last executing test programs: 14.789698846s ago: executing program 3 (id=2957): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r1}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r1}, 0x38) r2 = socket(0x2, 0x3, 0xff) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000300)='\x00'/20, 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) (async) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000300)='\x00'/20, 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) 14.61304207s ago: executing program 3 (id=2960): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.367100937s ago: executing program 3 (id=2964): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000100)="120000001a009b8a5feee09a140000003b9b", 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbb9d4c7b8fe7a1ac8000300d1320f237c6b3d8cfc030000000000", @ANYBLOB="0600950010000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4820) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000001000061100800000000007b0ae0ff0000000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x7, 0x80000000, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8000, 0x7820, 0x800, 0x9}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffe6, 0xb}, {0x0, 0xffff}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000040) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001042cbd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0380000010e3040008000500", @ANYRES32=r7, @ANYBLOB="240012800b0001006970766c616e00001400028006"], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x16}, {}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@remote, r11}, 0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r11, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f0000000040)={@remote, r11}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="d0010000", @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf25060000000c00b9126f583d37844876d4533db1ffd9273b51018008f10900000003000200000044000180140002006c070000000000000000000000000000080001000e73d092d6f004dc3c5a5b8f9b4e6bf672ab4cfc956cee60bcd5d3b40f9d3fb14d229269129f12b6d2883f67c0e703ef48692b82c67fdaac434dc26f498720de0e09b849c93591ef0b27d4b744459d3540cb58", @ANYRES32=0x0, @ANYBLOB="140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265746170300000000000000800030000000000080003000300000014000200767863616e3100000000000000000000580001800800030002000000140002006272696467655f736c6176655f31000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f30000000000800030002000000440001801400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f6d61637674617000000008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000300020000000400018058000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d00000014000200767863616e310000000000000000000008000300020000001400020076657468315f746f5f626f6e64000000180001801400020070696d36726567000000000000000000"], 0x1d0}}, 0x4) 13.188182409s ago: executing program 3 (id=2971): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1}, &(0x7f0000000340)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079104800000000007900380000000000950074000000000022187069f9fb6bdbca6359d81e8eecd7934bdcd758593c4e4ead4367ee3caad7a68421695cdba2a119ca79a0a9a842dbeba155bc249578ff037773a2813b594c769c354a802307ef4ea733072570de61c55077543278cb2f2ce50f80aa94017b5ba8805cdd558a7eb801e1a9442402e596944d7dc5db8c2aa2a96eb2ba810078c32e228ea525f9dabdd2de349bf424610dc6a94b237888800628fa480e7d411df454c90cf5e070b0fa21c5fa54a65b920e43e67e9d7a6094bda46a016e7b8f9edbb8eea6638fb7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x4, 0x570, [0x200000000400, 0x0, 0x0, 0x200000000430, 0x200000000626], 0x0, &(0x7f0000000000), &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1392]}, 0x5e8) 4.332588384s ago: executing program 2 (id=3027): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x800, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4, 0xf, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e22, 0x9, @mcast1}}, 0x6, 0x5, 0x4, 0x3a558e81, 0x3, 0x0, 0x1}, &(0x7f0000000140)=0x9c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000001c40)=""/4085, 0xffc, 0x0, 0x0}}, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r8, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) recvmmsg(r7, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x10100, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000005540)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x180, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x78, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x399}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3fc}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_NEWSETELEM={0x550, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x520, 0x3, 0x0, 0x1, [{0x33c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x270, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa8, 0x1, "413052a7aa982461f7bfda57eed0bbfec0d47b6bc1c2c4f39e1c83df684acc730d1e30550a30d71998c101947ac0b02d0c0592023fa718902e5b618c135844f3a93571d705d9d10020d591f3257a6cc5089fcea14164c8222c811847b7b06eaec006a33ecafdd16dfda50afb06c05d822df76bcff76023273e357ec72008fad36bf9382af4bca28123cf6d9fca1a04e60ca96ad8544796cee9fd996ab03d95621616b169"}, @NFTA_DATA_VALUE={0xef, 0x1, "3960824a8426ef51b576628cbcc7b4d94cdc35d515edcbc55dff645da8e2791f9f9b4722e44248179b89d4f72948ee9ceaa08f886a3204b8105aafb9b48bb20c8e1789fd8042e8e7988c5f7cc528c5e10b4a8cfa83513627415dc2adc298fb5ecd94cc3ceeed91707c2d6876e77d60a0eeba1e5d5336fc12190ddb56a45b8f9bb026af821bf08e843cf024d5772898eac4d073c38d50c184a13ad31d805fd13deb54b14a890b87441907e5316ab8527f64bceb3c1f9f1a3c464b53c02da98f28cabc1918bd07361d5c5c265d5b34d4f862044a51266fe6dff26df8c433b764ce56cb272b29c3773583c3b1"}, @NFTA_DATA_VALUE={0xd1, 0x1, "d30988c3614c4794f74def17b0bb2f2723cae0f8227d4d8367d995546a1c1e9bcbe26b7124bd822a459ec9ba00ac5ca14979b92b4ebdf90a8d8668075aaf0d29e146b68f0efba6e58fbb3a10484c937946397c8239bd315519a003b130098268212e0cc04686e4f176f31c0f13fe546362b94c9369aac948cb7b973401e7d307b47b4aa2f55af112b3462cf2a7dc27b09b9ddfbdf6cc37c419db2cb98585abeaa779256f258f5ab88a7a52d7d880c85e50b35005a746610ddf522bd06b4e9b6c567172efcb3bdaecc49f0a9261"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x9c, 0x6, 0x1, 0x0, "546112c65b69236c1ed2f9e90d899c8250eb3e08c8f24d764dcc001ae8d55b16114332d376dfd4388fb928208b4e64ab02510f261aa18c3fee9f1c295222a5c2f0f8362a24c252738c9647f523ff4928e92a291dadf4fc4b9c9bb7657f39d75209f945e5fd2a84cedf984f6f9a90fa2c8f071b42e3ea6cb233b0973c5a5303afe4c4ec4b319937cf395e2e08c9ac282379ad20876f4fd760"}]}, {0x1d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1cc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcb, 0x1, "c740240812c2aedd9274d390b86b9113c273a4f968580d28e61706407a9cba8b12eb4b37a13bce88bed08c14c3ccc91b3038936060813cb807553a8787f30267e7f5b0e0dd36f28da3845eb27343687739b6b522d61a4f6257973d05260fdeb9a501a1524b40b716b3b4509470259efd1b0cb4ad77a51712f1f2bb073aa26aa3c4b42f6d16680847653c9589c0a06bfd8f8ff79240c5d6857db1abbfdfd74a722b65f3b2afd47e0f964ae6d97955c78df64ced7c3704cbcbb8d54f149160fff6f0b77cc0ace9e2"}, @NFTA_DATA_VALUE={0x7, 0x1, "c4296d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "ddd7f132c182f91cbdb090218e95ab52621df65839954f152f7d29bb4969b605666e8891f2853720bbb8c274be0e01bca641d0f304f7327884c0c1eef935f080653fee3cfe9fd934155479f11eedcc37dfa04c051753"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x31, 0x1, "d8e24d498a57406dd5a86930f287b1f3f7ef3b1e790759b5f6b320979f09661428c4b08d72f34fbac62b884fa0"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}]}, @NFT_MSG_DELRULE={0x1470, 0x8, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x143c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x1294, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1284, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x5c, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x15, 0x1, "b2efe1f3280af62690a469ce39fc517b07"}]}, @NFTA_BITWISE_DATA={0x1054, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_XOR={0x1b8, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x85, 0x1, "f6573f7ca9b0bc6dfbcb6e81d2435235544761a7799d6efc0bec3d6dfcbd7f44fd2a43402d7c803e5890881a47ba91753be5c7f67e6283812071ff600085802ddab65b2349230110229914440d74f85fd28fd8dca77b0694c38ca9f1e3012314d31c28133f78f6ef71a25793108076fb8eda459f35d1abb1a7225f8bcae21e7780"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f}]}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0xd0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x8e, 0x3, "581ececb6d73bb820533dc3057627190033a1a4706e0c510d8509240a52e80c73627e047d9460091505200410729e66ca7a74a47352b790ccc6198e144a6219dc958b6a2c9e0f47512e426c0b9fc105d52eb3eb62ce58c6de097e55e6820e2aed45594b9df3123e80e71dc1e7229f9b685971c2b16d2e8f72ad4c8a678b8610588988e40eaa5185911b3"}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xe7}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}]}, @NFT_MSG_DELFLOWTABLE={0xbc, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x138, 0x5, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x43affa1f}]}, @NFTA_CHAIN_USERDATA={0x83, 0xc, "ffa54c4db319fb03b0cfca0134627e74b1913e6456e3c430a45188f4085e5a9d371fba26ad8be4714bdd544c8deede6bb139f210c1f824641603b93ff5b4b19412973a7f7aa54898ae906e5f3aa9fbcf59ce0a86b8679609ea1dd9aada0c297f9cc5250d7999b355362655d277ba813139e4b0cccfb824897e32a3ffd02a71"}]}, @NFT_MSG_DELOBJ={0x124, 0x14, 0xa, 0xc06, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x102, 0x8, "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"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1ec4}, 0x1, 0x0, 0x0, 0x48045}, 0x20004005) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000180)="0000ff000000", 0x6}], 0x2) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89ff, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x1, 0xa1, 0x40000000}}) 3.248736058s ago: executing program 2 (id=3036): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newlinkprop={0x38, 0x6c, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x40000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0xd7fa}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ac1f631b0000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1, 0x70bd27}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f0000000340), 0x11000) vmsplice(r11, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0xfff}, {&(0x7f00000011c0)="14", 0x1}], 0x2, 0xf) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.758136591s ago: executing program 1 (id=3038): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f0000000200)=[{0x3, 0x3, 0x74, 0x8}, {0x62b, 0x81, 0x1, 0x8}, {0x7, 0x6, 0x3, 0x5}, {0x6, 0x9, 0x6, 0x6}, {0xa9e, 0x8, 0x3, 0x401}, {0x0, 0x5, 0x3, 0x3}, {0x2, 0x40, 0x3}, {0x8, 0x8, 0x9, 0x2}, {0x5, 0x48, 0x3e, 0x80000001}]}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x7}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)='r', 0x1}], 0x1, 0x0, 0x0, 0x30000}, 0x48810) socket$netlink(0x10, 0x3, 0x2) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000454ff0)={0x77359400}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000300)="122b07b1c2f07193f5bc0524810f756a8f8f1080971f374f0fb3801359595c985b1fcc20012b8552423d4acfe6a376525f987b6abfe50b7483245df95555762c358977ccb6bdfb1348e1400654f3640e31b581c2d193de9121905e2aa865d71677429d050b7681412fa6301b0fdd91187ca37e54461eae2b6411d3666f9c6bc76fce4fb62c16a267f4dcbbb7c83cc49f663ee4196fe8d6129949c451f708299895c0194a81cb31bb5a0778b45523cd7f01cee2621954306f8097bbbe0932a867f14ce0f67a9ddbdb", 0xc8}], 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) accept4$x25(r0, 0x0, 0x0, 0x0) 2.6208447s ago: executing program 4 (id=3039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@deltclass={0x40, 0x29, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xa, 0x4}, {0x3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x1}}, @tclass_kind_options=@c_drr={{0x8}, {0xb, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7fff}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES16=r0, @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x48051}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x8070bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2c16b4fa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x24000040) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) 2.449590443s ago: executing program 0 (id=3040): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003a00010324bd7002fadbdf2501020000"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.4488757s ago: executing program 4 (id=3041): socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000180)=0x1, 0x4) socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001700)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xac, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x3, 0x3}, [@TCA_NETEM_LOSS={0x74, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x1, 0x10001, 0x5d}}, @NETEM_LOSS_GI={0x18, 0x1, {0xee1, 0x1fe00000, 0x8, 0x6, 0xf}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x4, 0x9, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x100, 0xa, 0x5, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x9, 0x2, 0xab5, 0x4}}]}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xb}]}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (fail_nth: 5) 2.007298814s ago: executing program 0 (id=3042): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbef1, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0xfff8}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x103}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.531314601s ago: executing program 1 (id=3043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}}, 0x20000000) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x6}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x46, 0x107, 0xfffffffe, 0x25dfdbfe, {0xe, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xcc}]}]}, 0x1c}}, 0xc000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) 1.529671425s ago: executing program 2 (id=3044): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000500)="b9ff03076003008cb89e08f086dd93c60f059fb7b40771d3cf23b10a048a394ff6c5d2f498ad2ccf", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.520201557s ago: executing program 0 (id=3045): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffefc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_fd={0x18, 0x6}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async) r0 = socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000100000f97fe0000050104000100000004ffef004d3655070000000000000f01000000b500612e61"], &(0x7f0000001b00)=""/3, 0x45, 0x3, 0x1, 0x5}, 0x28) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.4588049s ago: executing program 4 (id=3046): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbef1, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x201}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.344713382s ago: executing program 0 (id=3047): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x6, @vifc_lcl_ifindex=r1, @multicast2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0x4}, {0xffffffff, 0x4}]}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, 0x0, 0x3b}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x74}}, 0x0) 1.341828341s ago: executing program 4 (id=3048): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000200)={0x80}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x38, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) sendmsg$NFC_CMD_DEV_DOWN(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r12, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r12, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040000}, 0x40041) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffc}, @TCA_PIE_LIMIT={0x8, 0x2, 0x80000000}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1d}]}}]}, 0x48}}, 0x0) 1.341525004s ago: executing program 2 (id=3049): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x1, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10012}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x10001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@delnexthop={0x0, 0x69, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{}, {0x0, 0x1, 0x2}, {0x0, 0x1, 0x2}, {0x0, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.140736568s ago: executing program 0 (id=3050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x60000) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x4000040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="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", 0x1c0}], 0x1, 0x0, 0x0, 0x40054}, 0x4040884) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x3, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r7, @ANYRES8=r6], 0xdd12}], 0x1, 0x0, 0x0, 0x4008000}, 0x20040051) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dvmrp0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @initdev}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x8000, 0x1, 0x7, {{0x15, 0x4, 0x1, 0xc, 0x54, 0x66, 0x0, 0xa5, 0x29, 0x0, @private=0xa010102, @loopback, {[@lsrr={0x83, 0x23, 0x98, [@empty, @broadcast, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @private=0xa010100]}, @rr={0x7, 0x1b, 0x7b, [@empty, @private=0xa010102, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x94, r8, 0x8, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x40, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) 1.140472003s ago: executing program 2 (id=3051): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000280)=@tipc=@name, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000080)=""/14, 0xe}, 0x80010060) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff9a, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0xf}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 1.06587135s ago: executing program 1 (id=3052): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ffe4306844ebe99b554e0fe9ad", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r1, 0x5, 0x4}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x22}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000480)={r7}, &(0x7f0000000500)=0x8) r8 = socket(0x10, 0x80002, 0x0) ioctl$FITHAW(r1, 0xc0045878) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtfilter={0x36fc, 0x2c, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xffe0, 0x1}, {0x5, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x36bc, 0x2, [@TCA_ROUTE4_ACT={0x3680, 0x6, [@m_police={0x32c4, 0x1, 0x0, 0x0, {{0xb}, {0x3218, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x1, 0x18b3, 0x3a5, 0x6, {0x0, 0x1, 0x7, 0x6, 0x9, 0xb84}, {0x5, 0x2, 0x7, 0x2, 0x4, 0xffffffc0}, 0x8, 0x9, 0xfff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffc0}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x19}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0xfff, 0x7, 0x9f, 0x8, 0x4, 0x674e, 0xfffff2f6, 0xfff, 0x21f6, 0x400, 0x6, 0x6, 0x7, 0x0, 0xb5a, 0x9a0, 0xac, 0x0, 0x1, 0xd78a, 0x6, 0xfffff0f2, 0x0, 0x8000, 0x1, 0x3, 0x7, 0xcd7, 0xfffffffa, 0x7, 0x6, 0x7fffffff, 0x4, 0xfffffffa, 0x80000000, 0x2, 0x2, 0x1, 0x80000000, 0x42, 0xa, 0x0, 0x2, 0x4, 0xfff, 0x9, 0x0, 0x1, 0x4, 0xfffffffe, 0xc00, 0x8, 0xfffffffa, 0x2, 0x3, 0x5, 0x7, 0x3, 0xe, 0xd, 0x2, 0x400, 0xc, 0x80, 0x100, 0xfffffff9, 0x2, 0x7ff, 0x100, 0x1, 0x572, 0x40000000, 0x9, 0x9, 0x8, 0x1, 0x9, 0x8, 0xa, 0x7, 0xc39, 0x1, 0x8, 0x5, 0x6, 0x6, 0xb82, 0xfffffffa, 0x2, 0x7, 0x7, 0x1, 0x101, 0x888, 0x49, 0x6, 0xd, 0x81, 0x7, 0x81, 0x6, 0x3, 0xbbdb, 0x1, 0x1, 0xfffffffd, 0xc, 0x9, 0xabb2, 0xfffffc01, 0x6, 0x80, 0x8, 0x8, 0x6, 0x6, 0x2, 0x4, 0x2, 0x7ff, 0x9, 0xb, 0x3, 0x9, 0x4, 0x7fff, 0x9, 0x3, 0x4, 0x9e05, 0x0, 0x80, 0xc839, 0x6c, 0xfffff2a0, 0x2, 0xf, 0x4, 0x0, 0xe110, 0x2, 0x7, 0x3, 0x40, 0x6, 0x7fff, 0x71ab0000, 0x80, 0x21, 0x4f3, 0x9f, 0x101, 0xff, 0x2, 0x7c5, 0x0, 0xa, 0x9, 0x8, 0x0, 0x5, 0x3, 0x3fa, 0x6, 0x2, 0x7fff, 0x100, 0x8, 0x3, 0x6, 0x0, 0x8, 0x1, 0x2, 0xf, 0x2, 0x6, 0x6, 0x5, 0x95, 0x1, 0x5, 0x7, 0x1, 0x1, 0x80000001, 0xf7a0, 0x0, 0x35, 0x5, 0xfffffffd, 0x0, 0x6, 0x2, 0x7fff, 0x6, 0x1, 0xfffffffc, 0x5, 0x9, 0xfffffffa, 0xffffffff, 0x3, 0x1, 0x3, 0x3, 0x0, 0x7, 0x9, 0x9, 0x10000, 0x0, 0xffffffff, 0xd1ac, 0x4, 0x4, 0xb, 0xffff441f, 0x7f, 0x3523, 0xcb, 0x30000, 0xfffffff9, 0x3, 0xfffff801, 0x9, 0xfffffff8, 0x8, 0xac, 0x6, 0x5, 0xfd25, 0x2, 0x4, 0x4, 0x1ff, 0x0, 0x3, 0x6, 0x3, 0x7c, 0x5f0f698d, 0x6, 0x6, 0x6, 0x3, 0x0, 0x1, 0x0, 0x800, 0x10, 0x3b2e, 0x5, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x80000000, 0x19e1, 0x6, {0x2, 0x0, 0xb58, 0x2, 0x12, 0x3}, {0x4, 0x0, 0x3, 0x92, 0xfffb, 0x2}, 0x4, 0x1, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8b4, 0xa94bfc4ec773bc70, 0xed87, 0xb16, 0xf, {0x6, 0x2, 0x7f, 0x3, 0xffff, 0x1000}, {0x7, 0x2, 0x4, 0xd2ba, 0x7ff, 0x6}, 0x2, 0x2, 0x100}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x101, 0x9, 0x31c4dea2, 0x100, 0x8000, 0x1, 0x7fff, 0xfffffffa, 0x5271, 0xe9, 0x401, 0xbab2, 0xfffffff9, 0x2, 0x594da21e, 0xce3, 0xe20, 0xfffffffc, 0x4, 0x8, 0x7, 0x0, 0x6, 0x8c, 0x7, 0x8000, 0xffff, 0xf6, 0x3ff, 0x0, 0x4, 0x4, 0x4, 0x1, 0x7, 0x4, 0x3, 0x800, 0x6, 0x3, 0xcac, 0x1cba, 0x9387, 0x0, 0x10, 0x8, 0x511, 0xe74, 0x4, 0x1, 0x100, 0x7, 0x6f8, 0x6, 0x0, 0xe1c4, 0x7, 0x3, 0x100, 0x9, 0x3, 0x7, 0xf8a87fe, 0x714, 0x40, 0x4, 0x5, 0x101, 0x8000, 0x5, 0x7f, 0x6, 0x1000, 0x80, 0x9, 0x8, 0x3, 0x8, 0x354, 0xfffff072, 0x2, 0xfffff469, 0x0, 0x9, 0x0, 0x1, 0x6, 0x87, 0xfffffffc, 0x6, 0x5, 0xf, 0x6, 0x5, 0x1, 0x1, 0x200, 0xb94, 0xffffffff, 0x2, 0x3ff, 0xc, 0x0, 0x80000000, 0x30bf, 0x9, 0x6, 0x200, 0x3, 0x8001, 0x5, 0xfffffffa, 0x1, 0x8, 0x0, 0x28000000, 0x5, 0x5, 0x0, 0x3, 0x5, 0x7, 0x220b9077, 0x101, 0x54, 0x6, 0x3, 0x8, 0x2800000, 0xfff, 0x2, 0x5, 0x0, 0xfffffff1, 0x81, 0x800, 0x9be, 0x4, 0x4, 0xcb8c, 0x9, 0x9, 0x72, 0x8, 0x101, 0x1, 0x6, 0x8, 0x6, 0x1, 0x0, 0x8, 0x9, 0x1, 0x2, 0x8, 0x6, 0x200, 0x5, 0x80000000, 0x10001, 0x9, 0x1000, 0x6, 0x80000000, 0x1, 0xfffffff7, 0x400, 0x100, 0x7, 0x1, 0x9, 0x40, 0x7fff, 0xfff, 0x4, 0x6, 0x0, 0x40, 0x5, 0x8, 0xfffffff8, 0x8fde, 0x5, 0xe, 0x4, 0x0, 0x1, 0x6, 0x90000000, 0x401, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfff, 0x4, 0x8, 0x8, 0x6, 0x100, 0x7, 0x0, 0x4, 0x8, 0x5, 0x6, 0x5, 0x101, 0xfffffffe, 0x9, 0x7, 0xf, 0xffffff08, 0x3, 0x3, 0x9, 0xffff, 0x2, 0x8, 0x2, 0x2, 0xeaa1, 0x6, 0x4, 0x7, 0x15e, 0x2, 0x0, 0x3, 0x6, 0x9, 0x0, 0xfffffffb, 0xc, 0x4, 0xc1cf, 0x10001, 0x8, 0x6, 0x4, 0x8, 0x6, 0x7, 0x0, 0x5, 0x9, 0x10001, 0xbc9, 0x9, 0x9, 0x38e, 0x800, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x9, 0x7f, 0x2, 0xf2, 0x84, 0x8, 0x9, 0x0, 0xfffffffd, 0x7, 0xbed, 0x3, 0x2, 0x2, 0x0, 0x9, 0x0, 0x5, 0xd, 0xff, 0x1, 0x2, 0x0, 0x6, 0x0, 0x4, 0x80000001, 0x40, 0x707, 0xe6b, 0x6, 0x5, 0x5, 0x8, 0x7f800000, 0x1, 0x0, 0x101, 0x81, 0x7, 0x9, 0x401, 0x4, 0x2, 0x6, 0x6, 0xffff, 0x9, 0x3, 0x9, 0x0, 0x6, 0x2, 0x5, 0x3, 0x8, 0x9260, 0x3, 0x7f, 0x3, 0x5, 0x9, 0xffff, 0x3, 0xb, 0x2, 0xfffffff8, 0x50000, 0x60000, 0xfff, 0x8, 0x2, 0x8, 0x23, 0xfa, 0x4, 0x7fffffff, 0xe, 0x6, 0x3, 0x38, 0xd, 0xfffffff7, 0x1, 0x10000, 0x2, 0x57b46149, 0x7, 0x1000, 0xfffffff7, 0x5, 0x28858f9c, 0x9eb5, 0x21, 0x9, 0x0, 0x9, 0x1000, 0x3, 0x0, 0x9, 0x80000001, 0x4, 0x5, 0x4, 0x3b6, 0xfffffeff, 0x200, 0x3, 0x5, 0x7, 0x7, 0x3, 0x6, 0x81, 0x4, 0x3258, 0x5, 0x1, 0x3, 0xf, 0x7, 0x75e, 0x0, 0x5, 0x9, 0xb0, 0x3, 0x29b, 0x5, 0x6, 0x6, 0x3, 0xfffffff8, 0x66, 0x80, 0x4, 0x3, 0x4, 0x1ec0, 0x9, 0x200, 0x9a, 0x2a, 0x5, 0x6, 0x4, 0x5, 0x1, 0x0, 0x6, 0x4, 0x5, 0x1, 0x9, 0x3, 0xffffffff, 0x3, 0x7, 0xa3, 0x0, 0x4, 0x1, 0x5, 0x9, 0xa, 0xeb, 0x3a, 0xd26, 0xfffffff9, 0x5, 0x100, 0x5, 0x5, 0x6, 0xff, 0xa914, 0x1, 0x3, 0x8, 0x5, 0xff, 0x3, 0x1b8, 0x4, 0x4, 0x2, 0x6, 0x194e, 0xc60a, 0x8, 0x7, 0x13, 0x5, 0x800, 0x5, 0x4, 0xffffffff, 0x8000, 0x1, 0x401, 0x8, 0x1ff, 0x3, 0x1, 0x1, 0x0, 0x9, 0x80000000, 0x6, 0x4, 0x9, 0x42, 0x8001, 0xfffffff9, 0x81, 0x3, 0x3, 0x0, 0x7, 0x7, 0x7fff, 0xd3f, 0x0, 0x7, 0x8, 0x23f2, 0x4, 0x80, 0x1, 0x1000, 0x54c, 0x8, 0x22c4, 0x8, 0x8, 0xfffffff7, 0x4, 0x0, 0x7, 0x401, 0xd1, 0x800, 0x6, 0xc, 0x7c93, 0xc, 0x3, 0x0, 0x80000001, 0x0, 0x7f, 0x197a, 0xffff, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x5, 0x1f2, 0x4, 0x400, {0x2, 0x0, 0x3ff, 0x4, 0x5, 0xcab}, {0xe, 0x1, 0x200, 0x3, 0x100, 0xe}, 0x41b515d8, 0xc, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xce65}, @TCA_POLICE_RATE64={0xc, 0x8, 0xaf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc1}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0x7ff, 0xef, 0x83, 0x9, 0x2, 0x4, 0x6, 0xb, 0xfff, 0x0, 0x4, 0x2, 0xeee, 0x80000001, 0xed, 0xfffffffa, 0x1ff800, 0x0, 0x8000, 0x6028801e, 0x0, 0x1000, 0x2, 0xc0000000, 0x6, 0x4, 0x7, 0x800, 0x80, 0x2, 0x5, 0x40, 0x8525, 0xf3, 0x5, 0x5, 0x4, 0x0, 0x2, 0x7c, 0x7f, 0xc, 0x10001, 0xfffffff3, 0x3, 0x6, 0x7, 0x264, 0x4, 0x1, 0xfc, 0x5, 0x3ff, 0xb225, 0xdb, 0x2d6807ba, 0x4, 0x7f, 0x1, 0x3, 0x1ff, 0x281a, 0x3, 0x1000, 0x9, 0x8, 0xfffffff8, 0x3, 0x401, 0x8, 0xe791, 0x100, 0x200, 0x3, 0x3ff, 0x6, 0xfffffc7c, 0x3, 0x8, 0x5, 0x9, 0x7fffffff, 0x0, 0x5, 0xffffffff, 0xe00000, 0x3869, 0x4, 0x4, 0x7, 0x8001, 0xfffffff9, 0x4, 0x6, 0x10000, 0x7219, 0x7, 0x3ff, 0x7, 0x55, 0x4, 0x2, 0x2, 0x2, 0x3, 0x6, 0x2000000, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x8000, 0xffffffc0, 0x7, 0x8001, 0x0, 0x9, 0xca, 0x9, 0x200, 0x5, 0x2, 0xfe2, 0x43f, 0x101, 0x7a, 0x9, 0xb, 0x8, 0x200, 0x9, 0xa0, 0x9, 0x2d70, 0x636, 0x7, 0x9, 0x80000000, 0x6, 0x7, 0x8, 0x8, 0xffffffff, 0x3, 0x9, 0x9, 0x10000, 0xfffffffb, 0x0, 0x4, 0x6, 0x1, 0x7ff, 0x3, 0x4, 0x9, 0x0, 0x4, 0x9, 0xb3e, 0xfffffff8, 0x42, 0x10000, 0x2, 0x10, 0x1, 0x80, 0x8001, 0xfffffff9, 0x1, 0x1, 0xe, 0x9, 0x4, 0x4, 0x1, 0x3, 0x7ff, 0x3, 0x2, 0xb, 0x1, 0x1, 0x5bcd, 0x3, 0x6c, 0x1, 0x3ff, 0x7, 0x4cc, 0x10, 0x9, 0x3, 0x1ff, 0x3, 0x0, 0x6f, 0x4, 0xfffffffd, 0x7, 0x5, 0x7, 0x7fffffff, 0x6, 0x5dd2, 0x8, 0xb01, 0x9, 0x4, 0x6, 0x3, 0x3, 0x2, 0xc, 0x7f, 0x1000, 0xfffffff8, 0x6, 0x81, 0x1, 0xffff5afb, 0xffffffff, 0x4, 0x6, 0x7, 0x3, 0x0, 0x10000, 0x5, 0x4, 0x1, 0x7f, 0xffffffef, 0x1ff, 0x40, 0xd31f, 0x9, 0xf59e, 0x7, 0x8, 0x8, 0xfffffff7, 0x0, 0x9, 0x6, 0xfffffffb, 0x4dc, 0x6, 0x6, 0x1af, 0x5, 0x401]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x3, 0x0, 0x8, 0x8, 0x1dd, 0x7, 0x3, 0x2, 0x9, 0x8, 0x7, 0x1, 0x10001, 0x5, 0x9, 0x0, 0x7fffffff, 0x2, 0x401, 0x6, 0x8, 0x9, 0x7, 0x4, 0x4, 0x10, 0x7fffffff, 0x6, 0x681, 0xc, 0x3, 0x7f, 0x8, 0x800, 0x4, 0x52, 0x40, 0x9, 0x2, 0x8b9d, 0x8, 0x2, 0x847, 0x6, 0xffffffff, 0x3, 0x5, 0xffffffcb, 0x8001, 0x7, 0x9, 0x4, 0x0, 0x10000, 0x0, 0x6, 0x5, 0x80, 0x1, 0x7, 0x3, 0xfff, 0x0, 0xdb, 0x100000, 0x8, 0x2, 0x7fffffff, 0xb77, 0xfffff801, 0x1, 0x10001, 0x800, 0x5c2, 0x81, 0x9, 0x8, 0x3, 0x5, 0x3, 0x0, 0x51, 0x2, 0xb928, 0x5a2, 0x0, 0x10000000, 0x3ff, 0x5, 0x7, 0xbdf, 0x10001, 0x8000, 0x4b5, 0x8, 0x2, 0x7, 0x7fffffff, 0x101, 0x5, 0x6, 0x4, 0x4, 0x6, 0x8, 0x2, 0x0, 0x0, 0x7, 0x7, 0xffff, 0x7f, 0x3, 0x2, 0x40, 0x81, 0x8, 0x7ff, 0x8b9, 0x8, 0x7, 0xa, 0x1, 0x5, 0x8, 0x2, 0x7, 0x4, 0x8, 0x92, 0x8001, 0x80000000, 0x8, 0xdb3, 0x9, 0x20, 0x4, 0x7, 0x8, 0x534ab843, 0x7, 0xff, 0x0, 0x5cfc, 0x8, 0x5054, 0x8, 0xd2d6, 0x9, 0x2408, 0x800, 0x77, 0x4, 0x10001, 0x8, 0x5, 0xf, 0x41, 0x9, 0xffffffff, 0xf4, 0x1, 0x6, 0x4, 0xc, 0x40, 0x4, 0x0, 0x38, 0x4556, 0x2, 0x8, 0x3, 0x9bd9, 0x2, 0x28, 0x7, 0x2, 0x3, 0xa3e1, 0x80, 0x81, 0x1ba6, 0x5, 0x10001, 0xfff, 0x7, 0x3, 0x10, 0x800, 0x7, 0xff, 0x2, 0x9, 0x3657838b, 0x1, 0xc9c, 0x3, 0xc3af, 0x3, 0x3, 0xfd, 0x1, 0x9, 0x800, 0x10001, 0xb, 0x8, 0x400, 0x85, 0x757, 0x6, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x9, 0x9, 0x8, 0x942, 0x6, 0x1, 0xe, 0x8, 0x40, 0x2, 0x59, 0xfffffff9, 0x2, 0x3, 0xaef, 0x2, 0x4, 0xfffff2de, 0x0, 0x6, 0x4, 0xd2ac, 0x2, 0x5, 0xe03, 0x5, 0x9, 0x9, 0x3, 0x10000, 0xb, 0x5, 0xdbd, 0x955, 0x1, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc4}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x6, 0x5, 0x0, 0x81, 0x7, 0x3, 0x0, 0x80, 0x6, 0x6a8, 0x1, 0x3, 0xb, 0x7, 0x6d, 0x8, 0x8e, 0x80000000, 0x9, 0x8001, 0x5, 0x8, 0xfffffffd, 0x5, 0x101, 0x3, 0x5, 0xc95, 0x4, 0x6, 0x3, 0x3, 0x7, 0x0, 0x6, 0xf, 0x8, 0x80f, 0x0, 0x8001, 0x5, 0x5eb, 0x10000, 0x101, 0x0, 0x101, 0xd6d, 0x9, 0x6, 0x8, 0x6, 0x5, 0x2, 0xfee2, 0x7, 0x8, 0x9, 0xe73b, 0x8, 0x6, 0x7, 0x4, 0x38, 0xfffffe67, 0x3, 0x80000000, 0x8, 0x9256, 0xf7, 0xc6, 0x4, 0x7ff, 0x6, 0x4, 0x2, 0x10001, 0x2, 0x3, 0xd6a03c0, 0xe2, 0x8, 0x4, 0x8, 0x5, 0x3, 0x9, 0xffff0001, 0x1, 0xc59c, 0x0, 0xfff, 0x2, 0x1, 0xf9, 0x4, 0xcdd, 0xfff, 0x7, 0x7, 0xffff8001, 0x7fff, 0x5, 0x1, 0x3, 0x6, 0x8000, 0x2, 0x6, 0x1000, 0xda9, 0x5, 0xd7a, 0x7f77, 0x2, 0x5, 0x2fdb9f19, 0xef, 0x1, 0x33, 0x2, 0x2, 0x5, 0x7a, 0xe, 0xfffffe01, 0x8, 0x7b, 0x90, 0x10001, 0xff, 0x2, 0x9, 0x0, 0x6, 0x753, 0x3, 0x2, 0x1ff, 0x200, 0x1, 0x4, 0x6, 0x5, 0x200, 0xfffffffd, 0x7, 0x1, 0x2, 0xffffe742, 0x6, 0x7, 0x100, 0x8001, 0x40, 0x2, 0x8000, 0x4e7, 0x7f, 0x7, 0x2, 0xfffffff7, 0x81, 0x1, 0x2, 0x5, 0xd8c, 0x100, 0x3, 0x7, 0x7, 0x40, 0x0, 0xd15, 0x3, 0x8, 0x1, 0x2, 0x3, 0x2, 0x0, 0x9, 0xfff, 0xfffffffa, 0x1f, 0x1, 0x9, 0x1000, 0x0, 0x5, 0x5, 0x9, 0x2, 0x80000001, 0x3, 0x3, 0x9, 0x4, 0xdb8, 0x7, 0x5, 0xa37, 0x68f, 0x48, 0x4e, 0x2, 0x3, 0x6, 0x2bc, 0x2, 0x5, 0xffff8001, 0x10000, 0xb, 0x2, 0x3, 0xdf9f, 0x1, 0x9, 0x240000, 0x0, 0x4, 0xb, 0x3, 0x6eb7cf1, 0x6, 0xffffffff, 0x4ea1, 0x80, 0x9380, 0x7, 0x2303, 0x9, 0x0, 0x7, 0x9, 0x5, 0x8, 0x802, 0xfffff1c2, 0x4, 0x2, 0x400, 0x6, 0x2, 0x5, 0x1, 0xffff414c, 0x6d, 0x80, 0x7, 0xfffffc00, 0x7ff, 0x7, 0x9, 0x3]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0x6, 0x6, 0x5, 0x180, 0x10001, 0x17, 0x1, 0x6, 0x2, 0x6831d79, 0x7fff, 0xf5a2, 0x6, 0x200, 0x6, 0xd, 0x5, 0x2, 0x5, 0x6, 0x1, 0xc6, 0xfff, 0xa, 0x4, 0x4, 0x3, 0x0, 0x7fffffff, 0x2, 0xd, 0x4, 0x7ff, 0x2c, 0x8, 0x5, 0x7, 0x80000004, 0x3, 0x800, 0x2, 0x7fffffff, 0x5, 0x3, 0x5, 0xeda6, 0x1, 0x3, 0x6, 0xfffffff9, 0x9, 0x1, 0x5, 0x4, 0x72, 0x3, 0x7, 0x8, 0x1, 0xffffffff, 0x65440e83, 0x3c16, 0x200, 0x10000, 0x8, 0x401, 0x9, 0x1, 0x10001, 0x4, 0x4, 0x7, 0x2, 0x2, 0x2, 0x1, 0x3, 0x5, 0x1, 0x5, 0xfffff02d, 0x8, 0x5, 0x6, 0x5, 0x3, 0x7, 0xc118, 0xa, 0xff, 0x100, 0x9, 0x80000001, 0x3ff, 0x9, 0x0, 0x56, 0x2, 0x0, 0x1, 0x9, 0x0, 0x3, 0x7236, 0x40, 0x6, 0x7fffffff, 0x7, 0x7, 0x0, 0x7ff, 0xfffffff8, 0xee5e, 0x7, 0xffffff01, 0x7, 0x7fffffff, 0xffff8000, 0x9, 0x80000001, 0xdee0, 0x7, 0xdde, 0x1, 0xbdfc, 0x7, 0x716effb1, 0x80000000, 0x1136a47e, 0x5, 0x4000000, 0x2, 0x8, 0x9, 0xffff, 0xf66, 0x8, 0x9, 0x7, 0x5, 0x7, 0x6, 0xfffff800, 0x2, 0x10001, 0x1, 0x3, 0x6, 0x3, 0xac, 0x6, 0x8, 0x4, 0x93cf, 0x8001, 0x7f, 0x4, 0x2, 0x5, 0xffffff3c, 0x2, 0xff, 0xffffffff, 0x6, 0x1, 0x4, 0x1, 0xcd, 0x400, 0x1ff, 0xfffffff8, 0x1, 0x37b508de, 0x0, 0x1000, 0x0, 0x6, 0x0, 0x401, 0x4, 0xfffffff8, 0x1ff, 0x9, 0x6, 0x3f, 0x0, 0x7, 0xffffffff, 0x5, 0x3c1d3ee3, 0x9, 0x4, 0x0, 0x4000000, 0x81, 0x7, 0x0, 0x3, 0x2, 0xce, 0x6929fb4e, 0x7fff, 0x6, 0x81, 0x80000000, 0x0, 0x8f7, 0xec, 0x8, 0x50d, 0xa, 0x3, 0x9, 0x800, 0x80, 0x7, 0x2, 0x7, 0x3, 0xffff, 0xf9fb, 0x2, 0x7, 0x100, 0xe5a, 0x80000001, 0xd000, 0x1, 0x3dd, 0x5, 0x4, 0x6, 0x7fffffff, 0x7d, 0x936, 0x0, 0xfffff236, 0x101, 0x941, 0x6, 0x9, 0x4, 0x2, 0x4, 0x401, 0x5, 0xe, 0x0, 0x10, 0x4a, 0x7fff, 0x1, 0x0, 0x4370]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xa98, 0xfff, 0x9, 0x6, 0xffff1de6, 0x2, 0x190f, 0x1, 0x4, 0x8, 0x9, 0x14, 0xffff, 0x4, 0x18b, 0xb88, 0x5, 0x45b4, 0x10, 0x3, 0xffff, 0xffffffff, 0x10, 0x55c, 0x0, 0x8000, 0xa000, 0xff, 0xffff, 0x5, 0x6, 0x3, 0x7, 0x100, 0x6, 0x7e8, 0x1, 0x40, 0x10000, 0x2, 0x3, 0x0, 0x7, 0x4, 0x6, 0x1, 0x81, 0x68d, 0xf, 0x100, 0x9, 0x8, 0x82, 0x3, 0x3, 0x1, 0x5, 0x188, 0x7, 0x1200, 0x1, 0xfffffffd, 0x2, 0x8, 0x6, 0x8, 0xfffffff9, 0x7, 0x8, 0x8, 0x8, 0x6, 0x5, 0x6b81, 0x80, 0xf, 0x3ff, 0xd, 0x5, 0x4, 0xf2f2ec81, 0xf, 0x4, 0x59, 0x8, 0x10001, 0xfffffff9, 0xfffffff9, 0x6, 0x2, 0x4, 0x10001, 0x1, 0x2, 0x1ff, 0x1, 0x5, 0x9, 0xa, 0x9, 0x1, 0x7, 0x9, 0x80000000, 0xf, 0x2, 0x1ff, 0x30, 0x4, 0x7, 0xfffffffc, 0x2, 0xb7, 0x100, 0x0, 0x1, 0x7, 0x0, 0x3, 0x8001, 0x4, 0x1, 0x4, 0x4, 0x5, 0x400, 0x2, 0x401, 0x5, 0x10001, 0x80000000, 0x4, 0x1000, 0x5, 0xc, 0x8, 0x3, 0xb, 0xf, 0x3ff, 0x7fffffff, 0x2, 0xe, 0x8, 0x10001, 0xfffffff2, 0x0, 0x7ff, 0x80000000, 0x2, 0x7, 0x72ef, 0x6, 0x1, 0x5, 0x3, 0x0, 0x5, 0x6, 0x3, 0x101, 0xe, 0x8, 0x9, 0x2787, 0x98, 0x9, 0xff, 0x8, 0x8, 0x1, 0x7, 0x6, 0x5, 0xc9f, 0x3, 0x1, 0x94, 0x1, 0x6bb5, 0x7f, 0x9, 0x10c5047b, 0xbf, 0x4, 0x7, 0x7ed, 0x1, 0x6c2, 0x8, 0x4, 0xff, 0x8, 0x101, 0xfffffff8, 0x40400, 0x8, 0x40, 0x9, 0x7, 0xffff, 0x10001, 0xb, 0x1d2f, 0x0, 0x11c7, 0x1000, 0x7f, 0x71, 0x0, 0x5, 0x101, 0x33, 0x80000001, 0x5, 0x3, 0x3, 0xc, 0xb0, 0x7, 0x6, 0x8, 0x5, 0xb52, 0x1, 0x2, 0x6, 0x8, 0x4, 0x9, 0x80, 0xaa, 0x6, 0xc1, 0x3257, 0x6, 0x4, 0x1, 0x200, 0x3, 0xa9, 0x10001, 0x6, 0x7f, 0x2, 0x7ff, 0x3, 0x8, 0x0, 0x0, 0x56c4000, 0x7fff, 0x680cdc09, 0x7, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x0, 0x4, 0xdf, {0x18, 0x0, 0x5, 0x1ff, 0xcaa, 0x2}, {0x80, 0x1, 0x0, 0x9, 0x449, 0x8}, 0xa, 0x7f, 0xff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xffffffff, 0x8, 0x2, 0x8, 0x5, 0x8, 0x8, 0x4, 0x2, 0x81, 0x1, 0xff, 0xf57, 0x5, 0x7fffffff, 0x0, 0x8, 0x3, 0x10, 0x0, 0x40, 0x8, 0x326, 0x7, 0x0, 0x6, 0xcc, 0x61, 0x81, 0x400, 0x5, 0xfffffffb, 0x400, 0x1, 0x2, 0xe533, 0x7f, 0x2, 0x6, 0x1ff, 0x4039, 0x200, 0x6, 0x8001, 0xda0, 0x5, 0x2, 0x7, 0xffff, 0x5, 0x5, 0x101, 0x9, 0x40, 0xfe, 0xffffffff, 0x2, 0x8, 0x32, 0x99, 0x0, 0x0, 0x0, 0x100, 0x3ffc0, 0x2, 0xe19, 0x3, 0x1, 0x0, 0x3ff, 0x300000, 0x4, 0x1ff, 0x80000000, 0xe, 0x4, 0xfffffff8, 0x5, 0x4, 0x101, 0xfffffffe, 0x2, 0x1, 0x6, 0x3, 0x32, 0x1, 0x200, 0x7, 0x765, 0x4610, 0x2, 0x800, 0x7, 0x3, 0xb6fe, 0x7, 0x3, 0xffffffff, 0x10, 0x9, 0x5a6, 0x9, 0xfff, 0xfffff6b3, 0x8, 0x5, 0x8, 0x1, 0x4, 0x6ef5, 0x7, 0xff, 0x8, 0x8000, 0x44, 0x646, 0x4, 0x2, 0x2, 0x2, 0x9, 0x6, 0x8000, 0x80, 0x2, 0x2, 0x7f1, 0xfffeffff, 0x1, 0x8, 0x3, 0x4, 0x80000001, 0x5, 0x3d4ea448, 0x8001, 0x9, 0x1, 0x10000, 0xde2, 0x200, 0x0, 0x0, 0x6, 0x0, 0x8, 0x5, 0x2, 0x1, 0x4, 0x7, 0x8d04b07c, 0x1, 0x100, 0x8, 0x3, 0x9, 0x0, 0x52a2a383, 0x4, 0x64f, 0x0, 0x8, 0x8, 0x2, 0x1, 0x8001, 0x2, 0x1, 0x3, 0xca, 0x4, 0x9e8, 0x7, 0x9, 0x8, 0x7f, 0x77d, 0xc, 0x1, 0xddd, 0x6, 0x0, 0x5, 0x1, 0x6, 0x8, 0xfffffeff, 0x0, 0x0, 0x10, 0x80, 0x6, 0x40, 0x4, 0x10001, 0x1000, 0x5, 0xfa8, 0xffffffff, 0x4, 0x80000001, 0xa, 0x9, 0xe531, 0x9, 0x8, 0x5, 0xff, 0x1, 0x6, 0x8194, 0x8d1, 0x10001, 0x0, 0x1, 0x4, 0xd, 0x6, 0x5, 0x7, 0x8, 0x1, 0x5, 0x100, 0x4, 0x6, 0x3, 0x80000000, 0xdb6, 0xffffffff, 0xce, 0x9, 0x7, 0xffffff81, 0xf696, 0x91f, 0x7, 0x0, 0xf, 0xffffffff, 0x5b2, 0x5, 0x1, 0x7, 0x6, 0xfffffffb, 0x7, 0x4, 0xb8a, 0x100, 0x3, 0x1000]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1000}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x8, 0x8, 0x3, 0x2, 0x6, 0x8, 0x40, 0x3, 0x5, 0x6, 0x74800000, 0x591, 0x800007, 0x4000, 0x9, 0x9, 0x2acc, 0x7fff, 0x7758, 0x10000, 0xa, 0x4, 0x10000, 0xb10, 0x5, 0xe4f, 0x9, 0x100, 0x0, 0x1, 0x80000000, 0x2, 0x80, 0x2, 0xfffffffc, 0x400, 0x2, 0x6, 0x4, 0x401, 0x1, 0x9, 0x8, 0x7fff, 0x4, 0x4, 0x9ec, 0xfff, 0x4c25, 0x3, 0xffffa307, 0x5, 0x200, 0x1, 0x80000000, 0x2, 0x80000001, 0x8, 0x8, 0x0, 0x7f, 0x80000000, 0x10001, 0x2, 0xbd8f, 0xfffff001, 0x1000, 0x7, 0x9, 0x1, 0x0, 0x80, 0x8000, 0x2e, 0x3, 0x1, 0x8, 0x3, 0x3, 0x0, 0x2, 0x8293, 0x7, 0x8, 0x3, 0x9, 0x10000, 0x3, 0x4, 0x0, 0x375e, 0xfff, 0x4, 0x3, 0x800, 0x8000, 0x1, 0xd5, 0x1, 0x80000001, 0xa83, 0xf, 0x4, 0x9, 0x7, 0x325, 0xdf39, 0x0, 0x2, 0x6, 0x1, 0x3, 0x6, 0x1, 0x6, 0x9, 0x6, 0x6, 0x1, 0x9, 0x6, 0x3, 0x2, 0xe, 0x7, 0xff, 0x7, 0x7ff, 0x2, 0x0, 0x1ff, 0x2, 0x1, 0x2, 0xad1, 0x10, 0x6, 0x8, 0x802a, 0x5, 0xf26, 0xff, 0xa, 0x8, 0x4, 0x3, 0x3ff, 0x3, 0x5, 0x2, 0x13b3, 0x1000, 0x4, 0xf288, 0x4, 0x54, 0x5, 0x1, 0x6, 0x0, 0x836, 0x4, 0x101, 0x0, 0xd, 0xb3, 0xaed, 0x9, 0x1, 0xe71c, 0xfff, 0x3, 0x401, 0x8, 0x0, 0x0, 0x80000001, 0x6, 0x0, 0x1, 0x1ff, 0xc200000, 0x4, 0xffffffff, 0x7, 0xffffffb5, 0xa, 0xe7, 0xac, 0x2, 0x9, 0xe, 0x0, 0x9, 0x3, 0x6, 0x3, 0xa14d, 0x3, 0x6, 0x401, 0xf71e, 0x6, 0x400, 0x0, 0x80, 0x8, 0x80, 0x0, 0x3, 0x7f, 0x5, 0x1, 0xfffffff5, 0x1, 0x8, 0xd, 0x9, 0x6, 0xfff, 0x7ff, 0x400, 0x4350, 0x8, 0x2, 0x9, 0x5, 0x0, 0x5, 0xfffeffff, 0x9b, 0x0, 0x7, 0xf, 0x80000000, 0x7, 0x1, 0x0, 0x184, 0x1c0, 0x49, 0x10000, 0xffffffff, 0x9, 0xfff, 0xf, 0x3, 0x1, 0x3e, 0x45, 0x7, 0xfffffff9, 0x5, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x2, 0x6, 0x1, 0xb, 0xffff0000, 0x8ec1, 0x532, 0x6, 0xc02, 0x8, 0x4d, 0x1, 0x3, 0x7f, 0x2, 0x7f, 0x0, 0x6, 0x7, 0x401, 0x59, 0xa, 0x6, 0x8, 0x5409, 0x597, 0x48f, 0x401, 0x200, 0x2, 0xda4, 0x40, 0x6, 0x1, 0x2, 0x8, 0x3, 0x4, 0x0, 0x400, 0x7, 0x200, 0x8, 0x54c203a5, 0x10000, 0x5, 0xc3ec5ce1, 0xff, 0x5, 0xca13, 0x8, 0x15a, 0x13, 0x7, 0xff, 0x0, 0x9, 0x2, 0x4, 0x58e, 0x9, 0x2, 0x9, 0x6, 0x4, 0x101, 0x0, 0xfffffff7, 0x9, 0xfffffffb, 0x0, 0x83, 0xef4, 0xb, 0x2, 0x7, 0x6, 0xffffffb6, 0x3, 0x7, 0x0, 0x3, 0x9, 0x1, 0x2, 0x4, 0x10000, 0x8, 0x8, 0x101, 0x4, 0x3, 0x6, 0x1, 0xf7, 0x448, 0x2, 0x2, 0x8, 0x3e800000, 0xfffffff2, 0x101, 0x0, 0x7fffffff, 0x4434dcfe, 0x34b, 0x10000, 0x3, 0x8, 0x0, 0x0, 0x1, 0x0, 0x7, 0xe19a, 0x3, 0x7, 0x8, 0x3, 0x1, 0x0, 0x0, 0x89, 0x6, 0x8, 0x1bf, 0x37, 0x5, 0xf02, 0xff, 0xf96, 0xca6c727, 0x1f7, 0x3, 0x4c48000, 0x3, 0x5, 0xd10, 0x80000000, 0xcc6d, 0x2, 0x935bd100, 0x86, 0x8001, 0xfffffff9, 0x80, 0x8, 0x7, 0xc5e, 0x4, 0x558, 0x0, 0x4, 0xa, 0x7fff, 0x1000, 0xee, 0x1, 0x2, 0x4, 0x8, 0x4, 0x6, 0xfffffff8, 0x2, 0xf342, 0xfffffffd, 0x0, 0x0, 0x7, 0x7, 0x80000, 0x8, 0xff, 0x9, 0xfffffffe, 0x7, 0x9, 0x3ff, 0xa, 0x3, 0x2, 0x8, 0x0, 0x9, 0x800, 0x9d, 0x1, 0x9, 0x1, 0x3, 0x400, 0x3, 0x7ff, 0xfffffffe, 0x8, 0x2, 0x6, 0xffff, 0x3, 0x8000, 0x21f44a55, 0x3, 0x6, 0x4, 0x9, 0xffffffff, 0x8, 0x4, 0x7fffffff, 0xcb59, 0x3206, 0x3, 0x5, 0x1, 0x2, 0x400, 0x96, 0x80000000, 0xc4, 0x5, 0x1, 0x2, 0xffff9fae, 0x8e, 0x3, 0x800, 0x3, 0x65, 0x4, 0xfffffff7, 0x5, 0xeb9, 0x1, 0x281, 0x0, 0x4, 0x7, 0x62ea355f, 0x80000001, 0x1, 0x9, 0x3, 0x687, 0x8, 0xc4, 0x4, 0xfff, 0x80000000, 0x10001, 0x2, 0x9c, 0xfffffff7, 0xe, 0x100]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x49280000, 0x7, 0x3ff, 0xfffeffff, 0x2, 0x8, 0x6000, 0x80000001, 0x7, 0xe50d, 0xffff86f6, 0x4, 0x3a, 0x9, 0x5, 0x3, 0x2, 0x2, 0x1b, 0x8, 0x4, 0xaa4, 0x6, 0x7fff, 0x6, 0x5, 0x6, 0xf, 0x7, 0x4e, 0x8, 0x5, 0xfffffffb, 0x5, 0xffff, 0x1, 0x9, 0x3, 0x4, 0x7, 0x2, 0x0, 0x7ff, 0x6, 0x7, 0x3e, 0x81, 0x91e2, 0x1, 0x100, 0x6, 0x100, 0x2, 0x340, 0x2, 0x3, 0xd2de, 0x5, 0x7ff6c092, 0xb5, 0x0, 0x4, 0xac5c, 0x20, 0xad0, 0x5b2851a6, 0xf, 0x9, 0x2, 0x3, 0xfffffffc, 0x101, 0x8, 0xf, 0x9647, 0x3, 0xa, 0x6, 0x6, 0x4, 0xffffff01, 0x9, 0x7f, 0x36, 0x9, 0x7, 0x2, 0x8, 0x7, 0xa, 0x627, 0x0, 0x51b7, 0x8, 0x5, 0x8, 0x9, 0x5, 0x1, 0x18000000, 0x6, 0x6f, 0xffff, 0x835, 0x0, 0x6, 0x1, 0x9, 0x2, 0x6, 0xb6e, 0x7fff, 0x9, 0x783, 0x99a5, 0xfe, 0x3, 0x2, 0x7a61, 0x7, 0x8, 0x88bd, 0x3, 0x8001, 0xd4e9, 0x80000000, 0x1, 0x25f, 0xde8, 0x6caa, 0x6, 0x1, 0x6, 0x4, 0x7, 0x3, 0x100, 0x5, 0x3, 0x1, 0x6, 0x6, 0x1, 0x9, 0x3, 0x6, 0x7fffffff, 0xfb2b, 0x2, 0xf3, 0x2, 0x7fff, 0x81, 0x7, 0x9c1, 0x9, 0x9, 0xfffff800, 0x4, 0x4, 0x1, 0x5, 0x2, 0x1, 0x81, 0x6, 0x43, 0x1, 0x10, 0xffff412b, 0xb, 0xffff, 0x7, 0x80000000, 0x0, 0x7f, 0xa, 0x3, 0x1, 0x5, 0xefa, 0x7, 0x1, 0xffff, 0x4, 0x6, 0x5, 0x6, 0x8001, 0x2, 0x6, 0x4d72, 0xf, 0x1, 0x9a8, 0x20000000, 0xfffffff9, 0x311, 0x800, 0x6, 0x235e3890, 0xf97, 0x0, 0x1, 0x4, 0xfffffec7, 0x5, 0x0, 0x3, 0x4, 0x2, 0x6, 0x0, 0x0, 0x6, 0x1, 0x1, 0x401, 0x3, 0x2, 0x800, 0x3, 0x3, 0x2, 0x33, 0x6, 0x5, 0x3, 0x100, 0x7, 0x5e, 0x81, 0xffff8000, 0x2, 0xfff, 0x5, 0xfffffffa, 0x4, 0x8000000, 0x4b6, 0x4, 0x3, 0x400, 0x6, 0x0, 0x3, 0xfffffe00, 0x7, 0x7fffffff, 0x3, 0xffffffff, 0x4, 0x5, 0x6]}]]}, {0x84, 0x6, "8b3341ee8941fb84dccecbea42879fab6d1e06d419ae53932ff324d090051f86b6d65c8e7e0f79c48df60a903a308f37e948dc968ca779e49dc0914f4885acb5b16b0736648e00a002df18ab70b5b3223b384ce4edfcefc65a1920c2346ea3c5cfd919f4bc213019875f5c72756be765656525eb31f4b7addec9c1fe70031407"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xb0, 0xf, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x20000000, 0x2, 0x40}}]}, {0x6a, 0x6, "dc37ea7f05b63cfe63afe2f1dab4ed9a220bf85dd75bea7a95f8892107c699ad8208d64d1609394d9ca625a68507ccd6f9c5bf8f5495066e40a7342522087c863a8fdeb350580461698e43178ffcf2c61011823ce296f473d65c5820560c383bc7f6db7e7ffb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x100, 0x16, 0x0, 0x0, {{0xc}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff, 0x2f, 0x0, 0xc, 0xfffffff9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x23}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x80000001, 0x1, 0xfffffffc, 0xffffff7c}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x8, 0x0, 0x5}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x52, 0x6, "b9106b3214814071f3be75f4067ed468c693f1cfbe91278beaa414ce8d8c7ef2243666ae752f2403caa339bf943eeb07394364d3c34cacc44fd1e62416a1b0405d7f37c480038fd79385d257a5b4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x13c, 0x8, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xc}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xcc, 0x1e, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @private=0x2}}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x3, 0x3, 0x40, 0xfffffffb}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x65, 0x6, "f4c9090df6b7850daff16c1fe30b760285888bb5b9c98f6c4877282476e5244ed65cbc50a4913cd4e7bf2ed2a9e08b5e6364d8370e7675ba73656dca48d22fc7872e35fd4c3c21a42739549ac933de2eafa549ad03e3fe7840c4dce3f27ca01593"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x77}, @TCA_ROUTE4_TO={0x8, 0x2, 0x65}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xfff1}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x86c1}]}, 0x36fc}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r12, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) ioctl$sock_inet_SIOCGIFNETMASK(r11, 0x891b, &(0x7f0000000140)={'ip6gre0\x00', {0x2, 0x0, @dev}}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r13, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffefc, 0xffffffffffffffff}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0xfc, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_MATCHALL_ACT={0xa4, 0x2, [@m_skbedit={0xa0, 0xe, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000000, 0xfffffffd, 0xffffffffffffffff, 0x3, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x50e}]}, {0x34, 0x6, "4451f677e1feba51f0ca936c35676af75510a35c3d1e76db91483b29378a9cfebc4ed602044c88674ebdcbd0ed1f7310"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000580)=""/211, 0xd3, 0x0, &(0x7f00000006c0)=""/140, 0x8c}}, 0x10) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5a77}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x81, 0x78, &(0x7f00000001c0)=""/120, 0x40f00, 0x44, '\x00', r10, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x8, 0x3}, 0x10, r14, r4, 0x0, &(0x7f0000000880)=[r15, r1, r3, r2, r3, r2], 0x0, 0x10, 0xa5}, 0x94) 974.628041ms ago: executing program 4 (id=3053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000b4b2180000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x8c, &(0x7f0000001300)=""/140, 0x41100, 0xa}, 0x94) r0 = socket(0x28, 0x80000, 0xfffffffd) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ec0), r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x8880) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "e8a240d0d7b93ad2", "7375b12487a65de42d175803d6b27441", "b52832f4", "07db5ea3dec6f33f"}, 0x28) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010080ffffff000000000100000008000100030000002c00048005000300010000000500032d000000000500030080000000050003000100000005000300050000000800020003"], 0x50}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0000000190001000000000000000000ac14140d000000000000000000000000000000020000000000000000000000004e2300004e2600000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6], 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x160, 0x178, 0x394, 0x160, 0x178, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @local, [0x0, 0x0, 0x0, 0xffffff00], [], 'team_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x5e, 0x10, 0x6, 0xa3, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xd38f1f17eef578e4, 0xffffff00, 0xffffffff], 0x0, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x5, 0x81}}}, {{@ipv6={@private1, @empty, [], [0x0, 0xffffff00], 'veth0_vlan\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x600}, {0x0, 0x0, 0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffffab) 666.196954ms ago: executing program 1 (id=3054): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbef1, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0xffff}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x103}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 544.115359ms ago: executing program 0 (id=3055): socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000180)=0x1, 0x4) socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001700)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xac, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x3, 0x3}, [@TCA_NETEM_LOSS={0x74, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x1, 0x10001, 0x5d}}, @NETEM_LOSS_GI={0x18, 0x1, {0xee1, 0x1fe00000, 0x8, 0x6, 0xf}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x4, 0x9, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x100, 0xa, 0x5, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x9, 0x2, 0xab5, 0x4}}]}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xb}]}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (fail_nth: 6) 513.650813ms ago: executing program 4 (id=3056): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8094}, 0x90) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @private0}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="2f89a34cbe6902b9f54bcd7159c3d1d5fb955c44d4f919871a54e550bf31a354995e126f9f9819b9d455438742735caf942c773d5c728b7d0e447b2f3e3910e1cdddd75c9c859d9853d283a7910a4061a892f3fb21a51683d81cf6b479e521a4cb3289c60af67763c4d3d0cdd4121a76ac61d9daf4db827481e620", 0x7b}, {&(0x7f0000000440)="2c91e75db51a0ba9bbb0c67c30664af52794591ae53034dadf99fcd4abaa9a7c13b81520e3c6b7b7e9830b8d76244fe3e12a934169d261a8abd8c46e3ca51ee11d016216fcfe8d4257b488ef2d8e84d72cc90641b69b2780e2923533baaced24a8f7", 0x62}], 0x2}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0={0xfc, 0x0, '\x00', 0x4}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="5b7b9095b540d70100eea172ce60cfa2e42571b190739e23fb777d243b79b32b2cc1a7d970dc038e6ce151b23184643441c5fc1b41f157a1a9effe3ab113a9d9", 0x40}], 0x1}}], 0x2, 0x4008840) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) 500.148519ms ago: executing program 1 (id=3057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbef1, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x208}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 191.343892ms ago: executing program 3 (id=2987): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x800) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x3, 0x3, 0x71, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', 0x7800, 0x1, 0x2, 0x8000}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x8000, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x9, 0xa, 0x6, 0x2b64c2d0272f4497, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1ff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x33, &(0x7f00000002c0)=""/51, 0x40f00, 0x2, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000500)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xf, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[r6], &(0x7f0000000600)=[{0x0, 0x2, 0xb, 0x6}, {0x2, 0x2, 0xe, 0x9}, {0x3, 0x4, 0x10, 0xb}, {0x2, 0x5, 0xe, 0x9}, {0x2, 0x5, 0x9, 0x7}, {0x1, 0x5, 0x6, 0x3}, {0x4, 0x4, 0xf, 0xa}, {0x2, 0x5, 0xf, 0xb}], 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="00cf87dc6d8b947ab1a56284d0fc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0xa, 0x5, 0x800) (async) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x3, 0x3, 0x71, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', 0x7800, 0x1, 0x2, 0x8000}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x8000, 0x18}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x9, 0xa, 0x6, 0x2b64c2d0272f4497, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1ff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x33, &(0x7f00000002c0)=""/51, 0x40f00, 0x2, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000500)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xf, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[r6], &(0x7f0000000600)=[{0x0, 0x2, 0xb, 0x6}, {0x2, 0x2, 0xe, 0x9}, {0x3, 0x4, 0x10, 0xb}, {0x2, 0x5, 0xe, 0x9}, {0x2, 0x5, 0x9, 0x7}, {0x1, 0x5, 0x6, 0x3}, {0x4, 0x4, 0xf, 0xa}, {0x2, 0x5, 0xf, 0xb}], 0x10, 0x7fff}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="00cf87dc6d8b947ab1a56284d0fc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 187.776819ms ago: executing program 1 (id=3058): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4c1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) 89.587615ms ago: executing program 2 (id=3059): socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000180)=0x1, 0x4) socket$unix(0x1, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r0, 0x607d8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x13a140872a6dd39f, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001700)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xac, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x3, 0x3}, [@TCA_NETEM_LOSS={0x74, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x1, 0x10001, 0x5d}}, @NETEM_LOSS_GI={0x18, 0x1, {0xee1, 0x1fe00000, 0x8, 0x6, 0xf}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x4, 0x9, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x100, 0xa, 0x5, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x9, 0x2, 0xab5, 0x4}}]}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xb}]}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 0s ago: executing program 3 (id=3060): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x3010000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): py_from_iter+0x10/0x10 [ 362.821328][T12047] tun_get_user+0x516/0x3dd0 [ 362.821428][T12047] ? aa_file_perm+0x12d/0x1630 [ 362.821504][T12047] ? aa_file_perm+0x440/0x1630 [ 362.821577][T12047] ? __pfx_tun_get_user+0x10/0x10 [ 362.821670][T12047] ? __lock_acquire+0x6b5/0x2cf0 [ 362.821803][T12047] ? ref_tracker_alloc+0x363/0x4d0 [ 362.821879][T12047] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 362.821962][T12047] ? tun_get+0x1c/0x2f0 [ 362.822039][T12047] ? tun_get+0x1c/0x2f0 [ 362.822103][T12047] ? tun_get+0x1c/0x2f0 [ 362.822185][T12047] tun_chr_write_iter+0x113/0x200 [ 362.822258][T12047] vfs_write+0x61d/0xb90 [ 362.822342][T12047] ? __pfx_vfs_write+0x10/0x10 [ 362.822416][T12047] ? __fget_files+0x2a/0x420 [ 362.822515][T12047] ksys_write+0x150/0x270 [ 362.822577][T12047] ? __pfx_ksys_write+0x10/0x10 [ 362.822667][T12047] do_syscall_64+0x14d/0xf80 [ 362.822741][T12047] ? trace_irq_disable+0x3b/0x150 [ 362.822815][T12047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.822869][T12047] ? clear_bhb_loop+0x40/0x90 [ 362.822940][T12047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.823002][T12047] RIP: 0033:0x7f927959c629 [ 362.823087][T12047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.823150][T12047] RSP: 002b:00007f927a4cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.823226][T12047] RAX: ffffffffffffffda RBX: 00007f9279815fa0 RCX: 00007f927959c629 [ 362.823268][T12047] RDX: 000000000000003a RSI: 0000200000001240 RDI: 0000000000000003 [ 362.823302][T12047] RBP: 00007f927a4cb090 R08: 0000000000000000 R09: 0000000000000000 [ 362.823335][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.823372][T12047] R13: 00007f9279816038 R14: 00007f9279815fa0 R15: 00007ffdf1700ae8 [ 362.823459][T12047] [ 363.304053][T12054] sctp: [Deprecated]: syz.4.1622 (pid 12054) Use of int in max_burst socket option. [ 363.304053][T12054] Use struct sctp_assoc_value instead [ 363.320970][T12057] xt_hashlimit: size too large, truncated to 1048576 [ 363.329681][T12057] xt_hashlimit: max too large, truncated to 1048576 [ 363.703271][T12075] syzkaller1: entered allmulticast mode [ 363.882921][T12088] syzkaller1: entered promiscuous mode [ 363.908803][T12088] syzkaller1: entered allmulticast mode [ 363.956594][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 363.983443][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 363.999292][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 364.009085][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 364.018621][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 364.028709][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 364.039267][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 364.082691][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 364.113375][T12100] openvswitch: netlink: Flow actions attr not present in new flow. [ 364.121836][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 364.156882][T12097] 8021q: VLANs not supported on lo [ 364.642068][T12117] xt_hashlimit: size too large, truncated to 1048576 [ 364.696328][T12111] syzkaller1: entered promiscuous mode [ 364.711052][T12111] syzkaller1: entered allmulticast mode [ 364.939043][T12121] lo speed is unknown, defaulting to 1000 [ 365.491656][T12152] lo speed is unknown, defaulting to 1000 [ 365.793242][T12165] syzkaller0: entered promiscuous mode [ 365.809906][T12165] syzkaller0: entered allmulticast mode [ 366.150831][T12189] __nla_validate_parse: 26 callbacks suppressed [ 366.150854][T12189] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1662'. [ 366.367852][T12200] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1666'. [ 366.470795][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 366.532887][T12213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1667'. [ 366.608135][T12218] netlink: 'syz.3.1670': attribute type 2 has an invalid length. [ 366.616160][T12218] netlink: 'syz.3.1670': attribute type 11 has an invalid length. [ 366.629088][T12218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1670'. [ 366.718543][T12218] syzkaller0: entered allmulticast mode [ 366.782635][T12225] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1673'. [ 366.803565][T12218] syzkaller0 (unregistering): left allmulticast mode [ 366.941113][T12236] C: renamed from team_slave_0 (while UP) [ 366.963677][T12236] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1677'. [ 366.986732][T12236] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1677'. [ 367.018915][T12236] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1677'. [ 367.049053][T12236] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1677'. [ 367.104564][T12232] lo speed is unknown, defaulting to 1000 [ 367.517329][T12255] netlink: 'syz.3.1679': attribute type 6 has an invalid length. [ 367.525138][T12255] netlink: 'syz.3.1679': attribute type 7 has an invalid length. [ 367.545538][T12262] Bluetooth: MGMT ver 1.23 [ 367.573733][T12263] netlink: 'syz.3.1679': attribute type 1 has an invalid length. [ 367.616608][T12255] netlink: 'syz.3.1679': attribute type 8 has an invalid length. [ 367.636407][T12255] netlink: 'syz.3.1679': attribute type 13 has an invalid length. [ 367.727675][T12263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.359711][T12272] syzkaller1: entered promiscuous mode [ 368.365393][T12272] syzkaller1: entered allmulticast mode [ 368.486896][T12276] lo speed is unknown, defaulting to 1000 [ 368.519944][T12293] bond4: ARP target 9.0.0.0 is already present [ 368.526253][T12293] bond4: option arp_ip_target: invalid value (9) [ 368.544288][T12293] bond4 (unregistering): Released all slaves [ 368.707499][T12293] bond4: ARP target 9.0.0.0 is already present [ 368.715051][T12293] bond4: option arp_ip_target: invalid value (9) [ 368.727681][T12293] bond4 (unregistering): Released all slaves [ 368.774527][T12303] netlink: 'syz.0.1694': attribute type 1 has an invalid length. [ 368.913487][T12293] bond4: ARP target 9.0.0.0 is already present [ 368.920080][T12293] bond4: option arp_ip_target: invalid value (9) [ 368.931725][T12293] bond4 (unregistering): Released all slaves [ 369.116585][T12293] bond4: ARP target 9.0.0.0 is already present [ 369.136505][T12293] bond4: option arp_ip_target: invalid value (9) [ 369.146222][T12293] bond4 (unregistering): Released all slaves [ 369.164371][T12319] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 369.345712][T12293] bond4: ARP target 9.0.0.0 is already present [ 369.370390][T12293] bond4: option arp_ip_target: invalid value (9) [ 369.391056][T12293] bond4 (unregistering): Released all slaves [ 369.524183][T12335] netlink: 'syz.0.1700': attribute type 39 has an invalid length. [ 370.042677][T12360] netlink: 'syz.3.1711': attribute type 1 has an invalid length. [ 370.105429][T12362] xt_bpf: check failed: parse error [ 370.188137][T12360] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.254405][T12375] lo speed is unknown, defaulting to 1000 [ 370.815099][T12392] lo speed is unknown, defaulting to 1000 [ 371.122617][T12420] gtp0: entered promiscuous mode [ 371.133402][T12420] gtp0: entered allmulticast mode [ 371.303640][T12378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.327762][T12427] xt_TCPMSS: Only works on TCP SYN packets [ 371.775179][T12465] netlink: 'syz.1.1739': attribute type 10 has an invalid length. [ 371.872384][T12465] team0: Port device 4@0Ù added [ 372.311884][T12502] netlink: 'syz.0.1750': attribute type 39 has an invalid length. [ 372.328110][T12504] netlink: 'syz.4.1748': attribute type 2 has an invalid length. [ 372.352451][T12503] netlink: 'syz.1.1749': attribute type 3 has an invalid length. [ 372.401327][T12504] : entered promiscuous mode [ 372.449868][T12506] syzkaller1: entered promiscuous mode [ 372.455519][T12506] syzkaller1: entered allmulticast mode [ 372.708998][T12521] netlink: 'syz.0.1755': attribute type 28 has an invalid length. [ 372.726634][T12521] netlink: 'syz.0.1755': attribute type 3 has an invalid length. [ 372.749465][T12525] netlink: 'syz.1.1756': attribute type 16 has an invalid length. [ 372.757682][T12521] __nla_validate_parse: 65 callbacks suppressed [ 372.757704][T12521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1755'. [ 372.794040][T12525] netlink: 'syz.1.1756': attribute type 17 has an invalid length. [ 373.475628][T12548] IPVS: Scheduler module ip_vs_sip not found [ 373.672118][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1763'. [ 373.788802][T12557] batadv0: entered promiscuous mode [ 373.806891][T12557] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 373.828287][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 374.119319][T12567] syzkaller1: entered promiscuous mode [ 374.132724][T12567] syzkaller1: entered allmulticast mode [ 374.186963][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1770'. [ 374.390263][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1773'. [ 374.443127][T12584] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1773'. [ 374.483724][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1773'. [ 374.484538][T12581] bond4: entered allmulticast mode [ 374.499405][T12585] lo speed is unknown, defaulting to 1000 [ 374.512540][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1772'. [ 374.659279][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1775'. [ 374.902346][T12602] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1776'. [ 375.000058][T12608] netlink: 'syz.4.1778': attribute type 3 has an invalid length. [ 375.278687][T12617] syzkaller0: entered promiscuous mode [ 375.291180][T12617] syzkaller0: entered allmulticast mode [ 375.377577][T12622] macsec1: entered promiscuous mode [ 376.007741][T12658] openvswitch: netlink: IP tunnel dst address not specified [ 376.520885][T12685] dvmrp0: entered allmulticast mode [ 376.585739][T12687] veth9: entered promiscuous mode [ 376.610410][T12683] syzkaller1: entered promiscuous mode [ 376.626517][T12683] syzkaller1: entered allmulticast mode [ 376.767883][T12701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.934012][T12701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.076577][T12723] netlink: 'syz.1.1815': attribute type 1 has an invalid length. [ 377.220641][T12723] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 377.431858][T12741] netlink: 'syz.2.1818': attribute type 5 has an invalid length. [ 377.607422][T12743] syzkaller0: entered promiscuous mode [ 377.614135][T12743] syzkaller0: entered allmulticast mode [ 377.711319][T12747] 8021q: adding VLAN 0 to HW filter on device bond9 [ 377.791533][T12759] sctp: [Deprecated]: syz.2.1822 (pid 12759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.791533][T12759] Use struct sctp_sack_info instead [ 377.963922][T12762] __nla_validate_parse: 10 callbacks suppressed [ 377.963947][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 378.643679][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.659352][ T1302] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 379.294237][T12762] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 379.334097][T12716] lo speed is unknown, defaulting to 1000 [ 379.717344][T12787] netlink: 'syz.1.1830': attribute type 1 has an invalid length. [ 379.790088][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 379.846567][T12788] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.865582][T12788] bridge_slave_1 (unregistering): left allmulticast mode [ 379.873105][T12788] bridge_slave_1 (unregistering): left promiscuous mode [ 379.882222][T12788] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.134751][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 380.147097][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 380.158115][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 380.331009][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1842'. [ 380.417623][T12831] Unsupported ieee802154 address type: 0 [ 380.425535][T12830] Unsupported ieee802154 address type: 0 [ 380.681290][T12845] hsr0: left allmulticast mode [ 380.686155][T12845] hsr_slave_0: left allmulticast mode [ 380.692260][T12845] hsr_slave_1: left allmulticast mode [ 381.088834][T12862] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1852'. [ 381.121419][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'. [ 381.176444][T12865] nbd: illegal input index -1113835520 [ 381.278465][T12875] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1855'. [ 381.407913][T12884] netlink: 'syz.2.1853': attribute type 6 has an invalid length. [ 381.483384][T12886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.552092][T12886] netlink: 'syz.3.1857': attribute type 3 has an invalid length. [ 381.579877][T12886] netlink: 'syz.3.1857': attribute type 1 has an invalid length. [ 381.600408][T12886] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1857'. [ 381.630269][T12886] NCSI netlink: No device for ifindex 808464432 [ 381.685893][T12893] lo speed is unknown, defaulting to 1000 [ 382.423602][T12915] lo speed is unknown, defaulting to 1000 [ 382.435395][T12918] syzkaller0: entered promiscuous mode [ 382.448255][T12918] syzkaller0: entered allmulticast mode [ 382.481253][T12918] 0: reclassify loop, rule prio 0, protocol 800 [ 382.488663][ T5158] block nbd0: Possible stuck request ffff8880272e8000: control (read@0,1024B). Runtime 240 seconds [ 382.500190][ T5158] block nbd0: Possible stuck request ffff8880272e8200: control (read@1024,1024B). Runtime 240 seconds [ 382.511895][ T5158] block nbd0: Possible stuck request ffff8880272e8400: control (read@2048,1024B). Runtime 240 seconds [ 382.523750][ T5158] block nbd0: Possible stuck request ffff8880272e8600: control (read@3072,1024B). Runtime 240 seconds [ 382.549284][T12918] tipc: Enabling of bearer rejected, media not registered [ 382.708678][T12925] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.818897][T12930] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 383.351225][T12964] netlink: 'syz.2.1875': attribute type 20 has an invalid length. [ 383.359779][T12964] __nla_validate_parse: 6 callbacks suppressed [ 383.359798][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'. [ 383.434925][ T143] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.455880][ T143] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.491226][ T143] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.526467][ T143] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.547377][T12962] syzkaller1: entered promiscuous mode [ 383.553007][T12962] syzkaller1: entered allmulticast mode [ 383.738323][T12987] xt_ecn: cannot match TCP bits for non-tcp packets [ 383.825007][T12987] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.845614][T12987] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.922559][T12987] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.951834][T12987] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.973228][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 384.015358][T12987] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.031042][T12987] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.080642][T13002] tipc: Enabled bearer , priority 0 [ 384.089938][T12987] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.100477][T12987] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.116101][T13002] syzkaller0: entered promiscuous mode [ 384.121814][T13002] syzkaller0: entered allmulticast mode [ 384.176912][T13002] tipc: Resetting bearer [ 384.190177][T13001] tipc: Resetting bearer [ 384.238996][T13001] tipc: Disabling bearer [ 384.292158][T13004] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1888'. [ 384.310443][T13006] sctp: [Deprecated]: syz.3.1889 (pid 13006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.310443][T13006] Use struct sctp_sack_info instead [ 384.354048][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.373968][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.400375][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.409055][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.432358][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.442941][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.483346][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.513654][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.541126][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'. [ 384.615958][T13015] x_tables: duplicate underflow at hook 1 [ 384.890558][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1897'. [ 384.920689][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 385.252865][T13057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1906'. [ 385.792151][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 386.037187][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 386.297254][T13076] hsr_slave_1 (unregistering): left promiscuous mode [ 386.341619][T13089] bond0: entered promiscuous mode [ 386.368578][ C1] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 386.379100][T13095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1911'. [ 386.386984][T13089] bond_slave_0: entered promiscuous mode [ 386.396826][T13089] bond_slave_1: entered promiscuous mode [ 386.405738][T13089] gretap0: entered promiscuous mode [ 386.416727][T13089] gretap0: left promiscuous mode [ 386.422164][T13089] bond0: left promiscuous mode [ 386.427144][T13089] bond_slave_0: left promiscuous mode [ 386.433885][T13089] bond_slave_1: left promiscuous mode [ 386.540931][T13096] team0: Port device 4@0Ù removed [ 386.659055][T13096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.725599][T13103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.760086][T13091] lo speed is unknown, defaulting to 1000 [ 386.765985][ T1217] IPVS: starting estimator thread 0... [ 386.856528][T13113] IPVS: using max 26 ests per chain, 62400 per kthread [ 387.282874][T13133] openvswitch: netlink: Missing key (keys=40, expected=100) [ 387.570707][T13143] m1Ie5Šè‹Ò: entered promiscuous mode [ 387.634540][T13147] syzkaller0: entered promiscuous mode [ 387.644335][T13147] syzkaller0: entered allmulticast mode [ 387.777895][T13156] openvswitch: netlink: Message has 572 unknown bytes. [ 387.784949][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.511152][T13155] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 389.529810][T13170] __nla_validate_parse: 3 callbacks suppressed [ 389.529832][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 389.713445][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 389.779015][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 389.784576][T13183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 389.914486][T13190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1936'. [ 389.987316][T13190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1936'. [ 390.038816][T13190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1936'. [ 390.193870][T13199] bond5: entered promiscuous mode [ 390.227908][T13199] 8021q: adding VLAN 0 to HW filter on device bond5 [ 390.257199][T13202] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 390.301429][T13210] lo speed is unknown, defaulting to 1000 [ 390.330038][T13218] pim6reg: entered allmulticast mode [ 390.353807][T13218] pim6reg: left allmulticast mode [ 390.448623][T13223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1941'. [ 390.752801][T13230] xt_CT: No such helper "syz0" [ 391.995596][ T1217] lo speed is unknown, defaulting to 1000 [ 392.006037][ T1217] syz2: Port: 1 Link DOWN [ 392.036972][T13243] tipc: Enabling of bearer rejected, failed to enable media [ 392.077772][ T86] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.116101][ T86] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.151485][ T86] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.187429][ T86] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.225830][ T86] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.254297][ T86] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.279426][ T86] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.297207][ T86] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.455919][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 392.476289][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 392.508989][T13257] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1948'. [ 392.604729][T13269] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 392.762038][T13276] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.189133][T13292] vlan3: entered promiscuous mode [ 393.195505][T13292] bond0: entered promiscuous mode [ 393.248117][T13292] bond_slave_0: entered promiscuous mode [ 393.254073][T13292] bond_slave_1: entered promiscuous mode [ 393.317476][T13295] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 393.369495][T13300] xt_hashlimit: size too large, truncated to 1048576 [ 393.447965][T13301] bridge_slave_0 (unregistering): left allmulticast mode [ 393.455088][T13301] bridge_slave_0 (unregistering): left promiscuous mode [ 393.523311][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.688356][T13308] netlink: 'syz.1.1963': attribute type 1 has an invalid length. [ 393.741117][T13308] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.776448][T13310] bond10: (slave gretap1): making interface the new active one [ 393.785664][T13310] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 394.015632][T13318] Bluetooth: hci1: Opcode 0x080f failed: -22 [ 394.297636][T13324] lo speed is unknown, defaulting to 1000 [ 394.581561][T13337] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 394.619703][T13337] bond0: (slave gre0): Error -95 calling set_mac_address [ 394.926490][ T30] audit: type=1107 audit(1771999011.742:2): pid=13344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 394.952571][T13356] siw: device registration error -23 [ 394.970300][T13356] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 394.992593][T13350] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 395.021582][T13359] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 395.058469][T13350] bond6 (unregistering): Released all slaves [ 395.180186][T13356] team0: Port device dummy0 added [ 395.257297][T13359] team0: Port device dummy0 removed [ 395.318213][T13359] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 396.651160][T13398] lo speed is unknown, defaulting to 1000 [ 396.670592][T13391] netlink: 'syz.3.1986': attribute type 5 has an invalid length. [ 397.568537][T13433] __nla_validate_parse: 5 callbacks suppressed [ 397.568560][T13433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1994'. [ 397.689106][T13430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1994'. [ 398.213353][T13463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1999'. [ 398.308603][T13453] lo speed is unknown, defaulting to 1000 [ 398.401473][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2002'. [ 398.433006][T13478] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2000'. [ 398.976695][T13496] syzkaller1: entered promiscuous mode [ 398.982249][T13496] syzkaller1: entered allmulticast mode [ 399.336601][T13508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.062795][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2014'. [ 400.118755][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2014'. [ 400.201865][T13522] lo speed is unknown, defaulting to 1000 [ 400.241610][T13523] lo speed is unknown, defaulting to 1000 [ 400.725522][T13550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2018'. [ 400.987291][T13561] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2021'. [ 401.028471][T13558] tipc: Enabling of bearer rejected, failed to enable media [ 401.411771][T13577] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2025'. [ 401.701448][T13578] lo speed is unknown, defaulting to 1000 [ 401.764022][T13592] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 401.845517][T13591] netlink: 'syz.0.2029': attribute type 10 has an invalid length. [ 402.051093][T13598] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.128838][T13591] veth1_vlan (unregistering): left allmulticast mode [ 402.251435][T13596] ip6tnl2: entered promiscuous mode [ 402.271549][T13596] ip6tnl2: entered allmulticast mode [ 403.045893][T13641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.123126][T13639] lo speed is unknown, defaulting to 1000 [ 403.254173][T13650] __nla_validate_parse: 2 callbacks suppressed [ 403.254195][T13650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2046'. [ 403.357948][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 403.865621][T13657] syzkaller0: entered promiscuous mode [ 403.880448][T13657] syzkaller0: entered allmulticast mode [ 405.837359][T13670] tipc: Enabled bearer , priority 0 [ 405.847754][T13672] syzkaller0: entered promiscuous mode [ 405.853308][T13672] syzkaller0: entered allmulticast mode [ 405.877286][T13679] tipc: Resetting bearer [ 405.909064][T13669] tipc: Resetting bearer [ 406.002479][T13669] tipc: Disabling bearer [ 406.025650][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 406.035346][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 406.088845][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 406.148076][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 406.490296][T13710] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 406.554506][T13714] vlan2: entered promiscuous mode [ 406.580728][T13714] bridge0: entered promiscuous mode [ 406.828757][T13723] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.846619][T13723] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.899794][T13724] syzkaller0: entered promiscuous mode [ 406.905904][T13724] syzkaller0: entered allmulticast mode [ 407.011498][T13723] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.026697][T13723] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.109065][T13723] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.146597][T13723] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.273527][T13723] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.308975][T13723] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.417327][T13740] syzkaller1: entered promiscuous mode [ 407.433315][T13740] syzkaller1: entered allmulticast mode [ 407.704125][T13758] netlink: 'syz.0.2071': attribute type 1 has an invalid length. [ 407.941378][T13758] bond8: entered promiscuous mode [ 407.997176][T13758] 8021q: adding VLAN 0 to HW filter on device bond8 [ 408.021536][T10259] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.047977][T10259] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.132728][T13766] bond8: (slave bridge13): making interface the new active one [ 408.186444][T13766] bridge13: entered promiscuous mode [ 408.205843][T13766] bond8: (slave bridge13): Enslaving as an active interface with an up link [ 408.307125][T13776] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 408.366685][T13776] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 408.488991][T10259] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.516572][T10259] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.560616][T13780] lo speed is unknown, defaulting to 1000 [ 408.719126][T13804] tipc: Enabled bearer , priority 0 [ 408.825095][ T86] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.847323][ T86] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.901603][T13816] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2079'. [ 408.959145][T13802] tipc: Resetting bearer [ 408.965517][T13814] xfrm0: entered promiscuous mode [ 408.970958][T13814] xfrm0: entered allmulticast mode [ 409.098582][T13805] syzkaller0: entered promiscuous mode [ 409.104289][T13805] syzkaller0: entered allmulticast mode [ 409.113144][ T86] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.121725][ T86] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.192864][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'. [ 409.268238][T13796] tipc: Resetting bearer [ 409.301147][T13796] tipc: Disabling bearer [ 409.619304][T13827] block nbd4: server does not support multiple connections per device. [ 409.658740][T13827] block nbd4: shutting down sockets [ 411.088626][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.096071][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.780302][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.840433][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.009079][T13852] hsr0: left promiscuous mode [ 412.377844][T10259] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.418104][T10259] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.435840][T10259] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.465697][T10259] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.567848][ T5158] block nbd0: Possible stuck request ffff8880272e8000: control (read@0,1024B). Runtime 270 seconds [ 412.579557][ T5158] block nbd0: Possible stuck request ffff8880272e8200: control (read@1024,1024B). Runtime 270 seconds [ 412.591089][ T5158] block nbd0: Possible stuck request ffff8880272e8400: control (read@2048,1024B). Runtime 270 seconds [ 412.602406][ T5158] block nbd0: Possible stuck request ffff8880272e8600: control (read@3072,1024B). Runtime 270 seconds [ 412.682678][T10259] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.691876][T10259] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.700708][T13920] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2098'. [ 412.728984][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 412.812033][T10259] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.821477][T10259] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.861629][T13920] tipc: Enabled bearer , priority 0 [ 412.998802][T13920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 413.044261][T13944] bridge6: entered promiscuous mode [ 413.138622][T13919] tipc: Resetting bearer [ 413.232890][T13919] tipc: Disabling bearer [ 413.781377][T13985] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2110'. [ 413.797708][T13987] netlink: 'syz.1.2112': attribute type 2 has an invalid length. [ 413.805605][T13987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2112'. [ 413.828157][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 413.891789][T13994] openvswitch: netlink: Message has 8 unknown bytes. [ 413.970510][T13994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.082285][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 414.104990][T13999] netlink: 336 bytes leftover after parsing attributes in process `syz.4.2114'. [ 414.125054][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 414.145411][T13999] netlink: 336 bytes leftover after parsing attributes in process `syz.4.2114'. [ 414.168768][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 414.246899][T14001] syzkaller1: entered promiscuous mode [ 414.252680][T14001] syzkaller1: entered allmulticast mode [ 414.668050][T14019] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2121'. [ 414.694052][T14019] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2121'. [ 414.721246][T14021] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2121'. [ 414.730657][T14017] syzkaller0: entered promiscuous mode [ 414.736721][T14017] syzkaller0: entered allmulticast mode [ 414.963512][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 415.334237][T14041] @0Ù: entered allmulticast mode [ 415.361564][T14040] @0Ù: left allmulticast mode [ 415.524647][T14051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.534797][T14051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2126'. [ 415.902061][T14062] syzkaller0: entered promiscuous mode [ 415.907769][T14062] syzkaller0: entered allmulticast mode [ 416.192248][T14076] tipc: Started in network mode [ 416.217469][T14076] tipc: Node identity 1e0f331510d9, cluster identity 4711 [ 416.224825][T14076] tipc: Enabled bearer , priority 0 [ 416.523299][T14080] syzkaller0: entered promiscuous mode [ 416.544132][T14080] syzkaller0: entered allmulticast mode [ 416.556286][T14080] tipc: Resetting bearer [ 416.564252][T14088] netlink: 'syz.1.2136': attribute type 19 has an invalid length. [ 416.694503][ T143] tipc: Resetting bearer [ 416.767096][T14073] tipc: Resetting bearer [ 419.729226][T14073] tipc: Disabling bearer [ 419.747940][T13228] tipc: Node number set to 248918805 [ 419.767024][T14122] tipc: Enabling of bearer rejected, failed to enable media [ 419.837921][T14099] lo speed is unknown, defaulting to 1000 [ 420.020942][T14127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.069686][T14130] __nla_validate_parse: 6 callbacks suppressed [ 420.069706][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 420.289231][T14136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.392672][T14143] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2147'. [ 420.420789][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 420.957396][T14163] 0: reclassify loop, rule prio 0, protocol 700 [ 421.321150][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2154'. [ 421.522585][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 421.616895][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 422.281064][T14212] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 423.259157][T14231] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 423.847650][T14263] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2172'. [ 423.877184][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'. [ 424.298520][T14278] syz_tun: entered promiscuous mode [ 424.313634][T14278] syz_tun: refused to change device tx_queue_len [ 424.350918][T14278] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 424.455255][T14284] sctp: [Deprecated]: syz.3.2177 (pid 14284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.455255][T14284] Use struct sctp_sack_info instead [ 424.792045][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 424.841246][T14308] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 424.862857][T14308] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2182'. [ 424.943578][T14311] lo speed is unknown, defaulting to 1000 [ 425.939962][T14339] lo speed is unknown, defaulting to 1000 [ 427.019574][T14363] netlink: 'syz.3.2195': attribute type 8 has an invalid length. [ 427.323470][T14362] lo speed is unknown, defaulting to 1000 [ 427.339887][T14378] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2197'. [ 427.555587][T14384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2198'. [ 427.611080][T14386] set match dimension is over the limit! [ 427.691267][T14386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2199'. [ 427.701991][T14386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2199'. [ 427.748340][T14394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2201'. [ 427.772309][T14396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2201'. [ 428.030070][T14389] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 428.081268][T14397] lo speed is unknown, defaulting to 1000 [ 428.238627][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 428.329094][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 428.385294][T14411] lo speed is unknown, defaulting to 1000 [ 428.392227][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 428.437135][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 429.050815][T14399] infiniband !yz!: set active [ 429.055782][T14399] infiniband !yz!: added team_slave_0 [ 429.099885][T14399] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 429.110883][T14399] infiniband !yz!: Couldn't open port 1 [ 429.264886][T14399] RDS/IB: !yz!: added [ 429.287496][T14399] smc: adding ib device !yz! with port count 1 [ 429.294382][T14399] smc: ib device !yz! port 1 has no pnetid [ 429.967458][T14460] bridge0: entered allmulticast mode [ 429.973779][T14457] netlink: 'syz.2.2213': attribute type 3 has an invalid length. [ 429.983838][T14460] bridge_slave_1: left allmulticast mode [ 429.990043][T14460] bridge_slave_1: left promiscuous mode [ 429.998864][T14460] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.018943][T14460] bridge_slave_0: left allmulticast mode [ 430.024667][T14460] bridge_slave_0: left promiscuous mode [ 430.042137][T14460] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.177309][T14457] netlink: 'syz.2.2213': attribute type 3 has an invalid length. [ 430.634951][T14494] xt_hashlimit: size too large, truncated to 1048576 [ 431.473904][T14526] netlink: 'syz.4.2234': attribute type 1 has an invalid length. [ 431.485738][T14526] netlink: 'syz.4.2234': attribute type 4 has an invalid length. [ 432.461959][T14534] lo speed is unknown, defaulting to 1000 [ 432.498523][T14471] lo speed is unknown, defaulting to 1000 [ 432.568643][T14544] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 432.576888][T14544] __nla_validate_parse: 6 callbacks suppressed [ 432.576907][T14544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2240'. [ 433.134070][T14558] pimreg: tun_chr_ioctl cmd 1074025677 [ 433.146613][T14558] pimreg: linktype set to 780 [ 433.574443][T14570] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2247'. [ 433.607633][T14570] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 433.729927][ T5826] block nbd4: Receive control failed (result -32) [ 433.831025][T14584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2250'. [ 433.937438][T14591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2253'. [ 434.161683][T14606] netlink: 'syz.1.2257': attribute type 4 has an invalid length. [ 434.308157][T14615] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 434.353298][T14614] lo speed is unknown, defaulting to 1000 [ 434.429958][T14622] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 434.695344][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2264'. [ 434.707572][T14629] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 434.715516][T14629] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2264'. [ 434.871883][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2266'. [ 435.495259][T14653] syzkaller1: entered promiscuous mode [ 435.515592][T14653] syzkaller1: entered allmulticast mode [ 435.697486][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 435.712321][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 436.109038][T14696] bond7: Removing last ns target with arp_interval on [ 436.242369][T14703] dvmrp0: entered allmulticast mode [ 436.359712][T14709] syzkaller0: entered promiscuous mode [ 436.388421][T14709] syzkaller0: entered allmulticast mode [ 436.452160][T14716] netlink: 'syz.0.2290': attribute type 2 has an invalid length. [ 436.472812][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2291'. [ 436.518585][T14724] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20002 [ 436.526791][T14713] netlink: 'syz.0.2290': attribute type 2 has an invalid length. [ 436.554163][T14726] netlink: 'syz.4.2292': attribute type 1 has an invalid length. [ 436.556952][T14716] !©9: entered promiscuous mode [ 436.574834][T14720] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 436.619210][T14720] netlink: 'syz.2.2293': attribute type 3 has an invalid length. [ 436.638663][T14713] !©9: left promiscuous mode [ 436.643644][T14720] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 436.708908][T14728] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 436.741629][T14728] bond8: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 436.757253][T14728] bond8: (slave vxcan1): making interface the new active one [ 436.767545][T14728] bond8: (slave vxcan1): Enslaving as an active interface with an up link [ 436.827483][T14726] bond8 (unregistering): (slave vxcan1): Releasing backup interface [ 436.858939][T14726] bond8 (unregistering): Released all slaves [ 437.405049][T14775] xt_hashlimit: size too large, truncated to 1048576 [ 437.882040][T14789] __nla_validate_parse: 8 callbacks suppressed [ 437.882059][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 437.913603][T14791] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 437.965918][T14789] bond6: entered promiscuous mode [ 437.971751][T14789] 8021q: adding VLAN 0 to HW filter on device bond6 [ 437.981891][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 437.992031][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 438.002457][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 438.049704][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 438.758539][T14842] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 438.772091][T14842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.801658][T14847] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2324'. [ 438.804316][T14842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.930973][T14849] block nbd5: Unsupported socket: should be TCP or UNIX. [ 439.117492][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2327'. [ 439.164333][T14854] sctp: [Deprecated]: syz.4.2327 (pid 14854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.164333][T14854] Use struct sctp_sack_info instead [ 439.743977][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'. [ 439.875559][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 439.903364][T14901] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 440.069391][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 440.093090][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.107529][ T1302] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 440.225211][T14920] netlink: 'syz.3.2343': attribute type 10 has an invalid length. [ 440.274684][T14920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.348781][T14920] team0: Port device bond0 added [ 441.287756][T14909] bond11: option ad_select: invalid value (34) [ 441.298056][T14909] bond11 (unregistering): Released all slaves [ 441.696876][T14963] IPv6: NLM_F_CREATE should be specified when creating new route [ 441.764790][T14974] netlink: 'syz.0.2357': attribute type 13 has an invalid length. [ 441.811650][T14974] netlink: 'syz.0.2357': attribute type 27 has an invalid length. [ 442.036628][T14979] lo speed is unknown, defaulting to 1000 [ 442.466649][T14985] netlink: 'syz.4.2360': attribute type 3 has an invalid length. [ 442.639054][ T5158] block nbd0: Possible stuck request ffff8880272e8000: control (read@0,1024B). Runtime 300 seconds [ 442.652477][ T5158] block nbd0: Possible stuck request ffff8880272e8200: control (read@1024,1024B). Runtime 300 seconds [ 442.664974][ T5158] block nbd0: Possible stuck request ffff8880272e8400: control (read@2048,1024B). Runtime 300 seconds [ 442.676294][ T5158] block nbd0: Possible stuck request ffff8880272e8600: control (read@3072,1024B). Runtime 300 seconds [ 442.827754][T15000] netlink: 'syz.4.2365': attribute type 4 has an invalid length. [ 442.886945][T15004] netlink: 'syz.4.2365': attribute type 4 has an invalid length. [ 442.928900][T14995] syzkaller0: entered promiscuous mode [ 442.958002][T14995] syzkaller0: entered allmulticast mode [ 443.004115][T14995] __nla_validate_parse: 7 callbacks suppressed [ 443.004136][T14995] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2363'. [ 443.064069][T15003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2363'. [ 443.117630][T15012] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 443.143077][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2368'. [ 443.167992][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2368'. [ 443.440044][T15021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 443.480111][T15021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2371'. [ 443.572365][T15033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2374'. [ 443.664792][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 443.769700][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2376'. [ 444.462723][T15033] geneve2: left promiscuous mode [ 444.472557][T15033] geneve2: left allmulticast mode [ 444.492175][T15033] bond3: left promiscuous mode [ 444.506883][T15033] bond3: left allmulticast mode [ 444.532143][T15033] macvlan2: left promiscuous mode [ 444.602608][T15033] bond5: left allmulticast mode [ 444.643527][T15033] bond8: left promiscuous mode [ 444.653606][T15033] bridge13: left promiscuous mode [ 444.877751][T15051] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2378'. [ 444.941592][T15051] openvswitch: netlink: Missing key (keys=40, expected=80) [ 445.329274][T15072] netlink: 'syz.2.2386': attribute type 11 has an invalid length. [ 445.792745][T15082] netlink: 'syz.2.2389': attribute type 83 has an invalid length. [ 447.012905][T15100] syzkaller0: entered promiscuous mode [ 447.046742][T15100] syzkaller0: entered allmulticast mode [ 448.072475][T15134] __nla_validate_parse: 9 callbacks suppressed [ 448.072497][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2405'. [ 448.754856][T15152] syzkaller0: entered promiscuous mode [ 448.761964][T15152] syzkaller0: entered allmulticast mode [ 448.777986][T15159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2413'. [ 449.058513][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2418'. [ 449.072628][T15164] netlink: 'syz.3.2416': attribute type 1 has an invalid length. [ 449.099220][T15169] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2418'. [ 449.179143][T15164] 8021q: adding VLAN 0 to HW filter on device bond7 [ 449.307637][T15173] bond7: (slave veth5): Enslaving as an active interface with a down link [ 449.389718][T15164] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 449.399437][T15164] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 449.541292][T15183] bridge_slave_0: entered promiscuous mode [ 449.828065][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 449.971952][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2424'. [ 450.697823][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 450.717821][T15228] lo speed is unknown, defaulting to 1000 [ 450.756314][T15235] bond9: entered promiscuous mode [ 450.762505][T15235] 8021q: adding VLAN 0 to HW filter on device bond9 [ 450.859849][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 450.926261][T15244] tipc: Enabling of bearer rejected, failed to enable media [ 450.982057][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2437'. [ 451.026590][T15246] netlink: 'syz.3.2438': attribute type 61 has an invalid length. [ 451.075225][T15246] netlink: 'syz.3.2438': attribute type 62 has an invalid length. [ 451.122756][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2438'. [ 451.642031][ T30] audit: type=1800 audit(1771999068.462:3): pid=15273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2446" name=CB dev="tmpfs" ino=2505 res=0 errno=0 [ 451.739453][ T30] audit: type=1800 audit(1771999068.562:4): pid=15278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2446" name=CB dev="tmpfs" ino=2505 res=0 errno=0 [ 452.383420][T15287] pim6reg: entered allmulticast mode [ 452.435374][T15294] C: left allmulticast mode [ 452.482169][T15294] team0: Port device C removed [ 452.535618][T15294] team_slave_1: left allmulticast mode [ 452.617954][T15294] team0: Port device team_slave_1 removed [ 452.637559][T15294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.596193][T15317] __nla_validate_parse: 2 callbacks suppressed [ 453.596218][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'. [ 453.649813][T15316] lo speed is unknown, defaulting to 1000 [ 454.031822][T15334] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 454.060158][T15334] netlink: 'syz.1.2461': attribute type 4 has an invalid length. [ 454.091482][T15334] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2461'. [ 454.205323][T15340] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 454.249732][T15340] openvswitch: netlink: Message has 8 unknown bytes. [ 454.477735][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2466'. [ 455.127430][T15384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2473'. [ 455.217878][T15389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.371854][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2476'. [ 455.386276][T15398] netlink: 'syz.0.2475': attribute type 3 has an invalid length. [ 455.418440][T15398] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2475'. [ 455.431499][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2476'. [ 455.549592][T15405] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2476'. [ 456.199951][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 456.722339][T15442] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2487'. [ 456.787374][T15437] lo speed is unknown, defaulting to 1000 [ 456.930173][T15446] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 456.940830][T15446] netlink: zone id is out of range [ 456.946021][T15446] netlink: zone id is out of range [ 456.956967][T15446] netlink: zone id is out of range [ 456.988067][T15446] netlink: zone id is out of range [ 457.012805][T15446] netlink: zone id is out of range [ 457.630323][T15468] lo speed is unknown, defaulting to 1000 [ 458.683053][T15493] __nla_validate_parse: 1 callbacks suppressed [ 458.683074][T15493] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2501'. [ 458.786028][T15492] lo speed is unknown, defaulting to 1000 [ 459.065072][T15499] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 459.231653][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2503'. [ 459.369221][T15504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2503'. [ 459.386459][T15504] nbd: nbd64 already in use [ 460.033330][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2507'. [ 460.177892][T15521] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.200298][T15521] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.231901][T15522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2509'. [ 460.274760][T15522] bond0: option arp_validate: invalid value (55553) [ 460.318374][T15521] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.346446][T15521] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.472194][T15521] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.523536][T15521] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.713898][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2511'. [ 460.727945][T15521] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.776469][T15521] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.202391][T15543] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2515'. [ 461.243252][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.266767][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.345025][ T143] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.366404][ T143] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.519068][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.547870][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.589542][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.620186][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.714602][T15550] lo speed is unknown, defaulting to 1000 [ 462.132578][T15572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2522'. [ 462.398474][T15574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2523'. [ 462.783856][T15590] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 462.801217][T15590] bond11 (unregistering): Released all slaves [ 462.872203][T15589] lo speed is unknown, defaulting to 1000 [ 463.035530][T15601] x_tables: duplicate underflow at hook 2 [ 463.652804][T15612] netlink: 'syz.3.2533': attribute type 16 has an invalid length. [ 463.679076][T15612] netlink: 'syz.3.2533': attribute type 17 has an invalid length. [ 463.770266][T15612] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.879963][T15619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2535'. [ 464.041759][T15626] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.069953][T15626] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.084294][T15631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2538'. [ 464.112249][T15633] IPVS: stopping backup sync thread 7638 ... [ 464.130039][T15626] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.140578][T15626] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.214774][T15626] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.225387][T15626] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.320503][T15626] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.332059][T15626] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.349019][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'. [ 464.376619][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'. [ 464.385927][T15642] netlink: 'syz.1.2543': attribute type 2 has an invalid length. [ 464.469390][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.481599][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.524434][T15644] lo speed is unknown, defaulting to 1000 [ 464.524451][T10252] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.547923][T10252] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.583642][T10252] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.602343][T10252] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.643454][T15646] lo speed is unknown, defaulting to 1000 [ 464.643471][T10252] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.661500][T10252] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.900374][T15652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2546'. [ 465.845603][T15670] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 465.945285][T15673] netlink: 'syz.0.2552': attribute type 1 has an invalid length. [ 465.953877][T15673] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2552'. [ 466.091035][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 466.176130][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2554'. [ 466.204668][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 466.359855][T15687] netlink: 'syz.2.2556': attribute type 1 has an invalid length. [ 466.396732][T15687] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2556'. [ 467.602388][T15734] team0 (unregistering): Port device team_slave_1 removed [ 468.032307][T15760] netlink: 'syz.3.2576': attribute type 1 has an invalid length. [ 468.043320][T15760] netlink: 'syz.3.2576': attribute type 2 has an invalid length. [ 468.140314][T15765] lo speed is unknown, defaulting to 1000 [ 468.202791][T15769] x_tables: duplicate underflow at hook 1 [ 468.335369][T15771] bond0: (slave dummy0): Releasing backup interface [ 468.518442][T15777] netlink: 'syz.3.2580': attribute type 16 has an invalid length. [ 468.926096][T15787] __nla_validate_parse: 7 callbacks suppressed [ 468.926129][T15787] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2578'. [ 469.059200][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2584'. [ 469.143739][T15787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2578'. [ 469.200988][T15792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.817899][T15807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.953196][T15807] veth1_vlan: left allmulticast mode [ 470.010461][T15837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2597'. [ 470.065216][T10254] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.084198][T10254] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.105413][T10254] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.132382][T10254] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.220356][T10254] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.230077][T10254] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.256928][T15842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2599'. [ 470.266793][T10254] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.289905][T10254] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.357635][T15844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2598'. [ 470.369113][T15844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2598'. [ 470.529836][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'. [ 470.600596][ T5974] IPVS: starting estimator thread 0... [ 470.631013][T15848] lo speed is unknown, defaulting to 1000 [ 470.727464][T15853] IPVS: using max 31 ests per chain, 74400 per kthread [ 470.747166][T15850] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2601'. [ 470.772256][T15850] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2601'. [ 471.353898][T15878] tipc: Started in network mode [ 471.381427][T15878] tipc: Node identity ee6c87a0adc5, cluster identity 4711 [ 471.410009][T15878] tipc: Enabled bearer , priority 0 [ 471.439100][T15874] syzkaller0: entered promiscuous mode [ 471.446940][T15874] syzkaller0: entered allmulticast mode [ 471.462088][T15874] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 471.546542][T15874] tipc: Resetting bearer [ 472.100377][T15873] tipc: Resetting bearer [ 472.165971][T15873] tipc: Disabling bearer [ 472.219290][T15913] syzkaller1: entered promiscuous mode [ 472.226686][T15913] syzkaller1: entered allmulticast mode [ 472.410395][T15919] net_ratelimit: 763 callbacks suppressed [ 472.410415][T15919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.624081][T15931] IPv6: sit2: Disabled Multicast RS [ 472.722387][ T5158] block nbd0: Possible stuck request ffff8880272e8000: control (read@0,1024B). Runtime 330 seconds [ 472.735891][ T5158] block nbd0: Possible stuck request ffff8880272e8200: control (read@1024,1024B). Runtime 330 seconds [ 472.747545][ T5158] block nbd0: Possible stuck request ffff8880272e8400: control (read@2048,1024B). Runtime 330 seconds [ 472.760200][ T5158] block nbd0: Possible stuck request ffff8880272e8600: control (read@3072,1024B). Runtime 330 seconds [ 473.251489][T15956] lo speed is unknown, defaulting to 1000 [ 473.297940][T15965] C: renamed from team_slave_0 [ 473.389413][T15954] xt_CT: No such helper "syz1" [ 473.539107][T15974] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.567889][T15974] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.688064][T15974] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.719075][T15974] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.835486][T15974] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.849164][T15974] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.059366][T15974] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.086598][T15974] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.134726][T16000] __nla_validate_parse: 10 callbacks suppressed [ 474.134742][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2637'. [ 474.308501][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.317236][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.392436][T10252] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.421525][T10252] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.516343][T10254] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.535362][T10254] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.549879][T10254] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.573971][T10254] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.695902][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'. [ 475.026887][T16031] tipc: Enabled bearer , priority 0 [ 475.068008][T16031] syzkaller0: entered promiscuous mode [ 475.083959][T16031] syzkaller0: entered allmulticast mode [ 475.161204][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 475.220812][T16039] tipc: Resetting bearer [ 475.266163][T16029] tipc: Resetting bearer [ 475.315211][T16052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2654'. [ 475.388778][T16029] tipc: Disabling bearer [ 475.702836][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2659'. [ 475.954253][T16084] netlink: 'syz.4.2666': attribute type 10 has an invalid length. [ 475.967273][T16084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2666'. [ 475.986718][T16084] geneve0: entered allmulticast mode [ 475.994204][T16084] team0: Port device geneve0 added [ 476.001361][ T143] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.009757][ T143] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.019137][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2665'. [ 476.027947][ T143] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.037069][ T143] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.401413][T16105] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 476.408045][T16105] pim6reg1: linktype set to 805 [ 476.449382][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'. [ 476.462963][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'. [ 476.799852][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2675'. [ 477.221027][T16155] sctp: [Deprecated]: syz.3.2687 (pid 16155) Use of int in maxseg socket option. [ 477.221027][T16155] Use struct sctp_assoc_value instead [ 477.312225][ T30] audit: type=1800 audit(1771999094.132:5): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2689" name="pids.current" dev="tmpfs" ino=2750 res=0 errno=0 [ 477.678940][T16179] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 478.169877][T16198] nbd: socks must be embedded in a SOCK_ITEM attr [ 480.948698][T16208] netlink: 'syz.0.2702': attribute type 10 has an invalid length. [ 481.033961][T16208] bridge14: entered promiscuous mode [ 481.039948][T16208] bridge14: entered allmulticast mode [ 481.061839][T16208] team0: Port device bridge14 added [ 481.110092][T16219] __nla_validate_parse: 5 callbacks suppressed [ 481.110114][T16219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2705'. [ 481.161018][T16219] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.282008][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'. [ 481.376229][T16225] netlink: 'syz.2.2708': attribute type 10 has an invalid length. [ 481.421601][T10254] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.429927][T16225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.437245][T16225] IPv6: NLM_F_CREATE should be set when creating new route [ 481.444718][T10254] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.467237][T10254] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.483095][T10254] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.795080][T16243] bond8 (unregistering): Released all slaves [ 481.974406][T16259] pim6reg: entered allmulticast mode [ 482.232967][T16274] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2720'. [ 482.269118][T16270] syzkaller1: entered promiscuous mode [ 482.274638][T16270] syzkaller1: entered allmulticast mode [ 482.294277][T16273] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2720'. [ 482.494258][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2724'. [ 482.627059][T16292] macvtap1: entered promiscuous mode [ 482.635068][T16292] veth1_to_hsr: entered promiscuous mode [ 482.642630][T16292] macvtap1: entered allmulticast mode [ 482.649174][T16292] veth1_to_hsr: entered allmulticast mode [ 482.712406][T16288] lo speed is unknown, defaulting to 1000 [ 482.735060][T16303] netlink: 'syz.4.2726': attribute type 7 has an invalid length. [ 482.760105][T16303] netlink: 'syz.4.2726': attribute type 8 has an invalid length. [ 482.771290][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'. [ 482.809871][T16283] lo speed is unknown, defaulting to 1000 [ 482.998729][T16313] netlink: 'syz.3.2731': attribute type 2 has an invalid length. [ 483.030315][T16313] netlink: 'syz.3.2731': attribute type 2 has an invalid length. [ 483.039682][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'. [ 483.046796][T16313] netlink: 'syz.3.2731': attribute type 2 has an invalid length. [ 483.078149][T16319] x_tables: duplicate underflow at hook 2 [ 483.096810][T16313] netlink: 'syz.3.2731': attribute type 2 has an invalid length. [ 483.105164][T16313] netlink: 'syz.3.2731': attribute type 2 has an invalid length. [ 483.114251][T16313] netlink: 'syz.3.2731': attribute type 2 has an invalid length. [ 483.128935][T16313] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 483.160856][T16305] bond6 (unregistering): Released all slaves [ 483.631290][T16336] veth0_to_bridge: entered promiscuous mode [ 483.758043][T16333] veth0_to_bridge: left promiscuous mode [ 483.795295][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'. [ 484.168377][T10828] IPVS: starting estimator thread 0... [ 484.179563][T16353] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 484.267187][T16357] IPVS: using max 33 ests per chain, 79200 per kthread [ 484.311602][T16350] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 484.364025][T16353] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 484.406511][T16353] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 484.549463][T16376] xt_TCPMSS: Only works on TCP SYN packets [ 484.607519][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 484.630501][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 484.723380][T16376] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.730637][T16376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.791286][T10261] bond0: (slave bond_slave_0): interface is now down [ 484.807511][T16376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.833013][T10261] bond0: (slave bond_slave_1): interface is now down [ 484.868329][T16376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.885857][ T13] bond0: (slave bond_slave_0): interface is now down [ 484.885897][ T13] bond0: (slave bond_slave_1): interface is now down [ 484.909293][ T1026] bond0: (slave bond_slave_0): interface is now down [ 484.916142][ T1026] bond0: (slave bond_slave_1): interface is now down [ 484.933487][T16358] lo speed is unknown, defaulting to 1000 [ 484.964265][ T1026] bond0: (slave bond_slave_0): interface is now down [ 484.971659][ T1026] bond0: (slave bond_slave_1): interface is now down [ 484.997417][ T13] bond0: (slave bond_slave_0): interface is now down [ 485.013229][ T13] bond0: (slave bond_slave_1): interface is now down [ 485.050992][ T13] bond0: (slave bond_slave_0): interface is now down [ 485.066577][ T13] bond0: (slave bond_slave_1): interface is now down [ 485.092141][ T13] bond0: (slave bond_slave_0): interface is now down [ 485.099765][ T13] bond0: (slave bond_slave_1): interface is now down [ 485.136775][ T49] bond0: (slave bond_slave_0): interface is now down [ 485.145622][ T49] bond0: (slave bond_slave_1): interface is now down [ 485.166676][ T49] bond0: (slave bond_slave_0): interface is now down [ 485.173468][ T49] bond0: (slave bond_slave_1): interface is now down [ 485.198200][T10254] bond0: (slave bond_slave_0): interface is now down [ 485.221080][T10254] bond0: (slave bond_slave_1): interface is now down [ 485.259780][ T49] bond0: (slave bond_slave_0): interface is now down [ 485.270385][T10261] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 485.288411][ T49] bond0: (slave bond_slave_1): interface is now down [ 485.336649][ T143] bond0: (slave bond_slave_0): interface is now down [ 485.343417][ T143] bond0: (slave bond_slave_1): interface is now down [ 485.399349][ T143] bond0: now running without any active interface! [ 485.949074][T16419] lo speed is unknown, defaulting to 1000 [ 486.448106][T16440] syzkaller1: entered promiscuous mode [ 486.453802][T16440] syzkaller1: entered allmulticast mode [ 486.472762][T16447] delete_channel: no stack [ 486.590921][T16454] __nla_validate_parse: 16 callbacks suppressed [ 486.590944][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2761'. [ 486.723128][T16460] openvswitch: netlink: IP tunnel dst address not specified [ 487.482602][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'. [ 487.582964][T16479] lo speed is unknown, defaulting to 1000 [ 487.997129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.006073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.406377][T16509] validate_nla: 11 callbacks suppressed [ 488.406396][T16509] netlink: 'syz.0.2773': attribute type 4 has an invalid length. [ 488.492235][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2775'. [ 488.905794][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2781'. [ 489.247733][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 489.326748][T16543] lo speed is unknown, defaulting to 1000 [ 489.488155][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2785'. [ 489.551767][T16566] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.672843][T16566] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.710303][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'. [ 489.815141][T16566] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.978305][T16566] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.041602][T16591] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 490.189347][T16591] bond12: entered promiscuous mode [ 490.207123][T16591] 8021q: adding VLAN 0 to HW filter on device bond12 [ 490.264779][T16593] 8021q: adding VLAN 0 to HW filter on device bond12 [ 490.273015][T16593] bond12: (slave vti0): The slave device specified does not support setting the MAC address [ 490.284070][T16593] bond12: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 490.307837][T16593] bond12: (slave vti0): making interface the new active one [ 490.315417][T16593] vti0: entered promiscuous mode [ 490.322525][T16593] bond12: (slave vti0): Enslaving as an active interface with an up link [ 490.365440][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 490.425797][T10261] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.435568][T10261] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.519860][T16614] netlink: 'syz.3.2798': attribute type 10 has an invalid length. [ 490.528048][T10261] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.537332][T16614] netlink: 'syz.3.2798': attribute type 10 has an invalid length. [ 490.662452][T16616] lo speed is unknown, defaulting to 1000 [ 490.676571][ T1026] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.841143][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2803'. [ 490.985853][T16626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2803'. [ 491.037859][T16637] vlan4: entered promiscuous mode [ 491.046735][T16637] hsr0: entered promiscuous mode [ 491.451798][T16653] netlink: 'syz.2.2810': attribute type 21 has an invalid length. [ 491.494403][T16653] netlink: 'syz.2.2810': attribute type 3 has an invalid length. [ 491.814875][T16669] syzkaller0: entered promiscuous mode [ 491.822243][T16641] netlink: 'syz.4.2805': attribute type 1 has an invalid length. [ 491.826623][T16669] syzkaller0: entered allmulticast mode [ 491.836618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.845007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.853438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.861897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.104123][T16657] netlink: 'syz.3.2811': attribute type 5 has an invalid length. [ 492.176512][T16683] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 492.732745][T16710] xt_TCPMSS: Only works on TCP SYN packets [ 492.803142][T16710] __nla_validate_parse: 4 callbacks suppressed [ 492.803163][T16710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2824'. [ 493.224562][T16739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2832'. [ 493.384891][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 493.488426][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 493.571643][T16755] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 493.587650][T16755] bond8 (unregistering): Released all slaves [ 493.653013][T16753] macvlan1: entered promiscuous mode [ 493.664597][T16766] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2836'. [ 493.989804][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2841'. [ 494.087448][T16786] openvswitch: netlink: Multiple metadata blocks provided [ 494.744947][T16797] lo speed is unknown, defaulting to 1000 [ 495.338069][T16839] lo speed is unknown, defaulting to 1000 [ 495.507887][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 495.740489][T16849] syzkaller0: entered promiscuous mode [ 495.746050][T16849] syzkaller0: entered allmulticast mode [ 495.926533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.935136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.943592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.951981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.642493][T16862] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2864'. [ 498.731259][T16790] Set syz1 is full, maxelem 65536 reached [ 499.343475][T16851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2862'. [ 499.352802][T16851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2862'. [ 499.391114][T16866] syz_tun: left promiscuous mode [ 499.425608][T16866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.450394][T16866] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.474288][T16866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.517506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.618825][T16872] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2868'. [ 499.857071][ T1026] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 499.879689][ T1026] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 500.297245][T16896] netlink: 'syz.3.2873': attribute type 13 has an invalid length. [ 500.336456][T16896] netlink: 'syz.3.2873': attribute type 17 has an invalid length. [ 500.484839][T16896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.573265][T16905] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 500.757241][T16911] netlink: 'syz.1.2877': attribute type 1 has an invalid length. [ 500.904848][T16917] netlink: 'syz.2.2878': attribute type 2 has an invalid length. [ 501.057462][T16925] FAULT_INJECTION: forcing a failure. [ 501.057462][T16925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.071156][T16925] CPU: 0 UID: 0 PID: 16925 Comm: syz.2.2881 Not tainted syzkaller #0 PREEMPT(full) [ 501.071185][T16925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 501.071207][T16925] Call Trace: [ 501.071216][T16925] [ 501.071224][T16925] dump_stack_lvl+0xe8/0x150 [ 501.071258][T16925] should_fail_ex+0x412/0x560 [ 501.071286][T16925] _copy_from_user+0x2d/0xb0 [ 501.071316][T16925] ___sys_sendmsg+0x1c6/0x360 [ 501.071351][T16925] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.071414][T16925] ? __fget_files+0x2a/0x420 [ 501.071442][T16925] ? __fget_files+0x3a0/0x420 [ 501.071479][T16925] __x64_sys_sendmsg+0x1bd/0x2a0 [ 501.071511][T16925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.071549][T16925] ? __pfx_ksys_write+0x10/0x10 [ 501.071580][T16925] do_syscall_64+0x14d/0xf80 [ 501.071610][T16925] ? trace_irq_disable+0x3b/0x150 [ 501.071638][T16925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.071665][T16925] ? clear_bhb_loop+0x40/0x90 [ 501.071689][T16925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.071709][T16925] RIP: 0033:0x7fef8fb9c629 [ 501.071728][T16925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.071746][T16925] RSP: 002b:00007fef90a26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.071785][T16925] RAX: ffffffffffffffda RBX: 00007fef8fe15fa0 RCX: 00007fef8fb9c629 [ 501.071801][T16925] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 501.071814][T16925] RBP: 00007fef90a26090 R08: 0000000000000000 R09: 0000000000000000 [ 501.071829][T16925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.071840][T16925] R13: 00007fef8fe16038 R14: 00007fef8fe15fa0 R15: 00007ffc496392f8 [ 501.071874][T16925] [ 501.364190][T16929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'. [ 501.492372][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 501.520810][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.530340][ T1302] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 501.713697][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2888'. [ 502.110108][T16968] 8021q: adding VLAN 0 to HW filter on device bond13 [ 502.169347][T16968] team0: Port device bond13 added [ 502.311160][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 502.323231][T16987] FAULT_INJECTION: forcing a failure. [ 502.323231][T16987] name failslab, interval 1, probability 0, space 0, times 0 [ 502.376619][T16987] CPU: 1 UID: 0 PID: 16987 Comm: syz.1.2893 Not tainted syzkaller #0 PREEMPT(full) [ 502.376648][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.376661][T16987] Call Trace: [ 502.376669][T16987] [ 502.376677][T16987] dump_stack_lvl+0xe8/0x150 [ 502.376720][T16987] should_fail_ex+0x412/0x560 [ 502.376750][T16987] should_failslab+0xa8/0x100 [ 502.376778][T16987] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 502.376813][T16987] ? __alloc_skb+0x186/0x7d0 [ 502.376838][T16987] ? __alloc_skb+0x1d0/0x7d0 [ 502.376861][T16987] ? __local_bh_enable_ip+0xd0/0x130 [ 502.376892][T16987] __alloc_skb+0x1d0/0x7d0 [ 502.376924][T16987] netlink_sendmsg+0x5d4/0xb40 [ 502.376959][T16987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.376987][T16987] ? aa_sock_msg_perm+0xf1/0x1b0 [ 502.377013][T16987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.377036][T16987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.377060][T16987] ____sys_sendmsg+0xa68/0xad0 [ 502.377099][T16987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.377137][T16987] ? import_iovec+0x73/0xa0 [ 502.377169][T16987] ___sys_sendmsg+0x2a5/0x360 [ 502.377204][T16987] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.377269][T16987] ? __fget_files+0x2a/0x420 [ 502.377298][T16987] ? __fget_files+0x3a0/0x420 [ 502.377334][T16987] __x64_sys_sendmsg+0x1bd/0x2a0 [ 502.377367][T16987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.377407][T16987] ? __pfx_ksys_write+0x10/0x10 [ 502.377439][T16987] do_syscall_64+0x14d/0xf80 [ 502.377469][T16987] ? trace_irq_disable+0x3b/0x150 [ 502.377509][T16987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.377530][T16987] ? clear_bhb_loop+0x40/0x90 [ 502.377554][T16987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.377574][T16987] RIP: 0033:0x7f4d4d79c629 [ 502.377592][T16987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.377608][T16987] RSP: 002b:00007f4d4e6aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.377630][T16987] RAX: ffffffffffffffda RBX: 00007f4d4da15fa0 RCX: 00007f4d4d79c629 [ 502.377645][T16987] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 502.377657][T16987] RBP: 00007f4d4e6aa090 R08: 0000000000000000 R09: 0000000000000000 [ 502.377669][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.377680][T16987] R13: 00007f4d4da16038 R14: 00007f4d4da15fa0 R15: 00007fffdfa45b78 [ 502.377718][T16987] [ 502.716560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.724985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.733423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.741845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.797151][ T5158] block nbd0: Possible stuck request ffff8880272e8000: control (read@0,1024B). Runtime 360 seconds [ 502.808290][ T5158] block nbd0: Possible stuck request ffff8880272e8200: control (read@1024,1024B). Runtime 360 seconds [ 502.822649][ T5158] block nbd0: Possible stuck request ffff8880272e8400: control (read@2048,1024B). Runtime 360 seconds [ 502.834266][ T5158] block nbd0: Possible stuck request ffff8880272e8600: control (read@3072,1024B). Runtime 360 seconds [ 502.947938][T14571] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.960609][T14571] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 502.968708][T14571] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 502.978519][T14571] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 502.986165][T14571] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 503.083699][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 503.093311][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 503.105364][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 503.119229][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 503.129829][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 503.298266][T16999] lo speed is unknown, defaulting to 1000 [ 503.393115][T17010] tipc: Cannot configure node identity twice [ 503.633740][T17020] syzkaller0: entered promiscuous mode [ 503.657598][T17020] syzkaller0: entered allmulticast mode [ 503.818064][T17023] gretap4: entered allmulticast mode [ 504.207632][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'. [ 504.240543][ T30] audit: type=1800 audit(1771999121.062:6): pid=17054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2907" name="memory.events" dev="tmpfs" ino=3057 res=0 errno=0 [ 504.350936][ T30] audit: type=1804 audit(1771999121.092:7): pid=17054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2907" name="/newroot/594/memory.events" dev="tmpfs" ino=3057 res=1 errno=0 [ 504.712070][T17077] syzkaller0: entered promiscuous mode [ 504.724596][T17077] syzkaller0: entered allmulticast mode [ 504.733455][T16999] chnl_net:caif_netlink_parms(): no params data found [ 504.845915][T17082] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.900367][T17086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 504.980260][T17082] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.059893][T17082] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.107643][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.116623][T16999] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.123935][T16999] bridge_slave_0: entered allmulticast mode [ 505.189709][T16999] bridge_slave_0: entered promiscuous mode [ 505.198639][ T5826] Bluetooth: hci5: command tx timeout [ 505.223683][T17082] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.253151][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.276480][T16999] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.284026][T16999] bridge_slave_1: entered allmulticast mode [ 505.294378][T16999] bridge_slave_1: entered promiscuous mode [ 505.338047][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.350817][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.362063][T17105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2919'. [ 505.378297][ T1026] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.415256][ T1026] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.426141][T16999] team0: Port device team_slave_0 added [ 505.435388][T16999] team0: Port device team_slave_1 added [ 505.459169][ T143] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.502210][ T1026] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.513276][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.520780][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.547523][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.573958][T17107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2920'. [ 505.581381][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.590270][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.616745][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.690316][T16999] hsr_slave_0: entered promiscuous mode [ 505.704378][T16999] hsr_slave_1: entered promiscuous mode [ 505.711202][T16999] debugfs: 'hsr0' already exists in 'hsr' [ 505.717663][T16999] Cannot create hsr debugfs directory [ 506.121053][T17121] syzkaller0: entered promiscuous mode [ 506.127644][T17121] syzkaller0: entered allmulticast mode [ 506.489849][T16999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 506.581798][T16999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.620182][T16999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.665742][T16999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.731407][T17157] FAULT_INJECTION: forcing a failure. [ 506.731407][T17157] name failslab, interval 1, probability 0, space 0, times 0 [ 506.755378][T17157] CPU: 1 UID: 0 PID: 17157 Comm: syz.0.2936 Not tainted syzkaller #0 PREEMPT(full) [ 506.755406][T17157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.755419][T17157] Call Trace: [ 506.755427][T17157] [ 506.755435][T17157] dump_stack_lvl+0xe8/0x150 [ 506.755469][T17157] should_fail_ex+0x412/0x560 [ 506.755498][T17157] should_failslab+0xa8/0x100 [ 506.755524][T17157] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 506.755558][T17157] ? __alloc_skb+0x1d0/0x7d0 [ 506.755582][T17157] ? __local_bh_enable_ip+0xd0/0x130 [ 506.755613][T17157] __alloc_skb+0x1d0/0x7d0 [ 506.755643][T17157] netlink_dump+0x1ef/0xe80 [ 506.755679][T17157] ? __pfx_netlink_dump+0x10/0x10 [ 506.755738][T17157] __netlink_dump_start+0x5cb/0x7e0 [ 506.755771][T17157] inet_diag_rcv_msg_compat+0x214/0x420 [ 506.755828][T17157] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 506.755870][T17157] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 506.755900][T17157] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 506.755929][T17157] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 506.755966][T17157] ? sock_diag_rcv_msg+0x188/0x600 [ 506.755996][T17157] sock_diag_rcv_msg+0x4cc/0x600 [ 506.756025][T17157] netlink_rcv_skb+0x232/0x4b0 [ 506.756051][T17157] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 506.756077][T17157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.756114][T17157] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.756146][T17157] netlink_unicast+0x80f/0x9b0 [ 506.756177][T17157] ? __pfx_netlink_unicast+0x10/0x10 [ 506.756199][T17157] ? netlink_sendmsg+0x650/0xb40 [ 506.756229][T17157] ? skb_put+0x11b/0x210 [ 506.756259][T17157] netlink_sendmsg+0x813/0xb40 [ 506.756296][T17157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.756324][T17157] ? aa_sock_msg_perm+0xf1/0x1b0 [ 506.756351][T17157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.756376][T17157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.756399][T17157] ____sys_sendmsg+0xa68/0xad0 [ 506.756440][T17157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.756480][T17157] ? import_iovec+0x73/0xa0 [ 506.756512][T17157] ___sys_sendmsg+0x2a5/0x360 [ 506.756549][T17157] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.756617][T17157] ? __fget_files+0x2a/0x420 [ 506.756646][T17157] ? __fget_files+0x3a0/0x420 [ 506.756686][T17157] __x64_sys_sendmsg+0x1bd/0x2a0 [ 506.756720][T17157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.756761][T17157] ? __pfx_ksys_write+0x10/0x10 [ 506.756795][T17157] do_syscall_64+0x14d/0xf80 [ 506.756825][T17157] ? trace_irq_disable+0x3b/0x150 [ 506.756854][T17157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.756875][T17157] ? clear_bhb_loop+0x40/0x90 [ 506.756900][T17157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.756921][T17157] RIP: 0033:0x7fc3d9f9c629 [ 506.756942][T17157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.756960][T17157] RSP: 002b:00007fc3dae05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.756982][T17157] RAX: ffffffffffffffda RBX: 00007fc3da215fa0 RCX: 00007fc3d9f9c629 [ 506.756997][T17157] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 506.757010][T17157] RBP: 00007fc3dae05090 R08: 0000000000000000 R09: 0000000000000000 [ 506.757035][T17157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.757045][T17157] R13: 00007fc3da216038 R14: 00007fc3da215fa0 R15: 00007ffec1b55748 [ 506.757076][T17157] [ 507.264572][T17166] netlink: 'syz.0.2937': attribute type 8 has an invalid length. [ 507.285384][T17166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2937'. [ 507.299542][ T5826] Bluetooth: hci5: command tx timeout [ 507.400829][T17166] bond0: entered promiscuous mode [ 507.405941][T17166] bond_slave_0: entered promiscuous mode [ 507.421563][T17166] bond_slave_1: entered promiscuous mode [ 507.451036][T17166] gretap0: entered promiscuous mode [ 507.467351][T17166] gretap0: left promiscuous mode [ 507.487381][T17166] bond0: left promiscuous mode [ 507.492262][T17166] bond_slave_0: left promiscuous mode [ 507.527495][T17166] bond_slave_1: left promiscuous mode [ 507.632432][T16999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.687558][T16999] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.711619][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2942'. [ 507.719348][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.727794][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.744353][T17183] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2942'. [ 507.768696][T17183] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2942'. [ 507.794515][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.801720][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.870637][T17184] syzkaller0: entered promiscuous mode [ 507.886803][T17184] syzkaller0: entered allmulticast mode [ 508.151141][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'. [ 508.184337][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'. [ 508.316815][ C1] net_ratelimit: 1 callbacks suppressed [ 508.316835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.458592][T17216] dvmrp1: entered allmulticast mode [ 508.476600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.485038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.493420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.501809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.698937][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.777637][T17231] nbd: nbd4 already in use [ 508.874752][T16999] veth0_vlan: entered promiscuous mode [ 508.949891][T16999] veth1_vlan: entered promiscuous mode [ 509.047269][T16999] veth0_macvtap: entered promiscuous mode [ 509.073408][T16999] veth1_macvtap: entered promiscuous mode [ 509.088300][T17250] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 509.118965][T17250] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 509.239463][T16999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.320960][T16999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.356601][ T5826] Bluetooth: hci5: command tx timeout [ 509.362641][ T1026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.396514][ T1026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.405478][ T1026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.422068][ T1026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.652933][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 510.180261][T10252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.226925][T10252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.414137][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.427005][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.551557][T17315] __nla_validate_parse: 3 callbacks suppressed [ 510.551585][T17315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2895'. [ 510.631964][T17320] syzkaller0: entered promiscuous mode [ 510.638661][T17320] syzkaller0: entered allmulticast mode [ 510.697689][T17324] syzkaller0: entered promiscuous mode [ 510.703434][T17324] syzkaller0: entered allmulticast mode [ 510.797377][T17326] lo speed is unknown, defaulting to 1000 [ 511.124104][T17341] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 511.203506][T17344] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 511.214916][T17344] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2982'. [ 511.225175][T17344] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 511.437123][ T5826] Bluetooth: hci5: command tx timeout [ 511.696931][ T1140] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.769479][ T1140] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.794459][ T1140] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.877380][ T1140] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.004045][T14571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.025176][T14571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.034489][T14571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.043558][T17374] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.052745][T14571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.064195][T14571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.103196][T17384] No such timeout policy "syz1" [ 512.352263][T17371] syzkaller0: entered promiscuous mode [ 512.388704][T17371] syzkaller0: entered allmulticast mode [ 512.460404][T17393] syzkaller0: entered promiscuous mode [ 512.465955][T17393] syzkaller0: entered allmulticast mode [ 512.538093][ T5829] bond0: (slave syz_tun): Releasing backup interface [ 512.587976][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 513.976943][T17372] lo speed is unknown, defaulting to 1000 [ 513.976965][T17398] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2994'. [ 514.157449][T14571] Bluetooth: hci0: command tx timeout [ 514.236605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.245027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.253603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.261949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.317388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.325992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.422997][ T5193] udevd[5193]: worker [5838] /devices/virtual/block/nbd0 timeout; kill it [ 515.433350][ T5193] udevd[5193]: seq 13128 '/devices/virtual/block/nbd0' killed [ 515.448428][ T5193] udevd[5193]: worker [5841] /devices/virtual/block/nbd2 is taking a long time [ 515.660737][T17404] team0 (unregistering): left allmulticast mode [ 515.669075][T17404] team_slave_0: left allmulticast mode [ 515.674614][T17404] team_slave_1: left allmulticast mode [ 515.682404][T17404] bridge1: left allmulticast mode [ 515.687925][T17404] bridge2: left allmulticast mode [ 515.693132][T17404] team0 (unregistering): left promiscuous mode [ 515.701074][T17404] team_slave_0: left promiscuous mode [ 515.707390][T17404] team_slave_1: left promiscuous mode [ 515.713020][T17404] bridge1: left promiscuous mode [ 515.718728][T17404] bridge2: left promiscuous mode [ 515.724082][T17404] bridge0: port 3(team0) entered disabled state [ 515.753487][T17404] team0 (unregistering): Port device team_slave_0 removed [ 515.791556][T17404] team0 (unregistering): Port device team_slave_1 removed [ 515.813803][T17404] team0 (unregistering): Port device bridge1 removed [ 515.850354][T17404] team0 (unregistering): Port device bridge2 removed [ 515.871109][T17404] team0 (unregistering): Port device bridge14 removed [ 516.247642][T14571] Bluetooth: hci0: command tx timeout [ 516.267515][T17435] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3003'. [ 516.280775][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 516.322178][T17435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.329529][ T86] batman_adv: batadv1: MLD Querier appeared [ 516.338564][T17435] bond_slave_0: left promiscuous mode [ 516.353447][T17435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.362981][T17435] bond_slave_1: left promiscuous mode [ 516.376767][T17435] bond0 (unregistering): Released all slaves [ 516.523817][T17372] chnl_net:caif_netlink_parms(): no params data found [ 516.580328][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'. [ 516.664166][T17449] syzkaller0: entered promiscuous mode [ 516.670065][T17449] syzkaller0: entered allmulticast mode [ 516.781328][T17372] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.789927][T17372] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.797957][T17372] bridge_slave_0: entered allmulticast mode [ 516.806497][T17372] bridge_slave_0: entered promiscuous mode [ 516.818060][T17372] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.825471][T17372] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.833184][T17372] bridge_slave_1: entered allmulticast mode [ 516.843877][T17372] bridge_slave_1: entered promiscuous mode [ 516.971434][T17372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.999697][T17372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.053897][T17464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3010'. [ 517.067684][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'. [ 517.076102][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3010'. [ 517.199561][T17463] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 517.210817][T17372] team0: Port device team_slave_0 added [ 517.250991][T17470] xt_hashlimit: size too large, truncated to 1048576 [ 517.275108][T17372] team0: Port device team_slave_1 added [ 517.342502][T17472] netlink: 'syz.0.3011': attribute type 39 has an invalid length. [ 517.374329][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 517.375633][T17372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.496411][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.502486][T17479] IPVS: length: 136 != 8 [ 517.566428][T17372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.588791][T17372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.595804][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.676652][T17372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.747860][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3012'. [ 517.801581][T17472] bond10: option ad_actor_sys_prio: invalid value (0) [ 517.828340][T17472] bond10: option ad_actor_sys_prio: allowed values 1 - 65535 [ 518.164136][T17472] bond10 (unregistering): Released all slaves [ 518.266559][T17477] netlink: 'syz.4.3012': attribute type 4 has an invalid length. [ 518.316411][T14571] Bluetooth: hci0: command tx timeout [ 518.399738][T17372] hsr_slave_0: entered promiscuous mode [ 518.409360][T17372] hsr_slave_1: entered promiscuous mode [ 518.416073][T17372] debugfs: 'hsr0' already exists in 'hsr' [ 518.422136][T17372] Cannot create hsr debugfs directory [ 518.596799][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 518.769008][T17503] syzkaller0: entered promiscuous mode [ 518.780900][T17503] syzkaller0: entered allmulticast mode [ 518.988701][T17513] netlink: 'syz.1.3022': attribute type 1 has an invalid length. [ 519.012163][T17513] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3022'. [ 519.038823][T17513] netlink: 'syz.1.3022': attribute type 1 has an invalid length. [ 519.265875][T17524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.300479][T17372] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 519.321466][T17372] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 519.370560][T17372] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 519.401343][T17372] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 519.465038][T17533] FAULT_INJECTION: forcing a failure. [ 519.465038][T17533] name failslab, interval 1, probability 0, space 0, times 0 [ 519.479111][T17533] CPU: 1 UID: 0 PID: 17533 Comm: syz.4.3028 Not tainted syzkaller #0 PREEMPT(full) [ 519.479136][T17533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.479145][T17533] Call Trace: [ 519.479152][T17533] [ 519.479159][T17533] dump_stack_lvl+0xe8/0x150 [ 519.479188][T17533] should_fail_ex+0x412/0x560 [ 519.479211][T17533] should_failslab+0xa8/0x100 [ 519.479231][T17533] __kmalloc_node_noprof+0xf0/0x7c0 [ 519.479249][T17533] ? qdisc_alloc+0x92/0x9e0 [ 519.479272][T17533] qdisc_alloc+0x92/0x9e0 [ 519.479296][T17533] qdisc_create+0x12c/0xf20 [ 519.479314][T17533] ? lockdep_rtnl_is_held+0x26/0x40 [ 519.479338][T17533] ? qdisc_lookup+0x36d/0x6d0 [ 519.479362][T17533] tc_modify_qdisc+0x16f0/0x2290 [ 519.479378][T17533] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.479410][T17533] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 519.479450][T17533] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 519.479464][T17533] rtnetlink_rcv_msg+0x77e/0xbe0 [ 519.479488][T17533] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 519.479508][T17533] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 519.479531][T17533] ? __lock_acquire+0x6b5/0x2cf0 [ 519.479574][T17533] netlink_rcv_skb+0x232/0x4b0 [ 519.479596][T17533] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 519.479617][T17533] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.479645][T17533] ? netlink_deliver_tap+0x2e/0x1b0 [ 519.479670][T17533] netlink_unicast+0x80f/0x9b0 [ 519.479694][T17533] ? __pfx_netlink_unicast+0x10/0x10 [ 519.479711][T17533] ? netlink_sendmsg+0x650/0xb40 [ 519.479729][T17533] ? skb_put+0x11b/0x210 [ 519.479754][T17533] netlink_sendmsg+0x813/0xb40 [ 519.479801][T17533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.479830][T17533] ? aa_sock_msg_perm+0xf1/0x1b0 [ 519.479852][T17533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.479875][T17533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.479898][T17533] ____sys_sendmsg+0xa68/0xad0 [ 519.479937][T17533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.479977][T17533] ? import_iovec+0x73/0xa0 [ 519.480010][T17533] ___sys_sendmsg+0x2a5/0x360 [ 519.480046][T17533] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.480114][T17533] ? __fget_files+0x2a/0x420 [ 519.480142][T17533] ? __fget_files+0x3a0/0x420 [ 519.480181][T17533] __x64_sys_sendmsg+0x1bd/0x2a0 [ 519.480215][T17533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.480255][T17533] ? __pfx_ksys_write+0x10/0x10 [ 519.480289][T17533] do_syscall_64+0x14d/0xf80 [ 519.480319][T17533] ? trace_irq_disable+0x3b/0x150 [ 519.480358][T17533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.480379][T17533] ? clear_bhb_loop+0x40/0x90 [ 519.480404][T17533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.480425][T17533] RIP: 0033:0x7f927959c629 [ 519.480444][T17533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.480461][T17533] RSP: 002b:00007f927a4cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.480482][T17533] RAX: ffffffffffffffda RBX: 00007f9279815fa0 RCX: 00007f927959c629 [ 519.480497][T17533] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 519.480509][T17533] RBP: 00007f927a4cb090 R08: 0000000000000000 R09: 0000000000000000 [ 519.480520][T17533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.480532][T17533] R13: 00007f9279816038 R14: 00007f9279815fa0 R15: 00007ffdf1700ae8 [ 519.480570][T17533] [ 519.847747][T17543] syzkaller0: entered promiscuous mode [ 519.853283][T17543] syzkaller0: entered allmulticast mode [ 519.996676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.005206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.013694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.022150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.063318][T17372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.070598][T17548] lo speed is unknown, defaulting to 1000 [ 520.092706][T17372] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.113716][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.120968][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.193274][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.200537][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.274805][T17556] Bluetooth: MGMT ver 1.23 [ 520.396915][T14571] Bluetooth: hci0: command tx timeout [ 521.112597][T17372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.364117][T17589] 8021q: adding VLAN 0 to HW filter on device bond10 [ 521.480868][T17588] FAULT_INJECTION: forcing a failure. [ 521.480868][T17588] name failslab, interval 1, probability 0, space 0, times 0 [ 521.541133][T17588] CPU: 0 UID: 0 PID: 17588 Comm: syz.4.3041 Not tainted syzkaller #0 PREEMPT(full) [ 521.541160][T17588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.541171][T17588] Call Trace: [ 521.541178][T17588] [ 521.541186][T17588] dump_stack_lvl+0xe8/0x150 [ 521.541216][T17588] should_fail_ex+0x412/0x560 [ 521.541243][T17588] should_failslab+0xa8/0x100 [ 521.541266][T17588] __kmalloc_node_noprof+0xf0/0x7c0 [ 521.541286][T17588] ? qdisc_alloc+0x92/0x9e0 [ 521.541324][T17588] qdisc_alloc+0x92/0x9e0 [ 521.541352][T17588] qdisc_create+0x12c/0xf20 [ 521.541373][T17588] ? lockdep_rtnl_is_held+0x26/0x40 [ 521.541419][T17588] ? qdisc_lookup+0x36d/0x6d0 [ 521.541448][T17588] tc_modify_qdisc+0x16f0/0x2290 [ 521.541467][T17588] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 521.541519][T17588] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 521.541563][T17588] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 521.541581][T17588] rtnetlink_rcv_msg+0x77e/0xbe0 [ 521.541607][T17588] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 521.541647][T17588] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.541675][T17588] ? __lock_acquire+0x6b5/0x2cf0 [ 521.541710][T17588] netlink_rcv_skb+0x232/0x4b0 [ 521.541747][T17588] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.541772][T17588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.541804][T17588] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.541834][T17588] netlink_unicast+0x80f/0x9b0 [ 521.541881][T17588] ? __pfx_netlink_unicast+0x10/0x10 [ 521.541903][T17588] ? netlink_sendmsg+0x650/0xb40 [ 521.541924][T17588] ? skb_put+0x11b/0x210 [ 521.541953][T17588] netlink_sendmsg+0x813/0xb40 [ 521.541987][T17588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.542013][T17588] ? aa_sock_msg_perm+0xf1/0x1b0 [ 521.542038][T17588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.542061][T17588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.542084][T17588] ____sys_sendmsg+0xa68/0xad0 [ 521.542121][T17588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.542158][T17588] ? import_iovec+0x73/0xa0 [ 521.542190][T17588] ___sys_sendmsg+0x2a5/0x360 [ 521.542228][T17588] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.542291][T17588] ? __fget_files+0x2a/0x420 [ 521.542326][T17588] ? __fget_files+0x3a0/0x420 [ 521.542365][T17588] __x64_sys_sendmsg+0x1bd/0x2a0 [ 521.542396][T17588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.542433][T17588] ? __pfx_ksys_write+0x10/0x10 [ 521.542464][T17588] do_syscall_64+0x14d/0xf80 [ 521.542493][T17588] ? trace_irq_disable+0x3b/0x150 [ 521.542521][T17588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.542542][T17588] ? clear_bhb_loop+0x40/0x90 [ 521.542567][T17588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.542587][T17588] RIP: 0033:0x7f927959c629 [ 521.542606][T17588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.542622][T17588] RSP: 002b:00007f927a4cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.542643][T17588] RAX: ffffffffffffffda RBX: 00007f9279815fa0 RCX: 00007f927959c629 [ 521.542658][T17588] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 521.542671][T17588] RBP: 00007f927a4cb090 R08: 0000000000000000 R09: 0000000000000000 [ 521.542683][T17588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.542695][T17588] R13: 00007f9279816038 R14: 00007f9279815fa0 R15: 00007ffdf1700ae8 [ 521.542732][T17588] [ 522.033133][T17372] veth0_vlan: entered promiscuous mode [ 522.045874][T17372] veth1_vlan: entered promiscuous mode [ 522.207515][T17372] veth0_macvtap: entered promiscuous mode [ 522.249953][T17372] veth1_macvtap: entered promiscuous mode [ 522.266937][T17606] syzkaller0: entered promiscuous mode [ 522.272471][T17606] syzkaller0: entered allmulticast mode [ 522.342322][T17617] __nla_validate_parse: 5 callbacks suppressed [ 522.342338][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3048'. [ 522.408239][T17372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.442314][T17372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.476789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.485247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.493666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.532985][ T86] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.563183][ T86] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.588312][ T86] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.611561][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'. [ 522.613304][ T86] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.901335][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.919712][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.015756][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.028086][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.122067][T17646] FAULT_INJECTION: forcing a failure. [ 523.122067][T17646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.155705][T17646] CPU: 1 UID: 0 PID: 17646 Comm: syz.0.3055 Not tainted syzkaller #0 PREEMPT(full) [ 523.155734][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 523.155747][T17646] Call Trace: [ 523.155756][T17646] [ 523.155777][T17646] dump_stack_lvl+0xe8/0x150 [ 523.155811][T17646] should_fail_ex+0x412/0x560 [ 523.155840][T17646] _copy_from_user+0x2d/0xb0 [ 523.155870][T17646] kstrtouint_from_user+0xd6/0x180 [ 523.155897][T17646] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 523.155926][T17646] ? __pfx___mutex_trylock_common+0x10/0x10 [ 523.155966][T17646] proc_fail_nth_write+0x8e/0x210 [ 523.155994][T17646] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 523.156026][T17646] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 523.156054][T17646] vfs_write+0x29a/0xb90 [ 523.156084][T17646] ? __pfx_vfs_write+0x10/0x10 [ 523.156117][T17646] ? __fget_files+0x2a/0x420 [ 523.156149][T17646] ? __fget_files+0x3a0/0x420 [ 523.156175][T17646] ? __fget_files+0x2a/0x420 [ 523.156212][T17646] ksys_write+0x150/0x270 [ 523.156235][T17646] ? __pfx_ksys_write+0x10/0x10 [ 523.156267][T17646] do_syscall_64+0x14d/0xf80 [ 523.156300][T17646] ? trace_irq_disable+0x3b/0x150 [ 523.156328][T17646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.156349][T17646] ? clear_bhb_loop+0x40/0x90 [ 523.156373][T17646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.156394][T17646] RIP: 0033:0x7fc3d9f5cece [ 523.156412][T17646] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 523.156430][T17646] RSP: 002b:00007fc3dae04fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 523.156451][T17646] RAX: ffffffffffffffda RBX: 00007fc3dae056c0 RCX: 00007fc3d9f5cece [ 523.156466][T17646] RDX: 0000000000000001 RSI: 00007fc3dae050a0 RDI: 0000000000000007 [ 523.156478][T17646] RBP: 00007fc3dae05090 R08: 0000000000000000 R09: 0000000000000000 [ 523.156490][T17646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.156502][T17646] R13: 00007fc3da216038 R14: 00007fc3da215fa0 R15: 00007ffec1b55748 [ 523.156535][T17646] [ 523.507241][ T30] audit: type=1800 audit(1771999140.322:8): pid=17656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3059" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3072 res=0 errno=0 [ 523.749043][T17665] syzkaller0: entered promiscuous mode [ 523.754600][T17665] syzkaller0: entered allmulticast mode [ 523.773754][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3056'. [ 523.936819][ T31] INFO: task udevd:5841 blocked for more than 143 seconds. [ 523.944094][ T31] Not tainted syzkaller #0 [ 523.949297][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.966436][ T31] task:udevd state:D stack:22528 pid:5841 tgid:5841 ppid:5193 task_flags:0x400140 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 524.068836][ T31] Call Trace: [ 524.072191][ T31] [ 524.075729][ T31] __schedule+0x1585/0x5340 [ 524.121280][ T31] ? blk_mq_flush_plug_list+0x443/0x570 [ 524.156331][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 524.196526][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 524.201661][ T31] ? __pfx___schedule+0x10/0x10 [ 524.238444][ T31] ? schedule+0x90/0x360 [ 524.256540][ T31] schedule+0x164/0x360 [ 524.260795][ T31] schedule_timeout+0x158/0x2c0 [ 524.286497][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 524.291963][ T31] ? __pfx_process_timeout+0x10/0x10 [ 524.323722][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 524.342408][ T31] ? prepare_to_wait_event+0x436/0x480 [ 524.367277][ T31] nbd_queue_rq+0x857/0x1100 [ 524.371976][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 524.405105][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 524.416425][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 524.422071][ T31] ? sbitmap_get+0x229/0x390 [ 524.447196][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 524.453269][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 524.486451][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 524.492915][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 524.536490][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 524.542571][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 524.566357][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 524.571572][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 524.588273][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 524.593639][ T31] ? blk_mq_dispatch_list+0x1a0/0xe10 [ 524.606725][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 524.612546][ T31] ? rcu_is_watching+0x15/0xb0 [ 524.636595][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 524.642065][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 524.647723][ T31] ? blk_mq_submit_bio+0xef8/0x2810 [ 524.654270][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 524.674960][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 524.680464][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 524.685907][ T31] __submit_bio+0x28d/0x580 [ 524.690889][ T31] ? __pfx___submit_bio+0x10/0x10 [ 524.695965][ T31] ? bio_associate_blkg+0x6d/0x230 [ 524.701828][ T31] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 524.707841][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 524.714061][ T31] ? bio_alloc_bioset+0xbe2/0x11b0 [ 524.720114][ T31] block_read_full_folio+0x599/0x830 [ 524.725473][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 524.731709][ T31] filemap_read_folio+0x137/0x3b0 [ 524.737064][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 524.742581][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 524.748696][ T31] ? filemap_add_folio+0x356/0x530 [ 524.755171][ T31] do_read_cache_folio+0x358/0x590 [ 524.761438][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 524.767769][ T31] read_part_sector+0xb6/0x2b0 [ 524.772594][ T31] adfspart_check_ICS+0xa5/0xa40 [ 524.777989][ T31] ? snprintf+0xe8/0x140 [ 524.782276][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 524.789032][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 524.794653][ T31] bdev_disk_changed+0x7ba/0x1550 [ 524.800182][ T31] ? bdev_open+0xe0/0xd30 [ 524.804576][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 524.811450][ T31] blkdev_get_whole+0x380/0x510 [ 524.816620][ T31] bdev_open+0x31e/0xd30 [ 524.820936][ T31] blkdev_open+0x470/0x610 [ 524.825403][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 524.830914][ T31] do_dentry_open+0x785/0x14e0 [ 524.835750][ T31] vfs_open+0x3b/0x340 [ 524.840234][ T31] ? path_openat+0x2df0/0x3860 [ 524.845039][ T31] path_openat+0x2e08/0x3860 [ 524.850041][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 524.857052][ T31] ? stack_depot_save_flags+0x33/0x810 [ 524.862583][ T31] ? __pfx_path_openat+0x10/0x10 [ 524.868059][ T31] ? __x64_sys_openat+0x138/0x170 [ 524.873127][ T31] ? do_syscall_64+0x14d/0xf80 [ 524.879336][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.885476][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 524.890845][ T31] do_file_open+0x23e/0x4a0 [ 524.895402][ T31] ? __pfx_do_file_open+0x10/0x10 [ 524.900872][ T31] ? _raw_spin_unlock+0x28/0x50 [ 524.905785][ T31] ? alloc_fd+0x64b/0x6c0 [ 524.910622][ T31] do_sys_openat2+0x113/0x200 [ 524.915353][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 524.922879][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 524.928420][ T31] ? rcu_is_watching+0x15/0xb0 [ 524.933247][ T31] __x64_sys_openat+0x138/0x170 [ 524.938521][ T31] do_syscall_64+0x14d/0xf80 [ 524.943171][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.949655][ T31] ? clear_bhb_loop+0x40/0x90 [ 524.954398][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.962786][ T31] RIP: 0033:0x7fa82dca7407 [ 524.967538][ T31] RSP: 002b:00007ffed06c3600 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 524.976005][ T31] RAX: ffffffffffffffda RBX: 00007fa82e40b880 RCX: 00007fa82dca7407 [ 524.984594][ T31] RDX: 00000000000a0800 RSI: 000055db5eafa670 RDI: ffffffffffffff9c [ 524.993409][ T31] RBP: 000055db5eab4910 R08: 0000000000000000 R09: 0000000000000000 [ 525.001717][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055db5ebd7520 [ 525.010067][ T31] R13: 000055db5eac2190 R14: 0000000000000000 R15: 000055db5ebd7520 [ 525.018374][ T31] [ 525.021550][ T31] [ 525.021550][ T31] Showing all locks held in the system: [ 525.096853][ T31] 1 lock held by pool_workqueue_/3: [ 525.102132][ T31] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 525.116558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.124963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.133433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.136515][ T31] 3 locks held by kworker/u8:1/13: [ 525.150021][ T5823] syz_tun (unregistering): left allmulticast mode [ 525.156701][ T5823] syz_tun (unregistering): left promiscuous mode [ 525.163157][ T5823] bridge0: port 4(syz_tun) entered disabled state [ 525.167275][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 525.182109][ T31] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 525.193442][ T31] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 525.204498][ T31] 1 lock held by khungtaskd/31: [ 525.209582][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 525.219568][ T31] 1 lock held by kworker/u8:3/49: [ 525.224650][ T31] 2 locks held by getty/5582: [ 525.229411][ T31] #0: ffff888032d900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 525.239384][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 525.249844][ T31] 1 lock held by syz-executor/5823: [ 525.255094][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 525.264384][ T31] 1 lock held by udevd/5838: [ 525.270045][ T31] #0: ffff888027253358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 525.279850][ T31] 3 locks held by udevd/5841: [ 525.284551][ T31] #0: ffff888027363358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 525.293865][ T31] #1: ffff8880270eae98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 525.303446][ T31] #2: ffff8880273aa980 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 525.312595][ T31] 3 locks held by kworker/1:7/10828: [ 525.318037][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 525.329141][ T31] #1: ffffc9000d12fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 525.340262][ T31] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 525.350734][ T31] 4 locks held by syz-executor/17372: [ 525.356136][ T31] #0: ffff8880491e8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 525.366788][ T31] #1: ffff8880491e80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 525.377141][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 525.387458][ T31] #3: ffff8880838ad2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 525.397101][ T31] 1 lock held by syz.4.3056/17658: [ 525.402242][ T31] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 525.413597][ T31] 1 lock held by syz.1.3058/17655: [ 525.418923][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 525.428078][ T31] [ 525.430806][ T31] ============================================= [ 525.430806][ T31] [ 525.440962][ T31] NMI backtrace for cpu 1 [ 525.440980][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 525.441001][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.441013][ T31] Call Trace: [ 525.441021][ T31] [ 525.441029][ T31] dump_stack_lvl+0xe8/0x150 [ 525.441062][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 525.441087][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 525.441115][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 525.441144][ T31] sys_info+0x135/0x170 [ 525.441164][ T31] watchdog+0xfd9/0x1030 [ 525.441199][ T31] ? watchdog+0x21a/0x1030 [ 525.441236][ T31] kthread+0x388/0x470 [ 525.441257][ T31] ? __pfx_watchdog+0x10/0x10 [ 525.441282][ T31] ? __pfx_kthread+0x10/0x10 [ 525.441302][ T31] ret_from_fork+0x51e/0xb90 [ 525.441331][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 525.441356][ T31] ? __switch_to+0xc7d/0x1450 [ 525.441381][ T31] ? __pfx_kthread+0x10/0x10 [ 525.441400][ T31] ret_from_fork_asm+0x1a/0x30 [ 525.441444][ T31] [ 525.441451][ T31] Sending NMI from CPU 1 to CPUs 0: [ 525.553162][ C0] NMI backtrace for cpu 0 [ 525.553179][ C0] CPU: 0 UID: 0 PID: 17654 Comm: syz.2.3059 Not tainted syzkaller #0 PREEMPT(full) [ 525.553199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.553210][ C0] RIP: 0010:__lock_acquire+0x273/0x2cf0 [ 525.553238][ C0] Code: e8 72 fb 48 03 4d 89 f1 48 8b 74 24 18 44 8b 74 24 20 48 83 bc 24 20 01 00 00 00 0f 85 ce fe ff ff 44 89 74 24 20 44 89 3c 24 <8b> bc 24 38 01 00 00 4c 8b 84 24 28 01 00 00 4c 8b 74 24 08 4d 8d [ 525.553254][ C0] RSP: 0018:ffffc90004e07690 EFLAGS: 00000046 [ 525.553270][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff93c47410 [ 525.553281][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9a4de058 [ 525.553292][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff9a4de058 [ 525.553304][ C0] R10: dffffc0000000000 R11: fffffbfff2022e57 R12: 0000000000000000 [ 525.553316][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 525.553326][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 525.553340][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.553352][ C0] CR2: 00002000002bf030 CR3: 0000000033332000 CR4: 00000000003526f0 [ 525.553367][ C0] Call Trace: [ 525.553374][ C0] [ 525.553383][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 525.553406][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 525.553430][ C0] ? call_rcu+0xee/0x890 [ 525.553452][ C0] ? locks_remove_file+0x11a/0xf70 [ 525.553477][ C0] ? task_work_run+0x1d9/0x270 [ 525.553493][ C0] ? do_exit+0x69b/0x2320 [ 525.553508][ C0] ? do_group_exit+0x21b/0x2d0 [ 525.553523][ C0] ? get_signal+0x1284/0x1330 [ 525.553542][ C0] ? arch_do_signal_or_restart+0xbc/0x830 [ 525.553566][ C0] lock_acquire+0xf0/0x2e0 [ 525.553586][ C0] ? debug_check_no_obj_freed+0x145/0x550 [ 525.553607][ C0] ? rcu_is_watching+0x15/0xb0 [ 525.553631][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 525.553654][ C0] ? debug_check_no_obj_freed+0x145/0x550 [ 525.553691][ C0] debug_check_no_obj_freed+0x145/0x550 [ 525.553716][ C0] remove_vm_area+0x1d3/0x300 [ 525.553744][ C0] ? __pfx_kcov_close+0x10/0x10 [ 525.553769][ C0] vfree+0x63/0x400 [ 525.553792][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 525.553816][ C0] ? __pfx_kcov_close+0x10/0x10 [ 525.553840][ C0] kcov_close+0x28/0x50 [ 525.553864][ C0] __fput+0x44f/0xa70 [ 525.553892][ C0] task_work_run+0x1d9/0x270 [ 525.553911][ C0] ? __pfx_task_work_run+0x10/0x10 [ 525.553928][ C0] ? kmem_cache_free+0x187/0x630 [ 525.553945][ C0] ? do_exit+0x696/0x2320 [ 525.553962][ C0] do_exit+0x69b/0x2320 [ 525.553982][ C0] ? __pfx_do_exit+0x10/0x10 [ 525.553996][ C0] ? cgroup1_freezing+0x20/0x350 [ 525.554021][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.554042][ C0] do_group_exit+0x21b/0x2d0 [ 525.554058][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 525.554082][ C0] get_signal+0x1284/0x1330 [ 525.554116][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 525.554137][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 525.554165][ C0] exit_to_user_mode_loop+0x86/0x480 [ 525.554185][ C0] ? rcu_is_watching+0x15/0xb0 [ 525.554209][ C0] do_syscall_64+0x32d/0xf80 [ 525.554234][ C0] ? trace_irq_disable+0x3b/0x150 [ 525.554258][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.554275][ C0] ? clear_bhb_loop+0x40/0x90 [ 525.554294][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.554311][ C0] RIP: 0033:0x7fef8fb9c629 [ 525.554324][ C0] Code: Unable to access opcode bytes at 0x7fef8fb9c5ff. [ 525.554333][ C0] RSP: 002b:00007ffc49639458 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 525.554350][ C0] RAX: 0000000000000000 RBX: 00007ffc49639540 RCX: 00007fef8fb9c629 [ 525.554362][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 525.554372][ C0] RBP: 000000000007fcbc R08: 0000000000000001 R09: 0000000000000000 [ 525.554382][ C0] R10: 0000001b2fb20000 R11: 0000000000000246 R12: 00007ffc49639580 [ 525.554394][ C0] R13: 00007fef8fe15fac R14: 000000000007fd76 R15: 00007fef8fe15fa0 [ 525.554414][ C0] [ 526.052847][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 526.059876][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 526.069036][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.079136][ T31] Call Trace: [ 526.082445][ T31] [ 526.085405][ T31] vpanic+0x56c/0xa60 [ 526.089437][ T31] ? __pfx___schedule+0x10/0x10 [ 526.094337][ T31] ? __pfx_vpanic+0x10/0x10 [ 526.098874][ T31] ? __pfx_console_unlock+0x10/0x10 [ 526.104106][ T31] panic+0xc5/0xd0 [ 526.107859][ T31] ? __pfx_panic+0x10/0x10 [ 526.112299][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 526.117699][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 526.123884][ T31] watchdog+0x1023/0x1030 [ 526.128260][ T31] ? watchdog+0x21a/0x1030 [ 526.132711][ T31] kthread+0x388/0x470 [ 526.136797][ T31] ? __pfx_watchdog+0x10/0x10 [ 526.141503][ T31] ? __pfx_kthread+0x10/0x10 [ 526.146109][ T31] ret_from_fork+0x51e/0xb90 [ 526.150726][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 526.155859][ T31] ? __switch_to+0xc7d/0x1450 [ 526.160559][ T31] ? __pfx_kthread+0x10/0x10 [ 526.165201][ T31] ret_from_fork_asm+0x1a/0x30 [ 526.170018][ T31] [ 526.173670][ T31] Kernel Offset: disabled [ 526.178002][ T31] Rebooting in 86400 seconds..