last executing test programs: 8.595385874s ago: executing program 3 (id=5625): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x106}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000b80)='GPL\x00', 0x3, 0xfec, &(0x7f0000000bc0)=""/4076, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4c084) bind$bt_hci(r2, &(0x7f0000000540)={0x1f, 0x3, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00008000000204000000000100"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9e5}, [@exit, @ldst={0x0, 0x3, 0x3, 0x1, 0x3, 0xffffffffffffffc0, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @generic={0x69, 0x8, 0x3, 0xc, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x3, &(0x7f00000000c0)=""/3, 0xfb23fb401740777b, 0x20, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x8, 0xc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=[{0x3, 0x2, 0x2, 0x4}, {0x4, 0x5, 0xf, 0xb}, {0x5, 0x5, 0xc, 0xb}, {0x4, 0x2, 0x6, 0x4}], 0x10, 0x1ff}, 0x94) 7.419653835s ago: executing program 3 (id=5628): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x34, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x20, 0x0, 0x301, 0x70bd2b, 0x25dfdbfe, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}]}, 0x40}}, 0x2004001) 5.78978885s ago: executing program 1 (id=5634): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000000c0)="8e92d7e01eb8394519f641ac2fce8a929186d93915e38b15fed6489c89ddae2a82741bdbff74", 0x26) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r3, 0x84, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030300000000000000001100000008000300", @ANYRES32=r4], 0x28}}, 0x14014) 5.751177291s ago: executing program 3 (id=5635): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000480)=0xffff, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000500000073019f000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc6c2ee60220dc2ef}], 0x1, 0x4044800) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000e80)={0x0, {0x2, 0x0, @empty}, {0x4, 0x200, @loopback}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x44, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000f00)='lo\x00', 0x5, 0x0, 0x3}) 5.620438758s ago: executing program 4 (id=5636): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x23c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c250000000000202063cd00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f00000003c0), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000d40)='\x00'/14, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 6) 5.556122406s ago: executing program 2 (id=5637): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000fc0)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x20, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x104d2, 0x32}, @in=@multicast2, {0x5, 0x0, 0x800, 0xe91, 0xffffffff00000001, 0x10000000, 0x80000001, 0x543}, {0x1000000000004, 0x7fffffffffffffff, 0x100, 0xc}, {}, 0x70bd26, 0x3505, 0xa, 0x4, 0x40, 0x54}, [@algo_aead={0x4c, 0x12, {{'gcm(aes)\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000840), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000001100)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x488c1}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x60074}, 0x40000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x3e8, 0xe88, 0x0, &(0x7f0000000380)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(r3, &(0x7f0000000f80)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000440)="cfcf4e29f634eb", 0x7}, {&(0x7f0000000480)="0043fd9d23803ca46d1bfe94dec7574214", 0x11}, {&(0x7f0000000680)="4f6db262eb188185db9165027bb53fd40ee3f90b8dc16ca62ae17b1775978ba5df09eb853de44e0a7251d3e6b92d14d7a7d681341a0917d400d3917f0b75cc87d3f8a567f2f069280f90342cec11cf6b9b2361a0501c5518e54a553babe0050953f1ed76a8578a730369a6fb32d0f2315b3207387c1d0959e7c491dcc89f61f19b15829d36107730d0143d04bd03fb740183292b0d33cc39767a2c554f579bc3c1b65f65cfdf", 0xa6}, {&(0x7f0000000740)="8269bf23560d98343ca6143e552b557c57974f166053e71f28add241386ed1744d59e04186d7f6bb7961cda260637b6d1d41d6958c0b24a170883395b7aebffefff9d6", 0x43}, {&(0x7f00000007c0)="7de2d8a7fab1bc4ab7f66605b547d330e35adeaf656e1b9183e7a0ee88f0427a7776508b0ac9b92dd2a0ef5a01c8ef475e7ea4b5492a3e3d2190261e0bb071c1ae6d", 0x42}, {&(0x7f0000000980)="5b3d649926d7a0b572337a01ba645d78e66f40c4e1a97a9fe40825a581957bd3bbd5c0155adacb5ffb4d4207b77f556eb63d14c2879f93945cb845be21e5adf8bde0afd1c1cceddbf9df323f8ab1cfd557b85aaf2bb1056e4d1043c4f946bba1c8c66202fd07233fbed794b581f6d37a5c2a3142f89a93ebfc141e1e3ffa6032dd65de0abc2edee097b8f963cd74a0f4fd1468d97ae0b1ca8f1520905a286d7d1a122c1b711042e2af6d8fa4c66dfe89fe32a3e2c7fece48e88d92cb8c1911854374577b4d5f", 0xc6}], 0x6, &(0x7f0000000b00)=[{0x108, 0xff, 0x800, "8e78bbb1b127164d99c349e063dc3d9cebf0189969f1dcaf9ef9c7cb6bad22444a378251db4742b83cf3d49358622cb9e6762e6de79588b63d5c74f0517150a574e8a0f970d09d82f608ca94e5041f8b38eb8f9031af751233f867eb3d5b9ca6bfdc46143a2250eab08be32f22e33fa302b6082ce85d24c80c6bebdc0bea212395b3a6080eb7da160ce6eadf6f8c5b83bc3110e3199717bc9eaeae9231ee719332330f508d432fd9e3972496b243178d4ed63ecc011d71102d70098a67d9e274632a10b18ae95495d5ac1c11076e509e0cbc796af107bca5dcc5a38d9243fd2faf1500e5abe19028ef980cbccb6c195cf3541da083505482"}, {0xe0, 0x3a, 0x5c67, "f17d663ce19713fe78848fde8f1c0498473ffb6b05814f35518af6cc329e705fad55116b9c272fe71a408521cd0e5c00e9b34070888b4118602cb2bdfd48b06477615d370d313b0968b6ab2a2f7329542b7c315c76e62568ecbf7ac1dcd10aa925c69e3dc2201910fc8c00c1a5365c98a0f4a0f9b5216d447466c20e667aee97cbb1eed3c62841a510f8c34b25da8310713e7385cd591f336d04fe5c151908bf18ac387269845246484c5e912f5d9294faaf2f514d61ab74cbb721e233f711c03f57bd262de939399aaf623e"}, {0xe8, 0x108, 0x4, "6bb69a01a37a0a8aadb60002617e8e6aef94410453eed3d77a606287fb69f536ee0e64b4efdf5132bea2904ee21e5c46443a03c9db97b6cc16ff9a661d5a3af500ed7858365a6ea53d94f26fad788617ae6aa761cdd97b9f2d15261a549b6acfca11ae190ece0a5aa1288d02c4c6b3fce2bd66c01d794c3105f1259e04a01fb52d6801f62f66dbe09b40a1c43f7a3ddac36305d7b0925a45c2e759c3bf65092dcd3c5447c38312817e9e51dde7748c0e8399fd5bddf17c4e0f764d080d63c3189a914b85e1644496aa219267473e19b25d3fbfa6"}, {0x58, 0xff, 0x86924a7, "eb17cd6d2a0e1b5535894bc2a80339d45b5c2f62084732a7bee080ec4e897361c63a5732b35e2421c4729fb00f10bf5861277338633f611aa93a451e1f00a77a059bb38a2e"}, {0x78, 0xbf, 0x1, "508b8515afc560acfa3acf355105185aab9a5677cdbf2680be3d15b36057353be46da26e2c6e8eabf5aa7881a52be3437dbb1ddf3196e9fdf76e8bdbe53833b4a6ec90d5be82df79e37f9c3045fc8c1014eefca3e231caa56f3d6b2f5c8d3814e87cda68"}, {0x80, 0x37aadd916a68a7ed, 0x4, "ffce27e3c5b018da392cb287d8ab3f1a94fe210348f6b010d76dead59dc4c3be243f1b4afe3967cc5ff7f0ed44708a67bf76b7db7beec9cfdc020320d71fa4f033edb5b951dadcd4a5fcb220e7781e89d144dfe554207a88e3ca4219fc5406baa8a9a6cfcb38b348cc67e33a71aa111a"}, {0x58, 0x120, 0xee36, "bdbd95bd26bd148f8770e5ecd6e1fdb9d610a518dd2c0a2a71f91a160fd7f8fe522fff20397216acfd9b4ec3bbf5ad9bb0ed454aa53986e345397fa9974643a0985d82bf5e"}], 0x478}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.241594898s ago: executing program 1 (id=5638): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000100)=0x94d5, 0x4) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x400, 0x9, 0x9, 0x8, 0x8, 0x6, 0x3, 0x6, 0x1}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r2, 0x8001}, 0x8) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000380)={r0, &(0x7f0000000280)='!%(.!!.{\x00', 0x4000, &(0x7f00000002c0)={@align=0x1, {0xfffd, 0x4, 0x9, 0x4}}, 0xd, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x6}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c095) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000500)={r3, 0x6, 0x6, 0x2}) ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, &(0x7f0000000540)) (async) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) close(r1) getsockopt$inet_sctp_SCTP_EVENT(r3, 0x84, 0x7f, &(0x7f0000000740)={r2, 0x1801c}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000007c0)={r6, 0x8, 0x2, 0xd6}, 0x10) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000800)={r2, 0x1ff5, 0x1, 0x4, 0x3cd9f03d, 0x1d}, &(0x7f0000000840)=0x14) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000880)={r7, 0x7}, 0x8) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r8, 0x84, 0x81, &(0x7f00000008c0)={r6, 0xff}, &(0x7f0000000900)=0x8) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000a40)={0x3, 0x5, 0xde, &(0x7f0000000940)=""/222}) (async) preadv(r1, &(0x7f0000001e00)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/243, 0xf3}, {&(0x7f0000001b80)=""/43, 0x2b}, {&(0x7f0000001bc0)=""/13, 0xd}, {&(0x7f0000001c00)=""/242, 0xf2}, {&(0x7f0000001d00)=""/211, 0xd3}], 0x6, 0xfffffffc, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001f80)={'syztnl1\x00', &(0x7f0000001f00)={'ip6tnl0\x00', 0x0, 0x29, 0xe, 0x7, 0x1, 0x28, @dev={0xfe, 0x80, '\x00', 0x38}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x6b, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0x5, &(0x7f0000001e80)=@raw=[@alu={0x7, 0x1, 0xa, 0x1, 0x7, 0x18, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x0, 0x8, 0x6, 0x6, 0x8, 0xffffffffffffffff}], &(0x7f0000001ec0)='syzkaller\x00', 0x53eb, 0x0, 0x0, 0x40f00, 0x22, '\x00', r9, 0x0, r5, 0x8, &(0x7f0000001fc0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002000)={0x0, 0x9, 0x4, 0x6ac28f2e}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002040)=[{0x3, 0x3, 0xa, 0xb}], 0x10, 0xe1f}, 0x94) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000002140)={0xffffffffffffffff, 0xfffffffa, 0x6, "9d95149058cd131a7579b1f57f8c6f34a4474b7467b4a64d0c4ff9fb9980d202db199cf78eaf4d6fed59d68f0e4ab26807f8a7b7fce0e53fbbda20da861bf28c1e8ccb6ad0543aef2dcbf3a41002b0583eba9c50de71894d8d304a3fcb499ecd2d72cb1fc6b31a56a467af81233b08572d5c0c1118f5cf813280f50ed399eae8220d53a1c0f9ee8d80a0a2204da48b98fd415979da91f342ad8df65e66fa835776b5d66460ec5b7e8dc0a62e469772454601803e2451455e58c07e69133842c5c75487de1e2d55ed284af0434170c46619773b4b2d57d6d10779f6057a"}) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000002240)={0x2, 0x4, 0x10}, 0xc) (async) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000022c0)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x188, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000002280), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @local, 0xffffff00, 0xff000000, 'vxcan1\x00', 'veth1\x00', {}, {0xff}, 0x1d, 0x0, 0x40}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xc}}, @common=@addrtype={{0x30}, {0x10afae8bf3c3ae03, 0xa16, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff000000, 0xff000000, 'bridge_slave_0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x11, 0x1, 0x52}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc}}, @common=@icmp={{0x28}, {0xf, '!*', 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) (async) preadv(r8, &(0x7f0000002940)=[{&(0x7f0000002680)=""/132, 0x84}, {&(0x7f0000002740)=""/116, 0x74}, {&(0x7f00000027c0)=""/150, 0x96}, {&(0x7f0000002880)=""/130, 0x82}], 0x4, 0x547347b4, 0xa38) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044084}, 0x40005) 5.223961677s ago: executing program 3 (id=5639): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)=',#$]\x00', 0x34000, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x2]}, {0xfffa, 0x4, 0xff, 0x4}}, 0xe3cd, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8}, {[0x5, 0xeb42, 0x6, 0x87]}, 0xffff, 0x3f, &(0x7f0000000100)=""/63}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.187106294s ago: executing program 4 (id=5640): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000000314010025bd7000ffdbdf250900020073787a310000000008004100727865001400330069703665727370616e300000000000000900020073797a3200000000080041007369770014003300636169663000000000000000000000000900020073797a310000000008"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044040) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000500)=0x2a0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r7) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)={0x140, r11, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xaf1a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x71}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8040000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000000980)={0x0, 0xfffffff5, &(0x7f00000009c0)=[{&(0x7f0000000a00)="a2", 0xfffffdef}], 0x1}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) ioctl$NILFS_IOCTL_GET_CPSTAT(r9, 0x80186e83, &(0x7f0000000b00)) 5.040054592s ago: executing program 0 (id=5641): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000640)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="3b84"], 0xdd12}], 0x1}, 0x20040890) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000800)={@empty}, &(0x7f0000000840)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@arena={0x21, 0x0, 0x0, 0x2f, 0x20000, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850100001500000085000000070000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000007c0)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0xcde, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x28) poll(&(0x7f00000000c0)=[{r7, 0xa418}], 0x1, 0x40000400) shutdown(r7, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="13050b7e109faa42bd15b2b7eb1ba743", 0x10}], 0x1, 0x0, 0x0, 0x81817f9678e36e50}], 0x1, 0x4044800) recvmsg(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)=""/81, 0x51}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r9) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000c40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x54, r10, 0x222, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3046}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x54}}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) 4.7588013s ago: executing program 1 (id=5642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xf, 0x0, &(0x7f0000000680)="64e43bf2cac94bb968768f524ef34f", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES32=r1, @ANYRES64=r0], 0x46c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', r6, 0x0, 0xfd, 0x6, 0x0, 0x37, @dev={0xfe, 0x80, '\x00', 0x33}, @mcast2={0xff, 0x3}, 0x8000, 0xba08, 0x2}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000840)={@multicast2, @loopback, 0x0}, &(0x7f0000000880)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="8c0f27bd07000000df250f0000005400018008000300030000000800030001000000140002007465616d5f736c6176655f3100000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000300020000001400020076657468315f746f5f626174616476001c0001800800030001000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="5000018014000200626f6e64300000000000000000000000080003000100000014000200626f6e645f736c6176655f30000000001400020073797a6b616c6c6572300000000000000800030002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x801}, 0x20000080) 4.410691691s ago: executing program 2 (id=5643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c024}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000ac0), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070011006c6f0000070003006c6f"], 0x30}}, 0x0) socket$inet(0x2, 0x3, 0x6) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x48, 0x3, 0x3, 0x406, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x20008000) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000780)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e0000002080007400000000008000840000000001c0018800800024000000000080001"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000e008653ae6801010102000000007130080008cae9650c001980"], 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000004) 3.773585526s ago: executing program 0 (id=5644): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x8000042}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008815}, 0x4008080) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x3002c040}, 0x24004854) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x80042, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$phonet(r0, &(0x7f0000000500)={0x23, 0x3, 0x40}, 0x10) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x9, 0xa, 0x1, 0x6, 0x6}}, {0x4}}]}]}, 0x64}}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000000700)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000740)=""/195}, 0x48) unshare(0x52000340) 3.635896775s ago: executing program 2 (id=5645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "8b1d0c67c3e9c882fd093681decf171a9896"}]}, 0x40}, 0x1, 0x8000000, 0x0, 0x4004805}, 0x4004090) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x40040c0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x0, 'veth1_to_team\x00', {0x1}, 0x9}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x0, 'veth1_to_team\x00', {0x1}, 0x9}) r3 = socket(0xb, 0x6, 0x401) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind(r3, &(0x7f0000000080)=@can={0x1d, r4, 0x1, 0x2}, 0x10) (async) bind(r3, &(0x7f0000000080)=@can={0x1d, r4, 0x1, 0x2}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/55, 0x37}, {0x0}], 0x2}, 0x3f33}], 0x1, 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000240)={@empty, 0x48, r5}) (async) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000240)={@empty, 0x48, r5}) 3.6158994s ago: executing program 4 (id=5646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f00000003c0)) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=@newqdisc={0x178, 0x24, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x400, 0x1, 0x9, 0x8, 0x3, 0x8, 0x6f, 0x4, 0x80, 0x1, 0x9, 0x18, 0x12, 0xe, 0x7ff, 0x3732}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}, @TCA_GRED_STAB={0x104, 0x2, "a43ef7102fd659de2eed7003c9ac9ee1538c5127a6ebdc9de123cc03d31d6efe52486fbf66682fcdd13c12efce9ab6e11840a680fa197ce7623c07b3c97481878d4a5538cab00a6ea1d3817749992cc039e9c5ac9d399dbfb47bfda74ff3e5ae9ff790acfabfb6330bac7754a385e676d665fb0eb0d1eb16e8d3d521b28544377cecb0960495255d5b3e9b106cccc3c56b2989e22acca855b1c541df10b49fa8f320a8b4fdafae0e0aa31797f3c139d57801510eb111023d2538283eb9f4e7c5085143c78cf6a51e074ed6fc7d699351e511e1173b0a2791d450a4d2e0062cddc1c56d338a19b84bb87683de26e441dc798edbcac96f58a5002081f06c3c424b"}]}}]}, 0x178}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet(0x2, 0x1, 0x78b) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x1, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r5, 0x1, 0x7561a60b544412c8, &(0x7f00000000c0), 0xffffffffffffffd0) bind$inet(r5, &(0x7f0000000740)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0x2a) sendmsg$netlink(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000020c600000000e25efbea76bf1d90fa41", @ANYRES32=r7, @ANYBLOB="0b000280976b6408686030001600018088046fa3301e12b1dbed7c66a9a96b6904650000"], 0x3c}], 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0xa) shutdown(r9, 0x0) connect$unix(r9, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e) accept(r10, 0x0, 0x0) 3.578081988s ago: executing program 3 (id=5647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000080)='GPL\x00', 0x1c1d00, &(0x7f00000000c0)={@_ha_fsid={[0x8, 0x54f]}, {0x0, 0x7, 0x2, 0x61}}, 0x2, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c970d00ae50ce1509275e9d542ed39ebc1fb0d346fb3eb349e330e70b3e5ac11f74e76264a52faf9cd2fc2c5c5a0ea6cc3adb", @ANYRES16=r2, @ANYBLOB="000825bd7000fcdbdf250800000005000d0000000000050022000000000014001f00fe8000000000000000000000000000331400080070696d3672656731000000000000000005001300210000000500070003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000049f3edf1dbdd237ac65980febb1aafa5ef19000000181100c3a126f496a6c4dc7892bb302ef2bb691e9fd987f7454be4ecfe4cf15bfd47526e88ad31eaaf6530545a3f2c8f13622e89345b", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000b40)=@newlink={0x20, 0x10, 0x4, 0x478bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x80486}}, 0x20}, 0x1, 0x0, 0x0, 0x680}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x15, 0x4, 0x2) (async) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x6, 0x0) (async) write$cgroup_devices(r7, 0x0, 0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000840)={'pimreg0\x00', 0x7c2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000b80)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0x2, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x9, 0x2, 0xb, 0x20}, @alu={0x7, 0x0, 0x9, 0x1, 0xa, 0x80, 0x4}]}, &(0x7f0000000400)='syzkaller\x00', 0xfffffff8, 0x91, &(0x7f0000000680)=""/145, 0x41100, 0x30, '\x00', r5, 0x1b, r7, 0x8, &(0x7f0000000940)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, 0x0, 0x6, &(0x7f00000009c0)=[r1, r1, r1, r0, r0, 0x1, r0, r0, r0], &(0x7f0000000a00)=[{0x4, 0x1, 0x7, 0x3}, {0x1, 0x5, 0x8, 0x3}, {0x5, 0x3, 0xa, 0x6}, {0x7ff, 0x5, 0x10, 0x7}, {0x4, 0x1, 0x7, 0x8}, {0x0, 0x3, 0x5, 0x8}], 0x10, 0xfffff800}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.341812512s ago: executing program 1 (id=5648): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x5) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f00000001c0)="03", &(0x7f0000000200)}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000240)="4c00000014000103010000000000000002060000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000200", 0x4c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000200)=0x100000001, 0x4) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, &(0x7f0000000300)) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000380)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000003c0)=[@sack_perm, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @mss={0x2, 0x1}, @mss={0x2, 0x5}], 0x20000000000001cf) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000400), 0x4) sendto$inet(r6, &(0x7f0000000500), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002020782500000000002020207b1bf0ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) 3.013620307s ago: executing program 0 (id=5649): socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, 0x0}}], 0x1, 0x200880d8) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x20c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xcc, 0x7, 0x1, 0x0, "74a2f1514cb78628da90b4b2bf275c0cf11110be7811f47f9e76dde50edb69dbb3b50cbf958f0c9a4bd292f62158adb421642642800afae58c3c2da613c9ba33069761cb7ffc9285f4f0cb128f2266d98723884ea91bdf5f51dff9e693d7a49790456424456cf257de2272977a48579eb77460b42bed7907c5bf5f373ce6f32da9377147c5ebebe91026705c8a8b2b043dbe99f66767229b1ecd2dc3a32a831d275e76184e7bddaf9282695882c089c1eda7ad03649878e935ada32b2c7e521cf7f118b48520dead"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xf4, 0x7, 0x1, 0x0, "952d3540c5cc0a3afcec00022328d5b5a5c6e4f94ee927be8a66ab16ff793d9217235818b69550f3a40eb8c9cfd5e3b0c56199c7143504b8cdbd2be370566b52344dad5ae8b7b3beb5a128368a7394e8f181f9dec1992ef5b47fedaa10370335a0f11dd1de46f8b46b39c121d79eadc129d8243fefe40fe4f159c588c0972f6d7d69c3a264532dfdbb2f9ba438ac12e2294101223cb8730b7a2850245c132196d5765b803d4cb6ad19716812ceacab307940cda352e9700e38d1b30631b0d6b0c088747a9aa13d338b17fe6bafc278e794511a6861784dfb177150ed7f7958f53087e2e38e07a37c583d2b3190b063dd"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000000) (async) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000001c0)) 2.55219875s ago: executing program 2 (id=5650): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x23c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c250000000000202063cd00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f00000003c0), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000d40)='\x00'/14, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) 2.453887522s ago: executing program 0 (id=5651): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/183, 0xb7}, {0x0}], 0x2) socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') socket$rxrpc(0x21, 0x2, 0xa) socket$tipc(0x1e, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) (async) write$cgroup_devices(r3, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x53, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYRES16=r5, @ANYRES8=r4], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x20) 2.370006344s ago: executing program 4 (id=5652): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x84, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x1a, 0x9, 0x3a}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c9000000000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a0001002dbd7000000800040a000000", @ANYRES32=0x0, @ANYBLOB="80000809140003000700000000000000000000000100000014000100fb"], 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x90) 1.982098937s ago: executing program 4 (id=5653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000800)=[{&(0x7f0000000880)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r1) connect$inet(r1, &(0x7f00000008c0)={0x2, 0x4e23, @remote}, 0x10) sendfile(r1, r0, 0x0, 0xf03a0005) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000900)=@gcm_256={{0x303}, "a3c00e12d1dfb2c3", "07f7bd7fae0d7cf110b334ae640dd414b93ec430c219bd921432aca5d65a7457", "5f14b0d7", "3d62ce74058915bf"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="70000000000701010000000000000000070000090c00034000000000000008430c00034000000008000540000000030c000640ffffffffffffffff0c000640a37800000000000008000540000000031c000780080002400000000408000240000000060800024000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20040084}, 0x4000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x148, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_drop_time={0x8, 0x24, 0x5}]}, 0x148}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="5aa3f4904927bdee4f9b2345d5a6", 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f0000000200)=0x14) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000280)={r9, 0x1, 0x6, @local}, 0x10) 1.648970549s ago: executing program 2 (id=5654): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000300)={0x2f, 0x0, '\x00', [@pad1]}, 0x10) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6, 0x0, {0x0, 0xec}, 0x1}, 0x18) (async, rerun: 32) sendmsg$can_j1939(r5, &(0x7f0000000240)={&(0x7f0000000280)={0x1d, r6, 0x0, {0x0, 0xeb}, 0xff}, 0x18, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=@newtfilter={0x29a4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xfff1, 0xffff}, {0xffe0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x296c, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x34c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x6, 0x4, 0xd2}, [@TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="038a93", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2}, {0xd, 0x4, 0x1}}}]}}, @TCF_EM_META={0xa4, 0x1, 0x0, 0x0, {{0x401, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{}, {0x9, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="05", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="24f90b"]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_VAR="727b15531713", @TCF_META_TYPE_VAR="1cade3f114ff", @TCF_META_TYPE_VAR="c0bd", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="84", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="e414", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x632, 0x6d, 0x2}, {0x1000, 0x9}}}, @TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_VAR="3bfc7c62a41ec9873528", @TCF_META_TYPE_VAR="ea66973c5f", @TCF_META_TYPE_VAR="8efa230f81b2257f", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="37c4505df24f78de", @TCF_META_TYPE_VAR="9a", @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CONTAINER={0x44, 0x2, 0x0, 0x0, {{0x0, 0x0, 0xe}, "1a651f7acea751e9329aeedf21a8d38695159b045960a184b3ca061d8001a9478acf254641b92052d5f59862a4e11232c76f1cae0c"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x4, 0x4, 0x6, 0x7}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x2}, {{0x4, 0x1, 0x1}, {0x4}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xa21, 0x2, 0x8}, {0x8, 0x3, 0x0, "0be686"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x9}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="13681831ce67", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="30f999d0", @TCF_META_TYPE_VAR="40714ae3728935459b"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="6efe", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="9e", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x1, 0x1}, {0x503f, 0x26, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xa9}, {0x2, 0x1, 0x1}}}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x2, 0x3}, {0x1, 0xa, 0x0, "2712c18043133a8ef26c"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x78, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x1}, "ea821751307dbc7a0ff48b4b2d698ec0b6ade932a1830f39ef91eba3bafc413744190cb068b91f77141fc3b7080226d37b6ea505072d94769d26fa63afed0311dc771283baa642a8a042843e34a25cba900809e38a8d8fd900ad575df0fcbec977024575946943ef8c"}}, @TCF_EM_CONTAINER={0xa4, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x6}, "1cf658b8816885dcc2db83d939312f7f61a7811f7e9051bfe1b6b7b6324902ddbcfd7b6464ca6ac533d7b772377765fc3f5c713640627d62b98316fadbbb1d8b040328ac8d06d81ac5c019e89b87abf1bc91039aa558eca6bb2ca5c8ad1497e17adb03866dfa1318727f831d48b8dd40d1bb6cfa900fb9c30dbc7c1c72b16fe965779d4a4841327a386a73bbafa58f548dab8bffdfe5"}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x5}, {0x8, 0x7, 0x1, "cdf37dad1ff33e"}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_ACT={0x1af4, 0x1, [@m_simple={0x140, 0x14, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x4, 0x3, 0x2, 0x523}}, @TCA_DEF_DATA={0x6, 0x3, '[\x00'}, @TCA_DEF_DATA={0x6, 0x3, '%\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x7, 0x5, 0x4, 0x3}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '-$*\x00'}]}, {0xad, 0x6, "1a21b26085b6c5eca3f5a7b5199611c636f2c7d3a18a0551039fda0ca8d1bf9ab714b64f24eb0d0c8f2c3a91545d3bdd2894ff64b802eb6eb955bb952038af27ee67b82374ec060fcb98a60068e68e3e8aa0b8c43ee7e3f77842c91ad6ac8f4c836939ecf0295248868c1c542c4cc851becc4c3308bf1a052b3ec72eb71527caa6c34bbaa223a986df69e4e63f688af948f0f1beba6c93ffd807fdc4c03eae604635d463d59ac88ff5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_sample={0xc0, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x8c, 0x6, "9e00402b62e7a384e3dc3f538f7a5e7bfbfb1b9222b35ab514a56aa0f22a82a78e2360399e26d5242717c0173044c64387b45842bb834ca1b8c8a64d24fe827e7c82fca28044079136d0b0cf721e8b11621e3c18e6497572469a24605cb5f53fd3e83406efab524398bcfaea29e4e38c5e806b8caca58cd9aa94b2af16ba7e7c525e6fac6f913e6a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x1b0, 0xb, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x8, 0x6, 0xfffffffc, 0x4}, 0x184d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0x5, 0x20000000, 0x8, 0x1}, 0x600}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7d, 0xe, 0x20000000, 0x6, 0xa}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x2, 0xffffffff, 0x9}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0xfffffffd, 0x10000000, 0x6e19, 0xd}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcd, 0x5, 0x0, 0xa7, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x10000000, 0xe2, 0xd}, 0x33cf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x40, 0x6, 0x2, 0x9}, 0x4a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x6, 0x5}, 0x2}}]}, {0x82, 0x6, "52c3550b33ed22b2f1e61550f5ad494f95ae2464f9a993a7b2eb23867f87d3c8e7b4a23747f7a713c185a6054f666de1e3d1cb388bf25c132b5839201ab5e2cbe49b7e7cf85bd9c0d26c9ef4724ff24df70b064d8ce4a92e0f400455c618ea84e0d519abbebe4adca4522ec8f7fd25f67925c34c477f09791f1d47ff06e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x160c, 0xe, 0x0, 0x0, {{0xb}, {0x1578, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x7c}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x1, 0x4, 0x1, {0x4, 0x1, 0x7, 0x8001, 0x9, 0xe}, {0xd, 0x0, 0x5, 0x5, 0x3}, 0x9, 0x7, 0x4e}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x4, 0x3, 0x3c, {0x1, 0x0, 0x4, 0xa, 0x10, 0x8001}, {0x80, 0x1, 0x2, 0x7, 0x0, 0x7}, 0x5, 0x7, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x7, 0x8b, 0x2, 0x1, 0xff, 0x7, 0x3, 0x1, 0x100, 0x4, 0x200, 0xffff, 0xc, 0x0, 0x80000001, 0x8, 0xc6, 0x10, 0x18, 0x7fffffff, 0x8000, 0x9, 0x4c2e, 0x2, 0xfffffc00, 0xfffffbed, 0x81, 0x5, 0x10000, 0x10000, 0x7, 0x7, 0x5, 0x4, 0x5, 0x3, 0x0, 0x1000, 0x10, 0x7, 0x3, 0x4, 0x0, 0xb, 0xff, 0x9, 0x800, 0x1, 0x3, 0x3, 0x5, 0x1, 0x101, 0x6, 0x7fffffff, 0x6, 0x9, 0x10, 0xffffffff, 0x8000, 0xc, 0x2, 0xfffffff7, 0xc, 0x4, 0x8000, 0xfffffffa, 0x0, 0x9, 0x1, 0x7, 0x80, 0x80, 0x3, 0x2, 0x4, 0x3, 0x2e0, 0x0, 0x6, 0x2f, 0x80000001, 0xd88, 0x0, 0x2, 0xc, 0x3, 0xf, 0x2, 0x1, 0x7, 0xc4d0, 0x2, 0x401, 0x3, 0x11, 0x80000001, 0x8, 0x20000, 0x2, 0xf, 0x80, 0x2, 0x7, 0x7, 0x4952, 0x2, 0x4, 0x7, 0xfffffffd, 0x9, 0x0, 0x7, 0x6eb1b02d, 0x7fffffff, 0x5, 0xfffffffb, 0x1, 0x1, 0x0, 0xf, 0x7, 0x833d, 0x7, 0xe4, 0x0, 0x6, 0xfff, 0x5, 0x7, 0x2, 0x5, 0x2, 0x200, 0x5, 0x6a504be2, 0xd9, 0x6, 0x4, 0x0, 0x4, 0x8, 0x2, 0xfffffb0d, 0x7ff, 0x0, 0x5, 0x7ac, 0x200, 0x9, 0x7ff, 0x48737272, 0x80000001, 0x80000001, 0x80000000, 0x3ff, 0x1000, 0x5, 0x40, 0x6, 0xb2, 0x2, 0x0, 0x2, 0x6, 0x5, 0x80000001, 0xfffffffc, 0x6, 0x0, 0x8, 0x1, 0x9, 0x4, 0x3, 0xa6, 0xf550, 0x2, 0x0, 0x93b, 0x7, 0x5, 0x6, 0xcf, 0x5, 0x8, 0x9, 0xda, 0x6, 0x3ff, 0x2, 0x4, 0x2, 0x4, 0x38, 0x1, 0x5, 0x6, 0x4, 0x6, 0x6, 0x85, 0x2, 0x0, 0xffffff00, 0x9, 0xffffff50, 0x8, 0x6, 0x6, 0x0, 0x2, 0x5, 0x9, 0x7fff, 0x9, 0x0, 0xfff, 0xee6, 0x3, 0x3, 0x2ff, 0x42, 0x677b, 0x4, 0x21b, 0x2, 0x3, 0x9, 0xd, 0x9, 0x81, 0xfffffffb, 0x1c000, 0xfff, 0x0, 0x3fffc0, 0xf7, 0x4, 0x2b8f, 0x401, 0xffffffff, 0x5, 0x5, 0x3, 0x5ff6, 0x0, 0x80, 0xd550, 0x2, 0xa, 0x0, 0x0, 0x8, 0x80000000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2ebc5f67}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x9, 0x6, 0x5, 0xf27b, 0x5, 0x1, 0xa34, 0xffff, 0x1, 0x4, 0x10009, 0x295, 0x6, 0x8, 0x7, 0x2000000, 0x1, 0x80000000, 0x2b000000, 0x0, 0x7, 0x5, 0x7fffffff, 0xfffff25a, 0x1000, 0x5, 0x140000, 0x100, 0x54e9, 0x7, 0xffff, 0xfd21, 0x7f, 0x80000000, 0x5, 0x81, 0xffffff6f, 0x2, 0x3, 0x8, 0x899, 0x1800000, 0xf5, 0x7, 0xc, 0x7, 0x1004000, 0x1, 0x9, 0xffffff75, 0x0, 0x66, 0x7fffffff, 0x10001, 0x595, 0x81, 0x3e9, 0x0, 0x10, 0x7, 0xc, 0x8001, 0x6, 0x300, 0xaa9d, 0x0, 0x3, 0x366ed3ea, 0x100, 0x8000, 0x1, 0x6, 0x1, 0x1, 0xe0, 0x401, 0xc447, 0x5, 0x45, 0x1, 0x3, 0x8001, 0x9, 0x9, 0x9, 0x7, 0x80, 0x8000, 0xfffffffb, 0x3, 0x1, 0x0, 0xfffffffb, 0x9, 0x5, 0xffffff5d, 0x5, 0x3, 0x5, 0x7, 0x3, 0xd, 0x7e0b, 0x5, 0xe, 0x6, 0xffffffff, 0x6, 0x5, 0x2c40000, 0x6, 0x5, 0x10001, 0x3, 0xd3, 0x6, 0x200, 0x4f, 0x2, 0xffffffff, 0x7, 0x4e5, 0x1, 0xdae4, 0x7a9e, 0x4, 0x9, 0x0, 0x5, 0x2, 0x101, 0x1000, 0x9, 0x40, 0x6e7445ce, 0x7, 0x9, 0xe00000, 0x800, 0x6, 0x4, 0x7, 0x0, 0xfffffffd, 0x7, 0x7fffffff, 0xd, 0x67d522bd, 0x3, 0xfffffffd, 0x4, 0x3, 0xffffffff, 0x2, 0xad5a, 0x5, 0x7, 0x81, 0x1000, 0x4, 0x3, 0x1, 0x1, 0x9, 0x3ff, 0x40, 0x1, 0x4f, 0x41c, 0x401, 0x898, 0x9, 0x1, 0x7, 0x3, 0x3, 0xfffff000, 0x7, 0x6, 0xfffffffa, 0x3, 0x4, 0x6, 0x1, 0x6, 0x5, 0x1, 0xffffff66, 0x6, 0x7, 0x9, 0x5, 0x1, 0x7ff, 0xffff0001, 0x2, 0x7fffffff, 0x0, 0x5, 0x5, 0x1, 0x1ff, 0x2, 0x4, 0x5, 0x0, 0xfffffff8, 0x1ff, 0x4, 0x100, 0xffff1744, 0x3, 0x100, 0x10, 0x3, 0x8, 0x8, 0x2, 0x0, 0x5, 0x5, 0x2, 0x5, 0x9, 0x8, 0x1, 0x9, 0x1, 0x2, 0x3, 0xc9, 0x8, 0x4, 0x6, 0xff, 0x7, 0xe48, 0x8, 0x100, 0x0, 0xf, 0xffff, 0x4, 0x0, 0x57e3, 0x8, 0x20, 0x6, 0x7, 0x10000, 0x7, 0x2, 0x7f, 0x7, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0xff, 0x95, 0xc, {0x6, 0x3, 0x7, 0x9, 0x8001, 0x401}, {0x7, 0x0, 0x0, 0x0, 0x8, 0x99ee}, 0x8, 0xfff, 0x80}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xf6d8, 0x8, 0x0, 0x1769, 0x69ea, 0x1, 0x5b6, 0x66, 0x8, 0x4, 0x37, 0x3, 0x40, 0xf999, 0x1, 0x8, 0x3, 0x1, 0x3, 0x7e93, 0x9, 0xd1df, 0x5, 0x5, 0x6, 0x8, 0x0, 0xe0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x6, 0x9, 0x6, 0x800, 0x46, 0x8, 0xfffffffb, 0x1, 0x2, 0x0, 0x7, 0x0, 0x8, 0x5e7, 0xa9b0, 0x0, 0x7, 0xfff, 0x0, 0x7fff, 0x800, 0x3, 0x4, 0x7fffffff, 0x80000000, 0x9, 0x0, 0x0, 0xf0b, 0x7, 0xffffff7f, 0x5, 0x7, 0x5, 0xb8d, 0x3b2, 0x1, 0x8000, 0x9, 0x6, 0x8, 0x8, 0x6, 0x4, 0x1, 0x9, 0x4, 0x9, 0x5, 0x80000000, 0xfa1, 0x7, 0x4, 0x752, 0x2, 0x55e, 0xe, 0x7ff, 0x2, 0x9, 0x1, 0x6, 0xcb09, 0x1, 0x4, 0x9, 0xffff, 0x7, 0x81, 0x68, 0x5, 0x2, 0x4, 0xffffd862, 0x0, 0x6, 0x1, 0x4, 0x9, 0x4, 0x1, 0x101, 0x20000, 0x6, 0x18000, 0x5, 0x2, 0x9df80000, 0x2, 0x3, 0x7, 0x6, 0xbf3, 0x6ec, 0x2616, 0xd12a, 0x0, 0x1, 0x8, 0x8001, 0x74c6, 0x7, 0x7, 0x3, 0x3, 0x3, 0xffffff7f, 0xffffffff, 0xffff59a0, 0x10, 0x2e79bc49, 0xffffffff, 0x7, 0x9, 0x7ff, 0x6, 0x8, 0xffff, 0x9, 0xb, 0x7, 0x9, 0xff, 0x7, 0xa082, 0xfffffffd, 0x7fff, 0x7, 0x7, 0x8, 0xfffffff2, 0x9, 0x9, 0x6, 0x3, 0x9, 0x90542854, 0x2, 0x6, 0x401, 0x9, 0x4, 0x6, 0x2, 0x6, 0x80000000, 0x4ba, 0x0, 0x5, 0xc26, 0x1, 0x2, 0x9, 0xd, 0x4, 0xa1c2, 0x2, 0xdc0c, 0x2, 0x60, 0x7, 0x6b3, 0x1ff, 0xeec, 0x1, 0x1, 0x401, 0xd35, 0x10000, 0x4, 0x7, 0x6, 0x10, 0x7, 0xb584, 0x0, 0x1, 0x55, 0x3, 0x8, 0x9, 0x46c5, 0x8, 0x442f, 0x2, 0x6, 0x100, 0xb, 0x4, 0x4, 0x6, 0x7, 0x9, 0x1, 0x1, 0x6bf3, 0x9, 0x9, 0x8, 0x3c2, 0x0, 0x8, 0x1, 0x1, 0x9, 0xfff, 0x2, 0x7, 0x7, 0x401, 0x5, 0x1, 0x8, 0x101, 0x10001, 0xe6c4, 0x4, 0xd, 0x7fff, 0x8, 0x4, 0x1, 0x81]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x6, 0x3ff, 0x1000, 0xd, {0x1, 0x0, 0x0, 0x7, 0x1e4, 0x6}, {0xb, 0x2, 0x2, 0x2b, 0x2, 0x10}, 0xd70, 0x101}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x81, 0x6000, 0xfffffff7, 0x3, 0x4769b7d9, 0x7fffffff, 0x2, 0x8, 0x0, 0xfffffffb, 0x3ff, 0x8, 0x9, 0x3, 0x200, 0xa9, 0x9, 0x0, 0x4, 0x2, 0x83a, 0xff, 0x10000008, 0x7, 0x4, 0x6, 0x51c, 0x9, 0x92de, 0x8, 0x48, 0x401, 0x7, 0x5d6, 0x7fffffff, 0x6, 0x36, 0x3, 0x7, 0x2, 0x8e9, 0x2fe, 0x0, 0x7fffffff, 0x9, 0x80000000, 0x8001, 0x7, 0x775b, 0xe, 0xefd3, 0x3, 0x2, 0x7, 0x2, 0x2, 0x1, 0x7, 0x8, 0x0, 0x3, 0x3, 0x1, 0x1, 0xd, 0xc0000000, 0x800, 0x3, 0xffff, 0x0, 0x10000, 0x2, 0x7ff, 0x2, 0x1000, 0x1, 0x0, 0x2, 0x1ff, 0xa, 0x5, 0x6, 0x5, 0x6, 0x1c, 0x2, 0x39, 0x6, 0x14, 0x2, 0x5, 0x7, 0x3fb1, 0xb6, 0x800, 0x6, 0x8, 0xb2a2, 0x789, 0x9, 0x1, 0x1, 0x6, 0x2, 0xfff, 0xfff, 0x10000, 0x9, 0x3, 0x2, 0x8, 0xd6, 0x99, 0x0, 0x6, 0x1, 0xe, 0x4, 0x997e, 0x9, 0x5, 0x1000, 0xf, 0xb, 0x8, 0x5, 0x6, 0xc, 0xd, 0x400000, 0x329c, 0x1, 0x9, 0x1, 0x4, 0x12e, 0x100000, 0x2, 0x4141, 0x5, 0xf, 0x3, 0x8001, 0x2, 0x1, 0x2, 0x7, 0x9, 0x2, 0x6, 0xbb, 0x7, 0x0, 0xfffffffb, 0x2, 0x27, 0x9, 0x6, 0x0, 0x6, 0x3, 0x1, 0x3, 0x7, 0x1, 0x3, 0x5, 0xfffffffa, 0x6a599c03, 0x2, 0x4, 0xce69, 0x6, 0x34fe, 0x3, 0x6, 0x10001, 0x10000, 0x800, 0x455, 0xa, 0x3, 0x1, 0xc, 0x5, 0x400, 0x1cc, 0x3, 0x7, 0x6, 0x9, 0x80000001, 0x7, 0x9, 0xfffffff9, 0x10000, 0x2, 0x9, 0x94, 0x8001, 0x9, 0x9, 0x6, 0x6, 0x2c2, 0xfffffffc, 0x8000, 0x1, 0x1, 0x1, 0x6, 0xfffffffe, 0x4, 0x7, 0x4, 0x10, 0x2, 0x401, 0x6, 0x101, 0x9, 0x1000000, 0x7fff, 0x6, 0x7fff, 0x43b9, 0x805, 0x400, 0x2, 0x234, 0x7f, 0x38a5, 0xd31, 0x8, 0x2, 0x4, 0xa, 0x8, 0x9, 0x8, 0x8, 0x75, 0x7f, 0x8, 0x3, 0x100, 0x3, 0xb47, 0x633785d2, 0x1, 0x2, 0x2, 0x1, 0x5, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4224, 0x9, 0x4, 0x4, 0x3, 0xb8f1, 0x7ff, 0x6, 0x1, 0x47a3, 0x0, 0x6, 0x0, 0x0, 0xfffffbff, 0x101, 0xffffffff, 0x1, 0x6, 0x6, 0xf0f, 0x6, 0x2, 0x1, 0x7ff00, 0x9, 0xffff8001, 0x3b, 0x5, 0x10000, 0x7, 0x0, 0x7, 0x6, 0x1, 0x1, 0xffffffff, 0x1, 0x3, 0x5, 0x9, 0x100, 0x0, 0x5, 0x8, 0x5, 0x6ac4, 0x1, 0xd35, 0x1ff, 0x1, 0x9, 0x5, 0xe4, 0x5, 0x6, 0x2, 0x2, 0x4d0e3999, 0x4, 0xfffffffc, 0x17f49550, 0x10, 0x4, 0x1ff, 0x0, 0x5, 0xff, 0x40, 0x8, 0x4, 0x7ff, 0x2, 0x7, 0x8, 0x101, 0x54c1, 0x5, 0x9, 0x10001, 0x0, 0x1, 0x200, 0x2, 0x14c, 0x3, 0x81, 0x8, 0x800, 0x4f3, 0xff, 0x3, 0x8, 0x1, 0x0, 0x70, 0x7, 0x2, 0x4f8, 0x3, 0x7fff, 0x6, 0xfffff792, 0x4, 0x401, 0x2, 0x8001, 0x7ff, 0xe7, 0x10000, 0xe2b, 0x9, 0x2, 0xda, 0x2, 0xca, 0x0, 0x1, 0x5, 0x2, 0x2, 0x5, 0x9, 0x3, 0x7, 0x4, 0x4, 0xa, 0x5, 0x2, 0x4, 0x8, 0x5, 0x8001, 0x4, 0x4, 0x7fff, 0xffffffff, 0xb3, 0x1, 0xffff8000, 0x2, 0x4, 0x0, 0x0, 0x4, 0x9edb, 0x7, 0xff, 0x3, 0x81, 0x8, 0x0, 0x5, 0x2, 0x5, 0x7fff, 0x7f, 0x9, 0x8001, 0xffff, 0x7fff, 0xa, 0x9, 0xffff, 0x80, 0x8, 0x1, 0x800, 0x9, 0x7d0, 0x6, 0x4, 0x61c5, 0x1, 0x0, 0x7, 0x5, 0x4, 0x7, 0x2, 0x9, 0xb35e, 0xb359, 0x101, 0x200000, 0xffffffff, 0x7, 0x1, 0x9, 0x83, 0xb, 0xd6, 0xe, 0xd, 0x2, 0x2, 0x1e, 0x7, 0x4, 0x101, 0x8, 0x2, 0x7, 0xffffffff, 0x8, 0x0, 0x2, 0x8, 0x9, 0x6, 0x10, 0x7, 0x4, 0x2, 0x7f, 0x9, 0x3, 0x396, 0x3, 0x1000, 0xd, 0xd, 0x10, 0x3, 0xff, 0x0, 0x401, 0x8, 0x3, 0x6, 0x6, 0x7, 0xebdf, 0x1, 0x4, 0x5, 0x68ef, 0x0, 0x4, 0x3e1, 0x5, 0xfffffff9, 0xfffff800, 0x7, 0x0, 0x1, 0x2, 0x5, 0x7ff, 0x6, 0x1, 0x0, 0x7, 0x0, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]]}, {0x6c, 0x6, "560f8f4ad2b180fd78879a39c821243ebe45008803d22d7ca8a3a949f0974a7b8715fa14a6f44142a558e65a8165b12cd92d2c03afe168a017cb59d5b391a67740b3f03f7d4e3d0e95761588faa261d4b7f04547f89596b2ee8bae40593ba574c5fce12b5f03f9f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x134, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}]}, {0xf7, 0x6, "45317c9b822386837805c5ccb953eec4ba8c283aac024dfe554b6b905ea5dda6fad8199e46e2c86db89ae6400bdbfe1d344c0dcd313309a878304b91e7b7da9f62f190aeb75e737f498ab643c2bf85f2c6535da1d4ff8cdb755f13b8daa40fba0ef437e5d0437b970476a17f6b3864f6d9be5997f57099537820d2c8b50447491d9d0ad2bcb2b1080c869f1976278f683fd71976a4083573f5b31cd46190eb8a4db4d44d061ff2ad7e91385650ce276eee54e86a6c3f516a077b5dc31dcfa6159e95a4441797a4915a2dedf2389ac4406debe168ee3b0f1885b469445e3adfb6e10929e51f70cd7dbe8373ae613b9af4a2a2c7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x830, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff2, 0x46f, 0x3, 0x4, 0x1000, 0x5, 0x47e, 0x5, 0x5c1e, 0x6, 0x7, 0x7fff, 0x18, 0x4, 0x100, 0xfffffffa, 0x8, 0xc, 0x3fa6, 0x400, 0x1, 0x9, 0x4, 0xa608, 0xa, 0x3c5569cc, 0x4, 0xfffffffc, 0x3, 0x3, 0x1, 0x3, 0x9, 0x4, 0x74b85778, 0x0, 0xff, 0x8, 0x7ff, 0x1, 0xb23c, 0x8000, 0x3ff, 0x0, 0x9, 0x1, 0xffffffff, 0x98, 0x400, 0xa, 0x15b, 0x2, 0x2, 0xbcad, 0x4, 0x8, 0xf0f, 0x401, 0x9f16, 0x3, 0x0, 0xc, 0xfffffff9, 0x7, 0x1, 0x4, 0x4, 0x1, 0x2, 0x800, 0x3, 0x3, 0xb, 0x81, 0x5, 0xff, 0x200, 0x5, 0x2, 0x5, 0x2, 0x8, 0x1, 0x4, 0x4, 0x400, 0xb, 0x8001, 0x7ff, 0xc8, 0x100, 0x5, 0xd, 0x9, 0x8001, 0x1, 0x10, 0x5, 0x6, 0x6, 0x1, 0x6, 0x200, 0x4, 0x1, 0xe, 0x9, 0x2, 0xd, 0x1, 0x0, 0x6, 0x7eb, 0x7, 0x1, 0x4, 0x6, 0x4, 0x7ff, 0xff, 0x40, 0xfffffffa, 0xb9, 0x524, 0x100, 0x7, 0xcce8, 0x9, 0x7, 0x1, 0xc4, 0x6, 0xfff, 0x8000, 0x8, 0xd4b, 0x278c, 0xe9, 0xd4, 0x1, 0x1, 0x46ac, 0x2, 0x8, 0x4c, 0x7, 0x70000000, 0x2, 0x10001, 0x4, 0x0, 0x37, 0xfff, 0xa467, 0x0, 0xb, 0x9, 0x401, 0x3, 0x10, 0x9, 0x2, 0x0, 0x0, 0x5, 0x1, 0x4, 0x36, 0x5, 0x2, 0xde, 0x2, 0xffffffff, 0x0, 0x4, 0x9, 0x2, 0x5, 0x6, 0x9, 0x8, 0x6, 0xfffff7ae, 0x8, 0xecb, 0x1, 0x2, 0x7, 0xfffffe01, 0x27, 0xb52a, 0x1ff, 0x7, 0x7, 0x3e2, 0xfffffeff, 0x6, 0x9, 0xffffff66, 0x3, 0x523, 0x9, 0x81, 0xca, 0xfffffff5, 0x2235b590, 0xfffffff7, 0xdc85, 0x200, 0x4, 0x6, 0x3, 0x43, 0x5, 0x0, 0x3, 0x2, 0x7fff, 0x0, 0x8, 0x7ff, 0x8, 0x9, 0xb, 0x743, 0x9, 0xa, 0x8001, 0x8, 0x1000, 0x7, 0x80000000, 0x3, 0x9fe, 0x9, 0x80, 0x0, 0x6, 0x8000, 0x0, 0x7, 0x3, 0x400, 0x5, 0x0, 0x5c73, 0x80000000, 0x48f1f7a8, 0xce, 0x3, 0x1, 0x4, 0x936, 0xfffffffe, 0x9, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x3, 0x100, 0x101, 0x2, 0x3ff, 0x4, 0x7fffffff, 0xfffffffc, 0x101, 0x443e, 0x0, 0x80, 0x7, 0x4, 0x8000, 0x4, 0x7, 0x1, 0x7, 0x71800, 0xfffffffd, 0x3, 0x80000000, 0x7, 0x2, 0x2, 0x80, 0x3, 0x9, 0x6, 0x9, 0xfff, 0x9, 0xff, 0x800, 0x2, 0x6, 0xc, 0x8, 0x2, 0xa2e4, 0x0, 0x3ff, 0x10000, 0x3, 0x46, 0xfffff801, 0x9, 0x32b, 0x2, 0x9, 0x7, 0x5, 0xf, 0x5b, 0x100, 0x6, 0x20, 0xfffffffb, 0x100000, 0x7fffffff, 0x2, 0x3c3, 0x8000, 0xe92, 0x41, 0x1, 0x9, 0x5, 0x6c, 0xffff, 0x1, 0xb6d, 0x4, 0x3, 0x7, 0xe, 0x80, 0x3, 0x0, 0x5, 0x8, 0xfffffffc, 0x4, 0x7, 0xfffffff7, 0x101, 0x10000, 0xfffffffc, 0x1ff, 0x1, 0xfb9, 0x4, 0x22, 0x8, 0x53, 0x2, 0x8, 0x5d, 0x2, 0xb, 0x1, 0x80000000, 0xfffffffb, 0x9b57, 0x8, 0x1ff, 0x0, 0x9, 0xffffff35, 0x6, 0x0, 0x1000, 0x26, 0x6, 0x40, 0x10000, 0xb, 0x4, 0x6, 0x3, 0xc, 0x5, 0x5, 0xe, 0x5, 0x4, 0x0, 0x2, 0x3, 0x8, 0x5, 0x7f, 0x1, 0x65, 0x6, 0xafd, 0x8, 0x4, 0x2, 0x8001, 0x4, 0x1ff, 0x4, 0xffffffea, 0x9, 0x4, 0x1, 0x0, 0xfffffffd, 0x3, 0xb9, 0x3, 0x9, 0x5, 0xec95, 0x4, 0x80000001, 0x6, 0x3, 0x7, 0x6cb1163e, 0xe, 0xfffffeff, 0x2, 0x1, 0xaa87, 0x40, 0xb57, 0x40, 0x8, 0xbb, 0x5, 0x5, 0x4, 0x9, 0x1, 0x7, 0x6, 0x2, 0xc0000000, 0xfffffff7, 0x9, 0x9, 0x350, 0x1, 0xe, 0x6, 0x9b, 0x2, 0x3, 0x2, 0x1, 0x0, 0x5, 0x0, 0x2, 0xfffffff8, 0x3c, 0x800, 0x5, 0x2d53, 0x7ff, 0x0, 0x1, 0x8, 0x3, 0x5, 0x6, 0x7, 0x100, 0x8, 0xac000000, 0xcace, 0xfffffffc, 0x6, 0x4, 0x7, 0x4, 0x8, 0x400, 0x5, 0x0, 0xef, 0x3ff, 0x1ff, 0x2, 0x8, 0x3, 0x2, 0x0, 0x5, 0x8, 0x6, 0x8, 0x8000, 0x593b, 0xffe0, 0x8, 0x4, 0x8, 0x7, 0x3, 0x2, 0x1, 0xbfc7, 0x6, 0x7, 0x3, 0xf62a, 0x8, 0xfffffffc, 0x9, 0x8, 0x8503]}]}, @TCA_CGROUP_EMATCHES={0x2f4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2e8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x94}, {0x5, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xd4, 0x3, 0x0, 0x0, {{0x877, 0x0, 0x1}, "a5fdd6fad8a1f8fcc42e8f350aae0d71764cf7250b265d7818cd27629d51d8bd4a350e98ac2b3adda7df25be2591fef51fbc4e362b716a21875d01e1c4b50ccff05d74b7a4cefeadd83bd85382ab46ae2f4b33cd221a9458354ede57cf5be748bbdb1907cb0ae976eb8c03e4941418b36e44f0956021432087ffa773357e8c1d8b86a3c12ea6889bd2f2db84f1e91a92a89af931b15f3c6f4adb58d9f329d9e48c9c7472fb2b93ded0166963b9eb82f0749cda47ee2d5385c6360e4c1990f5eba1f66b1ee3b1"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x30, 0x1, 0x6}, {0xd72, 0x4104d131, 0xe60, 0x2, 0x1, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x3d, 0x0, 0x8}, "ec12bc53bee807bc27a20b0aeb7dd392edce8e187bd21769babec68e0d3d4698181198ade8c900d6d4a9b3461c34b6900b7032486fe9f77be765306d2f2067380e8cc6f86bc69f0ce843459aab95c45f1989bbdd9543cb3670221125e9adc17b0051578302c6bae8c7977262c72770b654e42e43d3531d889e103f63cf3e7431f150b92fc89be3f3865c2d0625d07d8de81a5b5ed45b6bcd3deb34fabca0b218f38534fe94c50c14b27b988317b6a6b88cb0d1ff195aa52f7d55f97f77ddcac1"}}, @TCF_EM_META={0xcc, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x8, 0x1}, {0x7fff, 0x0, 0x2}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="dd323251b99069", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="5ab84269ee6321652b"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="b4bb183e54", @TCF_META_TYPE_VAR="e435e0e36d1d9e", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="e01c860dc3a9", @TCF_META_TYPE_VAR="d65f648342a0d437b9", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a240b65e27735f3a71", @TCF_META_TYPE_VAR="3b02ffc439002bdc72"]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a4b4ebbe9045a3f1", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="1b68ce43", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR='i', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x2, 0x2}, {0xe, 0x8b, 0x1}}}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="805a", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="0f45", @TCF_META_TYPE_VAR=')', @TCF_META_TYPE_VAR="65932f661401dd", @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x6}, "f826be32cb0813cb"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xc6ee, 0x2, 0xe}, {0x7, 0x6, 0x0, "f4dfc6b3d863"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x37a9, 0x8, 0x1}, {0x3, 0x5}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0xff, 0x1, 0x0, 0x1}}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0xd0, 0x3}}]}, 0x29a4}}, 0x0) 1.492018464s ago: executing program 1 (id=5655): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x13, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40209c0}}, {{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x20000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@local, 0xee200000, 0x0, 0xff, 0x1, 0xa, 0xffff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000440)={'full'}, 0xfffffdef) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f00000004c0), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000500)={@private0={0xfc, 0x0, '\x00', 0xff}, 0x8000000, 0x0, 0xff, 0x1, 0x801, 0x8}, 0x20) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000540)={0x4, 0xb, "00c8cd271b9c36237d8b58"}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000580)=0x2, 0x4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x2000c010) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fcff1f00000000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600f7ffffff0400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b7030000f7ffffff66000000060000005d93000000000000b5030200f7ffffff85000000b5000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'dvmrp1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f0000000980)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c00000027b59a5f05a8085cdcb17db5", @ANYRES16=r9, @ANYBLOB="04002cbd7000fddbdf256300000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x408d4}, 0x20000800) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe03000100000000080004000100000006001500070000002800168008"], 0x54}}, 0x0) sendmmsg(r11, &(0x7f0000000d40)=[{{&(0x7f0000000b40)=@can={0x1d, r8}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000bc0)="c59f7646e33ae6c892fd2f4594a5abc5d569a86b644d9b166c3b1cfc763647d62745073fe8b57cd1418b30bb6fb79cd17f6f0ddd35f76ed690069b9faff944149c4bb35dc8941946f7849b8ccde2c9d09876d6361f4531f23356f64c56d4c6d6e8f1474f83c1f771281e4ebab5f4bb0e8c4de58b", 0x74}], 0x1, &(0x7f0000000c80)=[{0x60, 0x116, 0x80000000, "66e0c53823e7c0cb37d0c52b74a9b613582303c07dd77dde7d10574edc62fe470b560038913ea5b3381f6c84f61dd88635c183abc5e919d641c3b4f27c07eb2f9e7dff8a2e46994afe5f8dea"}, {0x28, 0x114, 0x5, "eba0e5a75cb409cca18ad7759323c4bc4db7d54961"}], 0x88}}], 0x1, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}}, 0x0) 1.454397227s ago: executing program 0 (id=5656): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000000000000000010000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000800)=""/222}, 0x78) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x28, 0x0, 0xf000, 0x6, @loopback, @remote, 0xffc5, 0x80, 0x6, 0x9}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[], 0x38) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r0, r1, 0x3, 0x4, 0x2}, 0x50) 425.878522ms ago: executing program 0 (id=5657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000080), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000480)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f00000005c0)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x5, 0x4) unshare(0xa000080) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) 88.768473ms ago: executing program 3 (id=5658): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea8"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000180)=""/166, &(0x7f0000000240)=0xa6) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x24008010) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffb, 0xffff3188, @private2}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000081}, 0x4080) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r11, 0x0, 0x42, &(0x7f0000000400)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) syz_emit_ethernet(0xfa, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "faff", "e7205f", 0x6005, "d69a7891e980d4adbac2481165547e5e7c4e64705a89b4a42f09d7f914f952e2007f15a139f8681e00602fd57916d66967c44759bcb374c36fd7a97a0f627f68b2c04ccf1539caa9881e1700545bc367773a595175a1119c6bdf071806541a8d91743119dec0eb1f8184952efc7a95128b063c7846922dc6b658ea26a6ab14e3535753181884bd2799333a8e2446e22e197538a5104c86126a429d77195b7edc350b5f51bad1fb4fc686234a896b952eacbf3ddae923148ca9cdba5bead1913c854450f4d7d69cdff5906f725ae13cd05dc9e3af8039ba65801313dfa85c853031bd9a"}}}}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r12, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r13}, &(0x7f0000000180), &(0x7f00000001c0)=r12}, 0x20) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x9, 0x70bd29, 0xffffffff, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x20000000}, 0x2}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}}, 0x0) 77.552602ms ago: executing program 2 (id=5659): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3d4, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa0, 0x3d}}}}, [@NL80211_ATTR_TESTDATA={0xfb, 0x45, "39f097a288d97c62860c67838b10612832b9a70b28cb70783c239935043171b70feb758ea34fff57cfcea9d2ffdd9b89f8cf54e10c02e4e02588e5f23df3d459e73d2430b5a5f771c0c023df44648d20a7cb9f3c4b2afc45327198bab837752160495ec9b13ed02325a776e336eced735bb7dc0630d168e3fa7061b1fd71119dcce491720c072bc5fc13823c54884dcbb64c85ca42b5906f8613ba54bbc99aebfa7dcc46b9a0f704e9f0b9d54f6c333bc0206793219030116948ef4f325161ea46d622e879b500a49c85993671765094bc922b3350032de8d8962fe9773e32d75f14ec650751d175aa354b3a6c399e0137d65ccc007332"}, @NL80211_ATTR_TESTDATA={0x13, 0x45, "be249103480c89ad246ff15c1e594e"}, @NL80211_ATTR_TESTDATA={0x103, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x12, 0x45, "5251ea39be2e56aeb9429503651f"}, @NL80211_ATTR_TESTDATA={0xe8, 0x45, "0705f305589c9ddf83035e3b68e29179f8f51df3b1bde4aa8af7b3bb3cd2319f0d3f33dfa102bbbdd6b8f7efe21d56c07568fe38b1822a5a5df11dc79a685a2d4fa67fd78a896a5df66aa4a04ec197c4a4605c6dc4f2f1949447793281c812bee273e3566a79ec0a2c25581774ef918a9645aeea644428cf777b74c44a6de099e05fe88d1e72fd8e6ce650b2312e27459feb06d6344cc11f69f285f6b205a681f87fc5e32553890e50dffd67b1b01bd7306e8e09daee757186bf97493fb898bfe873a2e8c956a9be1494a159d9fb093c1c7a8327c94da49f8a457f77b18c213c48a78c68"}, @NL80211_ATTR_TESTDATA={0x9a, 0x45, "9f90597fa89ba63a726bd1d92690c50e737daad7eb21aa357fea6a4c6dc954684deae9b9817c5c4538ca646c8903e7d4d5d4e69e2dcce632931e2b8719b1aafd2a3a62cfc714afcc64c4e3e90e446bfb28e84c0176a5e91c28ab74b03ca036db9648709c1b55cd6a4135cf0596d48e0f05d80a609ca77ba1baaeee6b34524d75a8b5e03a6fc36ce88d1be8b053a4453f732e29db58ef"}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4044000}, 0x4044094) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000600)={r0, &(0x7f0000000500)='%]&!\x00', 0x90000, &(0x7f0000000540)={@align=0xbc, {0x9, 0x8101, 0x7658, 0x9f8a}}, 0x1, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x6}) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0x7c, 0x8, "3539d2193265991508a2be3e2f8b599d703c4d97682513ab9dc6cf5d1f1f2aed62f3ae44af252f5668c98a3567b7440a7a3a373a35d33fcbe2ee09b3a2c038ecb89a0381225bc16f99d26de419d8ed4b6ebb9cda959c98946b6cd216bf490130e48711d97d03a0c82e1da36d2a5c3c2f564b809bcd57fe0f"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x9f, 0x8, "3608663346b0488573b78ec366ff43cfd10212772547725ecaafac1c5be86859a1d2da9fa353a5d4a0b160ac50d9364928c6639d93b1e69334f203e308bb43aae44b6334c58c10a982aad3a683d34b3f6f4ad95385e44dd04533d89b957ca0509afcc8e3ff8f6557e213a71b236ac442da9c949391d02bec544919af12dfb71d32e07b979531430e36ade8c1df55465ec8750ad04efc5e89df10b1"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0x448c0}, 0x4004851) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000880)=@assoc_value, &(0x7f00000008c0)=0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x22}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x2, 0xf, 0x8000, 0x5, 0xb, 0x8c4, 0x4]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x389}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x936}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000) (async) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x20000800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r0) (async) write(r0, &(0x7f0000000d00)="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", 0x1000) (async) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001e40)={@in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, {&(0x7f0000001d00)=""/222, 0xde}, &(0x7f0000001e00), 0x4}, 0xa0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001f00), 0x1, 0x0) (async) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000001f40)={r0, 0x4cedf67a, 0x100, "b3010dab149fccb6a8457a4b40ddbbca5aa47a056d7ff80d9e157b30a98305aae7af54ec47aa88cdcf897b52e22f705f0aa3aa9d4dc97f6f5c8bfc1d48954ef3d8b5371edade4f211a4df5f1bd273858093f1626313ba18d26ebc54c952f666cfe323f68ea3ed99a6b125a97242ec084b7b5a32bd75f609af2cf7b7ac9afc9bab7957a3b9a98f3b5eb757b42e2203fddd01adb67c0c6c5a099d04f9a32d821f73354f5bf869cbc256aa150529d5f77553b375250da0802c1d3e8380d41eae30b4abdd4b893946b08d79334aa75809d2bf5fc4a2f4e43007de58346b6eaae7bfbe50be8f27b24ca5fe3ba311a0fc753c3346b0e26708c85300d949f021c698eb1126f091184e4bbb8a9477fd3df977ade040f5ccd88a367f5d0f8e6a81aa7085dd71102c1ff70e63ed71458fae35e774c1ca08a8ec30f593958886badd8b062bddc864ee0c2a082451d0d713118f74ff81c75673c4f34ee6ec74d9a4df56e1ec4f6a25db7991733cf91588f52f698df70e23269de53416b165f81d6a1765b26b799e356e9f62af88418b11a00678fdcc6d8ab13a9c525362c5f103560089afd4ce9d0dd8b974cf9344bc7ceb1c3198c4228d848220aee1a2a186f2925a0db7521031106ed4e5e734ea60fa185f25dc1ffa8065bd922ebdaf59ebd50448bb00b753e7067dda6546ce965d9eefd3fef18a60c8f4a74a2c443e02d75db53c32f49bd26a7b86d04c12630081f433f106fe43e9d0a06ee99b54d563e626b2fc2bd7ac90de7825381b5ba27b7e8a01faf2f5dbb3cd97ae34bca692684935af4d8773f9a21465cbaa3754410d3bc0ddf54673687e147814d632e9545c0ebadb1285d6202f92a217bdc1beb96b44198db2bb038786870a7cb369124d2e50c8939d5fc42c720361eb088dc0e3ba0dbd3b9d0e7ba305a4381a3b37599550f15ce6396b683b57b10caee87144650795501f38840f2078c00f60fc638da2020101464e12a868b7468403261e488863c73074e54615f2dd6a63cde4daff8651e218a6a34bb1779952242f57215a0c66a1a003264cb8edb8f19d827a46cf406bab47420d661e64cfb024fd1115ee9ad817ec778b33b8584f579f793760782f918402c852af37a2ffc72c3998305be24ea730de1b05fe86fc65716d19682339fabfe9f8bce2b2a42c624cbf608152a4ce1b5ae69bc2b3a7405306dcc4728a651a473be2948e31949f7eb5805321ee63f8d40be8d49a23c661256f7a91f4311bb8e9aeab382330e108a6b32a73c1dd0fbe63e076c974c485e68aac5e1c0e11667c30b88ab6932a596b7a924444435bab7628146e65ae5aea02ae24c1a2376820d9e13a3f662a604e8a9eab89026fa086b79b0630bfcc19a68bdde469474cdfae80713147ea97a18f8112d8f3308453310163922f1fa1182f025a9cb071aa84100d6a07a08cc621777ac6da56f749da140ce8866383a62a30e2444255abf2c88021daba36853295c8896fb6745f1e9552809bac51fe2ebf32336574ce5855dfb5ce23bb79991bbd526e02d35bd26036b987999fcdf7ae6d237d211996dba4bf657c1bc09729905e9611bbe9e728d6d59ae71e8b3cf982d21b754fdd9f2bb7f7525a2f96f804ac46c494d95a9795fd96bc9a42fba99e2e0ee4ae9054e7d72a543548f4032dfe4d7e66aa5c465685704f2e923d0eadc13a0ba86dd38f78773d97b7ba210326e43bce8a8ca4c5e29360e0c364e36eecea69b1f6d5951b5ef214bccee7802e939073f88ba9fdb8ecf7082089ac3dacce56564ab723c92d043a8a19a4325e49cb8a77dc6fd00f097531c60f8bb56d7930249bf69a478a27c6ca84ebdc151e3ec4762c0ee17766477863e48b2c57624faf8c9b256332ed3d9b4f4e94f74499324fadbfa658945794cbefb25246576e26d1c641f976540b854d92a1b0a254dedbad2406132cd3a22e3aacca4f978d68934bcad1e8adeda125114790f6772ef9e6dddc2135d1d2917975cf779a46098afda20e0333432a0646640fb927916c743bb88c50d22b46fb5fb57939cf124093daaee0b1e4bec9b1291ac91fd56975de2fa33c02ce9b271363e29a65a1808bb619e7c117f23fbfec1f57d6c48ca9bd138ea7101b5aba9d88bf9f20cf147b32c7f6f81864f9ef16464bc4fb186e9cca64c8535180afb631c61d615786358fdc46ccaf79e561df1e04d0bbac99f6e96cef9cef5a94da8138e3033a366b1ba3772b5eee908fc29abf6bdf9eb543931bad88aa2a472e1ab6760be06e1fa28fa65ad6b851f0c5dea8b32118167663d26fa06f1eb3a7e7c9743d2e528c976cb5bd9aeb325f435e37057125f7ca2d755a716247af187e609a621d9425842fecf38702cb5bd50c9b636937575fd1cbaf2d6879b50486cdbb65a1460d6228d43662af2afc422356f9744f5c60823b6a389f4b3e013af43f4f48067aa39841f1aeaacc88010b19361e1e43eaf4b29f9a91c7fba012be1e8407ec97190a73a5457d7116fca8cd2cc51ef0095af27086b974f46d6f35f5e53586dba44b5c9cc1454a4700d9c902999d6d290d99b13e84aeef3defb0ef7da0eb487fee83d3e7641c9d6d6bccdbdc77590c8bb0165441f54ee33a033395ceef52991b7c886858c696d5cd4f594a46f07081e54e7fa3101af83946b204a49242d9dd25aeb7bca659dc85ff87dd29af434f9e8200fe64f52d118348dadbc9bfb87b423fbe6bc89e6bbeb891a1d3a1e72ba3a3c3cd5f4b3f64d2c4d43820351af984a2f3f7c0cc233f842de584d69086cad8b731b9acdb4af4ca84e8c78df6a966396a2657e17a9b3ef5b9c02ca3d14cf5d627fd25a79fb4efe2f815c9b66eeee74a7beff0d5547a720734d7c186adc4bc21b74b06ad5f7e735e7d0eed9b2851497d974a46f4bab7f9b07887350149e4d6a71a459555647765e11ab3bcdef97c4e9c6c0840210da3d8fa406fc9a5cac73ec8ed782fca933bbe3899471a8f5b72fc92a3c72948c5e362c4636e6ccb2a8dd7545c7821b2c43d43df057287a411ada871104817049d1467a12dc922f8c1541c383bbc43a3987852e3d36f5c776a08f9d82a2fcaf4019f2b982d26cff62ab840384ddcef1a4b5743af41d43f3a8dcc2e59ce5a49c93fb95f07527b3f0ee8970bbf535ba728d8e2a9a3669d95f3e5543eb2923b7ee80f67e261804273a2b045ecb4606f977de944c8b4502b226442e9cb56608a0ac9dd23e4ccd67f18850243eb82add5275835363621349d51868b348277875891040f8842b9c11c29e9dd5bb842e1e696a786e612225fc3c5363c4e2425ef20b038fdb669048bd73bcdea12a25cbaafe344d39d4e6ab23c1fec53e95b46a574812a4e38813bb9b033c34c78480b82ad221bc94cace7b8d0cda2c11fc36e2000b38e5f95829e26064c50b6bb3b15aa2dd1d84311b346ef1d8a0276723f54a81a30178b0c84f0513f3c3853e1620663ea361f4606ee1ec2206a55b51a1ad943ba65576301fe197c812d89818e4cb03f0cd9fce95aa1985e047fd3a12b60e8e5020363df32bf2f92ee6acf932893dd44a329d3dd2c7965ba5b2e4d5268c13ef42edb500c44f37146020ec45b7e9d6f2a3dd955f931f6a9910e9f5da00bd88e76a5a5e37b64ba6406c963e20d560d49a931057c5ef442d7a2989a20834385226939d81132c5ebcbe27c67968332144c1314d85ffddd99511a559daaacd15d1e3cab7547bf5594734283b2bda1000b0291bc21e098c196fe3a974b5c1495e5df55d9a1dcc3b30d257eedd2178797b6eda3b56627f5c5769d41d2e545ccf547971dfa4edf7c1c1bf3b6a8b344d9a53b2cdcc7e4c35349352e376bbe87bb407405dd8d230bf2b8cb517d3efb84e39c6e6751757d2994b6e0f39bf4254f2729ff6cf85601670140fbdf51810d4127bd53ac9538b59bdc2226829eff65d4d89d00cdfd0fa73b7308b4969c7a5148f5a2a10f1bd33916a75ff44545853c8c9079c85bc97407190f58494914c00d77e4bbbb3bda1dde8ed6151820f1acbd59464c08af85281914d44165c32a164b5a766ff7f59200b7b165fb7a3bf704e0ba704e9884c61ddea573d2aa6fd022ea9fee88540af353f3aa7df576d910940a4df23387826b22c02168eb7b680a648128b7dcd8d7b5ec8128c2e5d55ce934241e65bbcda60e63fe53ee6eca02747da0df587f41f236f13f226cca76ce3fd685173e24fbe0915de2230bd474feee6b2f0b0ff35c06b30fa8ec589f9084224ad1bca4a6fa8e6804f3cccf17450709e854dbfa624fa98aca2e4488c497eaecdb8373b36711fbc6c5403098611277c1cb37b9b63aa374a8231eed32511786c6f6c01663108bf4b9713aac28956960d6731ebe0aed29f758a360e063b0e0975d94a3bea35594a03ded81adb18544ab0f6c6c4081ea194d42befbf6414da7102e48639dc3379efc146d60c406697cc03df5d93c291dbdb2b2af73d7e76a8c4b7e7f808a9bc706cab099477f1f38698d9284860793ff8d30c3709f2f25bbb31df0a485046c4cff42118e0dc3feaeb1b7d940caa74079f7d0bad6c3fc3187cfe45812184db0b58d8eadbc48fe78014db951f294361749378d9cb34e7ae4a2c2bf9629c74390f5c2a1e054dc7c9f55b50f72045269546b84ae43de3cf99235b486e9ef2e11d142095d93d999aa50a4c84e93a0206d28fe83eeb3ab98a389dd9f59e38052e30a3a307101db3f11a60db294b5c28bb3a2c177dd6a269acf53199905550bb235e80a4a125d6a0a62316f8032185ad5db7bf6f229d8e3795ddfd817d3aa653134dd92a8064ce9ea7eff05e4438a7f9169406446aadf5d841813faaec2557a8279a5e1697726c9b8733020b3a11b8be7753656f2e0e88f281d8427596b3a4fedcc539c9f0258ec8573608b8edd343c0f0b7454428152c94f63cf78eaa8ccba0b4af5d8fecdfe897c37dedbf7901732a206c604c080e29166b6f3feda5e5d5c308669aedb92a06ce4a756600add1417428f1079dd889e618d9f5274b2ae439612b8251201831242221b585c3839048ace86812344405ec30c0664d772f81528b76e8214df254ca5de94780ecc7dc5028b62d65640e370aab787b14681d4df978f305aad5fefe26df369d6982092edb9d7bca827a3d4ec7bae9336c94a7d1dabde89328df2c8ef292411bef25fe9aed22ef76f710750396bd72cd0068cbb3a5a95f479cc69001c09f9bcad8d5b753564389d56dfe8c22a97aa1c2410c80135bf3a8acacaf730ce6a3cd9a2d8d268c796906fa66ce9e1b154d2c6b1179bbd1597d9c243134066feb38d45cd3c3928ae95f62458a39bb16d626153a25b17661f97bd3dcddcdf811a3a1075ff5d8c6ce2d363c485f6df9f134f8c0a63198e0b71a92baecc0fcbef16ac258c4e142c8bff0e4d63321cf2bc59d64e63a32830804b2cd87f4c1eb1e1fc97c17407b280c4eab95edea7b9927be88b20c3473abe52978c562c68a90821485d2756dd7645f3e93200e39bef5ba3be2f57859f8b2f1a821bcbb90ea18547be86260f37ff07de1d4e090787c66cb66487ccbdff4e4c336a01c52921aff2092b687d7d2a82ab427dc61e48c5f1a9d326b6c94cc64682b070f7aa1097a0f2362c34f9eb7bb452d06c0b8aa681ccf4d01447c80cb1caac8ccdf8db6df25e6336cb9bc3c1cca55b263cb7012a3689be1fb482cb91407c0e9e93210fac15c22ac28b25d5917465fc22e1f70cf394b0cdc810424794ad48b8b6bcc09fb76124f9388b98b2ec95e1e6b24780b490031e912eb8661ff4f538bce945fa59333c30dae145d61e1"}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000003000)={0x0, "621708c3a94cd248485d3f9486976ff0"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000004000)={{r0}, 0x0, 0xa, @inherit={0x70, &(0x7f0000002f80)={0x0, 0x5, 0x7, 0x4, {0xd, 0x1, 0x9, 0x3, 0x200}, [0x4, 0x46ca, 0x6, 0x2, 0xb]}}, @devid=r6}) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000005280)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005240)={&(0x7f0000005040)={0x1ec, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x1c4, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @initial, @random="24843b739c07", {0x7, 0x4}, "", @void, @value=@ver_80211n={0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x3b, "174efb5bf5d126f9254d79590b16d898b9598e77662155852c8424a9df81c0397d75f3c42f859cc443443ddd82257ff507dcfee6b8e24fe7bdc3e9"}, {@broadcast, @broadcast, 0x65, "5a34444bec2d4248d06637f7b1e539d9c11cd4487a3dbdfdb39cd95099040bcfae0824841c99fab98afb03b04015b7c3611b2f3cd834454d7da002faca44ebe95421c93913afa6bc5f658c53b351e5d141611eae102ca15001fe32673abde5b9f0b716c906"}, {@device_b, @device_a, 0x2f, "b05bfa15c723b9cec56177e44a07a5410bdce052cd33d7cc313a4a36c05c3fa59ddc51a0c7f7928bb32948781c2565"}, {@device_a, @device_a, 0x95, "f67dbb36b4b898161732a02add6ec592fccf48c8ed84474019a7d6e2958be266489d2cefc63bfb2393badfc16387686dba60bc4412c50dab8859e0845417d878773a50a30259bf60780ddbe62bd47734ae151fdf10a9b6d1dd99fa262418368907a1aec840c53fb0b22b851ca91b1765e4580fd162e20c7a101aba1570439b5874d884da8f2b803763e46a1cc54f55da9932a4ca72"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x60}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88e7}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) openat$cgroup_type(r2, &(0x7f00000052c0), 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000005540)={{r0, &(0x7f0000005300)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x10040, &(0x7f0000005340)={@align=0xfffffffffffffff7, {0x418, 0x7ff, 0x7, 0x5}}, 0x8001, &(0x7f0000005380)={@_ha_fsid}, &(0x7f00000053c0)=0x2}, 0x1, &(0x7f0000005500)=[{0x2, 0x9, &(0x7f0000005400)='@$\x00', &(0x7f0000005440)="1abd363ee7986f3e3d3c420b3effe98147bfcfe8c2ae41d7a4d85b0282af8bff0b6bf751d46537f1443eb8a3e32e4da07259f042d385a3391d6d2d3dd2fdeab80cbd4503350edc83c8a71cdf40de49e0ceca2d2f234d1a1de5552b462282e344e5ffecd88d334f33b549646841497c27f726b5e8b4efd392484f20b8c3138408799d042d29bcbdc9fd357d696e4ccaf4cac910cc297a8c148b35df1101760d3e8b27488d5a7b9995844f5d5b002a7b", 0xaf}]}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000005840)={'syztnl2\x00', &(0x7f00000057c0)={'syztnl0\x00', 0x0, 0x29, 0xc, 0x4, 0x4, 0x26, @private0, @private2={0xfc, 0x2, '\x00', 0x18}, 0x80, 0x27, 0x5, 0x6}}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005900)={0x11, 0x1d, &(0x7f00000055c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x797, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000056c0)='GPL\x00', 0xfffffff8, 0x83, &(0x7f0000005700)=""/131, 0x40f00, 0x10, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005880)={0x5, 0xc, 0xd, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000058c0)=[r2, r2], 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$int_in(r9, 0x5452, &(0x7f00000059c0)=0xfffffffffffffff7) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000005a40)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000005a00), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}, {[0x0, 0x2], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "cae7"}}, @common=@ttl={{0x28}, {0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x7, 0x0, 0x4, 0x3, 0x4], 0x2, 0x3}, {0x4, [0x0, 0x3, 0x0, 0x1, 0x2], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000005e40)={0x3, "c4c0f8"}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000006040)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006000)={&(0x7f0000005ec0)={0x11c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TUPLE_MASTER={0xb8, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xb, 0x8}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x73}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xf}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x4, 0x5}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000006140)={r2, 0x58, &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000006780)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006740)={&(0x7f0000006180)={0x5a0, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xab, 0x4, "6be7a1a5bc4e3dbcb095ea410292393267e33f7e62a19f40637b66cdff2455877c83641133813c76ada2eff8356f2455ae0705c15a744052818ed36264ee350648160ab6efbe5aaac779a0f657fd7bda965077ea73ad39791e11c4e09bed4d3a8e65e516a0af4699fb203eddf900af09d90f7c306cfd68c3661b32b89f640d8669017e1433f238b2baee9964d8a562a4aa3b906dd8a6cac616dd06069a1c7022e84582174ee33d"}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@&\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffba96}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x598}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')(@$&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'SET\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'REJECT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}-]%.(^\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ah\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "06ba4fa5afe10b282c728701cf35c4aaabb161a5cda81dd57310fb61829e342bc45b129ff0465db049eacf6632641f052d80c5ddccd9108476575e0a763eefa391e9803193efb09514635df3a1bee366ef86f945f80098bbaca4eb153c538a12da0a8462a631e45ecfad"}, @ETHTOOL_A_BITSET_VALUE={0x6d, 0x4, "a1d273c19509e5bbf1821148d206c1f92cc8e8752fe2fb014c73204a511aff591581a1ac05286cb0285a9b69be07c017327993af6cd059bd6d731f9e2adcb6dc6b35b50e93ec481c16c81ee8e21591b5b440f21526c49648630d5afd3c18dd397a13a1b8eb5e046250"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x274, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "6274e5fd74c1189008edd16f1456b2499dc5f3dafd8757695355312843decd5db1c7b6714a55bb0fb8c3b95a390cc68e32480fbeab60e25a86bfd3fabdde2ef5370e92c0840309eb647acb93ca0b6b776b1c61f60c159674a8125727b8906473d3a276e9c2b3af20bb61d140510ded1f063036dd96f305c2903fe2d4506d3b20515569dcc603c705526e45baf9c80f4aa0ecf8224512aa28cfc6edc190f3987d9010dced1a047af57eca1e8b77bd9a5890f0fb5af16819770f0b8d6d2c5bbf344d55907e5035c720a03f43238210659ade8c1ed0e66035954fcffa2fc4289c40af"}, @ETHTOOL_A_BITSET_MASK={0xcc, 0x5, "0be6db21c8f45ff76fb7a2eb66e43a31c1cca9c0f00e86cfce81d9193da318168942d22c78d12cc1ee0ed2b75512eaf2b27ca1010d28b60f2861c6b741ffbce4decadc172b331fc7d684554f769653a9cfc859815fa2cff26a11a3cb40980521f0d8d98f25181d2854f7f8cfde48e64421cce8e9274ef659a378b3c181a781ed8b3a69d355459637bf8e6107e0ef7d0254d09c6cf96dc495efee3bf4e0894754ab90385cb74760689da2ef8994a1211567f599ccf504e397757d050bfd4fc5d888f4a9d77137e852"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x41b2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}, @ETHTOOL_A_BITSET_VALUE={0xa7, 0x4, "4919d146d570a0dfa3585ab929c6d123a1f330c870f41fb68872b8d4f62b58b5b5204639e513b62a82ed93b43d3bc8d62215677f42c1d2a1447b66dcddc6f41570186922388d889a316f1cacc6f5122beae6444c6018eb8894c147a0004669ea1e23f1d4f70b77576df53faff9048f73608f417ac5129d3388f1aaf462ba275ee4af26f645e73adf15885165e899729c815f7cfe8ac8dcf6439f60764d0e9d57fe7d01"}]}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x8}, 0x4000) 24.452089ms ago: executing program 4 (id=5660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000200)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r4, &(0x7f0000000280)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x4, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x6, 0x7a}, 0x8) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}]}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4008840}, 0x24000840) 0s ago: executing program 1 (id=5661): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000", @ANYRES32=r1, @ANYBLOB="270201000000000008000a00", @ANYRES32=r1, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) kernel console output (not intermixed with test programs): 27041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4497'. [ 1126.168299][T27049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.222392][T27049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.282053][T27049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.553754][T27063] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4500'. [ 1126.607614][T27063] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1126.607743][T27063] syzkaller1: linktype set to 773 [ 1126.796693][T27069] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1126.796693][T27069] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1126.997859][T27082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4499'. [ 1127.074239][T27078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.074742][T27078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.077231][T27087] netlink: 'syz.3.4505': attribute type 1 has an invalid length. [ 1127.146668][T27088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1127.313431][T27078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.338947][T27078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.438485][T27078] gretap1: entered promiscuous mode [ 1127.438718][T27078] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1127.458620][T27078] ip6gretap1: entered promiscuous mode [ 1127.474658][T27078] bond1: entered promiscuous mode [ 1127.477024][T27078] vlan2: entered promiscuous mode [ 1127.477402][T27078] bridge1: entered promiscuous mode [ 1127.478324][T27078] vxlan0: entered promiscuous mode [ 1127.504287][T27078] veth1.0: entered promiscuous mode [ 1127.506990][T27078] mac80211_hwsim hwsim41 wlan5: entered promiscuous mode [ 1127.524854][T27078] ip6gre1: entered promiscuous mode [ 1127.526800][T27078] batadv2: entered promiscuous mode [ 1127.526978][T27078] vx0: entered promiscuous mode [ 1127.527611][T27078] bond2: entered promiscuous mode [ 1127.527634][T27078] gretap2: entered promiscuous mode [ 1127.562639][T27078] bond3: entered promiscuous mode [ 1127.562797][T27078] ip6gretap2: entered promiscuous mode [ 1127.563355][T27078] bridge3: entered promiscuous mode [ 1127.567027][T27078] bond4: entered promiscuous mode [ 1127.567719][T27078] sit1: entered promiscuous mode [ 1127.614428][T27078] veth0_vlan.4: entered promiscuous mode [ 1127.785303][T27087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1127.910185][T16500] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1127.910244][T16500] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1127.910285][T16500] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1127.910324][T16500] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1128.183020][T27121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1128.222530][T27129] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1128.285363][T27129] x_tables: duplicate underflow at hook 1 [ 1128.527992][T27160] ip_tables: iptables: counters copy to user failed while replacing table [ 1128.756867][T27100] bond2 (unregistering): Released all slaves [ 1129.337461][T27126] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1129.372094][T27253] __nla_validate_parse: 2 callbacks suppressed [ 1129.372120][T27253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4513'. [ 1129.736737][T27269] netlink: 'syz.0.4514': attribute type 28 has an invalid length. [ 1130.074097][T27265] tipc: Enabled bearer , priority 0 [ 1130.314655][T27272] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1130.314814][T27272] pimreg1: linktype set to 825 [ 1130.331495][T27258] tipc: Disabling bearer [ 1130.761634][T27280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1130.765111][T27288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4519'. [ 1131.376367][T27318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1131.376402][T27318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1131.376435][T27318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1131.731085][T27323] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 1132.019074][T27323] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1132.026939][T27323] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 1132.037908][T27323] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 1132.059496][T27323] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 1132.068195][T27323] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 1132.068430][T27323] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 1132.068649][T27323] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 1132.068865][T27323] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 1132.114158][T27323] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 1132.849995][T27360] tc_dump_action: action bad kind [ 1133.343464][T27376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4534'. [ 1133.653756][T27377] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4535'. [ 1133.855143][T27297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1134.293989][T27403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4538'. [ 1134.422713][T27388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4537'. [ 1134.897218][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1135.037623][T27426] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1135.037655][T27426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1135.037672][T27426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1135.074243][T27421] validate_nla: 25 callbacks suppressed [ 1135.074341][T27421] netlink: 'syz.3.4543': attribute type 1 has an invalid length. [ 1135.558088][T27443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1136.194168][T27459] ovs-s!: entered promiscuous mode [ 1136.512057][T27464] syzkaller0: entered promiscuous mode [ 1136.512085][T27464] syzkaller0: entered allmulticast mode [ 1136.702858][T27488] netlink: 964 bytes leftover after parsing attributes in process `syz.4.4558'. [ 1136.702885][T27488] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 1136.845192][T27493] syzkaller0: entered promiscuous mode [ 1136.845219][T27493] syzkaller0: entered allmulticast mode [ 1137.473751][T27505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4562'. [ 1140.242677][T27497] kthread_run failed with err -4 [ 1140.329210][T27509] xt_CONNSECMARK: invalid mode: 0 [ 1140.336996][T27510] xt_CONNSECMARK: invalid mode: 0 [ 1140.464676][ T31] audit: type=1800 audit(1792597461.813:25): pid=27513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4565" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1471 res=0 errno=0 [ 1140.522946][T27512] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4565'. [ 1140.522974][T27512] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4565'. [ 1140.597455][T27520] Bluetooth: hci0: unsupported parameter 5135 [ 1140.597486][T27520] Bluetooth: hci0: unsupported parameter 8192 [ 1140.597502][T27520] Bluetooth: hci0: unsupported parameter 5135 [ 1140.597516][T27520] Bluetooth: hci0: unsupported parameter 8192 [ 1140.638573][T27520] netlink: 'syz.3.4567': attribute type 1 has an invalid length. [ 1140.843340][T27520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1140.884135][T27539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1140.942472][T27531] bond2: (slave veth9): Enslaving as an active interface with a down link [ 1141.041711][T27546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1141.105563][T27532] bond2: (slave macvlan0): making interface the new active one [ 1141.146543][T27532] macvlan0: entered promiscuous mode [ 1141.147270][T27532] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 1141.179499][T27553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4573'. [ 1141.732253][T27567] erspan0: entered promiscuous mode [ 1141.739396][T27568] tipc: Enabled bearer , priority 0 [ 1141.768926][T27573] rxe_eth0 speed is unknown, defaulting to 1000 [ 1141.927257][T27571] syzkaller0: MTU not usable for tipc bearer [ 1141.927283][T27571] tipc: Disabling bearer [ 1142.353577][T27607] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1142.355930][T27607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1143.104585][T27648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4594'. [ 1143.187594][T27651] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4592'. [ 1143.264235][T27654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4595'. [ 1143.431775][T27661] netlink: 'syz.0.4596': attribute type 1 has an invalid length. [ 1143.431803][T27661] netlink: 'syz.0.4596': attribute type 2 has an invalid length. [ 1143.684401][T27677] netlink: 'syz.1.4598': attribute type 16 has an invalid length. [ 1143.684441][T27677] netlink: 'syz.1.4598': attribute type 17 has an invalid length. [ 1143.719705][T27677] lo: left promiscuous mode [ 1143.725617][T27677] tunl0: left promiscuous mode [ 1143.750067][T27677] gretap0: left promiscuous mode [ 1143.754997][T27677] erspan0: left promiscuous mode [ 1143.755241][T27677] ip_vti0: left promiscuous mode [ 1143.758053][T27677] ip6_vti0: left promiscuous mode [ 1143.796306][T27677] sit0: left promiscuous mode [ 1143.806527][T27677] ip6tnl0: left promiscuous mode [ 1143.808685][T27677] ip6gre0: left promiscuous mode [ 1143.833891][T27677] syz_tun: left promiscuous mode [ 1143.851419][T27677] ip6gretap0: left promiscuous mode [ 1143.912344][T27677] bridge0: left promiscuous mode [ 1143.948564][T27677] bond0: left allmulticast mode [ 1143.966073][T27677] team0: left promiscuous mode [ 1143.980452][T27677] nlmon0: left promiscuous mode [ 1143.981513][T27677] batadv0: left promiscuous mode [ 1143.997678][T27677] vxcan0: left promiscuous mode [ 1144.007952][T27677] vxcan1: left promiscuous mode [ 1144.016374][T27677] veth0: left promiscuous mode [ 1144.053076][T27677] veth1: left promiscuous mode [ 1144.075994][T27677] wg0: left promiscuous mode [ 1144.093251][T27677] wg1: left promiscuous mode [ 1144.118088][T27677] wg2: left promiscuous mode [ 1144.119311][T27677] veth1_to_bridge: left promiscuous mode [ 1144.158654][T27677] bond_slave_0: left promiscuous mode [ 1144.168305][T27677] veth0_to_team: left promiscuous mode [ 1144.191914][T27677] team_slave_0: left promiscuous mode [ 1144.208346][T27677] veth1_to_team: left promiscuous mode [ 1144.219995][T27677] team_slave_1: left promiscuous mode [ 1144.220356][T27677] veth0_to_batadv: left promiscuous mode [ 1144.228560][T27677] batadv_slave_0: left promiscuous mode [ 1144.255750][T27677] veth1_to_batadv: left promiscuous mode [ 1144.278417][T27677] batadv_slave_1: left promiscuous mode [ 1144.423524][T27712] xt_cgroup: invalid path, errno=-2 [ 1144.435570][T27677] xfrm0: left promiscuous mode [ 1144.447973][T27677] veth0_to_hsr: left promiscuous mode [ 1144.467395][T27677] hsr_slave_0: left promiscuous mode [ 1144.482129][T27677] veth1_to_hsr: left promiscuous mode [ 1144.498118][T27677] hsr_slave_1: left promiscuous mode [ 1144.512020][T27677] veth1_virt_wifi: left promiscuous mode [ 1144.535106][T27677] veth0_virt_wifi: left promiscuous mode [ 1144.552413][T27677] virt_wifi0: left promiscuous mode [ 1144.552912][T27677] macvtap0: left promiscuous mode [ 1144.553074][T27677] geneve0: left promiscuous mode [ 1144.553237][T27677] geneve1: left promiscuous mode [ 1144.553420][T27677] mac80211_hwsim hwsim27 wlan1: left promiscuous mode [ 1144.594406][T27677] vlan2: left promiscuous mode [ 1144.594435][T27677] bond0: left promiscuous mode [ 1144.597770][T27677] ip6gre1: left promiscuous mode [ 1144.597797][T27677] ip6gre1: left allmulticast mode [ 1144.597948][T27677] bridge1: left promiscuous mode [ 1144.597964][T27677] bridge1: left allmulticast mode [ 1144.598110][T27677] ip6gretap1: left promiscuous mode [ 1144.598239][T27677] bond1: left promiscuous mode [ 1144.598257][T27677] bond1: left allmulticast mode [ 1144.598400][T27677] macsec1: left promiscuous mode [ 1144.598528][T27677] ip6gre2: left promiscuous mode [ 1144.598650][T27677] gtp0: left promiscuous mode [ 1144.653937][T27677] ip6_vti1: left promiscuous mode [ 1144.654395][T27677] bond2: left promiscuous mode [ 1144.654922][T27677] batadv1: left promiscuous mode [ 1144.678960][T27677] macsec2: left promiscuous mode [ 1144.679134][T27677] bridge2: left promiscuous mode [ 1144.679153][T27677] bridge2: left allmulticast mode [ 1144.679333][T27677] xfrm1: left promiscuous mode [ 1144.679500][T27677] geneve2: left promiscuous mode [ 1144.687124][T27677] macsec3: left promiscuous mode [ 1144.687492][T27677] netdevsim netdevsim1 eth0: left promiscuous mode [ 1144.696692][T27677] netdevsim netdevsim1 eth1: left promiscuous mode [ 1144.697079][T27677] netdevsim netdevsim1 eth2: left promiscuous mode [ 1144.706458][T27713] can: request_module (can-proto-5) failed. [ 1144.708342][T27677] netdevsim netdevsim1 eth3: left promiscuous mode [ 1144.718173][T27677] bond3: left promiscuous mode [ 1144.728420][T27677] bond4: left promiscuous mode [ 1144.748188][T27677] vxlan0: left promiscuous mode [ 1144.748258][T27677] vxlan0: left allmulticast mode [ 1144.748707][T27677] bridge3: left promiscuous mode [ 1144.749221][T27677] sit1: left promiscuous mode [ 1144.808034][T27717] can: request_module (can-proto-5) failed. [ 1144.952894][T27710] bond6: Removing last arp target with arp_interval on [ 1145.023055][T27716] bond7: Removing last arp target with arp_interval on [ 1145.133113][T27725] tipc: Started in network mode [ 1145.133153][T27725] tipc: Node identity e268cac36733, cluster identity 4711 [ 1145.133372][T27725] tipc: Enabled bearer , priority 0 [ 1145.161553][T27725] netlink: 'syz.4.4607': attribute type 8 has an invalid length. [ 1145.612130][T27748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.130234][T15538] tipc: Node number set to 2237385411 [ 1146.207455][T27772] __nla_validate_parse: 4 callbacks suppressed [ 1146.207480][T27772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4619'. [ 1146.306944][T27776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4620'. [ 1146.352772][T27777] netlink: 'syz.2.4618': attribute type 1 has an invalid length. [ 1146.485672][T27784] sctp: [Deprecated]: syz.0.4623 (pid 27784) Use of int in maxseg socket option. [ 1146.485672][T27784] Use struct sctp_assoc_value instead [ 1146.526663][T27777] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1146.558312][T27787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4622'. [ 1146.720111][T27781] bond8: (slave veth5): Enslaving as an active interface with a down link [ 1146.807811][T27777] bond8: (slave bridge5): Enslaving as an active interface with a down link [ 1147.199208][T27809] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4629'. [ 1147.242588][T27806] TCP: TCP_TX_DELAY enabled [ 1147.509061][T27824] netlink: 'syz.4.4632': attribute type 8 has an invalid length. [ 1147.755338][T27831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4634'. [ 1147.772574][T27831] veth0_macvtap: left promiscuous mode [ 1147.825580][T27838] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1147.881504][T27837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4636'. [ 1147.965627][T27840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4636'. [ 1148.027743][T27837] netlink: 'syz.2.4636': attribute type 3 has an invalid length. [ 1148.244574][T27856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1148.248338][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4640'. [ 1148.248697][T27856] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4639'. [ 1148.644270][T27874] netlink: 'syz.4.4646': attribute type 13 has an invalid length. [ 1148.722479][T27878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4650'. [ 1148.871145][T27887] netlink: 'syz.2.4649': attribute type 2 has an invalid length. [ 1148.890268][T27879] netlink: 'syz.1.4650': attribute type 21 has an invalid length. [ 1148.890296][T27879] IPv6: NLM_F_CREATE should be specified when creating new route [ 1148.890507][T27879] netlink: 'syz.1.4650': attribute type 21 has an invalid length. [ 1148.890693][T27879] netlink: 'syz.1.4650': attribute type 21 has an invalid length. [ 1148.890879][T27879] netlink: 'syz.1.4650': attribute type 21 has an invalid length. [ 1148.891054][T27879] netlink: 'syz.1.4650': attribute type 21 has an invalid length. [ 1149.041183][T27887] bond0: (slave dummy0): Releasing backup interface [ 1149.043587][T27887] dummy0: left allmulticast mode [ 1149.066635][T27887] team0: Port device dummy0 added [ 1149.067765][T27881] syzkaller0: entered promiscuous mode [ 1149.067785][T27881] syzkaller0: entered allmulticast mode [ 1149.135643][T27881] ip6gre2: entered promiscuous mode [ 1149.135671][T27881] ip6gre2: entered allmulticast mode [ 1149.138648][T27883] syzkaller0: entered promiscuous mode [ 1149.138673][T27883] syzkaller0: entered allmulticast mode [ 1149.428387][T27901] bridge0: entered promiscuous mode [ 1151.323625][T27970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.396428][T27970] bridge_slave_0 (unregistering): left allmulticast mode [ 1151.396459][T27970] bridge_slave_0 (unregistering): left promiscuous mode [ 1151.396533][T27970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.476683][T27965] syz_tun: entered allmulticast mode [ 1151.606542][T27981] __nla_validate_parse: 68 callbacks suppressed [ 1151.606587][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4671'. [ 1151.638645][T27981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4671'. [ 1151.840768][T27988] sctp: [Deprecated]: syz.4.4675 (pid 27988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1151.840768][T27988] Use struct sctp_sack_info instead [ 1151.992860][T27998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1152.072365][T27994] validate_nla: 29 callbacks suppressed [ 1152.072391][T27994] netlink: 'syz.3.4674': attribute type 1 has an invalid length. [ 1152.072410][T27994] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4674'. [ 1152.076215][T28003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4679'. [ 1152.076262][T28003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4679'. [ 1152.076672][T28003] 8021q: VLANs not supported on ip_vti0 [ 1152.173705][T28006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1152.230909][T22311] macvlan0: left promiscuous mode [ 1152.378064][T28008] syzkaller0: entered promiscuous mode [ 1152.378090][T28008] syzkaller0: entered allmulticast mode [ 1152.483319][T28018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4682'. [ 1152.694916][T28024] team0: Device xfrm0 is of different type [ 1152.713269][T28031] Bluetooth: hci0: unsupported parameter 5135 [ 1152.713296][T28031] Bluetooth: hci0: unsupported parameter 8192 [ 1152.713310][T28031] Bluetooth: hci0: unsupported parameter 5135 [ 1152.713324][T28031] Bluetooth: hci0: unsupported parameter 8192 [ 1152.778644][T28018] tipc: Enabled bearer , priority 0 [ 1152.977251][T28037] tipc: Enabled bearer , priority 0 [ 1152.977564][T28037] tipc: Enabling of bearer rejected, already enabled [ 1152.977910][T28037] tipc: Enabling of bearer rejected, already enabled [ 1152.978236][T28037] tipc: Enabling of bearer rejected, already enabled [ 1152.980833][T28039] syzkaller0: entered promiscuous mode [ 1152.980872][T28039] syzkaller0: entered allmulticast mode [ 1153.036647][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.037036][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.037365][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.037686][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.038022][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.060916][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.095970][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.096372][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.096694][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.097082][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.097417][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.146991][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.175517][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.175877][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.176220][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.221718][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.222139][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.222454][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.222783][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.223325][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.272562][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.315168][T28044] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4687'. [ 1153.317390][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.317774][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.318116][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.318436][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.318753][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.366002][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.367004][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.398878][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.399239][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.427182][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.429320][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.430131][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.456116][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.456453][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.456801][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.487194][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.487538][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.487878][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.488241][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.528208][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.528575][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.529276][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.561304][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.561702][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.562030][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.562347][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.562702][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.588829][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.589168][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.589487][T28037] tipc: Enabling of bearer rejected, already enabled [ 1153.735955][T28036] tipc: Resetting bearer [ 1153.802396][T28036] tipc: Disabling bearer [ 1153.846604][T28065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 1154.067612][T28065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1154.092032][T28065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 1154.117179][T28074] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1154.155098][T28074] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 1154.210601][T28078] bond3 (unregistering): (slave batadv3): Releasing backup interface [ 1154.235280][T28078] bond3 (unregistering): Released all slaves [ 1154.386292][T28065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1154.460603][T28083] bond3 (unregistering): Released all slaves [ 1154.505751][T28100] netlink: 'syz.3.4697': attribute type 1 has an invalid length. [ 1154.639733][T28097] trusted_key: syz.1.4694 sent an empty control message without MSG_MORE. [ 1154.668638][T28101] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 1154.716082][T28101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.311583][T28135] netlink: 'syz.0.4703': attribute type 1 has an invalid length. [ 1155.399135][T28141] netlink: 'syz.0.4703': attribute type 5 has an invalid length. [ 1156.191975][T28166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1156.436590][T28177] netlink: 'syz.1.4711': attribute type 1 has an invalid length. [ 1156.702873][T28188] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1156.735381][T28177] lo: entered promiscuous mode [ 1156.735606][T28177] tunl0: entered promiscuous mode [ 1156.735780][T28177] gre0: entered promiscuous mode [ 1156.735906][T28177] gretap0: entered promiscuous mode [ 1156.736046][T28177] erspan0: entered promiscuous mode [ 1156.736173][T28177] ip_vti0: entered promiscuous mode [ 1156.736328][T28177] ip6_vti0: entered promiscuous mode [ 1156.736450][T28177] sit0: entered promiscuous mode [ 1156.736600][T28177] ip6tnl0: entered promiscuous mode [ 1156.736721][T28177] ip6gre0: entered promiscuous mode [ 1156.811212][T28177] syz_tun: entered promiscuous mode [ 1156.811409][T28177] ip6gretap0: entered promiscuous mode [ 1156.811581][T28177] bridge0: entered promiscuous mode [ 1156.811742][T28177] bond0: entered promiscuous mode [ 1156.811875][T28177] team0: entered promiscuous mode [ 1156.812035][T28177] nlmon0: entered promiscuous mode [ 1156.812185][T28177] batadv0: entered promiscuous mode [ 1156.812343][T28177] vxcan0: entered promiscuous mode [ 1156.812496][T28177] vxcan1: entered promiscuous mode [ 1156.815751][T28177] veth0: entered promiscuous mode [ 1156.815935][T28177] veth1: entered promiscuous mode [ 1156.816094][T28177] wg0: entered promiscuous mode [ 1156.816244][T28177] wg1: entered promiscuous mode [ 1156.816395][T28177] wg2: entered promiscuous mode [ 1156.816582][T28177] veth1_to_bridge: entered promiscuous mode [ 1156.816882][T28177] veth0_to_bond: entered promiscuous mode [ 1156.817043][T28177] bond_slave_0: entered promiscuous mode [ 1156.875085][T28177] veth0_to_team: entered promiscuous mode [ 1156.875528][T28177] team_slave_0: entered promiscuous mode [ 1156.876361][T28177] veth1_to_team: entered promiscuous mode [ 1156.888539][T28177] team_slave_1: entered promiscuous mode [ 1156.888976][T28177] veth0_to_batadv: entered promiscuous mode [ 1156.889410][T28177] batadv_slave_0: entered promiscuous mode [ 1156.946678][T28177] veth1_to_batadv: entered promiscuous mode [ 1156.946861][T28177] batadv_slave_1: entered promiscuous mode [ 1156.947013][T28177] xfrm0: entered promiscuous mode [ 1156.947171][T28177] veth1_to_hsr: entered promiscuous mode [ 1156.947327][T28177] hsr_slave_1: entered promiscuous mode [ 1156.947485][T28177] veth1_virt_wifi: entered promiscuous mode [ 1156.947681][T28177] veth0_virt_wifi: entered promiscuous mode [ 1156.947841][T28177] virt_wifi0: entered promiscuous mode [ 1156.948281][T28177] macvtap0: entered promiscuous mode [ 1156.948444][T28177] geneve0: entered promiscuous mode [ 1156.948643][T28177] geneve1: entered promiscuous mode [ 1156.948808][T28177] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1156.948986][T28177] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 1156.949152][T28177] vlan2: entered promiscuous mode [ 1156.949498][T28177] ip6gre1: entered promiscuous mode [ 1156.955837][T28177] bridge1: entered promiscuous mode [ 1156.955978][T28177] ip6gretap1: entered promiscuous mode [ 1156.956099][T28177] bond1: entered promiscuous mode [ 1156.956231][T28177] macsec1: entered promiscuous mode [ 1156.956345][T28177] ip6gre2: entered promiscuous mode [ 1156.956472][T28177] gtp0: entered promiscuous mode [ 1156.956678][T28177] ip6_vti1: entered promiscuous mode [ 1156.956805][T28177] bond2: entered promiscuous mode [ 1156.956934][T28177] batadv1: entered promiscuous mode [ 1156.957088][T28177] macsec2: entered promiscuous mode [ 1157.078841][T28177] bridge2: entered promiscuous mode [ 1157.079312][T28177] xfrm1: entered promiscuous mode [ 1157.108317][T28177] geneve2: entered promiscuous mode [ 1157.108472][T28177] macsec3: entered promiscuous mode [ 1157.108629][T28177] netdevsim netdevsim1 eth0: entered promiscuous mode [ 1157.108771][T28177] netdevsim netdevsim1 eth1: entered promiscuous mode [ 1157.108903][T28177] netdevsim netdevsim1 eth2: entered promiscuous mode [ 1157.109044][T28177] netdevsim netdevsim1 eth3: entered promiscuous mode [ 1157.114362][T28177] bond3: entered promiscuous mode [ 1157.151256][T28177] bond4: entered promiscuous mode [ 1157.151660][T28177] vxlan0: entered promiscuous mode [ 1157.151962][T28177] bridge3: entered promiscuous mode [ 1157.152432][T28177] sit1: entered promiscuous mode [ 1157.193114][T28177] bond5: entered promiscuous mode [ 1157.193290][T28177] bond6: entered promiscuous mode [ 1157.193424][T28177] bond7: entered promiscuous mode [ 1157.193573][T28177] ip6tnl1: entered promiscuous mode [ 1157.193718][T28177] mac80211_hwsim hwsim42 wlan2: entered promiscuous mode [ 1157.193883][T28177] ip6erspan0: entered promiscuous mode [ 1157.403999][T28203] ip_tables: iptables: counters copy to user failed while replacing table [ 1157.888585][T28218] netlink: NAT attribute has 1 unknown bytes [ 1157.888626][T28218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1157.910355][T28218] __nla_validate_parse: 3 callbacks suppressed [ 1157.910377][T28218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4720'. [ 1158.366983][T28246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4725'. [ 1158.387677][T28246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4725'. [ 1158.527904][T28246] nftables ruleset with unbound chain [ 1158.648187][T28246] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4725'. [ 1159.184241][T28270] x_tables: duplicate underflow at hook 2 [ 1159.351423][T28276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4732'. [ 1159.362948][T28279] lo: left promiscuous mode [ 1159.366190][T28279] tunl0: left promiscuous mode [ 1159.367687][T28279] gre0: left promiscuous mode [ 1159.385722][T28279] gretap0: left promiscuous mode [ 1159.387826][T28279] erspan0: left promiscuous mode [ 1159.395796][T28279] ip_vti0: left promiscuous mode [ 1159.408179][T28279] ip6_vti0: left promiscuous mode [ 1159.416674][T28279] sit0: left promiscuous mode [ 1159.426001][T28279] ip6tnl0: left promiscuous mode [ 1159.428049][T28279] ip6gre0: left promiscuous mode [ 1159.430627][T28279] syz_tun: left promiscuous mode [ 1159.435178][T28279] ip6gretap0: left promiscuous mode [ 1159.445254][T28279] bond0: left promiscuous mode [ 1159.446300][T28279] bridge0: left promiscuous mode [ 1159.454149][T28279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.456762][T28279] team0: left promiscuous mode [ 1159.470478][T28279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.473242][T28279] dummy0: left promiscuous mode [ 1159.484410][T28279] nlmon0: left promiscuous mode [ 1159.485717][T28279] batadv0: left promiscuous mode [ 1159.487565][T28279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.488243][T28279] vxcan0: left promiscuous mode [ 1159.489517][T28279] vxcan1: left promiscuous mode [ 1159.508519][T28279] veth0: left promiscuous mode [ 1159.528519][T28279] wg0: left promiscuous mode [ 1159.543865][T28279] wg2: left promiscuous mode [ 1159.545304][T28279] veth0_to_bridge: left promiscuous mode [ 1159.547664][T28279] veth1_to_bridge: left promiscuous mode [ 1159.554888][T28279] veth0_to_bond: left promiscuous mode [ 1159.573639][T28279] bond_slave_0: left promiscuous mode [ 1159.574698][T28279] veth1_to_bond: left promiscuous mode [ 1159.575943][T28279] bond_slave_1: left promiscuous mode [ 1159.576910][T28279] veth0_to_team: left promiscuous mode [ 1159.578107][T28279] team_slave_0: left promiscuous mode [ 1159.579083][T28279] veth1_to_team: left promiscuous mode [ 1159.613602][T28279] team_slave_1: left promiscuous mode [ 1159.614644][T28279] veth1_to_batadv: left promiscuous mode [ 1159.616034][T28279] batadv_slave_1: left promiscuous mode [ 1159.617351][T28279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.617697][T28279] xfrm0: left promiscuous mode [ 1159.619424][T28279] veth0_to_hsr: left promiscuous mode [ 1159.656516][T28279] veth1_to_hsr: left promiscuous mode [ 1159.658381][T28279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1159.658407][T28279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1159.658462][T28279] hsr0: left promiscuous mode [ 1159.691285][T28279] veth1_virt_wifi: left promiscuous mode [ 1159.692703][T28279] veth0_virt_wifi: left promiscuous mode [ 1159.694774][T28279] virt_wifi0: left promiscuous mode [ 1159.694799][T28279] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1159.735938][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.736056][T16500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.755304][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.755419][T16500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.117671][T28233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1161.518158][T28292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4735'. [ 1161.596732][T28299] x_tables: duplicate entry at hook 3 [ 1161.684361][T28307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4734'. [ 1162.188818][T28319] syzkaller0: Caught tx_queue_len zero misconfig [ 1162.561439][T28315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4738'. [ 1162.705066][T28292] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1162.803638][T28315] bond0: (slave bond_slave_1): Releasing backup interface [ 1162.818539][T28315] bond_slave_1 (unregistering): left allmulticast mode [ 1162.885179][T28335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4741'. [ 1162.939024][T28335] xfrm1: entered promiscuous mode [ 1162.939050][T28335] xfrm1: entered allmulticast mode [ 1162.955310][T28335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4741'. [ 1163.008797][T28339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4742'. [ 1163.200802][T28348] xt_IDLETIMER: timeout value is zero [ 1163.276339][T28350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1163.304229][T28354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1163.584646][T28362] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4748'. [ 1163.864819][T28111] udevd[28111]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1164.002819][T28393] IPv6: addrconf: prefix option has invalid lifetime [ 1164.414007][T28404] syzkaller0: left promiscuous mode [ 1164.414033][T28404] syzkaller0: left allmulticast mode [ 1164.414410][T28404] tipc: Resetting bearer [ 1164.441592][ T13] IPVS: starting estimator thread 0... [ 1164.494264][T28404] x_tables: duplicate underflow at hook 1 [ 1164.530601][T28419] IPVS: using max 24 ests per chain, 57600 per kthread [ 1164.602343][T28428] syzkaller0: entered promiscuous mode [ 1164.602370][T28428] syzkaller0: entered allmulticast mode [ 1165.163243][T28431] syzkaller0: entered promiscuous mode [ 1165.163270][T28431] syzkaller0: entered allmulticast mode [ 1165.709316][T28462] netlink: 'syz.2.4764': attribute type 8 has an invalid length. [ 1165.877750][T28472] Bluetooth: hci0: unsupported parameter 5135 [ 1165.877779][T28472] Bluetooth: hci0: unsupported parameter 8192 [ 1165.877794][T28472] Bluetooth: hci0: unsupported parameter 5135 [ 1165.877808][T28472] Bluetooth: hci0: unsupported parameter 8192 [ 1166.447664][T28494] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1166.662428][T28515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4774'. [ 1167.059928][T28529] Bluetooth: hci0: unsupported parameter 5135 [ 1167.059953][T28529] Bluetooth: hci0: unsupported parameter 8192 [ 1167.059968][T28529] Bluetooth: hci0: unsupported parameter 5135 [ 1167.059982][T28529] Bluetooth: hci0: unsupported parameter 8192 [ 1167.348943][T28494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.709035][T28541] syzkaller0: entered promiscuous mode [ 1167.709062][T28541] syzkaller0: entered allmulticast mode [ 1167.736599][ T31] audit: type=1800 audit(1792597489.083:26): pid=28554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4783" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1724 res=0 errno=0 [ 1167.896388][T28560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4784'. [ 1167.965819][T28564] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 1167.983577][T28564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4786'. [ 1168.574745][T28589] Bluetooth: hci0: unsupported parameter 5135 [ 1168.574771][T28589] Bluetooth: hci0: unsupported parameter 8192 [ 1168.574786][T28589] Bluetooth: hci0: unsupported parameter 5135 [ 1168.574800][T28589] Bluetooth: hci0: unsupported parameter 8192 [ 1169.489222][T28614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1169.990251][T28643] tipc: Enabling of bearer rejected, already enabled [ 1170.017325][T28643] syzkaller0: entered promiscuous mode [ 1170.017351][T28643] syzkaller0: entered allmulticast mode [ 1170.017745][T28643] tipc: Resetting bearer [ 1170.113594][T28647] Bluetooth: hci0: unsupported parameter 5135 [ 1170.113621][T28647] Bluetooth: hci0: unsupported parameter 8192 [ 1170.113714][T28647] Bluetooth: hci0: unsupported parameter 5135 [ 1170.113731][T28647] Bluetooth: hci0: unsupported parameter 8192 [ 1170.405663][T28655] netlink: 'syz.0.4806': attribute type 3 has an invalid length. [ 1170.524499][T28628] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1170.752132][T28667] netlink: 'syz.0.4809': attribute type 1 has an invalid length. [ 1170.752160][T28667] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4809'. [ 1171.563774][T28694] syzkaller0: entered allmulticast mode [ 1171.781563][T28689] tipc: Enabled bearer , priority 0 [ 1172.235745][T28683] tipc: Disabling bearer [ 1172.597305][T28718] Bluetooth: hci0: unsupported parameter 5135 [ 1172.597332][T28718] Bluetooth: hci0: unsupported parameter 8192 [ 1172.597349][T28718] Bluetooth: hci0: unsupported parameter 5135 [ 1172.597364][T28718] Bluetooth: hci0: unsupported parameter 8192 [ 1172.785479][T28687] infiniband syz0: set down [ 1172.787068][T28687] infiniband syz0: added bond0 [ 1172.820133][T28687] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1172.833511][T28687] infiniband syz0: Couldn't open port 1 [ 1172.833766][T28687] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1172.833802][T28687] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1172.833846][T28687] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1172.980978][T28726] xt_CONNSECMARK: invalid mode: 254 [ 1173.152480][T28687] RDS/IB: syz0: added [ 1173.152574][T28687] smc: adding ib device syz0 with port count 1 [ 1173.152598][T28687] smc: ib device syz0 port 1 has no pnetid [ 1173.276854][T28729] netlink: 'syz.0.4819': attribute type 1 has an invalid length. [ 1173.276880][T28729] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1173.599870][T28735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4821'. [ 1173.599981][T28735] tipc: Resetting bearer [ 1173.695909][T28735] tipc: Disabling bearer [ 1174.218161][T28759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4827'. [ 1174.472493][T28765] Bluetooth: hci0: unsupported parameter 5135 [ 1174.472521][T28765] Bluetooth: hci0: unsupported parameter 8192 [ 1174.472562][T28765] Bluetooth: hci0: unsupported parameter 5135 [ 1174.472577][T28765] Bluetooth: hci0: unsupported parameter 8192 [ 1174.821591][T28772] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.4830'. [ 1175.176019][T28784] pimreg0: tun_chr_ioctl cmd 1074025677 [ 1175.176148][T28784] pimreg0: linktype set to 823 [ 1175.328055][T28790] netlink: 'syz.4.4834': attribute type 1 has an invalid length. [ 1175.369787][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4834'. [ 1175.383834][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4834'. [ 1175.383903][T28790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4834'. [ 1175.383962][T28790] netlink: 'syz.4.4834': attribute type 18 has an invalid length. [ 1175.499737][T25502] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1175.499794][T25502] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1175.499835][T25502] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1176.006276][T28810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4838'. [ 1176.037693][T28805] ip_tables: iptables: counters copy to user failed while replacing table [ 1176.065261][T28805] syzkaller1: entered promiscuous mode [ 1176.065290][T28805] syzkaller1: entered allmulticast mode [ 1176.909184][T28826] syzkaller0: entered promiscuous mode [ 1176.909210][T28826] syzkaller0: entered allmulticast mode [ 1177.864812][ T4936] Bluetooth: hci2: link tx timeout [ 1177.864836][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.868731][ T4936] Bluetooth: hci2: link tx timeout [ 1177.868754][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.868863][ T4936] Bluetooth: hci2: link tx timeout [ 1177.868877][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.868981][ T4936] Bluetooth: hci2: link tx timeout [ 1177.868995][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.869120][ T4936] Bluetooth: hci2: link tx timeout [ 1177.869133][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.869236][ T4936] Bluetooth: hci2: link tx timeout [ 1177.869250][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.869351][ T4936] Bluetooth: hci2: link tx timeout [ 1177.869364][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.869465][ T4936] Bluetooth: hci2: link tx timeout [ 1177.869478][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.871607][ T4936] Bluetooth: hci2: link tx timeout [ 1177.871642][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.872120][ T4936] Bluetooth: hci2: link tx timeout [ 1177.872160][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.872435][ T4936] Bluetooth: hci2: link tx timeout [ 1177.872468][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.872754][ T4936] Bluetooth: hci2: link tx timeout [ 1177.872786][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.873060][ T4936] Bluetooth: hci2: link tx timeout [ 1177.873094][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.882571][ T4936] Bluetooth: hci2: link tx timeout [ 1177.882624][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.882748][ T4936] Bluetooth: hci2: link tx timeout [ 1177.882798][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.883104][ T4936] Bluetooth: hci2: link tx timeout [ 1177.883137][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.883549][ T4936] Bluetooth: hci2: link tx timeout [ 1177.883586][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.883856][ T4936] Bluetooth: hci2: link tx timeout [ 1177.883888][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.884143][ T4936] Bluetooth: hci2: link tx timeout [ 1177.884180][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.884582][ T4936] Bluetooth: hci2: link tx timeout [ 1177.884608][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.884874][ T4936] Bluetooth: hci2: link tx timeout [ 1177.884906][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.885171][ T4936] Bluetooth: hci2: link tx timeout [ 1177.885203][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.885470][ T4936] Bluetooth: hci2: link tx timeout [ 1177.885502][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.885975][ T4936] Bluetooth: hci2: link tx timeout [ 1177.886010][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.886283][ T4936] Bluetooth: hci2: link tx timeout [ 1177.886315][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.886573][ T4936] Bluetooth: hci2: link tx timeout [ 1177.886592][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.887104][ T4936] Bluetooth: hci2: link tx timeout [ 1177.887137][ T4936] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1178.034923][T28841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4844'. [ 1178.403577][T28845] Cannot find map_set index 2 as target [ 1178.588017][T28848] Set syz1 is full, maxelem 2076 reached [ 1178.725615][T28852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'. [ 1178.882972][T28805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1179.487881][T28869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4848'. [ 1179.514767][T28869] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 1179.705144][T28882] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1179.808895][T28888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4853'. [ 1179.889912][ T4936] Bluetooth: hci2: command 0x0405 tx timeout [ 1180.012682][ T31] audit: type=1804 audit(1792597501.363:27): pid=28890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4854" name="/newroot/254/cgroup.controllers" dev="tmpfs" ino=1313 res=1 errno=0 [ 1180.012745][ T31] audit: type=1800 audit(1792597501.363:28): pid=28890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4854" name="cgroup.controllers" dev="tmpfs" ino=1313 res=0 errno=0 [ 1180.738938][T28910] TC_ACT_REPEAT abuse ? [ 1180.751137][T28910] netlink: 'syz.0.4857': attribute type 1 has an invalid length. [ 1181.294603][T28932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1181.359326][T28933] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1181.518831][T28934] syzkaller0: left promiscuous mode [ 1181.518857][T28934] syzkaller0: left allmulticast mode [ 1181.550237][T28936] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1182.420484][T28983] IPVS: Unknown mcast interface: vcan0 [ 1182.553713][T28987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4875'. [ 1182.553740][T28987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4875'. [ 1183.198042][T29014] netlink: 'syz.4.4884': attribute type 1 has an invalid length. [ 1183.223262][T29013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4882'. [ 1183.289037][T29014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1183.440259][T29014] bond5: (slave veth0_to_bond): making interface the new active one [ 1183.446710][T29014] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1183.571623][T29032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4888'. [ 1183.578658][T29029] bond5: entered promiscuous mode [ 1183.578687][T29029] veth0_to_bond: entered promiscuous mode [ 1183.578916][T29029] bond5: entered allmulticast mode [ 1183.578932][T29029] veth0_to_bond: entered allmulticast mode [ 1183.700796][T29014] macvlan0: entered promiscuous mode [ 1183.700825][T29014] macvlan0: entered allmulticast mode [ 1183.705778][T29014] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1183.731924][T29014] bond5: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1183.996258][T29047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4893'. [ 1184.020257][T29047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1184.020284][T29047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.026174][T29047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1184.026200][T29047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.090113][T29045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4891'. [ 1184.090162][T29045] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1184.155820][T29057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4893'. [ 1184.298807][T29054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.753245][T29089] netlink: 'syz.4.4896': attribute type 1 has an invalid length. [ 1184.753847][T29078] syzkaller0: entered promiscuous mode [ 1184.753871][T29078] syzkaller0: entered allmulticast mode [ 1184.811898][T29089] bond6: entered promiscuous mode [ 1184.812277][T29089] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1184.881272][T29089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4896'. [ 1189.728040][T29089] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1189.761141][T29102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4898'. [ 1190.025357][T29118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4901'. [ 1190.088561][T29118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.178368][T29131] netlink: 'syz.4.4900': attribute type 16 has an invalid length. [ 1190.178393][T29131] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4900'. [ 1190.546517][T29159] netlink: 'syz.2.4910': attribute type 1 has an invalid length. [ 1190.546573][T29159] netlink: 'syz.2.4910': attribute type 2 has an invalid length. [ 1190.698180][T29164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4911'. [ 1190.711661][T29164] veth0_macvtap: entered allmulticast mode [ 1190.767946][T29162] xt_connbytes: Forcing CT accounting to be enabled [ 1191.425895][T29200] syzkaller0: entered promiscuous mode [ 1191.425924][T29200] syzkaller0: entered allmulticast mode [ 1191.533933][T29205] bond6: option mode: unable to set because the bond device is up [ 1191.837067][T29213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4921'. [ 1192.168260][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'. [ 1192.361383][T29237] syzkaller0: entered promiscuous mode [ 1192.361410][T29237] syzkaller0: entered allmulticast mode [ 1192.483964][T29246] geneve1: entered promiscuous mode [ 1192.751693][T29254] netlink: 'syz.1.4927': attribute type 1 has an invalid length. [ 1192.823508][T29254] bond8: option mode: invalid value (8) [ 1192.855820][T29254] bond8 (unregistering): Released all slaves [ 1192.987676][T29262] netlink: 'syz.2.4930': attribute type 2 has an invalid length. [ 1192.987706][T29262] netlink: 'syz.2.4930': attribute type 7 has an invalid length. [ 1193.067959][T29267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4929'. [ 1193.239005][T29262] : entered promiscuous mode [ 1194.166691][T29305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4940'. [ 1194.303949][T29314] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1194.303994][T29314] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1194.304039][T29314] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1194.371319][T29310] netlink: 'syz.2.4941': attribute type 3 has an invalid length. [ 1194.371346][T29310] netlink: 'syz.2.4941': attribute type 1 has an invalid length. [ 1194.371361][T29310] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4941'. [ 1194.371379][T29310] NCSI netlink: No device for ifindex 0 [ 1194.511079][T29314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4943'. [ 1194.593944][T29314] syz_tun (unregistering): left allmulticast mode [ 1194.744317][T18647] infiniband syz1: ib_query_port failed (-19) [ 1194.766817][T16500] smbdirect: ib_dev[syz1] removed [ 1195.170518][T29341] smc: net device lo applied user defined pnetid SYZ2 [ 1195.172756][T29351] smc: net device lo erased user defined pnetid SYZ2 [ 1195.586381][T29367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4949'. [ 1195.586407][T29367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4949'. [ 1196.012961][T29386] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1196.034654][T29386] team0: Port device bond9 added [ 1196.728784][T29409] bridge6: entered promiscuous mode [ 1196.728837][T29409] bridge6: entered allmulticast mode [ 1196.794551][T29409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4954'. [ 1196.794592][T29409] netlink: 'syz.0.4954': attribute type 1 has an invalid length. [ 1196.794608][T29409] netlink: 'syz.0.4954': attribute type 2 has an invalid length. [ 1196.918082][T29423] bridge4: entered promiscuous mode [ 1196.918110][T29423] bridge4: entered allmulticast mode [ 1196.935330][T29423] team0: Port device bridge4 added [ 1197.364169][T29440] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1197.364221][T29440] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1197.382761][T29434] netlink: 'syz.0.4957': attribute type 4 has an invalid length. [ 1197.449903][T29431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1197.635892][T29446] sctp: [Deprecated]: syz.4.4959 (pid 29446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1197.635892][T29446] Use struct sctp_sack_info instead [ 1197.805233][T29458] netlink: 'syz.3.4961': attribute type 2 has an invalid length. [ 1197.969821][ T4936] Bluetooth: hci2: command 0x0405 tx timeout [ 1198.413177][T29478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1198.538388][T29479] netlink: 3544 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1198.828790][T29491] syzkaller1: entered promiscuous mode [ 1198.828818][T29491] syzkaller1: entered allmulticast mode [ 1199.063171][T22309] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe8 [ 1199.207013][T29511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4974'. [ 1199.231429][T29510] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 1199.918283][T29516] netlink: 'syz.4.4973': attribute type 21 has an invalid length. [ 1199.918308][T29516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1199.918335][T29516] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1201.879716][T29498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1202.129853][T29566] nbd: socks must be embedded in a SOCK_ITEM attr [ 1203.680715][T29618] Bluetooth: hci0: unsupported parameter 5135 [ 1203.680741][T29618] Bluetooth: hci0: unsupported parameter 8192 [ 1203.680756][T29618] Bluetooth: hci0: unsupported parameter 5135 [ 1203.680771][T29618] Bluetooth: hci0: unsupported parameter 8192 [ 1203.682384][T29614] syzkaller0: entered promiscuous mode [ 1203.682407][T29614] syzkaller0: entered allmulticast mode [ 1203.728904][T29620] netlink: 'syz.4.4992': attribute type 10 has an invalid length. [ 1203.728927][T29620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4992'. [ 1203.736946][T29620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4992'. [ 1203.737051][T29620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4992'. [ 1203.742027][T29620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4992'. [ 1203.742132][T29620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4992'. [ 1203.792426][T29615] netlink: 65 bytes leftover after parsing attributes in process `syz.2.4989'. [ 1203.795686][T29619] netlink: 65 bytes leftover after parsing attributes in process `syz.2.4989'. [ 1204.050877][ T4936] Bluetooth: hci2: command 0x0405 tx timeout [ 1204.241743][T29641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4996'. [ 1204.442921][T29644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4997'. [ 1204.708168][T29664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4999'. [ 1204.819502][T29650] rxe_eth0 speed is unknown, defaulting to 1000 [ 1205.318233][T29683] Bluetooth: hci0: unsupported parameter 5135 [ 1205.318270][T29683] Bluetooth: hci0: unsupported parameter 8192 [ 1205.318284][T29683] Bluetooth: hci0: unsupported parameter 5135 [ 1205.318296][T29683] Bluetooth: hci0: unsupported parameter 8192 [ 1205.549894][ T4936] Bluetooth: hci5: ACL packet for unknown connection handle 125 [ 1205.762318][T29650] lo speed is unknown, defaulting to 1000 [ 1206.129886][ T4936] Bluetooth: hci2: command 0x0405 tx timeout [ 1206.528845][T29739] vlan3: entered promiscuous mode [ 1206.528871][T29739] bridge0: entered promiscuous mode [ 1206.831467][T29753] Bluetooth: hci0: unsupported parameter 5135 [ 1206.831496][T29753] Bluetooth: hci0: unsupported parameter 8192 [ 1206.831537][T29753] Bluetooth: hci0: unsupported parameter 5135 [ 1206.831552][T29753] Bluetooth: hci0: unsupported parameter 8192 [ 1207.301273][T29762] bond2: (slave macvlan0): Releasing active interface [ 1207.657812][T29793] netlink: 'syz.1.5025': attribute type 83 has an invalid length. [ 1207.771320][T29795] syzkaller0: entered promiscuous mode [ 1207.771345][T29795] syzkaller0: entered allmulticast mode [ 1207.891903][T29804] ip_tables: iptables: counters copy to user failed while replacing table [ 1208.019314][T29801] team0: Port device bridge4 removed [ 1208.209738][ T4936] Bluetooth: hci2: command 0x0405 tx timeout [ 1208.900883][T29834] syzkaller0: entered promiscuous mode [ 1208.900912][T29834] syzkaller0: entered allmulticast mode [ 1208.904020][T22311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.911120][T29834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.685267][T29871] __nla_validate_parse: 8 callbacks suppressed [ 1209.685291][T29871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5039'. [ 1209.718557][T29871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5039'. [ 1209.904857][T29880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.905374][T29880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.045562][T29218] udevd[29218]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1210.104972][T29880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.534336][T29914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1210.641413][T29922] syzkaller0: entered promiscuous mode [ 1210.641445][T29922] syzkaller0: entered allmulticast mode [ 1210.705031][T29914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1211.076420][T29914] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1211.123713][T29935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5053'. [ 1211.123750][T29935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5053'. [ 1211.123769][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5053'. [ 1211.174745][T29935] syzkaller0: left promiscuous mode [ 1211.174771][T29935] syzkaller0: left allmulticast mode [ 1212.149358][T29954] bond9: entered promiscuous mode [ 1212.151739][T29954] bond9: entered allmulticast mode [ 1212.164543][T29954] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1212.361646][T29980] netlink: 'syz.1.5062': attribute type 2 has an invalid length. [ 1212.561461][T29986] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 1212.788587][T29999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5068'. [ 1212.943701][T30004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5068'. [ 1212.980578][T29999] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1213.092719][T21823] Bluetooth: hci1: command 0x0405 tx timeout [ 1213.341528][T30027] netlink: 'syz.2.5074': attribute type 10 has an invalid length. [ 1213.341557][T30027] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5074'. [ 1213.818121][T30050] ip6gretap0: entered promiscuous mode [ 1213.818418][T30050] macvtap0: entered promiscuous mode [ 1214.134360][T30065] syzkaller0: entered promiscuous mode [ 1214.134386][T30065] syzkaller0: entered allmulticast mode [ 1214.707051][T30087] syzkaller0: entered promiscuous mode [ 1214.707079][T30087] syzkaller0: entered allmulticast mode [ 1214.988515][T30103] syzkaller0: entered promiscuous mode [ 1214.988542][T30103] syzkaller0: entered allmulticast mode [ 1215.077930][T30110] __nla_validate_parse: 1 callbacks suppressed [ 1215.077953][T30110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1215.129814][T30107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1215.851788][T30150] ip6tnl2: entered allmulticast mode [ 1216.162589][T30166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5101'. [ 1216.443687][T30185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5101'. [ 1216.613072][T22309] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1216.615624][T22309] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1216.642871][T18650] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1217.112760][T30194] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1217.113858][T30166] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1217.330685][ T6080] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1217.579202][T30234] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5109'. [ 1217.649930][T18650] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1217.816998][T30245] rxe_eth0 speed is unknown, defaulting to 1000 [ 1218.313862][T30288] netlink: 'syz.2.5116': attribute type 4 has an invalid length. [ 1218.313887][T30288] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5116'. [ 1218.353974][T30289] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5117'. [ 1218.354045][T30289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.378902][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1219.019687][T30252] rxe_eth0 speed is unknown, defaulting to 1000 [ 1219.022971][T30245] lo speed is unknown, defaulting to 1000 [ 1219.854334][T21823] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1219.857641][T21823] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1219.858640][T21823] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 1219.858670][T21823] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1220.184861][T30339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5124'. [ 1220.413344][T30252] lo speed is unknown, defaulting to 1000 [ 1220.596558][T30355] ip_tables: iptables: counters copy to user failed while replacing table [ 1220.793708][T30363] netlink: 'syz.4.5129': attribute type 16 has an invalid length. [ 1220.793745][T30363] netlink: 'syz.4.5129': attribute type 17 has an invalid length. [ 1220.929980][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1222.222975][T30363] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1222.785460][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5133'. [ 1224.183360][T30433] xt_NFQUEUE: number of total queues is 0 [ 1224.807624][T30444] syzkaller0: entered promiscuous mode [ 1224.807649][T30444] syzkaller0: entered allmulticast mode [ 1225.210893][T15537] lo speed is unknown, defaulting to 1000 [ 1225.403050][T30463] netlink: 'syz.2.5143': attribute type 1 has an invalid length. [ 1225.403823][T30464] netlink: 'syz.2.5143': attribute type 1 has an invalid length. [ 1225.737874][T30476] xt_LOG: prefix is not null-terminated [ 1225.834949][T30473] bond3: entered promiscuous mode [ 1225.880331][T30481] netlink: 'syz.1.5148': attribute type 10 has an invalid length. [ 1225.926957][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5146'. [ 1227.161019][T30506] netlink: 'syz.2.5152': attribute type 1 has an invalid length. [ 1227.182879][T30509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5151'. [ 1227.301172][T30515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5152'. [ 1227.331906][T30506] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1227.523097][T30506] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1227.555641][T30506] bond10: (slave bond11): Enslaving as an active interface with a down link [ 1227.652976][T30512] bond10 (unregistering): (slave bond11): Releasing active interface [ 1227.700183][T30512] bond10 (unregistering): Released all slaves [ 1227.978612][T30531] netlink: 'syz.1.5157': attribute type 2 has an invalid length. [ 1228.256897][T30544] openvswitch: netlink: Duplicate key (type 3). [ 1228.427651][T30552] ipvlan0: entered promiscuous mode [ 1228.428452][T30552] team0: Device ipvlan0 failed to enter team mode [ 1228.428481][T30552] team0: Device ipvlan0 failed to enter team mode [ 1228.724117][T30561] ip_tables: iptables: counters copy to user failed while replacing table [ 1229.078914][T30577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5162'. [ 1229.175822][T30581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5163'. [ 1229.214708][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5163'. [ 1229.378052][T30581] netlink: 'syz.4.5163': attribute type 1 has an invalid length. [ 1229.437725][T30585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5163'. [ 1229.507972][T30586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5163'. [ 1229.632805][T30581] bond7: entered promiscuous mode [ 1229.634095][T30581] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1229.657156][T30594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5165'. [ 1229.696151][T30586] bond7 (unregistering): Released all slaves [ 1229.889758][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1229.996955][T30604] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5167'. [ 1230.214542][T30615] bond7: option lacp_rate: invalid value (128) [ 1230.231112][T30615] bond7 (unregistering): Released all slaves [ 1231.154405][T30635] netlink: 'syz.2.5172': attribute type 153 has an invalid length. [ 1231.354948][T30638] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1231.732871][T30677] Bluetooth: MGMT ver 1.23 [ 1232.126080][T21823] block nbd1: Receive control failed (result -32) [ 1232.136413][ T4936] block nbd1: Receive control failed (result -32) [ 1232.787657][T30715] __nla_validate_parse: 4 callbacks suppressed [ 1232.787684][T30715] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5184'. [ 1233.428991][T30736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5186'. [ 1233.729867][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1234.197028][T30759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1234.430781][T30765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1234.430812][T30765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1235.519159][T30812] Bluetooth: hci0: unsupported parameter 5135 [ 1235.519189][T30812] Bluetooth: hci0: unsupported parameter 8192 [ 1235.519205][T30812] Bluetooth: hci0: unsupported parameter 5135 [ 1235.519219][T30812] Bluetooth: hci0: unsupported parameter 8192 [ 1236.142525][T30831] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1236.142557][T30831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1237.191040][T30856] ip6gre3: entered allmulticast mode [ 1237.496131][T30859] netlink: Failed to add helper -22 [ 1237.496189][T30859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1237.522082][T30859] netlink: 'syz.1.5210': attribute type 3 has an invalid length. [ 1237.522111][T30859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1237.841310][T30877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5214'. [ 1237.943581][T30878] Bluetooth: hci0: unsupported parameter 5135 [ 1237.943610][T30878] Bluetooth: hci0: unsupported parameter 8192 [ 1237.943626][T30878] Bluetooth: hci0: unsupported parameter 5135 [ 1237.943640][T30878] Bluetooth: hci0: unsupported parameter 8192 [ 1237.977824][T30881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5216'. [ 1238.707296][T30909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5221'. [ 1238.795438][T30913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5222'. [ 1238.795472][T30913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5222'. [ 1239.102557][T30917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5223'. [ 1239.350692][T30925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.043303][T30952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1240.237440][T30965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5229'. [ 1240.246301][T30965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5229'. [ 1240.750391][T30983] netlink: 'syz.1.5234': attribute type 22 has an invalid length. [ 1240.750422][T30983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5234'. [ 1240.898212][T30983] netlink: 'syz.1.5234': attribute type 22 has an invalid length. [ 1240.898240][T30983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5234'. [ 1240.918608][T16507] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.918707][T16507] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.918747][T16507] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.918784][T16507] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.181775][T30988] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:0 [ 1241.497138][T31002] netlink: 'syz.1.5238': attribute type 11 has an invalid length. [ 1241.918023][T31024] ip6tnl0: entered allmulticast mode [ 1242.118389][T31030] xt_SECMARK: invalid mode: 9 [ 1242.261971][T31045] batman_adv: batadv0: Adding interface: syzkaller0 [ 1242.262009][T31045] batman_adv: batadv0: Interface activated: syzkaller0 [ 1242.305603][ T4936] Bluetooth: hci2: link tx timeout [ 1242.305626][ T4936] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1242.306518][ T4936] Bluetooth: hci2: link tx timeout [ 1242.306537][ T4936] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1242.306566][ T4936] Bluetooth: hci2: link tx timeout [ 1242.306578][ T4936] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1242.306604][ T4936] Bluetooth: hci2: link tx timeout [ 1242.306616][ T4936] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1242.306708][ T4936] Bluetooth: hci2: link tx timeout [ 1242.306722][ T4936] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1242.306747][ T4936] Bluetooth: hci2: link tx timeout [ 1242.306759][ T4936] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1242.339466][ T4936] Bluetooth: hci2: link tx timeout [ 1242.339711][ T4936] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1242.757256][T31055] IPv6: NLM_F_CREATE should be specified when creating new route [ 1242.834335][T31055] syzkaller1: entered promiscuous mode [ 1242.834362][T31055] syzkaller1: entered allmulticast mode [ 1242.947333][T31062] __nla_validate_parse: 2 callbacks suppressed [ 1242.947356][T31062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5250'. [ 1242.947722][T31062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5250'. [ 1243.011847][T31060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1243.716044][T31094] netlink: 'syz.1.5259': attribute type 1 has an invalid length. [ 1243.870748][T31094] bond8: entered promiscuous mode [ 1243.871222][T31094] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1243.915810][T31094] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1243.917219][T31094] bond8: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 1243.917247][T31094] bond8: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 1243.950209][T31094] bond8: (slave ip6gre4): making interface the new active one [ 1243.952135][T31094] ip6gre4: entered promiscuous mode [ 1243.955261][T31094] bond8: (slave ip6gre4): Enslaving as an active interface with an up link [ 1244.158887][T31106] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5260'. [ 1244.370402][ T4936] Bluetooth: hci2: command 0x0405 tx timeout [ 1244.663776][T31126] lo: entered promiscuous mode [ 1244.672755][T31126] tunl0: entered promiscuous mode [ 1244.675446][T31126] gre0: entered promiscuous mode [ 1244.694087][T31126] gretap0: entered promiscuous mode [ 1244.701410][T31128] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5264'. [ 1244.724283][T31126] erspan0: entered promiscuous mode [ 1244.727239][T31126] ip_vti0: entered promiscuous mode [ 1244.743439][T31126] ip6_vti0: entered promiscuous mode [ 1244.768785][T31126] sit0: entered promiscuous mode [ 1244.778435][T31126] ip6tnl0: entered promiscuous mode [ 1244.788451][T31126] ip6gre0: entered promiscuous mode [ 1244.817866][T31126] ip6gretap0: entered promiscuous mode [ 1244.828786][T31126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.833199][T31126] bridge0: entered promiscuous mode [ 1244.990220][T31126] bond0: entered promiscuous mode [ 1244.990252][T31126] bond_slave_0: entered promiscuous mode [ 1244.990496][T31126] bond_slave_1: entered promiscuous mode [ 1245.024556][T31126] team0: entered promiscuous mode [ 1245.024586][T31126] team_slave_0: entered promiscuous mode [ 1245.024899][T31126] team_slave_1: entered promiscuous mode [ 1245.029367][T31126] dummy0: entered promiscuous mode [ 1245.051880][T31126] bond9: entered promiscuous mode [ 1245.137746][T31126] nlmon0: entered promiscuous mode [ 1245.139180][T31126] batadv0: entered promiscuous mode [ 1245.163395][T31126] vxcan0: entered promiscuous mode [ 1245.186126][T31126] vxcan1: entered promiscuous mode [ 1245.187314][T31126] veth0: entered promiscuous mode [ 1245.189470][T31126] veth1: entered promiscuous mode [ 1245.244879][T31126] wg0: entered promiscuous mode [ 1245.280551][T31126] wg1: entered promiscuous mode [ 1245.310288][T31126] wg2: entered promiscuous mode [ 1245.311582][T31126] veth1_to_bridge: entered promiscuous mode [ 1245.374299][T31126] veth0_to_bond: entered promiscuous mode [ 1245.405326][T31126] veth1_to_bond: entered promiscuous mode [ 1245.437266][T31126] veth0_to_team: entered promiscuous mode [ 1245.487588][T31126] veth1_to_team: entered promiscuous mode [ 1245.564249][T31126] veth0_to_batadv: entered promiscuous mode [ 1245.590748][T31126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.590815][T31126] batadv_slave_0: entered promiscuous mode [ 1245.630393][T31126] veth1_to_batadv: entered promiscuous mode [ 1245.655831][T31126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.655905][T31126] batadv_slave_1: entered promiscuous mode [ 1245.691190][T31126] xfrm0: entered promiscuous mode [ 1245.695712][T31126] veth0_to_hsr: entered promiscuous mode [ 1245.732864][T31126] veth1_to_hsr: entered promiscuous mode [ 1245.766487][T31126] hsr0: entered promiscuous mode [ 1245.793223][T31126] veth1_virt_wifi: entered promiscuous mode [ 1245.818222][T31126] veth0_virt_wifi: entered promiscuous mode [ 1245.842459][T31126] virt_wifi0: entered promiscuous mode [ 1245.843041][T31126] macvtap0: entered promiscuous mode [ 1245.845569][T31126] geneve0: entered promiscuous mode [ 1245.845755][T31126] geneve1: entered promiscuous mode [ 1245.846040][T31126] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1245.853552][T31126] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 1245.853884][T31126] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1245.861835][T31126] bridge1: entered promiscuous mode [ 1245.868896][T31126] macsec1: entered promiscuous mode [ 1245.869257][T31126] vti0: entered promiscuous mode [ 1245.928886][T31126] bond2: entered promiscuous mode [ 1245.936620][T31126] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1245.974156][T31126] syzkaller0: entered promiscuous mode [ 1245.975750][T31126] syztnl1: entered promiscuous mode [ 1246.001240][T31126] ip6gretap1: entered promiscuous mode [ 1246.005401][T31126] ip6gretap2: entered promiscuous mode [ 1246.023463][T31126] bond1: entered promiscuous mode [ 1246.023493][T31126] bridge2: entered promiscuous mode [ 1246.042450][T31126] vlan2: entered promiscuous mode [ 1246.058814][T31126] bridge3: entered promiscuous mode [ 1246.069823][T31126] bridge4: entered promiscuous mode [ 1246.070102][T31126] sit1: entered promiscuous mode [ 1246.071037][T31126] ip6gretap3: entered promiscuous mode [ 1246.071271][T31126] bond3: entered promiscuous mode [ 1246.071437][T31126] syztnl0: entered promiscuous mode [ 1246.071684][T31126] sit2: entered promiscuous mode [ 1246.077006][T31126] bond4: entered promiscuous mode [ 1246.101502][T31126] bond5: entered promiscuous mode [ 1246.101529][T31126] geneve2: entered promiscuous mode [ 1246.146519][T31126] vlan3: entered promiscuous mode [ 1246.169115][T31126] bond6: entered promiscuous mode [ 1246.182603][T31126] dummy1: entered promiscuous mode [ 1246.201088][T31126] vlan5: entered promiscuous mode [ 1246.203329][T31126] ip6tnl1: entered promiscuous mode [ 1246.207797][T31126] bond7: entered promiscuous mode [ 1246.210610][T31126] veth2: entered promiscuous mode [ 1246.226439][T31126] veth3: entered promiscuous mode [ 1246.246205][T31126] bond8: entered promiscuous mode [ 1246.247151][T31126] veth4: entered promiscuous mode [ 1246.253935][T31126] veth5: entered promiscuous mode [ 1246.284033][T31126] bridge5: entered promiscuous mode [ 1246.284784][T31126] veth6: entered promiscuous mode [ 1246.284954][T31126] veth7: entered promiscuous mode [ 1246.285115][T31126] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 1246.288784][T31126] ip6gre1: entered promiscuous mode [ 1246.325602][T31126] bridge6: entered promiscuous mode [ 1246.329427][T31126] gtp0: entered promiscuous mode [ 1246.331790][T31126] batadv_slave_0.: entered promiscuous mode [ 1246.336013][T31126] gtp1: entered promiscuous mode [ 1246.351473][T31177] netlink: 'syz.0.5270': attribute type 11 has an invalid length. [ 1246.351499][T31177] netlink: 'syz.0.5270': attribute type 11 has an invalid length. [ 1246.351515][T31177] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5270'. [ 1246.352523][T31126] bridge7: entered promiscuous mode [ 1246.358769][T31126] veth8: entered promiscuous mode [ 1246.358969][T31126] veth9: entered promiscuous mode [ 1246.403656][T31126] gre1: entered promiscuous mode [ 1246.404344][T31126] sit3: entered promiscuous mode [ 1246.436780][T31126] bond11: entered promiscuous mode [ 1246.436944][T31126] ip6tnl2: entered promiscuous mode [ 1246.437071][T31126] ip6tnl3: entered promiscuous mode [ 1246.437204][T31126] vxlan0: entered promiscuous mode [ 1246.438925][T31126] gre2: entered promiscuous mode [ 1246.481326][T22525] lo speed is unknown, defaulting to 1000 [ 1246.481374][T22525] !!0: Port: 1 Link DOWN [ 1246.562115][T30651] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.562175][T30651] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.562218][T30651] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.671611][ T136] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.905171][T31189] netlink: 'syz.2.5273': attribute type 1 has an invalid length. [ 1246.925946][T31189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5273'. [ 1246.970249][T31186] netlink: 'syz.1.5274': attribute type 1 has an invalid length. [ 1247.027747][T31186] bond9: entered promiscuous mode [ 1247.028173][T31186] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1247.082570][T31189] bond10 (unregistering): Released all slaves [ 1247.299055][T31192] bond9: (slave veth5): making interface the new active one [ 1247.299086][T31192] veth5: entered promiscuous mode [ 1247.318962][T31192] bond9: (slave veth5): Enslaving as an active interface with an up link [ 1247.588076][T31208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1247.897100][T31217] netlink: 'syz.3.5279': attribute type 21 has an invalid length. [ 1247.897155][T31217] IPv6: NLM_F_CREATE should be specified when creating new route [ 1247.897261][T31217] netlink: 'syz.3.5279': attribute type 1 has an invalid length. [ 1248.080772][T31224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5281'. [ 1248.155927][T31224] bridge9: port 1(erspan0) entered blocking state [ 1248.156550][T31224] bridge9: port 1(erspan0) entered disabled state [ 1248.156741][T31224] erspan0: entered allmulticast mode [ 1248.158848][T31224] erspan0: entered promiscuous mode [ 1248.256167][T31208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1248.397210][T31231] syzkaller0: entered promiscuous mode [ 1248.397237][T31231] syzkaller0: entered allmulticast mode [ 1248.449718][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1248.787505][T31247] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1249.238475][T31271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1249.238506][T31271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1249.238525][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1249.285736][T31271] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1249.386541][T31276] can: request_module (can-proto-0) failed. [ 1250.008750][T31304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5299'. [ 1250.295374][T31316] x_tables: duplicate underflow at hook 2 [ 1250.600645][T18650] lo speed is unknown, defaulting to 1000 [ 1250.650722][T31332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5308'. [ 1250.922994][T31347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5309'. [ 1250.923158][T31347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5309'. [ 1251.282211][T31365] netlink: 'syz.4.5313': attribute type 1 has an invalid length. [ 1251.488523][T31381] ip6gre4: entered allmulticast mode [ 1251.569654][T21823] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1251.827612][T31399] Bluetooth: MGMT ver 1.23 [ 1251.861565][T31402] batadv_slave_1: entered promiscuous mode [ 1251.922984][T31399] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1252.129307][T31394] netlink: Failed to add helper -22 [ 1252.129372][T31394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1252.256016][T31402] netlink: 'syz.3.5315': attribute type 3 has an invalid length. [ 1253.231346][T31470] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1253.234626][T31469] __nla_validate_parse: 8 callbacks suppressed [ 1253.234666][T31469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5332'. [ 1253.447665][T31474] netlink: 'syz.0.5334': attribute type 4 has an invalid length. [ 1253.447696][T31474] netlink: 'syz.0.5334': attribute type 5 has an invalid length. [ 1253.447711][T31474] netlink: 3637 bytes leftover after parsing attributes in process `syz.0.5334'. [ 1254.121429][T31492] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1254.632782][T31506] x_tables: duplicate underflow at hook 2 [ 1255.173483][T31518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5342'. [ 1255.294951][T31523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5343'. [ 1256.567814][T31541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1256.934617][T31546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5348'. [ 1256.934649][T31546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5348'. [ 1256.934669][T31546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5348'. [ 1257.022161][ T31] audit: type=1804 audit(1792597578.373:29): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5350" name="/newroot/480/cgroup.controllers" dev="tmpfs" ino=2481 res=1 errno=0 [ 1257.022501][ T31] audit: type=1800 audit(1792597578.373:30): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5350" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 1257.024322][ T31] audit: type=1800 audit(1792597578.373:31): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5350" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 1257.025841][ T31] audit: type=1800 audit(1792597578.373:32): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5350" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 1257.027380][ T31] audit: type=1800 audit(1792597578.373:33): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5350" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 1257.028941][ T31] audit: type=1800 audit(1792597578.373:34): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5350" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 1257.169833][ T4936] Bluetooth: hci2: command 0x0405 tx timeout [ 1257.304350][ T31] audit: type=1800 audit(1792597578.653:35): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5350" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 1257.304416][ T31] audit: type=1800 audit(1792597578.653:36): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5350" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 1257.393385][ T31] audit: type=1800 audit(1792597578.743:37): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5350" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 1257.393451][ T31] audit: type=1800 audit(1792597578.743:38): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5350" name="cgroup.controllers" dev="tmpfs" ino=2481 res=0 errno=0 [ 1257.860739][T31571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5352'. [ 1257.895426][T31571] openvswitch: netlink: Key 6 has unexpected len 55 expected 2 [ 1257.969419][T31562] syzkaller0: entered promiscuous mode [ 1257.969454][T31562] syzkaller0: entered allmulticast mode [ 1258.584651][T31582] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 1258.605489][T31582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5355'. [ 1258.706540][T31585] netlink: 'syz.1.5356': attribute type 1 has an invalid length. [ 1259.641767][T31606] tipc: Enabled bearer , priority 0 [ 1259.667032][T31606] tipc: Resetting bearer [ 1259.677080][T31609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5361'. [ 1259.852025][T31605] tipc: Disabling bearer [ 1260.787483][T31636] FAULT_INJECTION: forcing a failure. [ 1260.787483][T31636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.787543][T31636] CPU: 1 UID: 0 PID: 31636 Comm: syz.0.5367 Not tainted syzkaller #0 PREEMPT(full) [ 1260.787578][T31636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1260.787593][T31636] Call Trace: [ 1260.787603][T31636] [ 1260.787615][T31636] dump_stack_lvl+0xe8/0x150 [ 1260.787659][T31636] should_fail_ex+0x410/0x560 [ 1260.787701][T31636] _copy_from_user+0x2d/0xb0 [ 1260.787741][T31636] bpf_test_init+0xd8/0x150 [ 1260.787774][T31636] bpf_prog_test_run_skb+0x31e/0x2230 [ 1260.787801][T31636] ? lock_acquire+0x115/0x350 [ 1260.787849][T31636] ? __fget_files+0x3a2/0x420 [ 1260.787885][T31636] ? __fget_files+0x2a/0x420 [ 1260.787927][T31636] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1260.787954][T31636] bpf_prog_test_run+0x2c5/0x340 [ 1260.787991][T31636] __sys_bpf+0xa22/0xd90 [ 1260.788029][T31636] ? __pfx___sys_bpf+0x10/0x10 [ 1260.788071][T31636] ? __fget_files+0x2a/0x420 [ 1260.788127][T31636] ? ksys_write+0x242/0x270 [ 1260.788154][T31636] ? __pfx_ksys_write+0x10/0x10 [ 1260.788188][T31636] __x64_sys_bpf+0xba/0xd0 [ 1260.788219][T31636] do_syscall_64+0x166/0x520 [ 1260.788253][T31636] ? trace_irq_disable+0x3b/0x140 [ 1260.788278][T31636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.788303][T31636] ? clear_bhb_loop+0x70/0xc0 [ 1260.788333][T31636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.788358][T31636] RIP: 0033:0x7ff6a599f559 [ 1260.788381][T31636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.788402][T31636] RSP: 002b:00007ff6a3bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1260.788429][T31636] RAX: ffffffffffffffda RBX: 00007ff6a5c25fa0 RCX: 00007ff6a599f559 [ 1260.788447][T31636] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1260.788463][T31636] RBP: 00007ff6a3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.788478][T31636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1260.788493][T31636] R13: 00007ff6a5c26038 R14: 00007ff6a5c25fa0 R15: 00007ffda30c7e88 [ 1260.788531][T31636] [ 1261.589251][T31645] team0: entered promiscuous mode [ 1261.589279][T31645] team_slave_0: entered promiscuous mode [ 1261.601221][T31645] team_slave_1: entered promiscuous mode [ 1261.602144][T31648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1261.602190][T31648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1261.602344][T31645] team0: entered allmulticast mode [ 1261.602364][T31645] team_slave_0: entered allmulticast mode [ 1261.602383][T31645] team_slave_1: entered allmulticast mode [ 1261.608731][T31645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.669281][T31645] team0: Cannot enslave team device to itself [ 1261.713871][T31648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1261.713924][T31648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1261.762927][T31648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1261.762977][T31648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1261.803262][T31648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1261.803316][T31648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1262.417923][T31666] Cannot find add_set index 0 as target [ 1266.244863][T31714] __nla_validate_parse: 60 callbacks suppressed [ 1266.244889][T31714] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5387'. [ 1266.911152][T31725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5388'. [ 1267.924081][T31747] Bluetooth: hci0: unsupported parameter 5135 [ 1267.924109][T31747] Bluetooth: hci0: unsupported parameter 8192 [ 1267.924125][T31747] Bluetooth: hci0: unsupported parameter 5135 [ 1267.924140][T31747] Bluetooth: hci0: unsupported parameter 8192 [ 1268.366073][T31750] syzkaller0: entered promiscuous mode [ 1268.366100][T31750] syzkaller0: entered allmulticast mode [ 1268.501205][T31759] netlink: 'syz.0.5397': attribute type 2 has an invalid length. [ 1269.746750][T31783] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5400'. [ 1270.015625][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1270.015657][ T31] audit: type=1804 audit(1792597591.363:47): pid=31798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5401" name="/newroot/403/memory.events" dev="tmpfs" ino=2084 res=1 errno=0 [ 1270.015784][ T31] audit: type=1800 audit(1792597591.363:48): pid=31798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5401" name="memory.events" dev="tmpfs" ino=2084 res=0 errno=0 [ 1270.351430][T31807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5404'. [ 1270.464117][T31805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5403'. [ 1270.588906][T31812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5405'. [ 1270.588951][T31812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5405'. [ 1270.907017][T31821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5405'. [ 1271.501595][T31831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5410'. [ 1271.849588][T31836] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1271.894539][T31843] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1272.693932][T31865] sctp: [Deprecated]: syz.1.5417 (pid 31865) Use of int in max_burst socket option. [ 1272.693932][T31865] Use struct sctp_assoc_value instead [ 1272.755986][T31868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.618587][T31891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5421'. [ 1274.466857][T31908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5424'. [ 1274.583004][T31903] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1274.698137][T31912] netlink: 'syz.3.5425': attribute type 1 has an invalid length. [ 1274.738200][T31908] team_slave_0 (unregistering): left promiscuous mode [ 1274.738233][T31908] team_slave_0 (unregistering): left allmulticast mode [ 1274.782095][T31908] team0: Port device team_slave_0 removed [ 1274.876727][T31903] xt_CT: No such helper "netbios-ns" [ 1275.883953][T31942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5430'. [ 1276.250645][T31945] netlink: 'syz.4.5431': attribute type 1 has an invalid length. [ 1276.406166][T31950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5432'. [ 1277.208903][T31966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.312061][T31969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.492686][T31969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.766233][T31984] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5439'. [ 1277.828335][T31985] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5439'. [ 1278.192955][T31992] netlink: 'syz.3.5440': attribute type 153 has an invalid length. [ 1278.392551][T31999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1278.459149][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1278.459589][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1278.461366][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1278.480818][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1278.499272][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1278.774197][T32011] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.877911][T32014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5444'. [ 1279.467663][T32030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5446'. [ 1279.770118][T32026] can: request_module (can-proto-0) failed. [ 1280.048998][T32039] netlink: 'syz.0.5449': attribute type 1 has an invalid length. [ 1280.498299][T32039] bond10: entered promiscuous mode [ 1280.539439][T32039] bond10: entered allmulticast mode [ 1280.540068][T32039] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1280.691528][T32042] erspan2: entered allmulticast mode [ 1280.735600][T32042] bond10: (slave erspan2): making interface the new active one [ 1280.735631][T32042] erspan2: entered promiscuous mode [ 1280.804214][T32042] bond10: (slave erspan2): Enslaving as an active interface with an up link [ 1280.804298][T32040] ±ÿ: renamed from lo [ 1280.850122][T21823] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1281.183490][T32049] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1281.472317][T32051] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1281.564910][T32052] netdevsim netdevsim4 €Â: renamed from netdevsim0 (while UP) [ 1284.930799][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1285.378457][T32131] netlink: 'syz.3.5467': attribute type 4 has an invalid length. [ 1285.818195][T32145] ip_tables: iptables: counters copy to user failed while replacing table [ 1286.003397][T32147] __nla_validate_parse: 3 callbacks suppressed [ 1286.003425][T32147] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5471'. [ 1286.480305][T32157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5474'. [ 1288.317862][T32193] netlink: 'syz.3.5485': attribute type 2 has an invalid length. [ 1288.317890][T32193] netlink: 'syz.3.5485': attribute type 1 has an invalid length. [ 1288.317907][T32193] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5485'. [ 1289.636286][T32216] tipc: Enabled bearer , priority 0 [ 1289.672188][T32216] syzkaller0: entered promiscuous mode [ 1289.672215][T32216] syzkaller0: entered allmulticast mode [ 1289.788288][T32216] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1289.965823][T32224] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5490'. [ 1290.231337][T32226] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1290.271907][T32216] tipc: Resetting bearer [ 1290.601105][T32214] tipc: Resetting bearer [ 1290.898960][T32214] tipc: Disabling bearer [ 1290.983138][T31163] tipc: Node number set to 2595112776 [ 1291.781701][T32268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5499'. [ 1291.817688][T32268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5499'. [ 1291.986336][T32270] netlink: 'syz.4.5500': attribute type 1 has an invalid length. [ 1292.212596][T32270] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1292.428673][T32276] bond7: (slave batadv0): Opening slave failed [ 1292.977022][T32274] bond7: (slave veth5): Enslaving as an active interface with a down link [ 1292.977336][T32270] veth0: entered promiscuous mode [ 1293.297820][T32269] veth0: left promiscuous mode [ 1293.334014][T32294] netlink: 'syz.0.5503': attribute type 4 has an invalid length. [ 1293.386172][T32294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5503'. [ 1293.677326][T32290] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1294.297941][T32318] ip_tables: iptables: counters copy to user failed while replacing table [ 1294.353761][T32329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5507'. [ 1294.399007][T21823] block nbd4: Receive control failed (result -107) [ 1294.499093][T32327] xt_connbytes: Forcing CT accounting to be enabled [ 1294.499450][T32327] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1295.091770][T32341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1295.126081][T32348] netlink: 'syz.2.5514': attribute type 2 has an invalid length. [ 1295.126111][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5514'. [ 1295.126130][T32348] nbd: must specify an index to disconnect [ 1295.278234][T32355] netlink: 'syz.4.5515': attribute type 21 has an invalid length. [ 1295.278260][T32355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5515'. [ 1295.278288][T32355] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1296.035135][T32367] netlink: 952 bytes leftover after parsing attributes in process `syz.3.5520'. [ 1296.420502][T32372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5522'. [ 1296.658321][T32371] syzkaller0: entered promiscuous mode [ 1296.658354][T32371] syzkaller0: entered allmulticast mode [ 1297.914415][T32396] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1298.128209][T32401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5529'. [ 1304.992685][T32401] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1306.945222][T32450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1307.005313][T32450] Bluetooth: hci0: unsupported parameter 5134 [ 1307.005341][T32450] Bluetooth: hci0: unsupported parameter 8192 [ 1307.005356][T32450] Bluetooth: hci0: unsupported parameter 5134 [ 1307.005369][T32450] Bluetooth: hci0: unsupported parameter 8192 [ 1307.233238][T32457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.535456][T32459] batman_adv: batadv0: Adding interface: veth0 [ 1307.535527][T32459] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.535711][T32459] batman_adv: batadv0: Interface activated: veth0 [ 1308.248110][T32476] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5539'. [ 1308.317558][T32476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5539'. [ 1308.321040][T32476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5539'. [ 1308.321200][T32476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5539'. [ 1308.415886][T32476] geneve2: entered promiscuous mode [ 1308.415918][T32476] geneve2: entered allmulticast mode [ 1308.450410][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.450481][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.460657][T16502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.460829][T16502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.512429][T32480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5539'. [ 1309.684664][T32503] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1309.965165][T32515] netlink: 'syz.2.5547': attribute type 21 has an invalid length. [ 1309.965200][T32515] IPv6: NLM_F_CREATE should be specified when creating new route [ 1310.004440][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5547'. [ 1311.560813][T32533] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1312.482638][T32548] netlink: 'syz.2.5553': attribute type 1 has an invalid length. [ 1312.717598][T32548] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1312.889155][ T31] audit: type=1107 audit(1792597634.233:49): pid=32565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='qßåcs’ÙueTYkÊipZ' [ 1313.007924][T32557] bond14: (slave geneve3): making interface the new active one [ 1313.025404][T32557] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 1313.249880][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.249967][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.250016][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.250058][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.600968][T32578] netlink: 63 bytes leftover after parsing attributes in process `syz.2.5558'. [ 1313.712988][T32581] xt_TCPMSS: Only works on TCP SYN packets [ 1315.519244][T32566] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1316.046696][T32603] netlink: 'syz.2.5563': attribute type 1 has an invalid length. [ 1316.046725][T32603] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5563'. [ 1316.046772][T32603] nbd: couldn't find a device at index 0 [ 1355.223972][ T31] audit: type=1804 audit(1792597676.573:50): pid=814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5565" name="/newroot/523/cgroup.controllers" dev="tmpfs" ino=2703 res=1 errno=0 [ 1355.224042][ T31] audit: type=1800 audit(1792597676.573:51): pid=814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5565" name="cgroup.controllers" dev="tmpfs" ino=2703 res=0 errno=0 [ 1355.321327][ T818] netlink: 'syz.2.5566': attribute type 4 has an invalid length. [ 1355.947543][ T824] syzkaller0: entered promiscuous mode [ 1355.947571][ T824] syzkaller0: entered allmulticast mode [ 1356.074069][ T832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1356.077455][ T832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1356.125336][ T832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1356.159154][ T824] tipc: Enabled bearer , priority 0 [ 1356.434281][ T832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1356.436916][ T836] wlan0: mtu less than device minimum [ 1356.437938][ T832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1356.573612][ T822] tipc: Resetting bearer [ 1356.762742][ T822] tipc: Disabling bearer [ 1357.205047][ T848] 0: reclassify loop, rule prio 0, protocol 03 [ 1357.264745][ T849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5574'. [ 1357.264976][ T849] ip6tnl0: entered promiscuous mode [ 1357.319739][ T852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5575'. [ 1357.487576][ T855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5576'. [ 1357.603467][ T860] xt_IDLETIMER: timeout value is zero [ 1358.352922][ T863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5577'. [ 1358.352951][ T863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5577'. [ 1358.776733][ T874] Bluetooth: hci0: unsupported parameter 5135 [ 1358.776763][ T874] Bluetooth: hci0: unsupported parameter 8192 [ 1358.776783][ T874] Bluetooth: hci0: unsupported parameter 5135 [ 1358.776798][ T874] Bluetooth: hci0: unsupported parameter 8192 [ 1359.153910][ T866] udevd[866]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1359.202533][ T864] udevd[864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1359.440137][ T885] ip_tables: iptables: counters copy to user failed while replacing table [ 1359.617777][ T880] netlink: 'syz.4.5578': attribute type 3 has an invalid length. [ 1360.053035][ T879] syzkaller0: entered promiscuous mode [ 1360.053065][ T879] syzkaller0: entered allmulticast mode [ 1360.247053][ T907] netlink: 'syz.3.5585': attribute type 2 has an invalid length. [ 1360.247088][ T907] nbd: must specify an index to disconnect [ 1361.205444][ T929] nbd: couldn't find a device at index 0 [ 1361.609347][ T939] xt_hashlimit: size too large, truncated to 1048576 [ 1361.739213][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1361.739686][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1362.364803][ T948] netlink: 'syz.2.5591': attribute type 11 has an invalid length. [ 1362.364832][ T948] __nla_validate_parse: 2 callbacks suppressed [ 1362.364847][ T948] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5591'. [ 1362.465915][T21823] Bluetooth: hci2: command 0x0405 tx timeout [ 1362.515075][ T955] netlink: 'syz.2.5591': attribute type 11 has an invalid length. [ 1369.857618][ T1001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5600'. [ 1369.857662][ T1001] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5600'. [ 1369.857682][ T1001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1370.109434][ T1005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1370.113966][ T1005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1370.792982][ T1034] netlink: 'syz.4.5603': attribute type 1 has an invalid length. [ 1371.072557][ T1022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5603'. [ 1371.149125][ T1026] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5603'. [ 1371.774722][ T1017] veth7: entered allmulticast mode [ 1372.025360][ T1038] bond8: (slave gretap0): making interface the new active one [ 1372.055043][ T1038] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 1372.631578][ T1079] netlink: 'syz.0.5608': attribute type 16 has an invalid length. [ 1372.631609][ T1079] netlink: 'syz.0.5608': attribute type 17 has an invalid length. [ 1372.632846][ T1079] ip6tnl0: left allmulticast mode [ 1372.690975][ T1086] FAULT_INJECTION: forcing a failure. [ 1372.690975][ T1086] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.691014][ T1086] CPU: 1 UID: 0 PID: 1086 Comm: syz.2.5610 Not tainted syzkaller #0 PREEMPT(full) [ 1372.691058][ T1086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1372.691082][ T1086] Call Trace: [ 1372.691092][ T1086] [ 1372.691103][ T1086] dump_stack_lvl+0xe8/0x150 [ 1372.691145][ T1086] should_fail_ex+0x410/0x560 [ 1372.691185][ T1086] should_failslab+0xa8/0x100 [ 1372.691220][ T1086] __kmalloc_noprof+0xfe/0x720 [ 1372.691246][ T1086] ? sk_prot_alloc+0xe7/0x210 [ 1372.691279][ T1086] ? sk_prot_alloc+0xe7/0x210 [ 1372.691316][ T1086] sk_prot_alloc+0xe7/0x210 [ 1372.691345][ T1086] ? sk_alloc+0x27/0x390 [ 1372.691377][ T1086] sk_alloc+0x3a/0x390 [ 1372.691412][ T1086] bpf_prog_test_run_skb+0x3a6/0x2230 [ 1372.691440][ T1086] ? lock_acquire+0x115/0x350 [ 1372.691485][ T1086] ? __fget_files+0x3a2/0x420 [ 1372.691520][ T1086] ? __fget_files+0x2a/0x420 [ 1372.691558][ T1086] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1372.691585][ T1086] bpf_prog_test_run+0x2c5/0x340 [ 1372.691620][ T1086] __sys_bpf+0xa22/0xd90 [ 1372.691695][ T1086] ? __pfx___sys_bpf+0x10/0x10 [ 1372.691735][ T1086] ? __fget_files+0x2a/0x420 [ 1372.691789][ T1086] ? ksys_write+0x242/0x270 [ 1372.691830][ T1086] ? __pfx_ksys_write+0x10/0x10 [ 1372.691860][ T1086] __x64_sys_bpf+0xba/0xd0 [ 1372.691888][ T1086] do_syscall_64+0x166/0x520 [ 1372.691921][ T1086] ? trace_irq_disable+0x3b/0x140 [ 1372.691945][ T1086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.691970][ T1086] ? clear_bhb_loop+0x70/0xc0 [ 1372.691998][ T1086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.692022][ T1086] RIP: 0033:0x7fc8b0f9f559 [ 1372.692043][ T1086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.692062][ T1086] RSP: 002b:00007fc8b1e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1372.692087][ T1086] RAX: ffffffffffffffda RBX: 00007fc8b1225fa0 RCX: 00007fc8b0f9f559 [ 1372.692105][ T1086] RDX: 0000000000000050 RSI: 0000200000000cc0 RDI: 000000000000000a [ 1372.692120][ T1086] RBP: 00007fc8b1e00090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.692134][ T1086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.692146][ T1086] R13: 00007fc8b1226038 R14: 00007fc8b1225fa0 R15: 00007ffd51706f68 [ 1372.692177][ T1086] [ 1372.707604][ T1079] team0: left promiscuous mode [ 1372.707675][ T1079] team_slave_1: left promiscuous mode [ 1372.710530][ T1079] team0: left allmulticast mode [ 1372.710586][ T1079] team_slave_1: left allmulticast mode [ 1372.995254][ T1079] vlan0: left promiscuous mode [ 1372.999790][ T1079] vlan1: left promiscuous mode [ 1373.000180][ T1079] macvlan0: left promiscuous mode [ 1373.000351][ T1079] macvlan1: left promiscuous mode [ 1373.000517][ T1079] ipvlan0: left promiscuous mode [ 1373.000676][ T1079] ipvlan1: left promiscuous mode [ 1373.000975][ T1079] veth0_macvtap: left promiscuous mode [ 1373.000992][ T1079] veth0_macvtap: left allmulticast mode [ 1373.001154][ T1079] macvtap0: left promiscuous mode [ 1373.001324][ T1079] geneve0: left promiscuous mode [ 1373.001485][ T1079] geneve1: left promiscuous mode [ 1373.001654][ T1079] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1373.001802][ T1079] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 1373.001938][ T1079] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 1373.002070][ T1079] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 1373.002211][ T1079] mac80211_hwsim hwsim32 wlan0: left promiscuous mode [ 1373.002380][ T1079] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 1373.002817][ T1079] erspan1: left promiscuous mode [ 1373.002953][ T1079] ip6tnl1: left promiscuous mode [ 1373.002969][ T1079] ip6tnl1: left allmulticast mode [ 1373.003094][ T1079] veth2: left promiscuous mode [ 1373.003266][ T1079] veth3: left promiscuous mode [ 1373.003423][ T1079] batadv1: left promiscuous mode [ 1373.003584][ T1079] vti0: left promiscuous mode [ 1373.003745][ T1079] syztnl0: left promiscuous mode [ 1373.003876][ T1079] mac80211_hwsim hwsim38 wlan2: left promiscuous mode [ 1373.004040][ T1079] mac80211_hwsim hwsim39 wlan3: left promiscuous mode [ 1373.004211][ T1079] mac80211_hwsim hwsim40 wlan4: left promiscuous mode [ 1373.211329][ T1079] gretap1: left promiscuous mode [ 1373.211489][ T1079] ip6gretap1: left promiscuous mode [ 1373.211507][ T1079] ip6gretap1: left allmulticast mode [ 1373.211761][ T1079] vlan2: left promiscuous mode [ 1373.211777][ T1079] bond1: left promiscuous mode [ 1373.212073][ T1079] bridge1: left promiscuous mode [ 1373.212216][ T1079] vxlan0: left promiscuous mode [ 1373.212359][ T1079] veth1.0: left promiscuous mode [ 1373.212375][ T1079] veth1: left promiscuous mode [ 1373.217198][ T1079] gre1: left promiscuous mode [ 1373.217221][ T1079] gre1: left allmulticast mode [ 1373.217365][ T1079] mac80211_hwsim hwsim41 wlan5: left promiscuous mode [ 1373.217528][ T1079] bridge2: left promiscuous mode [ 1373.217545][ T1079] bridge2: left allmulticast mode [ 1373.217685][ T1079] ip6gre1: left promiscuous mode [ 1373.217701][ T1079] ip6gre1: left allmulticast mode [ 1373.217834][ T1079] batadv2: left promiscuous mode [ 1373.217997][ T1079] vx0: left promiscuous mode [ 1373.218126][ T1079] bond2: left promiscuous mode [ 1373.218403][ T1079] gretap2: left promiscuous mode [ 1373.346307][ T1079] bond3: left promiscuous mode [ 1373.346459][ T1079] ip6gretap2: left promiscuous mode [ 1373.346597][ T1079] bridge3: left promiscuous mode [ 1373.346749][ T1079] bond4: left promiscuous mode [ 1373.346899][ T1079] sit1: left promiscuous mode [ 1373.347034][ T1079] veth0_vlan.4: left promiscuous mode [ 1373.401797][ T1079] ip6gre2: left promiscuous mode [ 1373.401826][ T1079] ip6gre2: left allmulticast mode [ 1373.402649][ T1079] bridge6: left promiscuous mode [ 1373.402668][ T1079] bridge6: left allmulticast mode [ 1373.517456][ T1079] bond9: left promiscuous mode [ 1373.517485][ T1079] bond9: left allmulticast mode [ 1373.628552][ T1079] bond10: left promiscuous mode [ 1373.628584][ T1079] erspan2: left promiscuous mode [ 1373.628763][ T1079] bond10: left allmulticast mode [ 1373.693771][ T1095] nbd5: detected capacity change from 0 to 63 [ 1373.712573][ T1079] erspan2: left allmulticast mode [ 1373.733663][ T1079] geneve2: left promiscuous mode [ 1373.733693][ T1079] geneve2: left allmulticast mode [ 1373.789729][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.789789][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.789831][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.789871][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.214454][ T1108] x_tables: duplicate underflow at hook 1 [ 1374.250907][ T52] block nbd5: Receive control failed (result -104) [ 1374.370099][ T1112] netlink: 'syz.0.5615': attribute type 1 has an invalid length. [ 1374.638754][ T1112] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1376.284422][ T1147] syzkaller1: entered promiscuous mode [ 1376.284450][ T1147] syzkaller1: entered allmulticast mode [ 1376.289134][ T1146] FAULT_INJECTION: forcing a failure. [ 1376.289134][ T1146] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.289169][ T1146] CPU: 1 UID: 0 PID: 1146 Comm: syz.2.5623 Not tainted syzkaller #0 PREEMPT(full) [ 1376.289195][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1376.289210][ T1146] Call Trace: [ 1376.289219][ T1146] [ 1376.289231][ T1146] dump_stack_lvl+0xe8/0x150 [ 1376.289271][ T1146] should_fail_ex+0x410/0x560 [ 1376.289311][ T1146] should_failslab+0xa8/0x100 [ 1376.289347][ T1146] __kmalloc_noprof+0xfe/0x720 [ 1376.289375][ T1146] ? security_sk_alloc+0x52/0x360 [ 1376.289490][ T1146] ? security_sk_alloc+0x52/0x360 [ 1376.289521][ T1146] security_sk_alloc+0x52/0x360 [ 1376.289551][ T1146] sk_prot_alloc+0x101/0x210 [ 1376.289584][ T1146] ? sk_alloc+0x27/0x390 [ 1376.289617][ T1146] sk_alloc+0x3a/0x390 [ 1376.289653][ T1146] bpf_prog_test_run_skb+0x3a6/0x2230 [ 1376.289681][ T1146] ? lock_acquire+0x115/0x350 [ 1376.289727][ T1146] ? __fget_files+0x3a2/0x420 [ 1376.289762][ T1146] ? __fget_files+0x2a/0x420 [ 1376.289803][ T1146] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1376.289831][ T1146] bpf_prog_test_run+0x2c5/0x340 [ 1376.289867][ T1146] __sys_bpf+0xa22/0xd90 [ 1376.289906][ T1146] ? __pfx___sys_bpf+0x10/0x10 [ 1376.289954][ T1146] ? __fget_files+0x2a/0x420 [ 1376.290010][ T1146] ? ksys_write+0x242/0x270 [ 1376.290037][ T1146] ? __pfx_ksys_write+0x10/0x10 [ 1376.290069][ T1146] __x64_sys_bpf+0xba/0xd0 [ 1376.290098][ T1146] do_syscall_64+0x166/0x520 [ 1376.290131][ T1146] ? trace_irq_disable+0x3b/0x140 [ 1376.290157][ T1146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.290182][ T1146] ? clear_bhb_loop+0x70/0xc0 [ 1376.290211][ T1146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.290235][ T1146] RIP: 0033:0x7fc8b0f9f559 [ 1376.290258][ T1146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.290278][ T1146] RSP: 002b:00007fc8b1e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1376.290305][ T1146] RAX: ffffffffffffffda RBX: 00007fc8b1225fa0 RCX: 00007fc8b0f9f559 [ 1376.290323][ T1146] RDX: 0000000000000050 RSI: 0000200000000cc0 RDI: 000000000000000a [ 1376.290339][ T1146] RBP: 00007fc8b1e00090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.290355][ T1146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.290370][ T1146] R13: 00007fc8b1226038 R14: 00007fc8b1225fa0 R15: 00007ffd51706f68 [ 1376.290408][ T1146] [ 1376.720225][ T1147] netlink: 'syz.4.5622': attribute type 1 has an invalid length. [ 1376.720251][ T1147] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5622'. [ 1376.901567][ T1161] netlink: 'syz.4.5622': attribute type 1 has an invalid length. [ 1376.901594][ T1161] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5622'. [ 1379.209441][ T1210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5634'. [ 1379.445397][ T1216] netlink: 'syz.2.5637': attribute type 1 has an invalid length. [ 1379.668283][ T1219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5637'. [ 1379.753673][ T1221] x_tables: duplicate underflow at hook 2 [ 1380.218070][ T1241] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5642'. [ 1380.492996][ T1244] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5642'. [ 1380.798365][ T1251] netlink: 'syz.2.5643': attribute type 9 has an invalid length. [ 1380.833439][ T1251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5643'. [ 1381.966514][ T1285] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1382.465282][ T1287] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1382.479100][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5651'. [ 1382.557669][ T1293] netlink: 'syz.4.5652': attribute type 3 has an invalid length. [ 1382.652535][ T1290] FAULT_INJECTION: forcing a failure. [ 1382.652535][ T1290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.652582][ T1290] CPU: 1 UID: 0 PID: 1290 Comm: syz.2.5650 Not tainted syzkaller #0 PREEMPT(full) [ 1382.652610][ T1290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1382.652626][ T1290] Call Trace: [ 1382.652637][ T1290] [ 1382.652648][ T1290] dump_stack_lvl+0xe8/0x150 [ 1382.652691][ T1290] should_fail_ex+0x410/0x560 [ 1382.652731][ T1290] _copy_to_user+0x31/0xb0 [ 1382.652791][ T1290] bpf_test_finish+0x1cf/0x690 [ 1382.652832][ T1290] ? __pfx_bpf_test_finish+0x10/0x10 [ 1382.652862][ T1290] ? eth_type_trans+0x33f/0x640 [ 1382.653012][ T1290] bpf_prog_test_run_skb+0x11fe/0x2230 [ 1382.653063][ T1290] ? __fget_files+0x3a2/0x420 [ 1382.653099][ T1290] ? __fget_files+0x2a/0x420 [ 1382.653154][ T1290] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1382.653183][ T1290] bpf_prog_test_run+0x2c5/0x340 [ 1382.653220][ T1290] __sys_bpf+0xa22/0xd90 [ 1382.653258][ T1290] ? __pfx___sys_bpf+0x10/0x10 [ 1382.653299][ T1290] ? __fget_files+0x2a/0x420 [ 1382.653356][ T1290] ? ksys_write+0x242/0x270 [ 1382.653383][ T1290] ? __pfx_ksys_write+0x10/0x10 [ 1382.653415][ T1290] __x64_sys_bpf+0xba/0xd0 [ 1382.653445][ T1290] do_syscall_64+0x166/0x520 [ 1382.653478][ T1290] ? trace_irq_disable+0x3b/0x140 [ 1382.653503][ T1290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.653528][ T1290] ? clear_bhb_loop+0x70/0xc0 [ 1382.653558][ T1290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.653583][ T1290] RIP: 0033:0x7fc8b0f9f559 [ 1382.653607][ T1290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.653628][ T1290] RSP: 002b:00007fc8b1e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1382.653655][ T1290] RAX: ffffffffffffffda RBX: 00007fc8b1225fa0 RCX: 00007fc8b0f9f559 [ 1382.653673][ T1290] RDX: 0000000000000050 RSI: 0000200000000cc0 RDI: 000000000000000a [ 1382.653689][ T1290] RBP: 00007fc8b1e00090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.653705][ T1290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.653719][ T1290] R13: 00007fc8b1226038 R14: 00007fc8b1225fa0 R15: 00007ffd51706f68 [ 1382.653757][ T1290] [ 1384.686834][ T1327] [ 1384.689264][ T1327] ====================================================== [ 1384.696417][ T1327] WARNING: possible circular locking dependency detected [ 1384.703648][ T1327] syzkaller #0 Not tainted [ 1384.708141][ T1327] ------------------------------------------------------ [ 1384.715404][ T1327] syz.0.5657/1327 is trying to acquire lock: [ 1384.721424][ T1327] ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 1384.730713][ T1327] [ 1384.730713][ T1327] but task is already holding lock: [ 1384.738117][ T1327] ffff88804f47d900 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1384.747710][ T1327] [ 1384.747710][ T1327] which lock already depends on the new lock. [ 1384.747710][ T1327] [ 1384.758679][ T1327] [ 1384.758679][ T1327] the existing dependency chain (in reverse order) is: [ 1384.767737][ T1327] [ 1384.767737][ T1327] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1384.775501][ T1327] __might_fault+0xcb/0x130 [ 1384.780596][ T1327] _copy_from_user+0x28/0xb0 [ 1384.785778][ T1327] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1384.792431][ T1327] ip_generic_getfrag+0x149/0x2d0 [ 1384.798109][ T1327] __ip6_append_data+0x3b26/0x40c0 [ 1384.803865][ T1327] ip6_append_data+0x108/0x270 [ 1384.809280][ T1327] rawv6_sendmsg+0x1298/0x18c0 [ 1384.814679][ T1327] sock_sendmsg_nosec+0x10f/0x190 [ 1384.820303][ T1327] ____sys_sendmsg+0x54e/0x850 [ 1384.825646][ T1327] ___sys_sendmsg+0x2a5/0x360 [ 1384.830932][ T1327] __x64_sys_sendmsg+0x1b1/0x290 [ 1384.836453][ T1327] do_syscall_64+0x166/0x520 [ 1384.841645][ T1327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.848147][ T1327] [ 1384.848147][ T1327] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1384.855930][ T1327] lock_sock_nested+0x41/0x100 [ 1384.861268][ T1327] inet_shutdown+0x6a/0x390 [ 1384.866474][ T1327] nbd_mark_nsock_dead+0x2cb/0x550 [ 1384.872241][ T1327] sock_shutdown+0x15e/0x260 [ 1384.877488][ T1327] nbd_clear_sock+0x24/0x170 [ 1384.882673][ T1327] nbd_config_put+0x477/0x7e0 [ 1384.887923][ T1327] nbd_genl_connect+0x19b8/0x1cd0 [ 1384.893523][ T1327] genl_family_rcv_msg_doit+0x233/0x340 [ 1384.899642][ T1327] genl_rcv_msg+0x614/0x7a0 [ 1384.904718][ T1327] netlink_rcv_skb+0x226/0x4a0 [ 1384.910059][ T1327] genl_rcv+0x28/0x40 [ 1384.914616][ T1327] netlink_unicast+0x8ef/0xa80 [ 1384.919957][ T1327] netlink_sendmsg+0x813/0xb40 [ 1384.925308][ T1327] sock_sendmsg_nosec+0x14e/0x190 [ 1384.930898][ T1327] ____sys_sendmsg+0x54e/0x850 [ 1384.936242][ T1327] ___sys_sendmsg+0x2a5/0x360 [ 1384.941666][ T1327] __x64_sys_sendmsg+0x1b1/0x290 [ 1384.947321][ T1327] do_syscall_64+0x166/0x520 [ 1384.952485][ T1327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.959029][ T1327] [ 1384.959029][ T1327] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1384.966804][ T1327] __mutex_lock+0x19d/0x1550 [ 1384.972014][ T1327] nbd_queue_rq+0x373/0xff0 [ 1384.977081][ T1327] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1384.983291][ T1327] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1384.990261][ T1327] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1384.996892][ T1327] blk_mq_run_work_fn+0x16c/0x300 [ 1385.002483][ T1327] process_scheduled_works+0xc3d/0x1630 [ 1385.008643][ T1327] worker_thread+0xa47/0xfb0 [ 1385.013809][ T1327] kthread+0x38b/0x480 [ 1385.018570][ T1327] ret_from_fork+0x514/0xb70 [ 1385.023881][ T1327] ret_from_fork_asm+0x1a/0x30 [ 1385.029302][ T1327] [ 1385.029302][ T1327] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1385.036557][ T1327] __mutex_lock+0x19d/0x1550 [ 1385.041766][ T1327] nbd_queue_rq+0xc1/0xff0 [ 1385.046778][ T1327] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1385.052910][ T1327] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1385.060008][ T1327] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1385.066753][ T1327] blk_mq_run_work_fn+0x16c/0x300 [ 1385.072354][ T1327] process_scheduled_works+0xc3d/0x1630 [ 1385.078471][ T1327] worker_thread+0xa47/0xfb0 [ 1385.083668][ T1327] kthread+0x38b/0x480 [ 1385.088723][ T1327] ret_from_fork+0x514/0xb70 [ 1385.093874][ T1327] ret_from_fork_asm+0x1a/0x30 [ 1385.099197][ T1327] [ 1385.099197][ T1327] -> #3 (set->srcu){.+.+}-{0:0}: [ 1385.106379][ T1327] __synchronize_srcu+0xc9/0x2f0 [ 1385.111861][ T1327] elevator_switch+0x1e8/0x7b0 [ 1385.117305][ T1327] elevator_change+0x2fa/0x480 [ 1385.122619][ T1327] elevator_set_default+0x375/0x440 [ 1385.128373][ T1327] blk_register_queue+0x3f3/0x4e0 [ 1385.134035][ T1327] __add_disk+0x6b8/0xdb0 [ 1385.138942][ T1327] add_disk_fwnode+0x100/0x3a0 [ 1385.144271][ T1327] nbd_dev_add+0x733/0xb60 [ 1385.149267][ T1327] nbd_init+0x168/0x1f0 [ 1385.154493][ T1327] do_one_initcall+0x250/0x870 [ 1385.159837][ T1327] do_initcall_level+0x10a/0x1a0 [ 1385.165474][ T1327] do_initcalls+0x59/0xa0 [ 1385.170372][ T1327] kernel_init_freeable+0x29d/0x3e0 [ 1385.176144][ T1327] kernel_init+0x22/0x1d0 [ 1385.181027][ T1327] ret_from_fork+0x514/0xb70 [ 1385.186183][ T1327] ret_from_fork_asm+0x1a/0x30 [ 1385.191512][ T1327] [ 1385.191512][ T1327] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1385.199469][ T1327] __mutex_lock+0x19d/0x1550 [ 1385.204634][ T1327] elevator_change+0x1af/0x480 [ 1385.210404][ T1327] elevator_set_none+0xb5/0x140 [ 1385.215825][ T1327] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1385.222199][ T1327] nbd_start_device+0x189/0xb30 [ 1385.227627][ T1327] nbd_genl_connect+0x167d/0x1cd0 [ 1385.233210][ T1327] genl_family_rcv_msg_doit+0x233/0x340 [ 1385.239316][ T1327] genl_rcv_msg+0x614/0x7a0 [ 1385.244580][ T1327] netlink_rcv_skb+0x226/0x4a0 [ 1385.249908][ T1327] genl_rcv+0x28/0x40 [ 1385.254449][ T1327] netlink_unicast+0x8ef/0xa80 [ 1385.259772][ T1327] netlink_sendmsg+0x813/0xb40 [ 1385.265089][ T1327] sock_sendmsg_nosec+0x14e/0x190 [ 1385.270685][ T1327] ____sys_sendmsg+0x54e/0x850 [ 1385.275997][ T1327] ___sys_sendmsg+0x2a5/0x360 [ 1385.281218][ T1327] __x64_sys_sendmsg+0x1b1/0x290 [ 1385.286705][ T1327] do_syscall_64+0x166/0x520 [ 1385.292195][ T1327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.298636][ T1327] [ 1385.298636][ T1327] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1385.307270][ T1327] blk_alloc_queue+0x544/0x690 [ 1385.312586][ T1327] __blk_mq_alloc_disk+0x194/0x390 [ 1385.318272][ T1327] nbd_dev_add+0x494/0xb60 [ 1385.323239][ T1327] nbd_init+0x168/0x1f0 [ 1385.327938][ T1327] do_one_initcall+0x250/0x870 [ 1385.333259][ T1327] do_initcall_level+0x10a/0x1a0 [ 1385.338745][ T1327] do_initcalls+0x59/0xa0 [ 1385.343623][ T1327] kernel_init_freeable+0x29d/0x3e0 [ 1385.349465][ T1327] kernel_init+0x22/0x1d0 [ 1385.354361][ T1327] ret_from_fork+0x514/0xb70 [ 1385.359508][ T1327] ret_from_fork_asm+0x1a/0x30 [ 1385.364832][ T1327] [ 1385.364832][ T1327] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1385.372075][ T1327] __lock_acquire+0x164c/0x2de0 [ 1385.377470][ T1327] lock_acquire+0x115/0x350 [ 1385.382514][ T1327] fs_reclaim_acquire+0x71/0x100 [ 1385.387997][ T1327] prepare_alloc_pages+0x149/0x600 [ 1385.393655][ T1327] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1385.400005][ T1327] alloc_pages_mpol+0x21e/0x390 [ 1385.405446][ T1327] folio_alloc_mpol_noprof+0x39/0x160 [ 1385.411371][ T1327] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1385.417213][ T1327] do_pte_missing+0x173a/0x34b0 [ 1385.422607][ T1327] handle_mm_fault+0x1a53/0x3750 [ 1385.428093][ T1327] do_user_addr_fault+0x746/0x1340 [ 1385.433747][ T1327] exc_page_fault+0x6a/0xc0 [ 1385.438801][ T1327] asm_exc_page_fault+0x26/0x30 [ 1385.444192][ T1327] rep_movs_alternative+0x4a/0xa0 [ 1385.449782][ T1327] _copy_to_user+0x8a/0xb0 [ 1385.454751][ T1327] bpf_prog_array_copy_to_user+0x1f9/0x280 [ 1385.461127][ T1327] netns_bpf_prog_query+0x3b0/0x4a0 [ 1385.466880][ T1327] __sys_bpf+0xcdc/0xd90 [ 1385.471665][ T1327] __x64_sys_bpf+0xba/0xd0 [ 1385.476644][ T1327] do_syscall_64+0x166/0x520 [ 1385.481779][ T1327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.488225][ T1327] [ 1385.488225][ T1327] other info that might help us debug this: [ 1385.488225][ T1327] [ 1385.498491][ T1327] Chain exists of: [ 1385.498491][ T1327] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1385.498491][ T1327] [ 1385.511129][ T1327] Possible unsafe locking scenario: [ 1385.511129][ T1327] [ 1385.518601][ T1327] CPU0 CPU1 [ 1385.523987][ T1327] ---- ---- [ 1385.529403][ T1327] rlock(&mm->mmap_lock); [ 1385.533889][ T1327] lock(sk_lock-AF_INET6); [ 1385.540941][ T1327] lock(&mm->mmap_lock); [ 1385.547819][ T1327] lock(fs_reclaim); [ 1385.551832][ T1327] [ 1385.551832][ T1327] *** DEADLOCK *** [ 1385.551832][ T1327] [ 1385.560083][ T1327] locks held by syz.0.5657/1327: 2, last CPU#0: [ 1385.566475][ T1327] #0: ffffffff8fe293c0 (netns_bpf_mutex){+.+.}-{4:4}, at: netns_bpf_prog_query+0x1a5/0x4a0 [ 1385.576711][ T1327] #1: ffff88804f47d900 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1385.586675][ T1327] [ 1385.586675][ T1327] stack backtrace: [ 1385.592593][ T1327] CPU: 0 UID: 0 PID: 1327 Comm: syz.0.5657 Not tainted syzkaller #0 PREEMPT(full) [ 1385.601899][ T1327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1385.612003][ T1327] Call Trace: [ 1385.615315][ T1327] [ 1385.618284][ T1327] dump_stack_lvl+0xe8/0x150 [ 1385.622920][ T1327] print_circular_bug+0x2e2/0x300 [ 1385.627985][ T1327] check_noncircular+0x12f/0x150 [ 1385.632983][ T1327] __lock_acquire+0x164c/0x2de0 [ 1385.637859][ T1327] ? is_bpf_text_address+0x292/0x2b0 [ 1385.643182][ T1327] ? is_bpf_text_address+0x26/0x2b0 [ 1385.648435][ T1327] ? kernel_text_address+0xa5/0xe0 [ 1385.653594][ T1327] ? __kernel_text_address+0xd/0x30 [ 1385.658823][ T1327] ? unwind_get_return_address+0x4d/0x90 [ 1385.664503][ T1327] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1385.670692][ T1327] lock_acquire+0x115/0x350 [ 1385.675246][ T1327] ? prepare_alloc_pages+0x149/0x600 [ 1385.680564][ T1327] ? stack_trace_save+0xa9/0x100 [ 1385.685530][ T1327] ? __pfx_stack_trace_save+0x10/0x10 [ 1385.691201][ T1327] fs_reclaim_acquire+0x71/0x100 [ 1385.696197][ T1327] ? prepare_alloc_pages+0x149/0x600 [ 1385.701615][ T1327] prepare_alloc_pages+0x149/0x600 [ 1385.706764][ T1327] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1385.712606][ T1327] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1385.718966][ T1327] ? __pfx_policy_nodemask+0x10/0x10 [ 1385.724283][ T1327] ? __lock_acquire+0x747/0x2de0 [ 1385.729252][ T1327] ? __lock_acquire+0x747/0x2de0 [ 1385.734207][ T1327] alloc_pages_mpol+0x21e/0x390 [ 1385.739090][ T1327] folio_alloc_mpol_noprof+0x39/0x160 [ 1385.744512][ T1327] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1385.749834][ T1327] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1385.755762][ T1327] ? lock_acquire+0x115/0x350 [ 1385.760462][ T1327] do_pte_missing+0x173a/0x34b0 [ 1385.765353][ T1327] handle_mm_fault+0x1a53/0x3750 [ 1385.770352][ T1327] ? handle_mm_fault+0xf1/0x3750 [ 1385.775328][ T1327] ? __pfx_handle_mm_fault+0x10/0x10 [ 1385.780656][ T1327] ? __lock_acquire+0x747/0x2de0 [ 1385.785647][ T1327] ? lock_mm_and_find_vma+0xa7/0x340 [ 1385.791229][ T1327] do_user_addr_fault+0x746/0x1340 [ 1385.796381][ T1327] exc_page_fault+0x6a/0xc0 [ 1385.800921][ T1327] asm_exc_page_fault+0x26/0x30 [ 1385.805795][ T1327] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1385.811625][ T1327] Code: 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 68 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1385.831341][ T1327] RSP: 0018:ffffc90006237af0 EFLAGS: 00050206 [ 1385.837444][ T1327] RAX: ffffffff84e0b801 RBX: 00000000000103a0 RCX: 000000000000f960 [ 1385.845610][ T1327] RDX: 0000000000000000 RSI: ffff888090760a40 RDI: 0000200000001000 [ 1385.853604][ T1327] RBP: 00000000000040e8 R08: ffff88809077039f R09: 1ffff110120ee073 [ 1385.861603][ T1327] R10: dffffc0000000000 R11: ffffed10120ee074 R12: 0000200000010960 [ 1385.869596][ T1327] R13: 00007ffffffff000 R14: ffff888090760000 R15: 00002000000005c0 [ 1385.877600][ T1327] ? _copy_to_user+0x1/0xb0 [ 1385.882152][ T1327] _copy_to_user+0x8a/0xb0 [ 1385.886600][ T1327] bpf_prog_array_copy_to_user+0x1f9/0x280 [ 1385.892441][ T1327] netns_bpf_prog_query+0x3b0/0x4a0 [ 1385.897677][ T1327] ? __pfx_netns_bpf_prog_query+0x10/0x10 [ 1385.903456][ T1327] __sys_bpf+0xcdc/0xd90 [ 1385.907736][ T1327] ? __pfx___sys_bpf+0x10/0x10 [ 1385.912520][ T1327] ? do_futex+0x3e7/0x4e0 [ 1385.916929][ T1327] ? rcu_is_watching+0x16/0xb0 [ 1385.921725][ T1327] __x64_sys_bpf+0xba/0xd0 [ 1385.926171][ T1327] do_syscall_64+0x166/0x520 [ 1385.930813][ T1327] ? trace_irq_disable+0x3b/0x140 [ 1385.935865][ T1327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.941958][ T1327] ? clear_bhb_loop+0x70/0xc0 [ 1385.946662][ T1327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.952582][ T1327] RIP: 0033:0x7ff6a599f559 [ 1385.957019][ T1327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.977431][ T1327] RSP: 002b:00007ff6a3bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1385.985883][ T1327] RAX: ffffffffffffffda RBX: 00007ff6a5c25fa0 RCX: 00007ff6a599f559 [ 1385.994319][ T1327] RDX: 0000000000000040 RSI: 0000200000000580 RDI: 0000000000000010 [ 1386.002347][ T1327] RBP: 00007ff6a5a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1386.010367][ T1327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.018467][ T1327] R13: 00007ff6a5c26038 R14: 00007ff6a5c25fa0 R15: 00007ffda30c7e88 [ 1386.026477][ T1327] [ 1386.086536][ T1338] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5658'. [ 1386.172349][ T1339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5660'. [ 1386.172384][ T1339] block nbd6: Unsupported socket: should be TCP or UNIX.