last executing test programs: 7.026254487s ago: executing program 3 (id=189): recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}], 0x1}, 0x80000000}], 0x1, 0x20, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000007c0)="87167da334a85edb36b880d3", &(0x7f0000000840)="b89e9772f85699acf3bdcf65ca2bd4979fdd5677eba9e627065fd10f6403d5f6d43f7032f2431351e2c854f53a29392ec56bfc691a878513046075f96dce4e", 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) (fail_nth: 7) 6.945269428s ago: executing program 3 (id=192): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) mremap(&(0x7f0000880000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f00000007c0)=0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xc00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.879692373s ago: executing program 3 (id=194): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)='?', 0x1}], 0x1}}], 0x1, 0x20084085) sendmmsg(r0, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000240)='W', 0x1}], 0x1}}], 0x2, 0x40800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xf9f2, 0x0, 0xea, 0x44, 0x0, 0x8, 0x5}, 0x20) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 7) 5.975837071s ago: executing program 3 (id=199): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)='?', 0x1}], 0x1}}], 0x1, 0x20084085) sendmmsg(r0, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000240)='W', 0x1}], 0x1}}], 0x2, 0x40800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xf9f2, 0x0, 0xea, 0x44, 0x0, 0x8, 0x5}, 0x20) syz_read_part_table(0x105a, &(0x7f0000001080)="$eJzsz7GNwkAUBNDx+WzL54sowCKmHUQRtEBEQgWEdEBZhDRACLJWhg6A4L3g68/ubLDho9pj7uMrVtO4bJPTapjWptq3yaJcNkn7bHZJfnJdLw/zcV3eD9PYzbW+bqqy/Xb5S24ljEn/n2zOb/kkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy5RwAAAP//5rwJTA==") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x400000, &(0x7f0000000180)=ANY=[], 0x1, 0x304, &(0x7f00000008c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x143841, 0x115) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) socket$inet6(0xa, 0x116eda2fdcaaf795, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$binfmt_script(r1, &(0x7f0000000740)={'#! ', './file1', [{0x20, '%,/!$'}, {0x20, '\x00'}], 0xa, "cd898c204d1661e58b6c5331d0a12e5721bcbb3d4e6b5e83e94d61bb0ae011dba44054b1159e511813c548f7303ac1fe132e9bf08fa8797175a472bd048e36cbb19474992a77841642d01f3303e94324768211a78b64265d98d6c0fdfc45d035cf5852696ae5525f3611ec30066e4693b82d49a35f"}, 0x88) r3 = getpid() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x4000805) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x109002, 0x0) ioctl$COMEDI_BUFINFO(r6, 0xc02c640e, 0x0) r7 = syz_pidfd_open(r3, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x101, 0x3ff, 0xe5, 0x8, 0x3, "67c349e98eea1904579ce2254bf2023118ced3", 0x4, 0xdc5}) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socket$inet6(0xa, 0x2, 0x0) 4.835708311s ago: executing program 3 (id=207): ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) close(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x10feffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) 3.265142549s ago: executing program 3 (id=220): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x2, 0xa, 0x20, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0xe, 0x4, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x80000003, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2080}, 0x1c) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r3, 0x400454cd, 0x300) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) ptrace$getenv(0x4201, r5, 0x7, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94) syz_clone(0x1906000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x0, {0x40, 0x1000, 0x5, 0x400f2}}) 3.236180953s ago: executing program 2 (id=221): syz_emit_ethernet(0x340, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x30a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1b, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 3.178497174s ago: executing program 2 (id=222): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000004c0)={0x3, 0x0, 0x5, &(0x7f0000000000)={0x18, "0000000000400000aeb2e1e12e2900"}}) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x8, @remote, 0x1}}, 0x40, 0xf, 0x9, 0x8, 0x2}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000440)={r2, 0x80, 0x400, 0x7}, &(0x7f0000000480)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2008052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@errors_remount}, {@resuid}]}, 0x3, 0x4dc, &(0x7f0000000c40)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000005fc0), 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000006000)) chdir(&(0x7f0000000400)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000580)=ANY=[@ANYBLOB="67c4498b9d4d69643d", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp949,shortname=winnt,check=strict,shortname=win95,nonumtail=0,shortname=winnt,shortname=win95,iocharset=iso8859-15,uni_xlate=0,utf8=0,rodir,utf8=0,\x00'], 0x7f, 0x2b1, &(0x7f00000015c0)="$eJzs3cuKI1UYAOC/0pXuRIVk4UoEC3ThKszME3SQFgazUmqhGx2cHpAkDHQg4AUzs3IvuPId3PkAPoAb38CFS8WdsxBLkkrl3jMdSffI8H2b+lPn/HUunL4QyJ9PXh/27z8cPXj81a/RaCRRO43TeJJEO2pReRQAwIvkSVHEn0XpWX2P116lteucFwBwfa789//oxqYEAFyzDz786L1ur3f2fpY1IobfjPMkymvZ3n0Qn8UgzuNWtOLviGKhjF+52zuLNMuqNwPGzcgjhh//PH/d/T1iln87WtHezK/eUchm4q3hZJxPR55e6/FSEtEtkrLLnWjFqxFFPeYPKS/v3u2d3cm28yM/jrff/H4+/3/OoxOt+OXTeBiDuD97xDL/69tZ9k7x3V9flivII5LJOD+Z9Vsq/AcEAAAAAAAAAAAAAAAAAAAAAMDBdLKF9mr9nKoaYKez2Z7mEX8Mq/xlfaDTmNUHmlf4mazU17mVZVlVxmec16Os75PGa2mkz2vdAAAAAAAAAAAAAAAAAAAA8H8y+vyL/r3B4PxiLfipmAbNp/bZDNKVO9XH+p+dtTvo/xCxf9ZVgjiaT22QbA2RVE17PPDHS5pO9plYc9egUbtsD9NBlJP/dv9NeGPfBV49aC+nWp2u/r0kFjv/aL6761mN3Ydk5dRVx/BilOxxIIsdW3d0adbxgTbh+OX/mt6MXU3TFdcXm7me1djYzPqBf1I2JIf9xQMAAAAAAAAAAAAAAAAAAGxZfug3fttqfPxcpgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN275/f+LINqbdzaDyTx5dqf29M4nF6Mdw7ZveJkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC84P4NAAD//14lUFg=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) getdents64(r5, &(0x7f0000000340)=""/69, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0xfffff1f6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 2.275482439s ago: executing program 1 (id=223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0xffffffffffffffff, 0x4, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e, 0xf00}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2.016050701s ago: executing program 2 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x0, 0x0, {0x2, 0xff}, {0x1, 0x1, 0x3}, 0xfe, 0xff}, {0x2, 0x2, {0x2}, {0x1, 0xf1, 0x2}, 0xfe, 0xff}, {0x2, 0x2, {0x1, 0x1, 0x1}, {0x0, 0xff, 0x2}, 0xfe, 0xfd}, {0x0, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xf0, 0x4}, 0xfd}, {0x0, 0x1, {0x0, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0x2, 0xfd}], 0xa0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 2.01557074s ago: executing program 1 (id=229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000c40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x2a, 0x3c, 0x65, 0x300, 0xb0, 0x6, 0x0, @empty, @remote}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0xff, 0x0, 0x0, 0x2, 0x6, 0x2, 0x4e21, 0x4e23, 0x2, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) 1.956642072s ago: executing program 1 (id=230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 1.944217117s ago: executing program 2 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'rose0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtclass={0x2c, 0x28, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff1}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.906032215s ago: executing program 1 (id=233): r0 = socket(0x2d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) 1.861723453s ago: executing program 0 (id=234): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000440)}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xff7fffffffffda7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x42, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 1.779972861s ago: executing program 1 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc010) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x202, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 843.302785ms ago: executing program 0 (id=236): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x43, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1}, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000484000/0x4000)=nil, 0x4000, 0x14) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x9, 0x2) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44014}, 0x0) 516.181774ms ago: executing program 2 (id=237): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="a9050000000064c600"/20, 0x14}], 0x1}}], 0x1, 0x44000) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000280)={[{@discard}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'nl80211\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}, 0x3, 0x4c3, &(0x7f0000000f00)="$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") read$smackfs_logging(0xffffffffffffffff, &(0x7f0000000000), 0x14) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x20cc, 0x2}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendfile(r3, r2, 0x0, 0x1000000000007) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) 509.676747ms ago: executing program 1 (id=238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d6ea5d613a2edc666f5034924f657e6a4367b591e8f3978f9156ef22dc4598429740fb388a4", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TIOCGICOUNT(r3, 0x5409, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@noblock_validity}, {@nodelalloc}]}, 0x1, 0x5be, &(0x7f0000000480)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r8, 0x3}, 0x0) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$MEMERASE64(r11, 0x40104d14, &(0x7f0000000000)={0xfffffffffffffffe, 0x10000}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r8, 0x285}, &(0x7f0000000140)=0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400989e2c3f4a65dc2b4f6b2589f0e4ef2de3c57cf938012569f5a38cb914fb5d904713dfb74c8f05cd6821e6367eea07736422e29a5162df8305c230996ff6bf87af67943f5fb64f0559ec3406a1f8a9f0a700283f", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="0500530001000000"], 0x24}}, 0x0) 498.101679ms ago: executing program 0 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xec2fa4b81eaeea5e}, {0x6, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 387.969289ms ago: executing program 2 (id=240): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x40880) r1 = socket$kcm(0x2d, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f009, 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000002c0), 0x12402, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4004000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r6, 0x0, 0x7fffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 300.42612ms ago: executing program 4 (id=242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x0, 0x0, {0x2, 0xff}, {0x1, 0x1, 0x3}, 0xfe, 0xff}, {0x2, 0x2, {0x2}, {0x1, 0xf1, 0x2}, 0xfe, 0xff}, {0x2, 0x2, {0x1, 0x1, 0x1}, {0x0, 0xff, 0x2}, 0xfe, 0xfd}, {0x0, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xf0, 0x4}, 0xfd}, {0x0, 0x1, {0x0, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0x2, 0xfd}], 0xa0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 235.188657ms ago: executing program 0 (id=243): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4040080) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x7fff, @private0, 0xb05}}, 0x0, 0x0, 0x4420, 0x0, "bb02a3c344ca41d6357e544508474004000b42920000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18bfaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe000400"}, 0xd8) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r1, 0x800) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) socket$packet(0x11, 0x3, 0x300) listen(r0, 0x4) r4 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0xffffffffffffffff, 0xc) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="2002fe00"/18, @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000400)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000440)=0xc) sendmsg$nl_route_sched_retired(r0, &(0x7f00000042c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004280)={&(0x7f0000000480)=@newtfilter={0x3dd8, 0x2c, 0x8c8278561b017f65, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0x3}, {0xfff2, 0x8}, {0xffff, 0xfff3}}, [@f_tcindex={{0xc}, {0x186c, 0x2, [@TCA_TCINDEX_POLICE={0x1024, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x4, 0x800000, 0x9c, 0xcd8, 0x9, 0x8, 0x10, 0xe4, 0x5, 0x10001, 0x5, 0x101, 0x4, 0x2, 0x0, 0x80000001, 0x9, 0x5, 0x4, 0xa, 0x1, 0x3617, 0x57, 0x8, 0x4e, 0x5, 0x4, 0x0, 0x1, 0x1000, 0x0, 0xa, 0x3, 0x9, 0x7f, 0x2, 0xc, 0x6, 0x9, 0x800, 0x9, 0x8, 0x5, 0xabb, 0x7, 0x1, 0x101, 0x1420, 0x0, 0x1, 0x3, 0x400, 0x3, 0x8fb, 0x6, 0x1, 0x2, 0x9, 0x0, 0x9, 0x6, 0xfffffff8, 0x3, 0x28942835, 0x0, 0x4, 0x6139, 0x80000000, 0x8, 0x5, 0x3, 0x0, 0xe, 0xf, 0x5, 0x5, 0x1abd, 0x4, 0x7f, 0x3, 0x0, 0x8, 0x8, 0x5, 0x2, 0xfffffffa, 0x7, 0x2, 0x9, 0x6dc4, 0x6, 0x9, 0x3, 0x0, 0x0, 0x3, 0x3ff, 0x4, 0x11, 0x3, 0x6, 0x4, 0x101, 0x49, 0x10, 0x9dd, 0x8, 0x3, 0xe, 0x2948, 0x5, 0x6, 0xf, 0x0, 0x6, 0x100, 0x2, 0x100, 0x3ff, 0x101, 0x4f, 0x8000, 0xe, 0xe000, 0x3, 0x0, 0x9, 0xf2b000, 0x9, 0x7, 0x7, 0x41a8, 0x8, 0x8, 0x4, 0x5, 0x1, 0x3, 0x6, 0x6, 0x7, 0x4, 0x179, 0x6, 0x7fffffff, 0x9, 0x3, 0x9, 0x8, 0xffffffff, 0x3ff, 0x401, 0x81, 0x74f9, 0x8, 0x0, 0x3, 0x3, 0x7fff, 0x8000, 0x9, 0x7fff, 0x7, 0x4, 0xfff, 0x8, 0x8, 0x4, 0xfffffff9, 0x3, 0x7f, 0x5, 0x5c, 0x8, 0x800, 0x6, 0x0, 0xfffffffa, 0x3ff4, 0x464, 0x4, 0x8, 0x5, 0xfffffffc, 0x3, 0x4, 0x7, 0x25004e68, 0x180000, 0x400, 0x8, 0x7, 0x2, 0xabd6, 0x0, 0x73e8, 0x7, 0x1000, 0x7, 0x6, 0x7, 0x8, 0xb5, 0x55, 0xdf8, 0x3, 0x3, 0x2, 0x3, 0x80000000, 0x9, 0xfffffffe, 0x6, 0x1ff, 0x800, 0xfffffffc, 0x7, 0x40000, 0x800, 0xfffffff9, 0x40, 0x4, 0x4, 0x1, 0x10, 0x2, 0x0, 0x7, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x4b70, 0x2d0, 0x9, 0x81, 0x8001, 0x208, 0x2, 0x5e, 0x3, 0x7, 0x4, 0x1, 0x4, 0x464, 0xfffffffa, 0x4, 0x0, 0x2, 0x8, 0x2e, 0x6, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1, 0x485, 0xc1, 0x6, 0x3, 0x3, 0x0, 0x6, 0x7fffffff, 0xffff13b7, 0x5, 0xc, 0xff, 0x1, 0x80000001, 0x4, 0x4be, 0x1ff, 0x242, 0x5, 0x10000, 0x80000000, 0x7, 0xfffffffb, 0x3, 0x81, 0x8000, 0x5, 0x10001, 0x81, 0x9, 0x416b, 0x1ff, 0x400, 0x6, 0x7, 0x3ff, 0x9, 0x0, 0x4, 0x9, 0xc, 0x1, 0x2, 0x2, 0xb, 0x5141, 0x1, 0x423b, 0x8, 0x2, 0x235d, 0x8, 0x1, 0x2000000, 0x6, 0x9, 0xa2, 0xf, 0x9, 0x3, 0xffffffff, 0x2, 0x4, 0x8001, 0x3, 0x5, 0x4, 0x400, 0x8, 0xc, 0x2, 0x6, 0x271, 0x5, 0x8, 0x9, 0xc7, 0x4, 0x7, 0x6, 0x6, 0x4, 0x3, 0x3, 0x4, 0x5, 0x4, 0x0, 0x9, 0x80000001, 0x80, 0xfffffff9, 0x5, 0x3fcf, 0xaea, 0x7, 0x1, 0xca78, 0x59ed, 0x5, 0x1000, 0x5e277199, 0x6800000, 0x8, 0x5, 0xf7bc, 0x40, 0x2, 0x8800, 0x0, 0x0, 0x0, 0x8, 0xff, 0x1, 0x40, 0x0, 0x4, 0x401, 0x9, 0x3, 0x2, 0x4, 0x0, 0x2, 0x4, 0x561d, 0x3ff, 0x94, 0x4, 0xe, 0x7f9, 0xb360, 0x536, 0x6be4c09, 0x80, 0x4, 0xfffffffd, 0x5, 0x2, 0x9, 0x4, 0x0, 0x8001, 0x10000, 0x0, 0x0, 0x800, 0xfffffff6, 0x42b, 0x38000000, 0x0, 0x1, 0x9, 0x6, 0x8, 0x6, 0x6d, 0x1000, 0x5, 0xa000, 0x0, 0x8, 0x7, 0x7fffffff, 0xeecd, 0xa, 0x80000000, 0x355, 0x40, 0x6, 0x3, 0x3, 0x401, 0x7fff, 0x10, 0x80000001, 0x0, 0xffffffff, 0x2, 0x9281, 0x2, 0x218, 0x0, 0xf, 0xc, 0xa17, 0x0, 0x401, 0x4, 0x1, 0x4, 0x80, 0xe24, 0xf5, 0x10000, 0x3, 0x6, 0x7, 0x2, 0x75a, 0xed, 0x8ca7e19b, 0x6, 0x2, 0x0, 0x6, 0x3ff, 0x400000, 0x38, 0x4, 0x3, 0x8dbbd7dd, 0x100, 0x80000000, 0x6, 0x4, 0x2, 0x80000000, 0xcdd2, 0x1, 0x9, 0x10, 0x0, 0x0, 0x7b, 0x0, 0x9, 0x5, 0x2, 0x10, 0x6, 0x1, 0x8, 0x9, 0x39, 0x4, 0x2a60, 0x6, 0x2, 0x43, 0x7fffffff, 0x4, 0x457a10ad, 0x80, 0xf5, 0x683, 0x7, 0x7, 0x8003, 0x100, 0x7f, 0x3ff, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff1526, 0x7, 0x1, 0xffff7fff, 0x7, 0x80000001, 0xb6bc, 0x2, 0xfff, 0x7, 0x0, 0xfffffffb, 0xe4f, 0x7, 0xff, 0x68b, 0x8, 0x4, 0x5, 0x8, 0x4e0, 0x3ff, 0x0, 0x1, 0x3, 0x1, 0x8, 0x0, 0x7, 0x4, 0x100, 0x80000001, 0x3, 0x6, 0x5, 0x80000000, 0x9, 0x5, 0xd12, 0xfffffffd, 0x5, 0x5, 0x3, 0x100, 0x5, 0x7, 0xc651, 0xc6, 0x9, 0x2a, 0x13a, 0x0, 0x3, 0x9, 0x0, 0xffffffc0, 0xffffffff, 0x8, 0xa, 0xfffffff9, 0x4, 0xfffffffb, 0x5, 0x4, 0x5, 0x8, 0x1, 0x2, 0x7fff, 0x9d0, 0x0, 0x3, 0xd6, 0x3, 0x4, 0xc, 0xf, 0x0, 0x8, 0x9, 0x8001, 0x3, 0x6, 0x10001, 0x4, 0x2, 0x7bf, 0x0, 0xfffffffe, 0x3000000, 0x3ff, 0x1000, 0x5, 0x7, 0x8, 0x5, 0xfff, 0xfffffffa, 0xb, 0xe13, 0x0, 0x6, 0x3, 0x401, 0x0, 0x9, 0x137, 0x6, 0x81, 0x0, 0xffff, 0x7, 0x0, 0x3, 0x6, 0x40, 0x0, 0x6, 0x1, 0x8, 0x9, 0x4, 0x63e, 0x4, 0x0, 0xd920, 0x4, 0x9, 0x80000001, 0x3, 0x6, 0x3, 0xd, 0x9, 0xff, 0x1, 0x80000001, 0x0, 0xe, 0x7fff, 0x8000, 0x9, 0x1, 0x9, 0x5, 0x4, 0xfff, 0x7, 0x4, 0x2, 0xf, 0x7, 0xff, 0x5, 0x0, 0x1, 0x8af4, 0x0, 0x80000000, 0x4, 0x1d0, 0x3, 0x2, 0xff, 0x6, 0x255, 0xaa7, 0x8, 0xf8e, 0xf, 0x32, 0x100, 0x7fffffff, 0x1a5f, 0xfffffffc, 0x2, 0x8, 0x1, 0x5, 0xe, 0x7ff, 0x4, 0x2, 0x5, 0x852a, 0x5, 0x101, 0x8dc8, 0x8, 0x7fff, 0x4, 0x0, 0xd4, 0xf, 0xe, 0x3b08, 0x7dd1, 0x4, 0xcd5, 0x5, 0x3, 0x0, 0x0, 0x8001, 0x10a0, 0x11, 0x2, 0x5b5b, 0xf05, 0x10001, 0x7f, 0xdbd, 0x9, 0x0, 0x5, 0x7, 0xfff, 0x80000000, 0xffffffff, 0x3, 0x10000, 0xea41, 0x0, 0x6, 0x6, 0x77c, 0x1, 0x7, 0xfffff234, 0x4, 0x5, 0xc2, 0x8, 0xffffffff, 0x1fc7, 0x1, 0x6, 0x7, 0x3, 0x1, 0x40, 0x9, 0x5, 0x800, 0x63d, 0x0, 0xffffffc0, 0x8, 0x6af, 0xfffffffe, 0xb, 0x30a, 0x8, 0x3ff, 0x9, 0xaea]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffb, 0x0, 0x3ff, 0xa, 0x81, 0x8001, 0x7, 0xa, 0x4, 0xc7c, 0x8001, 0xe7, 0xd, 0x8, 0x7f, 0x2, 0x7, 0x6, 0xc, 0x4c3, 0x2, 0x10001, 0xc, 0x1, 0xfe17, 0x2, 0x2, 0x2, 0x3, 0x3, 0x4, 0x4, 0x101, 0x1000, 0x7, 0x2, 0x1, 0x8, 0x2, 0x4000000, 0x6f5a, 0x1d5, 0x200000, 0x3, 0x4, 0x2a, 0xe, 0x1ff, 0x9, 0x4, 0x1, 0xffffffff, 0x4, 0x8, 0x100, 0xa6f, 0x5, 0xb85e, 0x3, 0x800, 0x1, 0x6, 0x40, 0xfffffffe, 0x200, 0x6, 0x5, 0x3, 0x5, 0xd0, 0x4, 0x0, 0x10, 0xead6, 0x8000, 0x3800, 0x8001, 0x2, 0xea2, 0x5, 0x9, 0x7, 0xfffffc01, 0x8, 0x2, 0x8, 0xea, 0x1, 0x6, 0x8, 0x2, 0x10000, 0x3df, 0x8, 0x1, 0x800, 0x8, 0x2000, 0xa, 0xa, 0x2c, 0x80000000, 0xffff, 0x7, 0xc, 0x1, 0x9, 0x7, 0xb, 0x7ff, 0x7, 0x5, 0xffffffdf, 0x2, 0x93, 0x7f, 0xfc5, 0xffffff80, 0x2, 0x1, 0x5f46, 0x1, 0x9, 0x7f, 0x1000, 0x3, 0x8000, 0x6, 0x9, 0x6, 0x6, 0x0, 0x4, 0x6, 0x0, 0x3, 0x2e9a, 0x3, 0xfffffffc, 0x7fff, 0x7ff, 0x3, 0x6, 0x7, 0x80, 0x7fff, 0xdd, 0x5, 0x648, 0x1, 0x4, 0x7fffffff, 0x40, 0x9c, 0x0, 0x7fff, 0xb4000000, 0x1ff, 0x3, 0x8, 0x461, 0x89, 0x7, 0x7, 0x1, 0x80000001, 0x40, 0x7f, 0x695a, 0x101, 0xfffffff9, 0x4, 0xfffffffb, 0x101, 0x2ec, 0x10e, 0xffff1765, 0xcc, 0x9, 0x607, 0x3, 0x6, 0x0, 0x9, 0x6, 0x3000000, 0x2, 0x7, 0xc7, 0x3, 0x0, 0x80000000, 0x401, 0xffff, 0x9, 0x65d5, 0x10, 0x9, 0x8, 0x50f, 0x7fff, 0xdd, 0xc, 0x8001, 0x8, 0xd07, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x80, 0x7fff, 0x9, 0xbcd, 0x82, 0x0, 0x0, 0x4, 0xc1ed, 0x1, 0xfffffffe, 0x4, 0x7, 0xc2, 0x6, 0x800, 0x4f6b, 0x6d0, 0x8, 0x5, 0x8, 0x4, 0x1, 0xfffffe01, 0x5, 0x6, 0x2, 0xfff, 0xc, 0x5cf5, 0x6e82, 0x8001, 0x1000, 0x3, 0x1e, 0x7, 0x5, 0x8, 0x9, 0x10, 0x80000000, 0x9, 0x28, 0x6]}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xaac9}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x6}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_POLICE={0x82c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x4967, 0x3, 0x9, 0x0, 0x3, 0x1d00, 0xb, 0x80000001, 0x8, 0x6, 0x2, 0xffffffff, 0x1, 0x9, 0x81c, 0x8, 0x7, 0x3, 0x58d, 0x6f7, 0x5116, 0x8, 0x7, 0x6, 0xffff8cef, 0x705, 0xd2, 0x9, 0x9, 0x0, 0xfffffff5, 0x2, 0x7fff, 0x81, 0xb7, 0x3, 0x10001, 0x9, 0x0, 0x7, 0x6, 0x100, 0x2, 0x1ff, 0xffffffa2, 0x2, 0x5, 0x5, 0x2, 0x6, 0x4, 0x3, 0xffffff08, 0x34, 0x1ff, 0x10001, 0x10000, 0xd, 0xc, 0x5, 0x2, 0x401, 0xeb6, 0x2, 0x8, 0x7, 0x6, 0x3ea36268, 0xfffffff9, 0x101, 0x1, 0x2, 0x8, 0x7fff, 0x7, 0x2b90865f, 0xbfa, 0x1, 0x2, 0x7, 0x2, 0x4, 0x6, 0x3, 0x3ff, 0x458e, 0x1000, 0x9, 0x802, 0xc6c, 0x1d95, 0x5, 0x4d4d9e32, 0x9, 0xffff, 0xb, 0x4, 0x80000000, 0x7ff, 0x0, 0xf, 0x89, 0x2d1d80, 0x8, 0x1ff, 0x0, 0x4, 0x6, 0x9, 0xffffffff, 0x8001, 0xfffffff5, 0x8, 0x7, 0x7, 0x9, 0x4, 0xb, 0x40, 0x0, 0x4, 0xa3b, 0xc86, 0x2, 0x0, 0x3, 0x4, 0x5816, 0xf, 0x9, 0x4, 0x3ff, 0x9, 0xc, 0x10000, 0x5, 0x15a10058, 0x2, 0x0, 0x1, 0x3, 0x156, 0xb042, 0x5a, 0x4, 0x7, 0x8, 0x7, 0x0, 0x1ff, 0x6, 0x184, 0x34, 0x5, 0x2, 0x80000001, 0x2, 0x401, 0x1, 0xd, 0x1, 0x0, 0x2, 0x800, 0x1, 0x2, 0x7, 0x1, 0x3909000, 0x1, 0xfffffffe, 0x9, 0x6, 0x4186, 0x4, 0x8, 0xfffffff8, 0x2, 0x3, 0x9, 0x6, 0xffffbffb, 0x101, 0x7, 0x4f, 0x7, 0x2800, 0xb1, 0x8, 0x6, 0x1, 0x100, 0x5, 0x7, 0x3, 0x2, 0xb, 0x6cd, 0x9, 0x5f, 0x10, 0x2, 0xecd6, 0xfff, 0x7, 0x4, 0xe, 0xffffffff, 0x7fffffff, 0xa, 0x4, 0x2, 0x9a, 0x6, 0x7ff, 0x0, 0x3, 0x9, 0x1, 0x8, 0x80000000, 0x6, 0x6, 0x6, 0x7ff, 0x9, 0x8000, 0x3, 0x6, 0x5, 0x4, 0x50000, 0xff, 0x6, 0x0, 0x9, 0x3, 0x1, 0x3, 0x3, 0xffffffff, 0x8001, 0x5, 0x2, 0x9538, 0xb, 0x8, 0x4, 0xe, 0x2d66, 0x3, 0x1, 0x8, 0x10, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x9, 0x7f, 0xfffffff7, 0x6, 0x5, 0x2, 0x8, 0x3, 0x6, 0x1, 0x800, 0x0, 0x5, 0x81, 0x401, 0x5, 0x2, 0x7, 0x6, 0x3, 0x9, 0x1ff, 0xf0, 0x1, 0x7fff, 0x5, 0x4, 0x1ff, 0x40, 0x3b, 0x3, 0x5, 0x1, 0x3d000000, 0x7fffffff, 0x2, 0xf, 0xb, 0x8, 0x7, 0x6, 0xfffffff8, 0x2, 0x4, 0x17d3, 0x8, 0x40, 0x5, 0x0, 0x5d7fb245, 0x9d, 0x1, 0x1f, 0x0, 0x4, 0x8, 0x9, 0xfffffff9, 0x9, 0x2, 0x6, 0x6, 0x8, 0xeab, 0x1, 0x3, 0x5, 0x9, 0x0, 0x1, 0x4, 0xd7, 0x4, 0xffffff08, 0xe4, 0x5, 0xe, 0x7fffffff, 0x9, 0x8, 0x699, 0x8, 0x4, 0x2, 0x6, 0xcbcd, 0x8001, 0x1, 0x1, 0x0, 0xffff, 0x2, 0x80000001, 0x6, 0x8, 0xc43d, 0x5, 0xffff0001, 0x7, 0x7, 0x9, 0x2, 0x80000000, 0x3, 0x7fffffff, 0x80000001, 0xbc5, 0x400, 0x9, 0x8, 0x8, 0x7fff, 0x7b4d, 0x8, 0x5, 0xd, 0xfffffffe, 0xc, 0x800, 0xe, 0x5, 0x364bd286, 0x9, 0x7fff, 0xffffffff, 0xc264, 0x3, 0x9, 0xb2, 0xcfd, 0x4, 0xa0, 0x401, 0x6, 0x101, 0xfff, 0xa, 0x7, 0x4, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x6, 0x6, 0xfffffdf1, 0x4b1, 0x1, 0x7f, 0x8, 0x7, 0x7, 0x87, 0x3, 0x7, 0x5, 0x48, 0x5, 0x7d7c88af, 0x8, 0xf9, 0xe9b9, 0x3, 0x2, 0x2, 0x6, 0x2, 0xfffffffb, 0x2, 0x3, 0x1, 0x1, 0xd1, 0x5, 0x1, 0x7, 0x8, 0x0, 0x6, 0x0, 0x1, 0x2, 0x1, 0x5, 0xa, 0x4, 0x6, 0xffff, 0xf, 0x7f, 0x0, 0x8, 0xaa3, 0x9, 0x1, 0x1, 0xfffffdcb, 0xfffffffc, 0x92, 0x9, 0x366, 0x7, 0x4, 0x0, 0x3, 0x1, 0x2, 0x8, 0x80000001, 0xa, 0x4, 0x40, 0x3, 0x19b, 0x3, 0x7, 0x5, 0x0, 0x80000001, 0x0, 0xb3, 0x1, 0x58, 0x7, 0xfffff801, 0x6, 0x5999, 0xfffffffa, 0x80000001, 0x5, 0x3, 0xff, 0x4, 0x1, 0xff5, 0x4, 0x8001, 0xfffffff7, 0x6000000, 0x2, 0x1, 0x7, 0x9, 0x1ff, 0x7, 0x3, 0x47b6, 0x1, 0x3, 0x1, 0x6, 0x0, 0x6, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc}]}]}}, @f_tcindex={{0xc}, {0xc50, 0x2, [@TCA_TCINDEX_POLICE={0xc3c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x0, 0x2, 0x3, 0x81, 0x0, 0x180c, 0x8, 0x2, 0x3, 0x0, 0xfffff25a, 0x3, 0x10, 0x1, 0xd1f, 0x4, 0xffff5ec0, 0x0, 0x0, 0x79, 0x5, 0x8000, 0x3, 0x0, 0x20, 0x3, 0x5d, 0x2, 0xf, 0xdac, 0xa4, 0xe, 0x2, 0xffffffff, 0x9, 0x4, 0x7, 0xfffff099, 0xb, 0x3, 0xfffffffa, 0x800, 0x6, 0x5, 0x200, 0x6, 0x401, 0x4, 0x7f, 0x2, 0x1, 0x1ff, 0x400, 0x5, 0x0, 0x2, 0x40, 0xfffffffa, 0x5, 0x2, 0x0, 0x3, 0x5, 0x4b, 0x1, 0x6, 0x100, 0x5, 0x3, 0x1000000, 0x6c08, 0x6, 0x2f46, 0x3, 0x2, 0xa, 0x9, 0x2, 0x9, 0x101, 0x800, 0x49, 0x8, 0x72, 0x1, 0x4, 0x0, 0x4, 0x40, 0x3, 0x2, 0x6, 0x8, 0xc5, 0x5, 0xe, 0x3, 0x4, 0x3, 0xc0000000, 0x9, 0x7, 0x9, 0x7, 0xaad, 0x7, 0xfffffff8, 0x54, 0xffffff40, 0x12, 0x5, 0x1ff, 0x2, 0xfffffff1, 0x3, 0x0, 0x1, 0x3, 0x6, 0x8, 0x4, 0x6, 0x1, 0xd, 0xd, 0x8, 0x0, 0x7, 0x1, 0x76a, 0x0, 0xfffff35c, 0x9, 0x101, 0xed3d, 0x5, 0xd5, 0x5, 0x8, 0x7f, 0x10000, 0x2, 0x1, 0x1bc, 0x7, 0x101, 0xc, 0x1, 0x6, 0x101, 0x0, 0x1, 0x10001, 0x9d, 0x5, 0x7, 0xe, 0xa, 0x57, 0x2, 0x7f8000, 0x4, 0x4, 0x9, 0x7, 0xf, 0x37, 0x5, 0x4b5a, 0xfffff800, 0x0, 0x1, 0x525, 0x0, 0x1, 0xfffffffc, 0x3291, 0x5, 0xd35b, 0x6, 0xa38, 0xa7d2, 0x8433, 0x2, 0x4, 0xf8, 0x3, 0x6a6, 0x0, 0xca, 0x4, 0x8, 0x6, 0x10001, 0x3, 0x7, 0x0, 0x5, 0x401, 0x80000000, 0x8, 0xfffff001, 0x9, 0x694, 0xffffffa5, 0x7, 0x80000000, 0x94, 0x5, 0x4, 0xffffffff, 0x7, 0x9, 0x7, 0xffff, 0x6db43f7c, 0xffff0000, 0x7, 0x85d9, 0x7, 0x1000, 0x1000, 0xfffffffa, 0xc, 0x40, 0x8, 0x6, 0xffffffff, 0x101, 0x1, 0x4, 0x6, 0xf27, 0x6, 0x49, 0x2, 0x4, 0x4, 0x6, 0x8001, 0x4, 0x0, 0x3, 0x9, 0x6, 0x7, 0x8, 0x2, 0x9, 0x200, 0x9, 0x7fff, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x1, 0x200, 0xf, 0xffffffff, 0xb, 0x5, 0x8001, 0x1ff, 0x6, 0x10000, 0xfffffffa, 0x1, 0x4, 0x7fffffff, 0x4c3, 0x8, 0xe, 0x1, 0x2, 0xff, 0x7, 0x2, 0x5, 0x2, 0x200, 0x3, 0x4, 0x5, 0x10, 0x101, 0x7a, 0x0, 0x2, 0x9, 0x3, 0x6, 0x200, 0x400, 0x5, 0x2, 0xff, 0x8, 0x8, 0x3, 0x3, 0x4, 0xf, 0x9, 0x6, 0x0, 0x3, 0x1ff, 0xe0, 0x9, 0x3, 0x5, 0xb, 0x4, 0xf8b2, 0x5, 0x1, 0x9, 0x9, 0x4, 0x8001, 0xb342, 0x2, 0x40, 0xe37, 0x8, 0x3, 0x7, 0xa, 0x1ff, 0x4, 0x92, 0x0, 0x8001, 0x0, 0x2, 0x9, 0x5, 0x0, 0x4, 0x8, 0xc, 0x5e3, 0x100, 0x10000, 0x4dc73942, 0x1, 0x4, 0x2, 0x8, 0xffffff8e, 0xfffffffa, 0x2c8, 0x6, 0x3, 0x0, 0xa7, 0x68b, 0x9, 0xef0, 0x97, 0x40, 0x100, 0x1905, 0xff, 0x7, 0x4, 0x5, 0x2, 0x3, 0x548, 0x8001, 0x8, 0xe, 0x1, 0x4, 0x80, 0xfff, 0x8, 0x4, 0x4, 0x6, 0x28000, 0x10001, 0x0, 0x22c8, 0x3fe0, 0x2937, 0xb, 0x10, 0x7ff, 0xb, 0x5, 0x7f8c, 0x3, 0x7, 0x0, 0x6, 0x4, 0x0, 0xe, 0x0, 0x3, 0x0, 0x6, 0x5, 0x1000, 0x7, 0x3, 0x7, 0x4, 0x8, 0x10000, 0x9, 0x2, 0x7470, 0x80000001, 0x2, 0x1, 0x0, 0x9, 0x0, 0x8b9, 0x8, 0x7, 0x2, 0x9, 0xc9, 0x3eb81788, 0x400, 0x0, 0xfff, 0x6, 0x6dd2, 0xedc5, 0x6, 0x6, 0x8, 0x101, 0x14db, 0x9, 0x9, 0xfffffff7, 0x5, 0x2b8c7a42, 0x80000000, 0x6, 0xd, 0x9, 0xe0f, 0xfffffffa, 0x23, 0x5ee4, 0x7, 0x3, 0x8, 0xffff, 0x1ff, 0x8, 0x5, 0x40, 0x8, 0x8001, 0xa18, 0x60, 0x2, 0x797b062b, 0x8000000, 0x6, 0xda0, 0x3, 0x5, 0xc, 0x6, 0x2e, 0x0, 0x444, 0x3, 0x80000001, 0x3, 0x7, 0x56f4d585, 0xffffffd2, 0x39e, 0x1, 0x1000, 0x600000, 0x1000, 0x2, 0x2, 0x3, 0x7, 0x5, 0x10001, 0x800, 0x3, 0x3, 0x80, 0x80, 0x6, 0x1, 0xffff, 0x4, 0x8, 0x2657, 0x6, 0x8000, 0x52e4, 0xa, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x0, 0x49e33127, 0x6, 0xe, 0x4, 0xfffffff9, 0x4, 0x8, 0x7fff, 0x6, 0x7ff, 0x4, 0x7, 0x8, 0x7, 0x2, 0x40, 0x54, 0x7, 0x2, 0x5, 0x7, 0x0, 0x0, 0x81, 0x6ce4, 0x9, 0xa, 0x8, 0x8000, 0x2, 0x3, 0x4, 0xffffffff, 0x8, 0x0, 0x5, 0x8, 0x1, 0x4, 0x4, 0x0, 0x4, 0x0, 0x7, 0x1, 0x8, 0x10, 0x1ff, 0x1, 0x8, 0x3, 0x9, 0x9000000, 0x7, 0x5, 0x9, 0x4, 0x2, 0x8, 0xb, 0xfffff000, 0x4, 0x1000, 0x2561, 0xffffff01, 0x1, 0x401, 0x8, 0x3, 0x3, 0x6, 0x8, 0x821, 0x0, 0x2, 0x6, 0x5, 0x5749, 0x4, 0x8, 0x6, 0x2e, 0x4, 0x0, 0xa, 0x6, 0xf7a, 0x0, 0x5, 0x5, 0x1, 0xbc0, 0x5, 0x2, 0x9, 0x7fff, 0xf9b, 0x80000001, 0x4, 0x8, 0x4, 0x0, 0xd6, 0x101, 0xfffffffc, 0x6, 0x5, 0x0, 0xfffffffd, 0x8, 0x8, 0x8510, 0xec, 0xfe, 0x8, 0xffffffff, 0x384, 0x0, 0x0, 0x0, 0x3, 0xc2, 0x1, 0x1, 0xb, 0xda84, 0x8, 0x5, 0x6, 0x3, 0x7, 0x7ab, 0x100, 0x4, 0x3, 0x5, 0x8, 0x0, 0x81, 0x80000000, 0x78, 0x1, 0x6, 0x8000, 0xe67, 0x9, 0x8, 0x9, 0x7, 0x9, 0x1, 0x2, 0xd, 0xc0, 0xfff, 0x8, 0x5, 0x8, 0x4, 0x1, 0x6, 0x5, 0x400, 0x1, 0x6, 0x0, 0xfffffa00, 0x7ff, 0x9, 0x401, 0x8, 0x2, 0x200, 0x68, 0x72f6b01e, 0x91, 0x0, 0x2, 0x6, 0x4, 0x1, 0x8, 0x2, 0x8, 0x7fffffff, 0x401, 0x67949e95, 0x5, 0x6, 0x0, 0x6, 0x5, 0x8, 0x3, 0x0, 0x210, 0x6, 0x9, 0x1, 0x80000, 0x7, 0xc, 0x6, 0x8000, 0x3, 0x4, 0x7, 0x7, 0x6, 0x2, 0x6, 0x10000, 0x3, 0x7, 0x6, 0x1, 0xff, 0x2, 0x4, 0x2, 0x37, 0x2, 0xffff, 0x100, 0x0, 0x0, 0x8c63, 0x8f5, 0x40, 0x5, 0x6, 0x7fff, 0x9, 0x8000, 0x62c, 0x6, 0x51, 0x6776, 0xfffffff5, 0xb8000000, 0x0, 0x1, 0x3, 0xaf, 0x8, 0x2, 0x800, 0xfffffff2, 0x5, 0xe5, 0x9, 0xc, 0xc1f0]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe50}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}]}}, @f_rsvp={{0x9}, {0x18d4, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x8}}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_POLICE={0x820, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe0a}, @TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x6, 0x5, 0x5, 0x4, 0x0, 0x83b, 0x3, 0x10000, 0x8, 0x80000001, 0x40, 0x7fff, 0x3494, 0x6, 0x1, 0xb801, 0x8001, 0xf9a9, 0x4, 0x6c20, 0x8, 0x1, 0x81, 0x7, 0x5, 0x6, 0x3, 0x4, 0x400, 0x331, 0x4, 0x9, 0x7, 0x3, 0x0, 0x1, 0x7, 0x5, 0x4, 0x9, 0x4, 0x4, 0xf1682e, 0x3, 0xfffffff9, 0x5, 0x6, 0x10001, 0x6, 0x41, 0x7ea, 0xf534, 0x3, 0x4, 0xb85a, 0x2, 0xd, 0xfffffffa, 0x6, 0x7, 0x2, 0x2, 0xc, 0x1, 0x8, 0xd, 0x6, 0x9fc1, 0x7, 0x1ce08db7, 0x6, 0x3, 0x1000, 0xffffffff, 0x1, 0x7, 0x8, 0xb, 0xf, 0x7, 0x3, 0xfff, 0xe, 0x5, 0x1, 0x3ff, 0x0, 0xffffffff, 0x8, 0x9, 0xc, 0xdbfe, 0x4, 0x6, 0x8, 0x0, 0x0, 0xbc60, 0x8cac, 0x7fffffff, 0x8, 0x401, 0x4, 0x17, 0xf4ee, 0x7, 0x2f, 0x4, 0x7, 0x400, 0xf75c, 0x3, 0x7, 0x6, 0x3, 0x81, 0x81, 0x8, 0x6, 0x73f7, 0x6, 0x0, 0x95, 0x3ff, 0xffffffff, 0xfffffff9, 0xb6f, 0x2, 0x0, 0x80000000, 0x8000, 0x3, 0x2, 0x6, 0x7c06e895, 0x1, 0x8, 0x9, 0x5, 0xffffff38, 0x9, 0x100, 0xffffffff, 0x2, 0x1, 0x4, 0x80000000, 0x4, 0x0, 0x5, 0x10001, 0x0, 0xa, 0x3, 0xe, 0xc43, 0xfcf000, 0x8, 0xfff, 0x1, 0x80000001, 0x8, 0x4, 0x3, 0x5, 0x1, 0x5, 0x0, 0x14, 0x4, 0xfffffff9, 0xead0, 0x2, 0x7, 0x9, 0x7ff, 0x8, 0x3, 0xffffee4c, 0x7, 0x1, 0x6, 0x2, 0x767, 0x6, 0x10, 0x5f6, 0x7, 0x615, 0x9, 0x825, 0x10001, 0x7, 0x3, 0x100, 0x3, 0x3, 0x41, 0x5, 0x10, 0x9, 0x8, 0x1, 0xfffffff1, 0x5, 0x3, 0x8, 0x1, 0x80, 0x5, 0x8, 0x8, 0x2, 0x10, 0x7, 0x5, 0x2, 0x40, 0x7, 0x26fa0f49, 0x4, 0x4c8f, 0xfffffff9, 0xc, 0x5, 0x0, 0x9, 0x2, 0x7, 0x2, 0x2, 0x2, 0xfff, 0x9, 0x7, 0x7, 0x80, 0x1, 0x93, 0x1, 0xa729, 0xfc, 0xb, 0xd, 0x8000000, 0x7fffffff, 0x80000000, 0xfffffff8, 0x1, 0xfffffffc, 0x2, 0x8, 0x0, 0x6d1c29ef, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x7, 0x4, 0xf, 0x5, 0x6, 0xb64, 0x8, 0x2, 0xc0, 0x8, 0x1, 0x7, 0xf, 0x5, 0x0, 0x8, 0xff, 0x8, 0x80000001, 0x400, 0x70000, 0x7, 0x9, 0x80, 0xe2f, 0xfffffff8, 0x6, 0x6, 0x4b, 0x4, 0x5, 0x3ff, 0x1, 0x1, 0x800, 0x3, 0x3ff, 0x1, 0x6, 0x65de3c1, 0x5, 0xc, 0x1, 0x0, 0x4, 0x8, 0x7, 0x1, 0x15b7, 0x1ff, 0x8, 0xc, 0x1, 0xe, 0x8, 0x3, 0x1, 0x6, 0x6, 0x8, 0x6362, 0x1, 0x5, 0x5, 0xac44, 0x8, 0x4, 0x0, 0x0, 0xfffffff9, 0x9, 0x4ed, 0x6, 0x8f, 0x6d5, 0x4, 0x6, 0x8000, 0x1ff, 0x1000, 0x4, 0x7, 0xfffffffd, 0x7f, 0x0, 0x93d9, 0x0, 0x7, 0x4, 0x5, 0x2, 0xed, 0x407b, 0x3, 0x8000, 0x6, 0x7f, 0x10000, 0x3ff, 0x2, 0xfffffff8, 0x8, 0x3, 0x3, 0x80000001, 0x11, 0x0, 0x6, 0x7, 0x7, 0x5, 0xfffffff7, 0x6, 0xc9c5, 0x4, 0x2, 0x8, 0x9, 0x7, 0x5, 0x6, 0x8, 0x2, 0x2fd8, 0x1dfa0, 0x81, 0x436, 0x6, 0x1b2, 0x6, 0x4, 0x9, 0xf4, 0x800, 0x800, 0x5, 0xffffff11, 0x7, 0x3, 0x4, 0x2, 0x6, 0x4, 0x3, 0xfffffffe, 0x65, 0x19d, 0x3, 0x400, 0x4, 0x40, 0x9, 0xa6b, 0xfffffff9, 0x6c61fe0f, 0x3, 0x80, 0x6, 0x2, 0xf5, 0x7, 0x6d, 0x7, 0x7030185d, 0x8001, 0xa, 0xfffffffa, 0x4, 0x0, 0x7fffffff, 0x3, 0x1, 0xff, 0x1, 0xe, 0x10001, 0x8001, 0x7fff, 0x6, 0x8, 0xd8, 0x964a, 0x2, 0xe, 0xfffffff9, 0x800, 0x2, 0x5, 0xb, 0x7, 0x4, 0x1ff, 0x9, 0x7fff, 0x0, 0x6f80, 0x8000, 0x9, 0x7f, 0x0, 0x8, 0x412, 0x2, 0x0, 0x8, 0x7fff, 0x4, 0x8, 0x0, 0x1, 0x10000, 0x3, 0x9, 0x9, 0x7, 0x99, 0x3, 0x8000, 0x8001, 0x6, 0x8001, 0x40000000, 0x7fffffff, 0x9, 0x7, 0x1, 0x8, 0xcc6a, 0x3, 0x0, 0x2, 0x5, 0x5, 0xb, 0x7, 0x4, 0xc, 0x1, 0xe, 0x4, 0x8, 0x11686fc, 0x8, 0x2, 0x4, 0xb7b, 0x9, 0x7, 0x100, 0x9, 0x5, 0x0, 0x7fffffff, 0xaf]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_RSVP_POLICE={0xc78, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xb0b, 0x8, 0x40, 0x9, 0x40, 0x8963, 0x0, 0xa0000000, 0x5, 0x2, 0x4, 0xf20, 0x9, 0x10000, 0xe, 0xfffff800, 0x4, 0x3, 0x6, 0x81, 0x6, 0x5, 0x2483, 0x9, 0x9, 0x8001, 0x4, 0x0, 0xa, 0x5, 0x5, 0x5, 0x8, 0x5, 0x1, 0x4, 0x5, 0x1, 0x4, 0x5, 0x75, 0x0, 0x52, 0x4, 0xfffffff8, 0x7, 0x8, 0x7, 0xf, 0x80000000, 0x3b, 0x562, 0x4, 0x3, 0x1, 0x3, 0xac, 0x8, 0x9, 0x2, 0x1, 0x59, 0x97c, 0x5, 0x9, 0x5, 0x7fff, 0x7, 0x3, 0xfffffffb, 0xb6, 0xcac4, 0x8, 0x1, 0x3, 0x400, 0x4, 0x2, 0x5, 0x4, 0x8, 0x7f, 0x7, 0x2, 0x1, 0x237, 0x8000, 0xf1bdd5dc, 0x5, 0x95bc0, 0x9, 0x5, 0x7, 0xf, 0x90, 0x8, 0x4, 0x7fffffff, 0x4, 0x6, 0x44, 0xfffffff5, 0x40, 0x1ff, 0x80, 0x0, 0x21d3, 0x65, 0x81, 0x5, 0x800, 0x10000, 0x80000000, 0x1, 0x9, 0x7fffffff, 0x3, 0x7, 0x2, 0xf, 0x6, 0x80000000, 0x47c, 0x5, 0xffff0001, 0x4, 0x7fffffff, 0x93110, 0x2000000, 0x3, 0x1, 0x33f9486e, 0x5, 0x40, 0x7, 0x5, 0x8, 0x100, 0xd, 0x3, 0x80000000, 0x0, 0x3, 0x6, 0x7fffffff, 0x4, 0x8, 0x80, 0xa, 0x9, 0x8, 0x0, 0x76, 0xd, 0x2, 0x90, 0x1, 0x2, 0x100, 0x9, 0x3f8, 0x8, 0x6, 0x2, 0x2, 0x23cc, 0x80, 0x9, 0x2, 0x2, 0x0, 0x8, 0x7, 0x4, 0x7, 0x7, 0x1757, 0x7, 0x101, 0x8, 0x1, 0x200, 0x4, 0x40d, 0x109, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, 0x3, 0x9, 0xd60, 0x8, 0x2, 0x1, 0x1, 0x46, 0x3, 0x3, 0x2fae, 0x59a1, 0x47f, 0x1ff, 0x8, 0x2, 0x5, 0x4, 0x8, 0x6287, 0x8001, 0x44, 0x5, 0x5, 0x401, 0x5, 0x1ff, 0x7, 0x55, 0x29a340f8, 0x4, 0x8a4, 0x0, 0x71, 0x2, 0x9, 0x3b, 0x6, 0x9, 0xdee, 0x8549, 0xfffffffc, 0x8, 0x6, 0xcdd2, 0x1, 0x2, 0xe9c0, 0x0, 0x1, 0x7, 0x4, 0x1, 0x40, 0x7, 0x10000, 0x4, 0x8000, 0xd, 0x2, 0x700, 0xffff, 0x6, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0xfffffffa, 0x1, 0x6, 0x80000000, 0x2, 0x2, 0x0, 0xfffffffb, 0x9, 0xbb1, 0x6, 0x0, 0x4, 0x7, 0x2, 0x3, 0x1, 0xc, 0xffff, 0x8, 0x7, 0x2, 0x7, 0x2, 0x2, 0x3, 0x9cee, 0x40000000, 0x7, 0xfffffff7, 0x1, 0x3, 0x240, 0x5, 0x1, 0xfffff000, 0x0, 0x5, 0x2, 0x5, 0x1, 0x8cd, 0x6, 0xc86, 0x8, 0xf, 0xa, 0x6, 0x6, 0x3, 0xbe17, 0x4, 0x7fffffff, 0x8, 0x8, 0x1, 0x10001, 0x7, 0x6, 0x1d36, 0x8d, 0x3, 0x3ff, 0xd3f, 0x6, 0x8e8d, 0xe12b, 0x1f2, 0x3, 0x1, 0xfa67, 0x200, 0x20, 0xa7, 0x24, 0xd, 0xa9d, 0x7, 0x5, 0x4, 0x8, 0x7, 0x80000001, 0x2, 0x2, 0x7, 0x4, 0x0, 0x4, 0x2, 0xff, 0x11, 0xc, 0x3ff, 0x7, 0x0, 0x800, 0x3ff, 0xffffff7f, 0x4, 0xa, 0x8, 0x7fff, 0xfae3, 0x7, 0x1ff, 0x3ff, 0xfffffbd8, 0x7fff, 0x9, 0x8001, 0x80000000, 0x9, 0x143, 0xdf6, 0x7, 0xff, 0x7, 0x4da, 0x3, 0x2, 0x6, 0x7fff, 0x9, 0x2, 0x5, 0x1, 0x0, 0x27, 0x7f, 0x8, 0x3, 0x3, 0xfffffff8, 0x537aa4bb, 0x40, 0x9, 0x9, 0x2, 0x37421f2, 0x8, 0x7ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x0, 0xfffff800, 0x2, 0xa7c, 0x2, 0x1, 0x2, 0x6, 0x3, 0xd4, 0x9, 0x1000, 0x3, 0x200, 0x1, 0x3, 0x3, 0x50c5, 0x3, 0x5, 0x9, 0x4, 0x7fff, 0xffffff81, 0x3, 0x3, 0x0, 0x8, 0x4, 0x7ff, 0x1, 0x7ff, 0x401, 0x4, 0x85b, 0x30, 0x72fc, 0x4449, 0x2, 0x1, 0xa, 0x2, 0x4, 0x4, 0x7c79, 0x45f3, 0x1000, 0x4, 0x4, 0x4ac, 0xfffffffb, 0xceee, 0x1, 0x5, 0x2000, 0xee8d, 0xc5b2, 0x70000000, 0x10001, 0x5, 0x1, 0xffff496b, 0xfff, 0xa5f7, 0xff, 0x1e, 0xb, 0x3, 0x6, 0x7, 0x6, 0x917, 0x1000, 0x3, 0x11f8, 0x8, 0x1, 0x3, 0x10000, 0x660, 0x7fff, 0xb5dc, 0x1, 0x9, 0x3, 0xffffffff, 0x8001, 0x1, 0x7, 0x9, 0x85, 0x9, 0x1, 0x66, 0x1, 0x401, 0x3ff, 0x1c1150c, 0x1, 0x80000001, 0xdb8, 0x894e, 0x888, 0x6, 0x225547a4, 0x9, 0x80, 0x5, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8d3, 0x4, 0x4, 0xfff, 0x4730, 0x1, 0x4, 0x4, 0x63a5, 0x0, 0x9, 0x3, 0xad, 0x2, 0x6cb, 0x10000, 0x396, 0x3f, 0x8, 0x0, 0xfffffe8b, 0x6, 0x2, 0x36, 0x5, 0x81, 0xe, 0x7, 0x8, 0xb7d8, 0x9, 0x1, 0x7, 0x5, 0x7, 0x3, 0x7, 0x0, 0x5, 0x5, 0x7, 0x4, 0x716, 0x6, 0x15, 0x1000, 0x4, 0x9, 0xfff, 0x3e1edd6b, 0x100, 0x611, 0x2, 0x4, 0xb, 0x0, 0x6c, 0x9, 0x5, 0xff, 0x6, 0x437, 0x4, 0x7, 0x6, 0x2, 0x8, 0x8e, 0x9, 0x2, 0xf, 0x7fff, 0x80000001, 0x280000, 0x0, 0xfffffff8, 0x6, 0x5, 0x5, 0x468, 0x8, 0x47, 0xa08, 0x7, 0x8, 0x0, 0xc16, 0x2, 0x4, 0x2, 0x746, 0x4, 0x5bb3, 0x200, 0x2, 0xfffffffc, 0x2, 0xb, 0x9, 0x8, 0x2, 0x3, 0x100, 0x0, 0x2, 0x200, 0x2, 0x8000, 0x7, 0x395e, 0x80000000, 0x1, 0x0, 0xfff, 0x317, 0x7, 0x3, 0x0, 0x2, 0xfffffff8, 0x7, 0x2, 0x3800, 0x401, 0x401, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0x1, 0x5, 0x9, 0x8001, 0x7, 0xc6, 0x4fe3, 0x1, 0x401, 0x2, 0xe2a4, 0x6, 0x6, 0x3, 0x6, 0x3, 0x8, 0x2, 0xa8e, 0x7fff, 0xfffffabb, 0x1, 0x2, 0xfffffffe, 0xb2, 0x8000, 0x2000000, 0x0, 0xfffffff5, 0x5, 0x10001, 0x3, 0x80000001, 0x7fff, 0x7, 0x1, 0x80000000, 0x3, 0x7, 0xffffffb5, 0x0, 0x10001, 0x3, 0x8f9, 0x0, 0x7, 0x6, 0xfff, 0x1, 0x8, 0x3, 0x6, 0xa3, 0xb4, 0x10000, 0x2, 0x7ff, 0x8, 0x8001, 0x2, 0x3, 0x40, 0x7, 0x8000, 0x2, 0x3, 0x7, 0x7, 0x8, 0x9, 0xa000000, 0x7a, 0xf, 0xffff, 0x80000001, 0x2, 0x8, 0xc4000000, 0x3ff, 0x10000, 0x3, 0x7f, 0xdd9, 0x6, 0x2, 0x9, 0x8, 0xfffffff7, 0xfff, 0x3, 0x3049, 0x8, 0x3, 0x401, 0x0, 0x2, 0x7, 0x1, 0x101, 0x3, 0x2, 0x9, 0x6, 0x81, 0x9, 0xffffffff, 0x2, 0x5, 0x1, 0x80000000, 0xcc0, 0x7f, 0x5, 0x3, 0x3, 0x80000001, 0x5, 0x6, 0xa0, 0xa0e, 0x77a829c0, 0x7, 0x6, 0x3, 0x3]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x710e163b}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x7, 0x1, 0x1, 0xfffffff9, {0x5, 0x2, 0xd28e, 0x6, 0x7, 0x4}, {0x2, 0x2, 0x7ff, 0x9072, 0xfffd, 0x401}, 0x8, 0x1, 0xffffffc0}}]}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x58, 0x9, 0x6, 0x8, 0x4, 0xf, 0x80000001, 0x200, 0x1, 0x3, 0x5, 0x8, 0x7fffffff, 0xf, 0x4, 0xffffff1f, 0x8001, 0xe95, 0x800, 0x200, 0x32, 0xb9c, 0x6, 0x350, 0xfffffffe, 0x401, 0x2, 0x3, 0x10000, 0x7, 0x7ff, 0x4, 0x1, 0x0, 0x588, 0x2, 0x6, 0x3, 0x0, 0x80, 0x40, 0x400, 0x7, 0x401, 0x7, 0xb91, 0x7fffffff, 0x6, 0x3e5a0984, 0x1000, 0x4, 0x3, 0x6, 0x3, 0xffff, 0x4, 0x8, 0x4, 0x10000, 0x5, 0xfffffffc, 0x5, 0x5, 0x6, 0x80000000, 0x8, 0x6, 0x1, 0x5, 0x4, 0x712d, 0xd4e, 0x9, 0x4, 0x8000, 0x7, 0x7fff, 0x5, 0xa5, 0x10000, 0x7c8c2b95, 0xffffffff, 0x9, 0x1ea3a022, 0x9, 0x6, 0x8, 0x6, 0x9, 0x3, 0x4f, 0x2, 0x1, 0x9, 0x4, 0x5, 0x3, 0xc082266, 0x8fdf6a8, 0x101, 0x2, 0x8, 0x3ff, 0x8, 0x9, 0x200, 0x9d, 0x3, 0x9, 0x45f, 0xd, 0x6, 0xffffff00, 0x8, 0x1, 0x46, 0x2, 0x7, 0x5, 0xfffff66b, 0xa0f, 0x0, 0x9, 0x4, 0xffffff9a, 0x0, 0x3, 0x7, 0x2, 0xc, 0xdb1, 0xf1, 0x6, 0xa, 0x10, 0x6, 0x1, 0x1ff, 0x4, 0xa, 0x8, 0x100, 0xa9, 0x6, 0x3ff, 0x8, 0x10f9, 0x4, 0x5, 0x5, 0x2, 0x8, 0x5, 0x3, 0x1, 0x6, 0x10, 0x4, 0x2, 0x6, 0xffff, 0x3, 0x4, 0x101, 0x2, 0x3, 0x8, 0x6, 0x1, 0x400, 0x5, 0x8001, 0x1000, 0x8, 0x101, 0x1, 0x9b74, 0xe2c, 0x1000, 0x9, 0x8d, 0x401, 0x5, 0x1ff, 0x0, 0xc500, 0x7, 0xd, 0x7, 0x0, 0x80, 0x4, 0x40, 0xb6e, 0x6, 0x7, 0x3, 0x8, 0x1f1, 0x80000001, 0x8, 0x800, 0x7, 0x4, 0x9, 0x8, 0x3e5, 0x101, 0x5, 0x710e, 0x7, 0x2, 0x40, 0x5, 0x1, 0x4, 0x0, 0x9, 0x40, 0x9, 0x48000000, 0x1, 0x353, 0x7ff, 0x8, 0x40, 0x3, 0x8001, 0x7f, 0x122e0, 0x2, 0x1, 0x1, 0xffffff80, 0x3, 0x5, 0x400, 0x1ff, 0x0, 0x7ff, 0x7fffffff, 0x3, 0xe0000, 0xfffffffb, 0x80000000, 0x1, 0x7, 0x5, 0x4f, 0xa7dc, 0xa4e, 0x6, 0x9, 0xb0, 0x1]}]}, @TCA_RSVP_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x61}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}]}, 0x3dd8}, 0x1, 0x0, 0x0, 0x400}, 0x20002000) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) accept4$unix(r0, 0x0, 0x0, 0x800) 220.53042ms ago: executing program 4 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100003c8e89b7016151f38fbba42010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c0005400000000000000001"], 0xc8}}, 0x0) 178.468055ms ago: executing program 4 (id=245): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000380)=""/191) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="00bce71effa528e43900000000001000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28e0}, 0x94) r3 = syz_open_dev$video(&(0x7f0000000100), 0x7ff, 0x60500) capset(0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000040)={0x1, 0x101, 0x0, {0xc, 0xfffffffe, 0x20000009, 0xf}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r4, 0x8cee000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r5, &(0x7f000000ca80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002140)="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", 0x1000}], 0x1}}], 0x1, 0x4800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000c85000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000140)=0x7, 0x12) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f000007c000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, &(0x7f0000002a00)}, 0x5}], 0x1, 0x23, 0x0) 134.716355ms ago: executing program 0 (id=246): r0 = gettid() clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0xe, 0x1, 0xffffffff}) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffa, 0x407, 0x8, 0x8010041, 0x80, "0baa301fa951e8a4603c811200", 0x81ed, 0xfffffff5}) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000140)="d0", 0x1}], 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2826) socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='utf8=0,shortname=win95,codepage=857,shortname=win95,utf8=0,flush,iocharset=macromanian$shortname=lower,iocharset=cp737,\x00'], 0x1, 0x216, &(0x7f0000000e00)="$eJzs3bFqU1EYB/CvttVSkHQQiiJ4xcUpNBX3FKkgBhQlg04Wm6IksWAg0A6tTr6EvoKOroKDuPoCIkgVXOzWQYjUGxtb0jZS01vM77fkg3v+95zvEnLIkJN7Z+vV+cXGwvr6WoyNDcVIMYqxMRQTcSyGI/UkAID/yUarFd9bqazXAgAcDvs/AAyeHvf/m4e4JACgz3z/B4DBc/vO3eszpdLsrSQZi6g/a5ab5fQ1vT6zEA+jFpWYilz8iGhtSeur10qzU8mmLxNRrq+286vN8vD2fCFyMdE9X0hS2/OjMd7OfxyPSkxHLk51z093zR+Pixf+mD8fufhwPxajFvOxme3kVwpJcuVGaUf+xK9xAAAAAAAAAAAAAAAAAAAAAADQD/lkS9fze/L53a6n+d7PB9p5Ps9InBnJtncAAAAAAAAAAAAAAAAAAAA4KhpLy9W5Wq3yeK/i0fuXb/cb02Mx1J73oPc5eHHy/Ofnu495+jfP598Wb85l+Vh6LN6tPTh9qTF5+aisZ2m5OrrXW+tbLqJPs7/KtPffXe87ePJFce71yqevvd45gw8jAAAAAAAAAAAAAAAAAAAYcJ0f/Wa9EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADITuf///tXZN0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8DAAA///UmKDH") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 47.925866ms ago: executing program 4 (id=247): syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f00000003c0)=ANY=[@ANYBLOB='shortname=winnt,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d6c6f7765722ccd02261fcb0d2cce653d070000000000000065636b3d7374736963742c00"], 0x11, 0x305, &(0x7f0000002480)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x56) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @ib={0x1b, 0xffff, 0x1, {"000037e45bd17505546dd1caff00"}, 0x10000000000, 0xfffffffffffffffc, 0x6}}}, 0x118) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x20000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040045}, 0x2008c014) 28.874063ms ago: executing program 0 (id=248): socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0xc1a, &(0x7f0000000840)={0x0, 0x340e, 0x2, 0x3, 0x3d0}, &(0x7f0000001b00), &(0x7f0000001b80), &(0x7f0000001180)) r1 = syz_io_uring_setup(0x10034b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x0, 0x800082, 0x0, r0}, &(0x7f0000000180), &(0x7f0000001c40)=0x0, &(0x7f0000001c00)=0x0) syz_usb_connect$uac3(0x2, 0xd7, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4642, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x65, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x27, 0x2}, [@multiply_unit={0xb, 0x24, 0xd, 0x6, 0x6, 0x40, 0x1}, @source_unit={0xc, 0x24, 0xb, 0x1, 0x2, 0x101, 0x2, 0xffff}, @cluster_info_segment={0x6, 0x20, 0x3, 0x8a}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0xe, {0xa, 0x25, 0x25, 0x7, 0xe5, 0x96e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x3, 0x5, 0x7, "bd2d58", "49053c"}, @as_header={0x17, 0x24, 0x1, 0x3, 0x9, 0x8000, 0x1001, 0x4, 0x1, 0x4, 0x1d}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xa8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x32, 0x9, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x80, 0x1, 0x9, {0xa, 0x25, 0x25, 0x3b4, 0x9, 0x9}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x3, 0x0, 0x2e, 0xff, 0x90}, 0xc, &(0x7f0000000800)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x0, 0x7}]}, 0x2, [{0x62, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"]}, {0x52, &(0x7f00000008c0)=@string={0x52, 0x3, "c7253061e1a19cc37eb0ee797f6a253497baa00f5efff4709a0615bf001aa0f7c33e68929684486bb1964604d7d463d9c9db61258a7e47116e8125b3822f2b8e0f2809985e5c4931e0918dcf6c9e0017"}}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = socket(0x400000000010, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0xb, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) syz_io_uring_setup(0x52a4, &(0x7f0000000440)={0x0, 0x2322, 0x20, 0x3, 0xc7, 0x0, r1}, &(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f00000005c0)) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001280)={[{@fat=@uid}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_win95}, {@uni_xlate}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlateno}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@fat=@quiet}, {@uni_xlate}]}, 0x7f, 0x2c1, &(0x7f0000001640)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x7fff, 0x101200) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x34, r8, 0x21, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x0) syz_io_uring_submit(r6, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001c80)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000001cc0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000001980)={0x73622a85, 0x1000, 0x1}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r10, 0xc01064c7, &(0x7f0000000680)={0x3, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0]}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 27.121485ms ago: executing program 4 (id=249): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x43, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1}, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000484000/0x4000)=nil, 0x4000, 0x14) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x9, 0x2) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44014}, 0x0) 0s ago: executing program 4 (id=250): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x9, &(0x7f0000000000)="76d30b442665857a34"}) (fail_nth: 8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. [ 28.500496][ T4699] cgroup: Unknown subsys name 'net' [ 28.640479][ T4699] cgroup: Unknown subsys name 'cpuset' [ 28.642407][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.802071][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.553841][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.557467][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.558943][ T4715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.560636][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.562539][ T4719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.564917][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.565192][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.566189][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.574543][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.585471][ T4728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.587077][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.587587][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.588498][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.592046][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.592133][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.592183][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.592651][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.597415][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.599028][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.600519][ T4730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.602967][ T4730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.604375][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.607318][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.608678][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.610774][ T4730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.921852][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.921904][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.922014][ T4712] bridge_slave_0: entered allmulticast mode [ 29.922502][ T4712] bridge_slave_0: entered promiscuous mode [ 29.938566][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.938852][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.938915][ T4712] bridge_slave_1: entered allmulticast mode [ 29.939616][ T4712] bridge_slave_1: entered promiscuous mode [ 29.949100][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.950242][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.951765][ T4718] bridge_slave_0: entered allmulticast mode [ 29.953500][ T4718] bridge_slave_0: entered promiscuous mode [ 29.955801][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.957147][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.958675][ T4718] bridge_slave_1: entered allmulticast mode [ 29.960758][ T4718] bridge_slave_1: entered promiscuous mode [ 29.965002][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.966354][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.990123][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.990933][ T4712] team0: Port device team_slave_0 added [ 29.997122][ T4712] team0: Port device team_slave_1 added [ 29.999777][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.019534][ T4718] team0: Port device team_slave_0 added [ 30.021032][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.022533][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.026640][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.037731][ T4718] team0: Port device team_slave_1 added [ 30.042525][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.042553][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.048004][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.070609][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.070633][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.070646][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.071227][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.071234][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.071247][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.093691][ T4718] hsr_slave_0: entered promiscuous mode [ 30.094050][ T4718] hsr_slave_1: entered promiscuous mode [ 30.113834][ T4712] hsr_slave_0: entered promiscuous mode [ 30.115574][ T4712] hsr_slave_1: entered promiscuous mode [ 30.116819][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.117826][ T4712] Cannot create hsr debugfs directory [ 30.121836][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.122272][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.122332][ T4713] bridge_slave_0: entered allmulticast mode [ 30.122782][ T4713] bridge_slave_0: entered promiscuous mode [ 30.124023][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.124044][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.124095][ T4713] bridge_slave_1: entered allmulticast mode [ 30.124600][ T4713] bridge_slave_1: entered promiscuous mode [ 30.137448][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.137510][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.137580][ T4711] bridge_slave_0: entered allmulticast mode [ 30.137996][ T4711] bridge_slave_0: entered promiscuous mode [ 30.138757][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.138775][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.138822][ T4711] bridge_slave_1: entered allmulticast mode [ 30.139679][ T4711] bridge_slave_1: entered promiscuous mode [ 30.146860][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.147753][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.156471][ T4711] team0: Port device team_slave_0 added [ 30.157256][ T4711] team0: Port device team_slave_1 added [ 30.160654][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.161952][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.163690][ T4720] bridge_slave_0: entered allmulticast mode [ 30.165301][ T4720] bridge_slave_0: entered promiscuous mode [ 30.179471][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.180875][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.182412][ T4720] bridge_slave_1: entered allmulticast mode [ 30.184031][ T4720] bridge_slave_1: entered promiscuous mode [ 30.193318][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.194287][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.197737][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.197746][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.197759][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.198359][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.198366][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.198379][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.208365][ T4711] hsr_slave_0: entered promiscuous mode [ 30.208663][ T4711] hsr_slave_1: entered promiscuous mode [ 30.208844][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.208854][ T4711] Cannot create hsr debugfs directory [ 30.237413][ T4713] team0: Port device team_slave_0 added [ 30.244927][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.249795][ T4713] team0: Port device team_slave_1 added [ 30.257950][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.268854][ T4720] team0: Port device team_slave_0 added [ 30.274084][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.275362][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.279045][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.287811][ T4720] team0: Port device team_slave_1 added [ 30.295664][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.295700][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.295718][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.325942][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.325967][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.326118][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.326824][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.326831][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.326843][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.334002][ T4713] hsr_slave_0: entered promiscuous mode [ 30.334342][ T4713] hsr_slave_1: entered promiscuous mode [ 30.334543][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.334553][ T4713] Cannot create hsr debugfs directory [ 30.368947][ T4720] hsr_slave_0: entered promiscuous mode [ 30.370509][ T4720] hsr_slave_1: entered promiscuous mode [ 30.371838][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 30.372957][ T4720] Cannot create hsr debugfs directory [ 30.386991][ T4711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.389894][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.391669][ T4711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.393816][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.395548][ T4711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.397880][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.419878][ T4711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.422254][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.455779][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.455841][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.456002][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.456037][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.457555][ T4718] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.459867][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.460383][ T4718] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.462165][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.471127][ T4718] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.473264][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.480162][ T4718] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.482554][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.496433][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.498914][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.505067][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.507247][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.507579][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.510040][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.510899][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.512727][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.522464][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.522523][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.522600][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.522628][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.541272][ T4720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.544015][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.545734][ T4720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.548048][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.549982][ T4720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.551985][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.556863][ T4720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.560389][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.563787][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.563828][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.563915][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.563947][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.584382][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.586532][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.591694][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.594123][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.601686][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.603438][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.605251][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.606756][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.612962][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.615005][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.623989][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.626079][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.626401][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.628596][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.629884][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.633116][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.635250][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.641061][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.641114][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.643857][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.653993][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.654038][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.660751][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.660796][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.661143][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.661171][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.695854][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.714765][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.723020][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.726463][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.726503][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.741445][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.741488][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.754584][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.764743][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.768438][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.775274][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.795653][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.795700][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.806947][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.807002][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.813818][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.813863][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.837441][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.837486][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.845683][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.845723][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.887067][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.904962][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.922222][ T4718] veth0_vlan: entered promiscuous mode [ 30.925522][ T4718] veth1_vlan: entered promiscuous mode [ 30.942170][ T4718] veth0_macvtap: entered promiscuous mode [ 30.946650][ T4718] veth1_macvtap: entered promiscuous mode [ 30.957238][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.970551][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.973439][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.973526][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.973568][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.973590][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.997671][ T4711] veth0_vlan: entered promiscuous mode [ 31.027376][ T4711] veth1_vlan: entered promiscuous mode [ 31.042232][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.042261][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.056566][ T4711] veth0_macvtap: entered promiscuous mode [ 31.062060][ T4711] veth1_macvtap: entered promiscuous mode [ 31.067317][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.067349][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.080022][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.082900][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.089047][ T3482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.089338][ T3482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.089373][ T3482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.089394][ T3482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.107990][ T4718] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.175965][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.191236][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.191260][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.204499][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.222580][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.242813][ T4713] veth0_vlan: entered promiscuous mode [ 31.246503][ T4713] veth1_vlan: entered promiscuous mode [ 31.264643][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.264680][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.265698][ T4712] veth0_vlan: entered promiscuous mode [ 31.268846][ T4713] veth0_macvtap: entered promiscuous mode [ 31.271588][ T4713] veth1_macvtap: entered promiscuous mode [ 31.276297][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.278904][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.283013][ T4712] veth1_vlan: entered promiscuous mode [ 31.348512][ T4894] fuse: fd is not a fuse device [ 31.515488][ T4712] veth0_macvtap: entered promiscuous mode [ 31.516530][ T4712] veth1_macvtap: entered promiscuous mode [ 31.531337][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.532967][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.535879][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536113][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536478][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536593][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.548200][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.550901][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.559611][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.559668][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.608912][ T4720] veth0_vlan: entered promiscuous mode [ 31.609602][ T4724] Bluetooth: hci1: command tx timeout [ 31.610460][ T4724] Bluetooth: hci2: command tx timeout [ 31.626753][ T4720] veth1_vlan: entered promiscuous mode [ 31.632527][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.632553][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.636973][ T4720] veth0_macvtap: entered promiscuous mode [ 31.638560][ T4720] veth1_macvtap: entered promiscuous mode [ 31.656123][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.657970][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.658233][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.668928][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.682664][ T4901] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 31.682833][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.682844][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.683544][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683575][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683593][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683610][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.689395][ T4715] Bluetooth: hci0: command tx timeout [ 31.689478][ T4715] Bluetooth: hci4: command tx timeout [ 31.689540][ T4715] Bluetooth: hci3: command tx timeout [ 31.713848][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.713884][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.735456][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.735490][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.752675][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.752702][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.914813][ T4913] ======================================================= [ 31.914813][ T4913] WARNING: The mand mount option has been deprecated and [ 31.914813][ T4913] and is ignored by this kernel. Remove the mand [ 31.914813][ T4913] option from the mount to silence this warning. [ 31.914813][ T4913] ======================================================= [ 32.121264][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.148465][ T4908] tap0: tun_chr_ioctl cmd 1074025677 [ 32.148638][ T4908] tap0: linktype set to 768 [ 33.513693][ T4928] fuse: fd is not a fuse device [ 33.694684][ T4724] Bluetooth: hci2: command tx timeout [ 33.694736][ T4724] Bluetooth: hci1: command tx timeout [ 33.769213][ T4715] Bluetooth: hci3: command tx timeout [ 33.770173][ T4715] Bluetooth: hci4: command tx timeout [ 33.770206][ T4715] Bluetooth: hci0: command tx timeout [ 33.812795][ T4939] netlink: 'syz.3.16': attribute type 30 has an invalid length. [ 33.824530][ T4939] loop3: detected capacity change from 0 to 1024 [ 33.831721][ T4941] syzkaller0: entered promiscuous mode [ 33.832859][ T4941] syzkaller0: entered allmulticast mode [ 33.846185][ T4939] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 33.846731][ T4939] EXT4-fs: failed to create workqueue [ 33.853682][ T4939] EXT4-fs (loop3): mount failed [ 33.868566][ T4949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 34.419438][ T4967] fuse: fd is not a fuse device [ 34.691808][ T4975] Zero length message leads to an empty skb [ 34.831432][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 35.140510][ T4990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.32'. [ 35.267334][ T4997] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 36.215553][ T4724] Bluetooth: hci1: command tx timeout [ 36.215599][ T4724] Bluetooth: hci2: command tx timeout [ 36.215627][ T4724] Bluetooth: hci0: command tx timeout [ 36.215646][ T4724] Bluetooth: hci4: command tx timeout [ 36.215664][ T4724] Bluetooth: hci3: command tx timeout [ 36.233349][ T4997] batman_adv: batadv0: Adding interface: veth0_to_bond [ 36.234616][ T4997] batman_adv: batadv0: The MTU of interface veth0_to_bond is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.239223][ T4997] batman_adv: batadv0: Not using interface veth0_to_bond (retrying later): interface not active [ 36.257126][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 36.262698][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 36.265554][ T4997] macvlan2: entered promiscuous mode [ 36.266606][ T4997] macvlan2: entered allmulticast mode [ 36.446646][ T5013] IPVS: lc: FWM 3 0x00000003 - no destination available [ 36.449244][ T4821] IPVS: starting estimator thread 0... [ 36.474505][ T5015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.41'. [ 36.486950][ T5019] tipc: Started in network mode [ 36.488153][ T5019] tipc: Node identity 4a12414cee0c, cluster identity 4711 [ 36.488258][ T5019] tipc: Enabled bearer , priority 0 [ 36.488619][ T5019] syzkaller0: entered promiscuous mode [ 36.488630][ T5019] syzkaller0: entered allmulticast mode [ 36.579633][ T5016] IPVS: using max 61 ests per chain, 146400 per kthread [ 36.626138][ T5028] Bluetooth: MGMT ver 1.23 [ 36.870496][ T5024] loop4: detected capacity change from 0 to 256 [ 36.893849][ T5032] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 36.896754][ T5034] loop1: detected capacity change from 0 to 512 [ 36.897126][ T5034] vfat: Unknown parameter '&' [ 36.902328][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 36.917413][ T5032] macvlan2: entered promiscuous mode [ 36.917448][ T5032] macvlan2: entered allmulticast mode [ 36.947595][ T5034] loop1: detected capacity change from 0 to 128 [ 37.072556][ T5046] FAULT_INJECTION: forcing a failure. [ 37.072556][ T5046] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.072591][ T5046] CPU: 1 UID: 0 PID: 5046 Comm: syz.1.53 Not tainted syzkaller #0 PREEMPT [ 37.072604][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 37.072610][ T5046] Call trace: [ 37.072614][ T5046] show_stack+0x2c/0x3c (C) [ 37.072635][ T5046] __dump_stack+0x30/0x40 [ 37.072647][ T5046] dump_stack_lvl+0xd8/0x12c [ 37.072657][ T5046] dump_stack+0x1c/0x28 [ 37.072666][ T5046] should_fail_ex+0x41c/0x590 [ 37.072678][ T5046] should_fail+0x14/0x24 [ 37.072687][ T5046] should_fail_usercopy+0x20/0x30 [ 37.072697][ T5046] _inline_copy_from_user+0x3c/0x174 [ 37.072705][ T5046] kstrtouint_from_user+0xcc/0x174 [ 37.072712][ T5046] proc_fail_nth_write+0x9c/0x234 [ 37.072721][ T5046] vfs_write+0x2a4/0xa0c [ 37.072732][ T5046] ksys_write+0x12c/0x228 [ 37.072742][ T5046] __arm64_sys_write+0x7c/0x90 [ 37.072752][ T5046] invoke_syscall+0x98/0x244 [ 37.072761][ T5046] el0_svc_common+0xec/0x23c [ 37.072771][ T5046] do_el0_svc+0x4c/0x5c [ 37.072780][ T5046] el0_svc+0x64/0x260 [ 37.072790][ T5046] el0t_64_sync_handler+0x48/0x148 [ 37.072799][ T5046] el0t_64_sync+0x198/0x19c [ 37.096685][ T5041] netlink: 64 bytes leftover after parsing attributes in process `syz.2.52'. [ 37.144284][ T5057] 0x000000000000-0x000000020000 : "" [ 37.145820][ T5057] FAULT_INJECTION: forcing a failure. [ 37.145820][ T5057] name failslab, interval 1, probability 0, space 0, times 0 [ 37.148440][ T5057] CPU: 0 UID: 0 PID: 5057 Comm: syz.1.57 Not tainted syzkaller #0 PREEMPT [ 37.148460][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 37.148467][ T5057] Call trace: [ 37.148471][ T5057] show_stack+0x2c/0x3c (C) [ 37.148497][ T5057] __dump_stack+0x30/0x40 [ 37.148508][ T5057] dump_stack_lvl+0xd8/0x12c [ 37.148519][ T5057] dump_stack+0x1c/0x28 [ 37.148528][ T5057] should_fail_ex+0x41c/0x590 [ 37.148539][ T5057] should_failslab+0xc4/0x120 [ 37.148547][ T5057] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 37.148557][ T5057] kvasprintf+0x110/0x1e4 [ 37.148567][ T5057] kvasprintf_const+0x154/0x2e4 [ 37.148576][ T5057] kobject_set_name_vargs+0xd8/0x1c0 [ 37.148587][ T5057] dev_set_name+0xe8/0x13c [ 37.148597][ T5057] add_mtd_device+0x818/0x14cc [ 37.148608][ T5057] mtd_add_partition+0x2d4/0x3f4 [ 37.148616][ T5057] mtdchar_blkpg_ioctl+0x224/0x248 [ 37.148625][ T5057] mtdchar_ioctl+0x1218/0x1a7c [ 37.148633][ T5057] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 37.148641][ T5057] __arm64_sys_ioctl+0x14c/0x1c4 [ 37.148653][ T5057] invoke_syscall+0x98/0x244 [ 37.148662][ T5057] el0_svc_common+0xec/0x23c [ 37.148673][ T5057] do_el0_svc+0x4c/0x5c [ 37.148683][ T5057] el0_svc+0x64/0x260 [ 37.148691][ T5057] el0t_64_sync_handler+0x48/0x148 [ 37.148700][ T5057] el0t_64_sync+0x198/0x19c [ 37.240872][ T5067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.61'. [ 37.278726][ T5069] 0x7a856526440bd376-0x7a856526440bd3aa : "" [ 37.278759][ T5069] mtd: partition "" is out of reach -- disabled [ 37.278785][ T5069] FAULT_INJECTION: forcing a failure. [ 37.278785][ T5069] name failslab, interval 1, probability 0, space 0, times 0 [ 37.278801][ T5069] CPU: 1 UID: 0 PID: 5069 Comm: syz.2.63 Not tainted syzkaller #0 PREEMPT [ 37.278812][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 37.278817][ T5069] Call trace: [ 37.278820][ T5069] show_stack+0x2c/0x3c (C) [ 37.278840][ T5069] __dump_stack+0x30/0x40 [ 37.278850][ T5069] dump_stack_lvl+0xd8/0x12c [ 37.278860][ T5069] dump_stack+0x1c/0x28 [ 37.278870][ T5069] should_fail_ex+0x41c/0x590 [ 37.278880][ T5069] should_failslab+0xc4/0x120 [ 37.278889][ T5069] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 37.278898][ T5069] kvasprintf+0x110/0x1e4 [ 37.278908][ T5069] kvasprintf_const+0x154/0x2e4 [ 37.278918][ T5069] kobject_set_name_vargs+0xd8/0x1c0 [ 37.278928][ T5069] dev_set_name+0xe8/0x13c [ 37.278941][ T5069] add_mtd_device+0x818/0x14cc [ 37.278953][ T5069] mtd_add_partition+0x2d4/0x3f4 [ 37.278961][ T5069] mtdchar_blkpg_ioctl+0x224/0x248 [ 37.278969][ T5069] mtdchar_ioctl+0x1218/0x1a7c [ 37.278977][ T5069] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 37.278986][ T5069] __arm64_sys_ioctl+0x14c/0x1c4 [ 37.278997][ T5069] invoke_syscall+0x98/0x244 [ 37.279007][ T5069] el0_svc_common+0xec/0x23c [ 37.279016][ T5069] do_el0_svc+0x4c/0x5c [ 37.279026][ T5069] el0_svc+0x64/0x260 [ 37.279034][ T5069] el0t_64_sync_handler+0x48/0x148 [ 37.279042][ T5069] el0t_64_sync+0x198/0x19c [ 37.316852][ T5018] tipc: Resetting bearer [ 37.323734][ T5018] tipc: Disabling bearer [ 37.332002][ T5073] netlink: 72 bytes leftover after parsing attributes in process `syz.2.65'. [ 37.332037][ T5073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 37.332045][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 37.352726][ T5071] tap0: tun_chr_ioctl cmd 1074025677 [ 37.352798][ T5071] tap0: linktype set to 768 [ 38.252134][ T4724] Bluetooth: hci4: command tx timeout [ 38.252279][ T4724] Bluetooth: hci0: command tx timeout [ 38.252441][ T4724] Bluetooth: hci2: command tx timeout [ 38.252590][ T4724] Bluetooth: hci1: command tx timeout [ 38.253044][ T4715] Bluetooth: hci3: command tx timeout [ 38.442127][ T5088] FAULT_INJECTION: forcing a failure. [ 38.442127][ T5088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.444618][ T5088] CPU: 1 UID: 0 PID: 5088 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT [ 38.444637][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 38.444643][ T5088] Call trace: [ 38.444646][ T5088] show_stack+0x2c/0x3c (C) [ 38.444668][ T5088] __dump_stack+0x30/0x40 [ 38.444678][ T5088] dump_stack_lvl+0xd8/0x12c [ 38.444688][ T5088] dump_stack+0x1c/0x28 [ 38.444697][ T5088] should_fail_ex+0x41c/0x590 [ 38.444709][ T5088] should_fail+0x14/0x24 [ 38.444718][ T5088] should_fail_usercopy+0x20/0x30 [ 38.444728][ T5088] simple_read_from_buffer+0xc4/0x238 [ 38.444738][ T5088] proc_fail_nth_read+0x1a8/0x248 [ 38.444746][ T5088] vfs_read+0x230/0x8c8 [ 38.444756][ T5088] ksys_read+0x12c/0x228 [ 38.444766][ T5088] __arm64_sys_read+0x7c/0x90 [ 38.444776][ T5088] invoke_syscall+0x98/0x244 [ 38.444786][ T5088] el0_svc_common+0xec/0x23c [ 38.444795][ T5088] do_el0_svc+0x4c/0x5c [ 38.444805][ T5088] el0_svc+0x64/0x260 [ 38.444814][ T5088] el0t_64_sync_handler+0x48/0x148 [ 38.444825][ T5088] el0t_64_sync+0x198/0x19c [ 38.507853][ T5095] trusted_key: syz.2.72 sent an empty control message without MSG_MORE. [ 38.580137][ T5101] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 38.581687][ T5103] 0x00000000001d-0x000000236f82 : "" [ 38.581708][ T5103] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffe3 [ 38.584219][ T5103] ftl_cs: FTL header corrupt! [ 38.592081][ T5101] veth3: entered allmulticast mode [ 38.676051][ T5118] FAULT_INJECTION: forcing a failure. [ 38.676051][ T5118] name failslab, interval 1, probability 0, space 0, times 0 [ 38.676172][ T5118] CPU: 0 UID: 0 PID: 5118 Comm: syz.3.80 Not tainted syzkaller #0 PREEMPT [ 38.676184][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 38.676190][ T5118] Call trace: [ 38.676193][ T5118] show_stack+0x2c/0x3c (C) [ 38.676215][ T5118] __dump_stack+0x30/0x40 [ 38.676225][ T5118] dump_stack_lvl+0xd8/0x12c [ 38.676235][ T5118] dump_stack+0x1c/0x28 [ 38.676244][ T5118] should_fail_ex+0x41c/0x590 [ 38.676255][ T5118] should_failslab+0xc4/0x120 [ 38.676263][ T5118] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 38.676272][ T5118] __alloc_skb+0x1f0/0x610 [ 38.676281][ T5118] netlink_ack+0x11c/0x890 [ 38.676290][ T5118] netlink_rcv_skb+0x21c/0x414 [ 38.676297][ T5118] nfnetlink_rcv+0x218/0x16ec [ 38.676307][ T5118] netlink_unicast+0x600/0x7f8 [ 38.676313][ T5118] netlink_sendmsg+0x648/0x948 [ 38.676321][ T5118] __sock_sendmsg+0xc8/0x17c [ 38.676329][ T5118] ____sys_sendmsg+0x3d0/0x6c8 [ 38.676336][ T5118] ___sys_sendmsg+0x198/0x224 [ 38.676344][ T5118] __sys_sendmsg+0x158/0x204 [ 38.676352][ T5118] __arm64_sys_sendmsg+0x80/0x94 [ 38.676360][ T5118] invoke_syscall+0x98/0x244 [ 38.676370][ T5118] el0_svc_common+0xec/0x23c [ 38.676380][ T5118] do_el0_svc+0x4c/0x5c [ 38.676389][ T5118] el0_svc+0x64/0x260 [ 38.676398][ T5118] el0t_64_sync_handler+0x48/0x148 [ 38.676407][ T5118] el0t_64_sync+0x198/0x19c [ 39.068791][ T5134] FAULT_INJECTION: forcing a failure. [ 39.068791][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 39.071774][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT [ 39.071800][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 39.071806][ T5134] Call trace: [ 39.071810][ T5134] show_stack+0x2c/0x3c (C) [ 39.071836][ T5134] __dump_stack+0x30/0x40 [ 39.071851][ T5134] dump_stack_lvl+0xd8/0x12c [ 39.071862][ T5134] dump_stack+0x1c/0x28 [ 39.071872][ T5134] should_fail_ex+0x41c/0x590 [ 39.071883][ T5134] should_failslab+0xc4/0x120 [ 39.071891][ T5134] __kmalloc_noprof+0x108/0x6b8 [ 39.071900][ T5134] nla_strdup+0xa0/0x148 [ 39.071907][ T5134] nf_tables_newtable+0x4a4/0x10b0 [ 39.071918][ T5134] nfnetlink_rcv+0xc8c/0x16ec [ 39.071928][ T5134] netlink_unicast+0x600/0x7f8 [ 39.071935][ T5134] netlink_sendmsg+0x648/0x948 [ 39.071943][ T5134] __sock_sendmsg+0xc8/0x17c [ 39.071951][ T5134] ____sys_sendmsg+0x3d0/0x6c8 [ 39.071959][ T5134] ___sys_sendmsg+0x198/0x224 [ 39.071967][ T5134] __sys_sendmsg+0x158/0x204 [ 39.071975][ T5134] __arm64_sys_sendmsg+0x80/0x94 [ 39.071983][ T5134] invoke_syscall+0x98/0x244 [ 39.071993][ T5134] el0_svc_common+0xec/0x23c [ 39.072002][ T5134] do_el0_svc+0x4c/0x5c [ 39.072011][ T5134] el0_svc+0x64/0x260 [ 39.072021][ T5134] el0t_64_sync_handler+0x48/0x148 [ 39.072030][ T5134] el0t_64_sync+0x198/0x19c [ 39.085533][ T5136] 0x00000000001d-0x000000020000 : "" [ 39.092157][ T5136] ftl_cs: FTL header corrupt! [ 39.109583][ T5132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.144782][ T5145] 0x00000000001d-0x000000236f82 : "" [ 39.144818][ T5145] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffe3 [ 39.146843][ T5145] ftl_cs: FTL header corrupt! [ 39.163095][ T3573] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.163157][ T3573] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.163177][ T3573] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.194277][ T5132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.195657][ T5132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.254996][ T5132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.255311][ T5132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.293669][ T5154] 0x00000000001d-0x000000020000 : "" [ 39.298086][ T5154] ftl_cs: FTL header corrupt! [ 39.328054][ T5132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.332841][ T5132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.360335][ T5158] xt_limit: Overflow, try lower: 0/0 [ 39.390476][ T5160] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 39.409316][ T5160] veth3: entered allmulticast mode [ 39.412069][ T5160] bond1: (slave veth3): Enslaving as an active interface with a down link [ 39.431039][ T3573] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.431084][ T3573] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.434139][ T3573] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.434183][ T3573] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.437270][ T3573] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.437287][ T3573] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.446755][ T3573] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.446790][ T3573] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.490344][ T5165] loop1: detected capacity change from 0 to 512 [ 39.495456][ T5165] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 39.496252][ T5165] EXT4-fs (loop1): Remounting filesystem read-only [ 39.496692][ T5165] EXT4-fs (loop1): 1 truncate cleaned up [ 39.497417][ T5165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.657113][ T5178] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 39.659335][ T5178] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 39.660350][ T5178] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 39.661643][ T5179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.665754][ T5179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.684790][ T5183] 0x00000000001d-0x000000236f82 : "" [ 39.684818][ T5183] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffe3 [ 39.688555][ T5183] ftl_cs: FTL header corrupt! [ 40.073232][ T5194] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 40.085403][ T5194] veth3: entered allmulticast mode [ 40.092710][ T5196] FAULT_INJECTION: forcing a failure. [ 40.092710][ T5196] name failslab, interval 1, probability 0, space 0, times 0 [ 40.092753][ T5196] CPU: 1 UID: 0 PID: 5196 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT [ 40.092766][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 40.092773][ T5196] Call trace: [ 40.092778][ T5196] show_stack+0x2c/0x3c (C) [ 40.092801][ T5196] __dump_stack+0x30/0x40 [ 40.092813][ T5196] dump_stack_lvl+0xd8/0x12c [ 40.092824][ T5196] dump_stack+0x1c/0x28 [ 40.092834][ T5196] should_fail_ex+0x41c/0x590 [ 40.092845][ T5196] should_failslab+0xc4/0x120 [ 40.092854][ T5196] __kmalloc_noprof+0x108/0x6b8 [ 40.092862][ T5196] genl_family_rcv_msg_attrs_parse+0xcc/0x27c [ 40.092873][ T5196] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 40.092882][ T5196] genl_rcv_msg+0x43c/0x620 [ 40.092890][ T5196] netlink_rcv_skb+0x238/0x414 [ 40.092897][ T5196] genl_rcv+0x38/0x50 [ 40.092905][ T5196] netlink_unicast+0x600/0x7f8 [ 40.092912][ T5196] netlink_sendmsg+0x648/0x948 [ 40.092920][ T5196] __sock_sendmsg+0xc8/0x17c [ 40.092928][ T5196] ____sys_sendmsg+0x3d0/0x6c8 [ 40.092936][ T5196] ___sys_sendmsg+0x198/0x224 [ 40.092944][ T5196] __sys_sendmsg+0x158/0x204 [ 40.092951][ T5196] __arm64_sys_sendmsg+0x80/0x94 [ 40.092959][ T5196] invoke_syscall+0x98/0x244 [ 40.092969][ T5196] el0_svc_common+0xec/0x23c [ 40.092979][ T5196] do_el0_svc+0x4c/0x5c [ 40.092988][ T5196] el0_svc+0x64/0x260 [ 40.092998][ T5196] el0t_64_sync_handler+0x48/0x148 [ 40.093006][ T5196] el0t_64_sync+0x198/0x19c [ 40.122593][ T5192] netlink: 17668 bytes leftover after parsing attributes in process `syz.0.105'. [ 40.123008][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 40.210370][ T5203] fuse: Unknown parameter 'rootmodC' [ 40.243558][ T5208] 9p: Bad value for 'rfdno' [ 40.330490][ T5212] loop2: detected capacity change from 0 to 256 [ 40.352983][ T5213] loop4: detected capacity change from 0 to 1024 [ 40.354074][ T5213] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.371077][ T5213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c018, mo2=0002] [ 40.374636][ T5213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.378642][ T5213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.111: bg 0: block 112: padding at end of block bitmap is not set [ 40.383749][ T5213] tipc: Started in network mode [ 40.383787][ T5213] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 40.383844][ T5213] tipc: Enabled bearer , priority 10 [ 40.462647][ T5218] FAULT_INJECTION: forcing a failure. [ 40.462647][ T5218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.462688][ T5218] CPU: 1 UID: 0 PID: 5218 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT [ 40.462704][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 40.462711][ T5218] Call trace: [ 40.462714][ T5218] show_stack+0x2c/0x3c (C) [ 40.462737][ T5218] __dump_stack+0x30/0x40 [ 40.462749][ T5218] dump_stack_lvl+0xd8/0x12c [ 40.462759][ T5218] dump_stack+0x1c/0x28 [ 40.462768][ T5218] should_fail_ex+0x41c/0x590 [ 40.462780][ T5218] should_fail+0x14/0x24 [ 40.462790][ T5218] should_fail_usercopy+0x20/0x30 [ 40.462800][ T5218] _inline_copy_from_user+0x3c/0x174 [ 40.462810][ T5218] copy_msghdr_from_user+0xb8/0x194 [ 40.462819][ T5218] ___sys_sendmsg+0x14c/0x224 [ 40.462827][ T5218] __sys_sendmmsg+0x204/0x580 [ 40.462835][ T5218] __arm64_sys_sendmmsg+0xa4/0xc0 [ 40.462843][ T5218] invoke_syscall+0x98/0x244 [ 40.462854][ T5218] el0_svc_common+0xec/0x23c [ 40.462864][ T5218] do_el0_svc+0x4c/0x5c [ 40.462873][ T5218] el0_svc+0x64/0x260 [ 40.462883][ T5218] el0t_64_sync_handler+0x48/0x148 [ 40.462891][ T5218] el0t_64_sync+0x198/0x19c [ 40.502058][ T5220] cgroup: name respecified [ 40.752121][ T5238] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 40.914257][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.939944][ T5244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 40.946362][ T5244] loop4: detected capacity change from 0 to 1024 [ 40.951547][ T5244] EXT4-fs: Ignoring removed orlov option [ 40.952834][ T5244] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 40.952911][ T5244] EXT4-fs warning (device loop4): read_mmp_block:110: Error -117 while reading MMP block 0 [ 41.113729][ T5250] tap0: tun_chr_ioctl cmd 1074025677 [ 41.113829][ T5250] tap0: linktype set to 768 [ 42.153996][ T5262] loop3: detected capacity change from 0 to 2048 [ 42.161015][ T5264] binder: 5263:5264 got transaction to invalid handle, 1 [ 42.162618][ T5264] binder: 5263:5264 cannot find target node [ 42.163880][ T5264] binder: 5263:5264 transaction async to 0:0 failed 1/29201/-22, code 0 size 0-0 line 3234 [ 42.168557][ T1039] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.171912][ T4716] tipc: Node number set to 10136234 [ 42.184333][ T5262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.219606][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.256168][ T5271] loop3: detected capacity change from 0 to 512 [ 42.256552][ T5271] vfat: Unknown parameter '&' [ 42.280331][ T5273] netlink: 56 bytes leftover after parsing attributes in process `syz.4.125'. [ 42.328895][ T5277] 9p: Bad value for 'rfdno' [ 42.391707][ T5280] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 42.413223][ T5280] batman_adv: batadv0: Removing interface: veth0_to_bond [ 42.416460][ T5280] bond1: (slave veth0_to_bond): making interface the new active one [ 42.418129][ T5280] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 42.422966][ T5280] macvlan3: entered promiscuous mode [ 42.422999][ T5280] macvlan3: entered allmulticast mode [ 42.440640][ T5286] loop3: detected capacity change from 0 to 1024 [ 42.440989][ T5286] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.451874][ T5286] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c018, mo2=0002] [ 42.452465][ T5286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.465415][ T5286] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.127: bg 0: block 112: padding at end of block bitmap is not set [ 42.482948][ T5286] tipc: Enabled bearer , priority 10 [ 42.502352][ T5295] loop0: detected capacity change from 0 to 512 [ 42.518764][ T5298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.133'. [ 42.570015][ T5304] FAULT_INJECTION: forcing a failure. [ 42.570015][ T5304] name failslab, interval 1, probability 0, space 0, times 0 [ 42.570052][ T5304] CPU: 0 UID: 0 PID: 5304 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT [ 42.570067][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 42.570074][ T5304] Call trace: [ 42.570078][ T5304] show_stack+0x2c/0x3c (C) [ 42.570104][ T5304] __dump_stack+0x30/0x40 [ 42.570116][ T5304] dump_stack_lvl+0xd8/0x12c [ 42.570128][ T5304] dump_stack+0x1c/0x28 [ 42.570140][ T5304] should_fail_ex+0x41c/0x590 [ 42.570152][ T5304] should_failslab+0xc4/0x120 [ 42.570161][ T5304] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 42.570170][ T5304] __alloc_skb+0x1f0/0x610 [ 42.570179][ T5304] netlink_ack+0x11c/0x890 [ 42.570187][ T5304] netlink_rcv_skb+0x21c/0x414 [ 42.570194][ T5304] rtnetlink_rcv+0x28/0x38 [ 42.570204][ T5304] netlink_unicast+0x600/0x7f8 [ 42.570212][ T5304] netlink_sendmsg+0x648/0x948 [ 42.570219][ T5304] __sock_sendmsg+0xc8/0x17c [ 42.570227][ T5304] ____sys_sendmsg+0x3d0/0x6c8 [ 42.570235][ T5304] ___sys_sendmsg+0x198/0x224 [ 42.570242][ T5304] __sys_sendmsg+0x158/0x204 [ 42.570250][ T5304] __arm64_sys_sendmsg+0x80/0x94 [ 42.570258][ T5304] invoke_syscall+0x98/0x244 [ 42.570268][ T5304] el0_svc_common+0xec/0x23c [ 42.570277][ T5304] do_el0_svc+0x4c/0x5c [ 42.570287][ T5304] el0_svc+0x64/0x260 [ 42.570296][ T5304] el0t_64_sync_handler+0x48/0x148 [ 42.570305][ T5304] el0t_64_sync+0x198/0x19c [ 42.615234][ T5302] tap0: tun_chr_ioctl cmd 1074025677 [ 42.616953][ T5302] tap0: linktype set to 768 [ 43.507147][ T11] tipc: Node number set to 2753446220 [ 43.797910][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.818394][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 43.921201][ T5328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.145'. [ 44.951121][ T5341] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 45.046122][ T5346] veth5: entered allmulticast mode [ 45.050939][ T5346] bond2: (slave veth5): Enslaving as an active interface with a down link [ 46.119072][ T4719] Bluetooth: hci0: command 0x0c1a tx timeout [ 46.149053][ T4715] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 46.180546][ T5354] capability: warning: `syz.2.154' uses deprecated v2 capabilities in a way that may be insecure [ 46.183827][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 46.297307][ T5356] loop4: detected capacity change from 0 to 256 [ 47.044560][ T5356] FAT-fs (loop4): IO charset m 2lDۉjLacgaelic not found [ 47.189887][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 47.189938][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 47.219716][ T5363] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 47.294508][ T5363] bond1: (slave veth0_to_bond): making interface the new active one [ 47.298137][ T5363] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 47.300501][ T5370] vhci_hcd vhci_hcd.0: invalid port number 36 [ 47.301717][ T5370] vhci_hcd vhci_hcd.0: GetPortErrorCount req not supported for USB 2.0 roothub [ 47.336007][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 47.342473][ T5363] macvlan2: entered promiscuous mode [ 47.343544][ T5363] macvlan2: entered allmulticast mode [ 48.722229][ T5410] syzkaller0: entered promiscuous mode [ 48.723462][ T5410] syzkaller0: entered allmulticast mode [ 49.048912][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 49.168691][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.174083][ T5445] FAULT_INJECTION: forcing a failure. [ 50.174083][ T5445] name failslab, interval 1, probability 0, space 0, times 0 [ 50.174125][ T5445] CPU: 0 UID: 0 PID: 5445 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT [ 50.174140][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 50.174147][ T5445] Call trace: [ 50.174152][ T5445] show_stack+0x2c/0x3c (C) [ 50.174176][ T5445] __dump_stack+0x30/0x40 [ 50.174188][ T5445] dump_stack_lvl+0xd8/0x12c [ 50.174198][ T5445] dump_stack+0x1c/0x28 [ 50.174208][ T5445] should_fail_ex+0x41c/0x590 [ 50.174219][ T5445] should_failslab+0xc4/0x120 [ 50.174227][ T5445] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 50.174236][ T5445] __alloc_skb+0x1f0/0x610 [ 50.174245][ T5445] netlink_alloc_large_skb+0xd4/0x114 [ 50.174254][ T5445] netlink_sendmsg+0x4c4/0x948 [ 50.174261][ T5445] __sock_sendmsg+0xc8/0x17c [ 50.174269][ T5445] ____sys_sendmsg+0x3d0/0x6c8 [ 50.174277][ T5445] ___sys_sendmsg+0x198/0x224 [ 50.174285][ T5445] __sys_sendmsg+0x158/0x204 [ 50.174292][ T5445] __arm64_sys_sendmsg+0x80/0x94 [ 50.174300][ T5445] invoke_syscall+0x98/0x244 [ 50.174310][ T5445] el0_svc_common+0xec/0x23c [ 50.174320][ T5445] do_el0_svc+0x4c/0x5c [ 50.174329][ T5445] el0_svc+0x64/0x260 [ 50.174338][ T5445] el0t_64_sync_handler+0x48/0x148 [ 50.174347][ T5445] el0t_64_sync+0x198/0x19c [ 50.211993][ T5450] loop0: detected capacity change from 0 to 512 [ 50.212356][ T5450] EXT4-fs: inline encryption not supported [ 50.212368][ T5450] EXT4-fs: quotafile must be on filesystem root [ 50.213514][ T5448] FAULT_INJECTION: forcing a failure. [ 50.213514][ T5448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.213530][ T5448] CPU: 1 UID: 0 PID: 5448 Comm: syz.3.189 Not tainted syzkaller #0 PREEMPT [ 50.213541][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 50.213546][ T5448] Call trace: [ 50.213550][ T5448] show_stack+0x2c/0x3c (C) [ 50.213568][ T5448] __dump_stack+0x30/0x40 [ 50.213579][ T5448] dump_stack_lvl+0xd8/0x12c [ 50.213589][ T5448] dump_stack+0x1c/0x28 [ 50.213598][ T5448] should_fail_ex+0x41c/0x590 [ 50.213611][ T5448] should_fail+0x14/0x24 [ 50.213620][ T5448] should_fail_usercopy+0x20/0x30 [ 50.213629][ T5448] _inline_copy_to_user+0x3c/0x158 [ 50.213640][ T5448] __htab_map_lookup_and_delete_batch+0x1000/0x1444 [ 50.213649][ T5448] htab_percpu_map_lookup_and_delete_batch+0x40/0x54 [ 50.213657][ T5448] bpf_map_do_batch+0x368/0x4d0 [ 50.213665][ T5448] __sys_bpf+0x850/0x8c8 [ 50.213672][ T5448] __arm64_sys_bpf+0xc8/0xe4 [ 50.213682][ T5448] invoke_syscall+0x98/0x244 [ 50.213692][ T5448] el0_svc_common+0xec/0x23c [ 50.213702][ T5448] do_el0_svc+0x4c/0x5c [ 50.213711][ T5448] el0_svc+0x64/0x260 [ 50.213720][ T5448] el0t_64_sync_handler+0x48/0x148 [ 50.213729][ T5448] el0t_64_sync+0x198/0x19c [ 50.237842][ T5450] binder: 5449:5450 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 50.360790][ T5466] FAULT_INJECTION: forcing a failure. [ 50.360790][ T5466] name failslab, interval 1, probability 0, space 0, times 0 [ 50.362822][ T5466] CPU: 1 UID: 0 PID: 5466 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT [ 50.362835][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 50.362840][ T5466] Call trace: [ 50.362843][ T5466] show_stack+0x2c/0x3c (C) [ 50.362864][ T5466] __dump_stack+0x30/0x40 [ 50.362875][ T5466] dump_stack_lvl+0xd8/0x12c [ 50.362884][ T5466] dump_stack+0x1c/0x28 [ 50.362894][ T5466] should_fail_ex+0x41c/0x590 [ 50.362905][ T5466] should_failslab+0xc4/0x120 [ 50.362913][ T5466] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 50.362922][ T5466] __alloc_skb+0x1f0/0x610 [ 50.362930][ T5466] _sctp_make_chunk+0x70/0x240 [ 50.362940][ T5466] sctp_make_datafrag_empty+0x114/0x218 [ 50.362948][ T5466] sctp_datamsg_from_user+0x6d4/0xe68 [ 50.362956][ T5466] sctp_sendmsg_to_asoc+0xf74/0x13c0 [ 50.362966][ T5466] sctp_sendmsg+0xc70/0x17bc [ 50.362972][ T5466] inet_sendmsg+0xb4/0xd8 [ 50.362982][ T5466] __sock_sendmsg+0xc8/0x17c [ 50.362990][ T5466] __sys_sendto+0x250/0x328 [ 50.362997][ T5466] __arm64_sys_sendto+0xe4/0x104 [ 50.363005][ T5466] invoke_syscall+0x98/0x244 [ 50.363015][ T5466] el0_svc_common+0xec/0x23c [ 50.363025][ T5466] do_el0_svc+0x4c/0x5c [ 50.363034][ T5466] el0_svc+0x64/0x260 [ 50.363043][ T5466] el0t_64_sync_handler+0x48/0x148 [ 50.363051][ T5466] el0t_64_sync+0x198/0x19c [ 50.398260][ T5469] loop4: detected capacity change from 0 to 1024 [ 50.643237][ T5469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.263510][ T4719] Bluetooth: Wrong link type (-71) [ 51.275340][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.304421][ T5488] loop3: detected capacity change from 0 to 8192 [ 51.360113][ T5488] loop3: p1 < > p3 < p5 > p4 [ 51.402461][ T5488] loop3: p4 size 3081 extends beyond EOD, truncated [ 51.405551][ T5488] loop3: p5 size 3081 extends beyond EOD, truncated [ 52.285760][ T5513] Injecting memory failure for pfn 0x11ed48 at process virtual address 0x20000000 [ 52.378934][ T5513] Memory failure: 0x11ed48: Sending SIGBUS to syz.2.203:5513 due to hardware memory corruption [ 52.379028][ T5513] Memory failure: 0x11ed48: recovery action for dirty LRU page: Recovered [ 52.379068][ T5513] Injecting memory failure for pfn 0x219430 at process virtual address 0x20001000 [ 52.401372][ T5520] FAULT_INJECTION: forcing a failure. [ 52.401372][ T5520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.401418][ T5520] CPU: 1 UID: 0 PID: 5520 Comm: syz.0.206 Not tainted syzkaller #0 PREEMPT [ 52.401434][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 52.401440][ T5520] Call trace: [ 52.401443][ T5520] show_stack+0x2c/0x3c (C) [ 52.401465][ T5520] __dump_stack+0x30/0x40 [ 52.401477][ T5520] dump_stack_lvl+0xd8/0x12c [ 52.401487][ T5520] dump_stack+0x1c/0x28 [ 52.401496][ T5520] should_fail_ex+0x41c/0x590 [ 52.401509][ T5520] should_fail+0x14/0x24 [ 52.401518][ T5520] should_fail_usercopy+0x20/0x30 [ 52.401528][ T5520] simple_read_from_buffer+0xc4/0x238 [ 52.401540][ T5520] proc_fail_nth_read+0x1a8/0x248 [ 52.401549][ T5520] vfs_read+0x230/0x8c8 [ 52.401560][ T5520] ksys_read+0x12c/0x228 [ 52.401569][ T5520] __arm64_sys_read+0x7c/0x90 [ 52.401579][ T5520] invoke_syscall+0x98/0x244 [ 52.401590][ T5520] el0_svc_common+0xec/0x23c [ 52.401599][ T5520] do_el0_svc+0x4c/0x5c [ 52.401609][ T5520] el0_svc+0x64/0x260 [ 52.401619][ T5520] el0t_64_sync_handler+0x48/0x148 [ 52.401627][ T5520] el0t_64_sync+0x198/0x19c [ 52.437101][ T5513] Memory failure: 0x219430: unhandlable page. [ 52.439026][ T5513] Memory failure: 0x219430: recovery action for get hwpoison page: Ignored [ 52.778138][ T5534] fuse: fd is not a fuse device [ 52.979728][ T5530] loop2: detected capacity change from 0 to 128 [ 53.353791][ T5538] FAULT_INJECTION: forcing a failure. [ 53.353791][ T5538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.353834][ T5538] CPU: 0 UID: 0 PID: 5538 Comm: syz.0.213 Not tainted syzkaller #0 PREEMPT [ 53.353848][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 53.353855][ T5538] Call trace: [ 53.353860][ T5538] show_stack+0x2c/0x3c (C) [ 53.353881][ T5538] __dump_stack+0x30/0x40 [ 53.353892][ T5538] dump_stack_lvl+0xd8/0x12c [ 53.353902][ T5538] dump_stack+0x1c/0x28 [ 53.353912][ T5538] should_fail_ex+0x41c/0x590 [ 53.353923][ T5538] should_fail_alloc_page+0xec/0x10c [ 53.353931][ T5538] prepare_alloc_pages+0x194/0x4a4 [ 53.353940][ T5538] __alloc_frozen_pages_noprof+0x134/0x320 [ 53.353949][ T5538] alloc_pages_mpol+0x1ec/0x3c0 [ 53.353957][ T5538] alloc_frozen_pages_noprof+0xc4/0x10c [ 53.353966][ T5538] alloc_pages_noprof+0x30/0x148 [ 53.353974][ T5538] alloc_skb_with_frags+0x244/0x690 [ 53.353985][ T5538] sock_alloc_send_pskb+0x740/0x850 [ 53.353996][ T5538] tun_get_user+0x6dc/0x364c [ 53.354006][ T5538] tun_chr_write_iter+0xfc/0x168 [ 53.354016][ T5538] vfs_write+0x51c/0xa0c [ 53.354026][ T5538] ksys_write+0x12c/0x228 [ 53.354035][ T5538] __arm64_sys_write+0x7c/0x90 [ 53.354045][ T5538] invoke_syscall+0x98/0x244 [ 53.354056][ T5538] el0_svc_common+0xec/0x23c [ 53.354065][ T5538] do_el0_svc+0x4c/0x5c [ 53.354075][ T5538] el0_svc+0x64/0x260 [ 53.354084][ T5538] el0t_64_sync_handler+0x48/0x148 [ 53.354098][ T5538] el0t_64_sync+0x198/0x19c [ 53.376096][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 53.405212][ T5121] udevd[5121]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 53.445198][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.460985][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 53.471087][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 53.493698][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 54.022494][ T5571] loop2: detected capacity change from 0 to 512 [ 54.030801][ T5571] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.222: invalid block [ 54.030910][ T5571] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.033351][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 54.033365][ C0] EXT4-fs (loop2): initial error at time 524342: ext4_get_branch:178: inode 11: block 4294967295 [ 54.033386][ C0] EXT4-fs (loop2): last error at time 524342: ext4_get_branch:178: inode 11: block 4294967295 [ 54.033670][ T5571] EXT4-fs (loop2): Remounting filesystem read-only [ 54.033931][ T5571] EXT4-fs (loop2): 2 truncates cleaned up [ 54.048408][ T5571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.935618][ T5584] syzkaller0: entered promiscuous mode [ 54.935653][ T5584] syzkaller0: entered allmulticast mode [ 54.995690][ T5566] tap0: tun_chr_ioctl cmd 1074025677 [ 54.995858][ T5566] tap0: linktype set to 768 [ 55.138550][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.208452][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 55.315885][ T5606] syzkaller0: entered promiscuous mode [ 55.315920][ T5606] syzkaller0: entered allmulticast mode [ 56.564163][ T5624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.232'. [ 56.697252][ T5626] loop2: detected capacity change from 0 to 512 [ 56.703132][ T5628] 9p: Bad value for 'rfdno' [ 56.713460][ T5626] EXT4-fs (loop2): 1 truncate cleaned up [ 56.714566][ T5626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.721917][ T5626] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.237: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 56.731080][ T5631] tipc: Started in network mode [ 56.732116][ T5631] tipc: Node identity 8e011ce71c81, cluster identity 4711 [ 56.737907][ T5631] tipc: Enabled bearer , priority 0 [ 56.747272][ T5631] syzkaller0: entered promiscuous mode [ 56.747300][ T5631] syzkaller0: entered allmulticast mode [ 56.758080][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.763033][ T5631] tipc: Resetting bearer [ 56.769476][ T5630] tipc: Resetting bearer [ 56.804616][ T5630] tipc: Disabling bearer [ 56.812137][ T5635] loop1: detected capacity change from 0 to 1024 [ 56.823361][ T5635] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.839525][ T5637] netlink: 'syz.4.241': attribute type 4 has an invalid length. [ 56.839562][ T5637] netlink: 17 bytes leftover after parsing attributes in process `syz.4.241'. [ 56.849791][ T5635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c018, mo2=0002] [ 56.850395][ T5635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.858343][ T5635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.238: bg 0: block 112: padding at end of block bitmap is not set [ 56.871324][ T5635] tipc: Started in network mode [ 56.871363][ T5635] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 56.871474][ T5635] tipc: Enabled bearer , priority 10 [ 56.949722][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 57.106185][ T5655] loop4: detected capacity change from 0 to 512 [ 57.108010][ T5655] vfat: Unknown parameter '&' [ 57.199031][ T5665] 0x7a856526440bd376-0x7a856526440bd3aa : "" [ 57.200688][ T5665] mtd: partition "" is out of reach -- disabled [ 57.202161][ T5665] FAULT_INJECTION: forcing a failure. [ 57.202161][ T5665] name failslab, interval 1, probability 0, space 0, times 0 [ 57.204590][ T5665] CPU: 1 UID: 0 PID: 5665 Comm: syz.4.250 Not tainted syzkaller #0 PREEMPT [ 57.204614][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 57.204620][ T5665] Call trace: [ 57.204624][ T5665] show_stack+0x2c/0x3c (C) [ 57.204649][ T5665] __dump_stack+0x30/0x40 [ 57.204661][ T5665] dump_stack_lvl+0xd8/0x12c [ 57.204672][ T5665] dump_stack+0x1c/0x28 [ 57.204682][ T5665] should_fail_ex+0x41c/0x590 [ 57.204694][ T5665] should_failslab+0xc4/0x120 [ 57.204702][ T5665] __kmalloc_cache_noprof+0x94/0x5ec [ 57.204711][ T5665] device_add+0xb4/0x9e0 [ 57.204722][ T5665] device_register+0x28/0x38 [ 57.204731][ T5665] add_mtd_device+0xb78/0x14cc [ 57.204743][ T5665] mtd_add_partition+0x2d4/0x3f4 [ 57.204751][ T5665] mtdchar_blkpg_ioctl+0x224/0x248 [ 57.204760][ T5665] mtdchar_ioctl+0x1218/0x1a7c [ 57.204768][ T5665] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 57.204776][ T5665] __arm64_sys_ioctl+0x14c/0x1c4 [ 57.204787][ T5665] invoke_syscall+0x98/0x244 [ 57.204797][ T5665] el0_svc_common+0xec/0x23c [ 57.204807][ T5665] do_el0_svc+0x4c/0x5c [ 57.204816][ T5665] el0_svc+0x64/0x260 [ 57.204826][ T5665] el0t_64_sync_handler+0x48/0x148 [ 57.204834][ T5665] el0t_64_sync+0x198/0x19c [ 57.228515][ T5665] ------------[ cut here ]------------ [ 57.228528][ T5665] WARNING: drivers/mtd/mtdpart.c:38 at release_mtd_partition+0x8c/0x94, CPU#1: syz.4.250/5665 [ 57.231055][ T5665] Modules linked in: [ 57.231686][ T5665] CPU: 1 UID: 0 PID: 5665 Comm: syz.4.250 Not tainted syzkaller #0 PREEMPT [ 57.232948][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 57.234459][ T5665] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 57.235691][ T5665] pc : release_mtd_partition+0x8c/0x94 [ 57.236529][ T5665] lr : release_mtd_partition+0x8c/0x94 [ 57.237375][ T5665] sp : ffff8000aa647310 [ 57.237981][ T5665] x29: ffff8000aa647310 x28: ffff7000154c8e90 x27: 1fffe0001b87ae3b [ 57.239171][ T5665] x26: 0000000000000001 x25: 1fffe0001b87ae34 x24: 1ffff00010df2bd8 [ 57.240418][ T5665] x23: dfff800000000000 x22: ffff0000dc3d76a0 x21: ffff0000dc3d76b8 [ 57.241609][ T5665] x20: dfff800000000000 x19: ffff0000dc3d7000 x18: 1fffe00035bd2e28 [ 57.242871][ T5665] x17: 0000000000000003 x16: 0000000000000001 x15: 0000000000000000 [ 57.244108][ T5665] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 57.245286][ T5665] x11: 0000000000000000 x10: ffff6000182fcf9c x9 : 0000000000000000 [ 57.246498][ T5665] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 57.247719][ T5665] x5 : 00000000ffffffff x4 : 0000000000000dc0 x3 : ffff8000868956b0 [ 57.248998][ T5665] x2 : 0000000000000006 x1 : ffff0000d1781d40 x0 : 0000000000000000 [ 57.250215][ T5665] Call trace: [ 57.250720][ T5665] release_mtd_partition+0x8c/0x94 (P) [ 57.251542][ T5665] mtd_release+0xd8/0x118 [ 57.252179][ T5665] device_release+0xb4/0x1d4 [ 57.252964][ T5665] kobject_put+0x1dc/0x4b8 [ 57.253699][ T5665] put_device+0x28/0x40 [ 57.254336][ T5665] add_mtd_device+0xb98/0x14cc [ 57.255113][ T5665] mtd_add_partition+0x2d4/0x3f4 [ 57.255938][ T5665] mtdchar_blkpg_ioctl+0x224/0x248 [ 57.256757][ T5665] mtdchar_ioctl+0x1218/0x1a7c [ 57.257523][ T5665] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 57.258274][ T5665] __arm64_sys_ioctl+0x14c/0x1c4 [ 57.259096][ T5665] invoke_syscall+0x98/0x244 [ 57.259849][ T5665] el0_svc_common+0xec/0x23c [ 57.260578][ T5665] do_el0_svc+0x4c/0x5c [ 57.261242][ T5665] el0_svc+0x64/0x260 [ 57.261850][ T5665] el0t_64_sync_handler+0x48/0x148 [ 57.262714][ T5665] el0t_64_sync+0x198/0x19c [ 57.263512][ T5665] irq event stamp: 202 [ 57.264130][ T5665] hardirqs last enabled at (201): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 57.265625][ T5665] hardirqs last disabled at (202): [] el1_brk64+0x20/0x54 [ 57.266981][ T5665] softirqs last enabled at (142): [] do_sve_acc+0x32c/0x4b8 [ 57.268333][ T5665] softirqs last disabled at (140): [] do_sve_acc+0x10c/0x4b8 [ 57.269711][ T5665] ---[ end trace 0000000000000000 ]--- [ 57.272851][ T5665] ================================================================== [ 57.272863][ T5665] BUG: KASAN: slab-use-after-free in add_mtd_device+0xbbc/0x14cc [ 57.272884][ T5665] Read of size 8 at addr ffff0000dc3d75c8 by task syz.4.250/5665 [ 57.272894][ T5665] [ 57.272899][ T5665] CPU: 1 UID: 0 PID: 5665 Comm: syz.4.250 Tainted: G W syzkaller #0 PREEMPT [ 57.272909][ T5665] Tainted: [W]=WARN [ 57.272912][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 57.272916][ T5665] Call trace: [ 57.272919][ T5665] show_stack+0x2c/0x3c (C) [ 57.272930][ T5665] __dump_stack+0x30/0x40 [ 57.272940][ T5665] dump_stack_lvl+0xd8/0x12c [ 57.272950][ T5665] print_address_description+0xb0/0x238 [ 57.272957][ T5665] print_report+0x68/0x84 [ 57.272964][ T5665] kasan_report+0x8c/0xc4 [ 57.272973][ T5665] __asan_report_load8_noabort+0x20/0x2c [ 57.272983][ T5665] add_mtd_device+0xbbc/0x14cc [ 57.272993][ T5665] mtd_add_partition+0x2d4/0x3f4 [ 57.273000][ T5665] mtdchar_blkpg_ioctl+0x224/0x248 [ 57.273009][ T5665] mtdchar_ioctl+0x1218/0x1a7c [ 57.273017][ T5665] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 57.273025][ T5665] __arm64_sys_ioctl+0x14c/0x1c4 [ 57.273035][ T5665] invoke_syscall+0x98/0x244 [ 57.273045][ T5665] el0_svc_common+0xec/0x23c [ 57.273054][ T5665] do_el0_svc+0x4c/0x5c [ 57.273063][ T5665] el0_svc+0x64/0x260 [ 57.273072][ T5665] el0t_64_sync_handler+0x48/0x148 [ 57.273080][ T5665] el0t_64_sync+0x198/0x19c [ 57.273087][ T5665] [ 57.273089][ T5665] Allocated by task 5665: [ 57.273093][ T5665] kasan_save_track+0x40/0x78 [ 57.273100][ T5665] kasan_save_alloc_info+0x44/0x54 [ 57.273112][ T5665] __kasan_kmalloc+0x9c/0xb4 [ 57.273119][ T5665] __kmalloc_cache_noprof+0x2e8/0x5ec [ 57.273126][ T5665] allocate_partition+0x13c/0x14cc [ 57.273133][ T5665] mtd_add_partition+0x194/0x3f4 [ 57.273139][ T5665] mtdchar_blkpg_ioctl+0x224/0x248 [ 57.273147][ T5665] mtdchar_ioctl+0x1218/0x1a7c [ 57.273154][ T5665] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 57.273160][ T5665] __arm64_sys_ioctl+0x14c/0x1c4 [ 57.273168][ T5665] invoke_syscall+0x98/0x244 [ 57.273176][ T5665] el0_svc_common+0xec/0x23c [ 57.273184][ T5665] do_el0_svc+0x4c/0x5c [ 57.273192][ T5665] el0_svc+0x64/0x260 [ 57.273198][ T5665] el0t_64_sync_handler+0x48/0x148 [ 57.273205][ T5665] el0t_64_sync+0x198/0x19c [ 57.273210][ T5665] [ 57.273212][ T5665] Freed by task 5665: [ 57.273215][ T5665] kasan_save_track+0x40/0x78 [ 57.273221][ T5665] kasan_save_free_info+0x58/0x70 [ 57.273229][ T5665] __kasan_slab_free+0x74/0xa4 [ 57.273235][ T5665] kfree+0x188/0x690 [ 57.273241][ T5665] release_mtd_partition+0x74/0x94 [ 57.273247][ T5665] mtd_release+0xd8/0x118 [ 57.273253][ T5665] device_release+0xb4/0x1d4 [ 57.273259][ T5665] kobject_put+0x1dc/0x4b8 [ 57.273267][ T5665] put_device+0x28/0x40 [ 57.273274][ T5665] add_mtd_device+0xb98/0x14cc [ 57.273282][ T5665] mtd_add_partition+0x2d4/0x3f4 [ 57.273288][ T5665] mtdchar_blkpg_ioctl+0x224/0x248 [ 57.273295][ T5665] mtdchar_ioctl+0x1218/0x1a7c [ 57.273302][ T5665] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 57.273308][ T5665] __arm64_sys_ioctl+0x14c/0x1c4 [ 57.273316][ T5665] invoke_syscall+0x98/0x244 [ 57.273324][ T5665] el0_svc_common+0xec/0x23c [ 57.273332][ T5665] do_el0_svc+0x4c/0x5c [ 57.273340][ T5665] el0_svc+0x64/0x260 [ 57.273346][ T5665] el0t_64_sync_handler+0x48/0x148 [ 57.273353][ T5665] el0t_64_sync+0x198/0x19c [ 57.273358][ T5665] [ 57.273360][ T5665] The buggy address belongs to the object at ffff0000dc3d7000 [ 57.273360][ T5665] which belongs to the cache kmalloc-2k of size 2048 [ 57.273365][ T5665] The buggy address is located 1480 bytes inside of [ 57.273365][ T5665] freed 2048-byte region [ffff0000dc3d7000, ffff0000dc3d7800) [ 57.273372][ T5665] [ 57.273374][ T5665] The buggy address belongs to the physical page: [ 57.273378][ T5665] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000dc3d1000 pfn:0x11c3d0 [ 57.273385][ T5665] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 57.273391][ T5665] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 57.273398][ T5665] page_type: f5(slab) [ 57.273405][ T5665] raw: 05ffc00000000240 ffff0000c0002000 fffffdffc35d4410 fffffdffc35bc210 [ 57.273410][ T5665] raw: ffff0000dc3d1000 0000000800080007 00000000f5000000 0000000000000000 [ 57.273416][ T5665] head: 05ffc00000000240 ffff0000c0002000 fffffdffc35d4410 fffffdffc35bc210 [ 57.273422][ T5665] head: ffff0000dc3d1000 0000000800080007 00000000f5000000 0000000000000000 [ 57.273427][ T5665] head: 05ffc00000000003 fffffdffc370f401 00000000ffffffff 00000000ffffffff [ 57.273432][ T5665] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 57.273435][ T5665] page dumped because: kasan: bad access detected [ 57.273438][ T5665] [ 57.273440][ T5665] Memory state around the buggy address: [ 57.273443][ T5665] ffff0000dc3d7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.273448][ T5665] ffff0000dc3d7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.273452][ T5665] >ffff0000dc3d7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.273455][ T5665] ^ [ 57.273459][ T5665] ffff0000dc3d7600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.273463][ T5665] ffff0000dc3d7680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.273466][ T5665] ================================================================== [ 57.275180][ T5665] Disabling lock debugging due to kernel taint [ 57.320418][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.440689][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 57.598032][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 57.598805][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 57.598819][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 57.600327][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice= 0.40 [ 57.600337][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.600345][ T9] usb 1-1: Product: syz [ 57.600351][ T9] usb 1-1: Manufacturer: ◇愰ꇡ쎜끾秮橿㐥몗ྠ~烴ښ뼕ᨀ㻃鉨蒖歈隱ц퓗╡纊ᅇ腮댥⾂踫⠏頉属ㅉ釠쾍鹬ᜀ [ 57.600359][ T9] usb 1-1: SerialNumber: syz [ 57.835708][ T9] usb 1-1: USB disconnect, device number 2 [ 57.969769][ T4821] tipc: Node number set to 10136234 [ 64.209443][ T26] cfg80211: failed to load regulatory.db [ 64.216337][ T1579] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.216381][ T1579] ieee802154 phy1 wpan1: encryption failed: -22