] sock_sendmsg+0x1ca/0x2d0 [ 574.806654][ T5631] splice_to_socket+0xb5e/0x12a0 [ 574.812101][ T5631] direct_splice_actor+0x101/0x160 [ 574.817720][ T5631] splice_direct_to_actor+0x57b/0xcb0 [ 574.823599][ T5631] do_splice_direct+0x195/0x290 [ 574.829051][ T5631] do_sendfile+0x52e/0x7c0 [ 574.833972][ T5631] __se_sys_sendfile64+0x144/0x1a0 [ 574.839585][ T5631] do_syscall_64+0x174/0x580 [ 574.844684][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.851091][ T5631] [ 574.851091][ T5631] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 574.859596][ T5631] __lock_acquire+0x1520/0x2cf0 [ 574.864974][ T5631] lock_acquire+0x106/0x350 [ 574.869982][ T5631] lock_sock_nested+0x41/0x100 [ 574.875277][ T5631] inet_shutdown+0x6a/0x390 [ 574.880292][ T5631] nbd_mark_nsock_dead+0x2cb/0x550 [ 574.885916][ T5631] recv_work+0x1cee/0x1e10 [ 574.890836][ T5631] process_scheduled_works+0xa8e/0x14e0 [ 574.896887][ T5631] worker_thread+0xa47/0xfb0 [ 574.901985][ T5631] kthread+0x388/0x470 [ 574.906651][ T5631] ret_from_fork+0x514/0xb70 [ 574.911754][ T5631] ret_from_fork_asm+0x1a/0x30 [ 574.917022][ T5631] [ 574.917022][ T5631] other info that might help us debug this: [ 574.917022][ T5631] [ 574.927231][ T5631] Chain exists of: [ 574.927231][ T5631] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 574.927231][ T5631] [ 574.940519][ T5631] Possible unsafe locking scenario: [ 574.940519][ T5631] [ 574.947975][ T5631] CPU0 CPU1 [ 574.953326][ T5631] ---- ---- [ 574.958679][ T5631] lock(&nsock->tx_lock); [ 574.963084][ T5631] lock(&cmd->lock); [ 574.969574][ T5631] lock(&nsock->tx_lock); [ 574.976493][ T5631] lock(sk_lock-AF_INET6-NBD); [ 574.981330][ T5631] [ 574.981330][ T5631] *** DEADLOCK *** [ 574.981330][ T5631] [ 574.989455][ T5631] 3 locks held by kworker/u9:3/5631: [ 574.994717][ T5631] #0: ffff8880278b5940 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 575.005935][ T5631] #1: ffffc9000406fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 575.017669][ T5631] #2: ffff88802994dc68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 575.026969][ T5631] [ 575.026969][ T5631] stack backtrace: [ 575.032842][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 575.032871][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.032887][ T5631] Workqueue: nbd4-recv recv_work [ 575.032910][ T5631] Call Trace: [ 575.032921][ T5631] [ 575.032932][ T5631] dump_stack_lvl+0xe8/0x150 [ 575.032965][ T5631] print_circular_bug+0x2e1/0x300 [ 575.032981][ T5631] check_noncircular+0x12e/0x150 [ 575.033005][ T5631] __lock_acquire+0x1520/0x2cf0 [ 575.033029][ T5631] ? irqentry_exit+0x218/0x8f0 [ 575.033048][ T5631] ? lockdep_hardirqs_on+0x7a/0x110 [ 575.033067][ T5631] ? inet_shutdown+0x6a/0x390 [ 575.033085][ T5631] lock_acquire+0x106/0x350 [ 575.033103][ T5631] ? inet_shutdown+0x6a/0x390 [ 575.033125][ T5631] lock_sock_nested+0x41/0x100 [ 575.033141][ T5631] ? inet_shutdown+0x6a/0x390 [ 575.033158][ T5631] inet_shutdown+0x6a/0x390 [ 575.033177][ T5631] nbd_mark_nsock_dead+0x2cb/0x550 [ 575.033201][ T5631] recv_work+0x1cee/0x1e10 [ 575.033219][ T5631] ? lockdep_unlock+0x5d/0xd0 [ 575.033242][ T5631] ? __lock_acquire+0x13e8/0x2cf0 [ 575.033263][ T5631] ? __pfx_recv_work+0x10/0x10 [ 575.033279][ T5631] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 575.033294][ T5631] ? process_scheduled_works+0xa20/0x14e0 [ 575.033314][ T5631] ? rcu_is_watching+0x15/0xb0 [ 575.033335][ T5631] ? process_scheduled_works+0xa20/0x14e0 [ 575.033350][ T5631] process_scheduled_works+0xa8e/0x14e0 [ 575.033375][ T5631] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.033393][ T5631] ? assign_work+0x3cf/0x5d0 [ 575.033409][ T5631] worker_thread+0xa47/0xfb0 [ 575.033429][ T5631] ? __kthread_parkme+0x71/0x1f0 [ 575.033449][ T5631] kthread+0x388/0x470 [ 575.033468][ T5631] ? __pfx_worker_thread+0x10/0x10 [ 575.033483][ T5631] ? __pfx_kthread+0x10/0x10 [ 575.033501][ T5631] ret_from_fork+0x514/0xb70 [ 575.033522][ T5631] ? __pfx_ret_from_fork+0x10/0x10 [ 575.033542][ T5631] ? __switch_to+0xc89/0x1420 [ 575.033559][ T5631] ? __pfx_kthread+0x10/0x10 [ 575.033577][ T5631] ret_from_fork_asm+0x1a/0x30 [ 575.033596][ T5631] [ 575.244429][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.729292][T11640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.290198][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.329657][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.369789][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.769373][T11640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.249110][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 579.409858][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.369382][ T7847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.449716][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.489732][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.809865][ T7847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.119603][T18904] batadv1: left promiscuous mode [ 582.529935][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.570948][T11642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog