last executing test programs: 16.948872694s ago: executing program 4 (id=8842): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0xfc, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000015002927000000000000008b050021"], 0x38}}, 0x4) (async) pipe(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32) connect$inet(r4, 0x0, 0x0) (async, rerun: 32) write$cgroup_int(r4, &(0x7f00000003c0)=0x10001, 0x12) (async) sendfile(r4, r3, 0x0, 0xf03a0005) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x7a44, 0x1700) (rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x4b48, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x25a4, 0x1, [@m_skbedit={0x50, 0xf, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf543, 0x0, 0x3, 0x401, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x208, 0x13, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x3, 0x7, 0x3a}, @rand_addr=0x64010100, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x0, 0x8, 0x3, 0x9}, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7fff, 0x8, 0x1000, 0x4}, @local, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x10000, 0x3, 0xfffffffe, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4c4a0b00, 0x1, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x32c, 0x3, 0x8, 0x6, 0x7fffffff}, @broadcast, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x16c2, 0xd, 0xffffffffffffffff, 0x7ff, 0x8}, @multicast2, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0xffffffffffffffff, 0x1, 0x8}, @multicast1, @broadcast, 0x0, 0x6d94}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xc3d3, 0x3, 0x7, 0x6}, @private=0xa010101, @multicast1, 0xffffff00, 0x1}}]}, {0x78, 0x6, "c82a19d2348ccabb2b3e2ab0895e1f127d0d19b152e8761dac58162b52ec650cf93cb34f84618115218e90add426039f95239c58bb6143e40ee388b7a8172c8181e0d83c3955ad6e93c8b1aeb7f8a5276e7721f79dd987d38b42c4fab8c7b978c5f3026f4f0216eddeafa2b573243132ad379c5e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x1d9c, 0xf, 0x0, 0x0, {{0xb}, {0x1ca4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xcb84}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff7b3, 0xfffffffe, 0xad67, 0x3, 0xffffffff, 0x9, 0x3, 0x4, 0xe03f, 0xa625, 0x2, 0x1b, 0x6ed, 0xfffffff3, 0x1, 0x40, 0x10bb, 0x5, 0x2, 0x3d30, 0xffffff2d, 0x3, 0x65, 0x1, 0xe, 0x2, 0xe, 0x4, 0x9, 0x2, 0x7fffffff, 0x756, 0x5, 0xfffffffa, 0x2, 0x435, 0x1, 0x2, 0x4, 0x6, 0xc2c, 0x3, 0x8, 0xf73, 0x413, 0x520, 0x5, 0x7fffffff, 0x340, 0x6f, 0xf0, 0xffffffff, 0xfffffffb, 0x8001, 0x4, 0xff, 0x9, 0x1ff, 0x7, 0x7fff, 0x6, 0x2, 0x7ff, 0x6e, 0x1c0, 0x0, 0x401, 0xfffffff7, 0x2, 0x800, 0x3, 0x0, 0x6, 0x1, 0x5, 0x2, 0x10, 0x8001, 0x401, 0x7565a1d0, 0x9, 0x5, 0xdf, 0x4, 0x2, 0x80000000, 0x3, 0x100, 0x6, 0x3, 0xeeaf, 0x50000000, 0xfffffbff, 0x6, 0xffff, 0x81, 0x80000000, 0x5, 0xb2e, 0x7, 0x5, 0xe0, 0x1, 0xfffffffb, 0x0, 0x7, 0x3, 0x1ff, 0x5, 0xe, 0x2, 0x4, 0x8, 0x5, 0x9, 0x9, 0x5, 0x3ff, 0x9, 0x0, 0x5, 0x5609, 0x2, 0x7b, 0x1, 0x5, 0x6, 0x6, 0x9, 0x5, 0x4, 0x5, 0x0, 0x9, 0x16, 0x2, 0x1, 0x9cc, 0x1000, 0x6, 0x1, 0x800, 0x1, 0x7000000, 0x6, 0x0, 0x7, 0x6, 0x9, 0xb, 0xffff771b, 0x10, 0x400, 0x2, 0x5, 0x3, 0x2, 0x289576a8, 0x8, 0x2, 0xffffffdf, 0x7, 0x8, 0x3, 0x80000000, 0x2, 0x4, 0x1, 0x8, 0x7fff, 0x7, 0x81, 0x6, 0x0, 0x4, 0x4, 0xffffffd7, 0xc42c, 0x7, 0x80000001, 0x0, 0x7fff, 0x4, 0x0, 0x200, 0x5b4, 0x7, 0x1, 0xe, 0xd79c8e9, 0x1, 0x0, 0x4, 0x7, 0x2, 0x7, 0xe5, 0x3, 0x8, 0x3, 0xff, 0x1, 0xff, 0x950, 0x4, 0xffe00000, 0x7, 0x7, 0x3, 0x6, 0x5, 0x1, 0x6, 0x10, 0x6, 0xfff80000, 0xa3a, 0x80d5, 0x4000, 0x8, 0x1000, 0x8, 0x9, 0xf5, 0x7, 0x4, 0x1, 0x10000, 0x1, 0x1, 0x2, 0x5, 0x8, 0x2, 0x7, 0x2, 0x2, 0x4, 0x6, 0x80000000, 0xf1, 0x5, 0xfffffff2, 0x7ff, 0xcd, 0x5, 0x5, 0x8, 0x3, 0x7fffffff, 0x9, 0x1, 0x800, 0x81, 0x7f, 0x9d]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x1, 0x2, 0xfffffffc, 0x2, 0x0, 0x4, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x6, 0x8, 0x8, 0x6, 0x2, 0x200, 0x4, 0x1, 0x1ff, 0x4, 0xb, 0xfffffff7, 0x3, 0x800, 0x5, 0x1, 0x72, 0x1, 0x2, 0x6, 0x7, 0x4, 0x6, 0x1, 0x280, 0x7, 0x75ef, 0x6, 0xcb, 0x1, 0x101, 0x7, 0x4a4, 0x5, 0x9, 0x6, 0x9, 0x7fffffff, 0x1000, 0x2, 0x9, 0x4, 0xed, 0xfffeffff, 0x8, 0x7, 0x401, 0x98, 0x67d7, 0xeeb, 0xda3b, 0x8, 0xffff, 0xffffff9f, 0xfffffffc, 0x9, 0x7, 0x4, 0x9, 0xd5d, 0x2, 0x99, 0x5c7, 0xe7, 0x800, 0x5, 0x7fff, 0x1ff, 0x6, 0xfffffff2, 0x0, 0xfffffff7, 0xb, 0xfffffffc, 0x7, 0x800, 0x3, 0xfffffffc, 0x9, 0x9, 0x4, 0x8bc, 0x9, 0x8, 0xe, 0x590, 0x3, 0xffffff33, 0x5, 0xa553, 0x6, 0x8001, 0x9, 0x3, 0x858, 0x5, 0x6, 0x4, 0xfe, 0xd, 0x1, 0x0, 0x6, 0xfdda, 0x1, 0x1, 0xb, 0x2, 0x0, 0x8, 0x4, 0x3, 0x608, 0xffffffc7, 0x0, 0xa669, 0x7, 0x8, 0xa9b, 0x6, 0x7, 0x7e, 0x0, 0xf, 0x2, 0x7, 0x9, 0x2, 0x1, 0x4, 0x5, 0x8, 0x3, 0xfffffffc, 0x3a84, 0xc, 0xbb, 0x7, 0x1, 0x8, 0xffffb3ee, 0x10001, 0x6, 0x4, 0x1, 0x5, 0x31, 0x665, 0x9, 0x6, 0xfffffc00, 0x2800, 0x0, 0xe15, 0x1, 0xc54, 0x3, 0x0, 0x7, 0x8, 0x9, 0x5e0f, 0x46e, 0x4, 0xba48, 0x4, 0x4000, 0x8, 0xe8e6, 0x1, 0x9649, 0xe02, 0x1, 0x6, 0x6, 0x7fffffff, 0x8028, 0xe9, 0x401, 0x5, 0x8, 0x2ef, 0x3ff, 0x6fc41b02, 0x439, 0x6c4ad517, 0x0, 0x7, 0x4, 0x7, 0x6, 0x4, 0xb, 0x3, 0x3, 0x9, 0x8, 0xfffffffa, 0x3, 0x10, 0x6, 0x4, 0x7fff, 0x38000000, 0x36e5, 0x8, 0x1, 0x5, 0x1, 0xfff, 0x0, 0x0, 0x2, 0xfffffff7, 0x6, 0x0, 0x7, 0x89db, 0x3, 0x2, 0x0, 0x3, 0xfffffffa, 0x1, 0x29b7, 0x20, 0x10001, 0x2, 0x4, 0xf8, 0x5, 0x1, 0x6a, 0x7ff, 0x3, 0xffffff0f, 0x5, 0xb, 0x9, 0xfe0, 0x5, 0x8ef]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0xd5, 0x3a20, 0x9d3, 0x10000, 0x614f, 0xff, 0x2, 0x3, 0x200, 0x3, 0x6, 0x101, 0x3, 0x4, 0x1, 0xffff, 0x80000001, 0xebd4, 0x4, 0x5, 0x6, 0x8001, 0xffff, 0x9, 0x0, 0x3, 0xe, 0x9, 0x1, 0x1ff, 0x0, 0x2, 0x9, 0xff, 0x401, 0xe, 0x9, 0x9, 0x10001, 0x6, 0x10000, 0x400, 0xf0, 0x7, 0x1, 0x0, 0x5, 0x5, 0x0, 0x8, 0x6, 0xd0, 0xffffff01, 0xffffff81, 0x401, 0x7, 0x5, 0xfffffffc, 0xb, 0x0, 0xcd30, 0x4, 0x2, 0x2, 0x10000, 0x2, 0x1, 0x3, 0x8, 0xffffffff, 0x545f9392, 0x153, 0x1, 0x0, 0xfffffc00, 0xfff, 0x4, 0x3, 0x4, 0x7, 0x8de, 0x80, 0x8, 0x42, 0x80000000, 0x8000, 0x85, 0x6, 0x8d, 0x2, 0x1200, 0x7, 0x7, 0x0, 0xd80f, 0x1ff, 0x7ff, 0x0, 0x9, 0x1, 0x2, 0x1be8, 0x0, 0xfffffffd, 0x1940, 0x5, 0x1000, 0x3, 0x1, 0xffffffff, 0x0, 0x9, 0x653, 0x7, 0x3, 0x4, 0x0, 0x904, 0x8, 0x837, 0x4, 0xe, 0x8, 0xff1e, 0x8000, 0xd08, 0x9, 0x4, 0x800, 0x8, 0xfff, 0x1, 0x9, 0x3, 0x9, 0x4, 0x4, 0x4, 0xe0, 0x4, 0x1, 0x80000000, 0x0, 0x100, 0x5, 0xffffffff, 0x6f, 0xf, 0x1000, 0x2, 0x0, 0x0, 0x6, 0x9, 0x8, 0x4, 0x6, 0x4, 0x1, 0x9, 0xeb15, 0xc48, 0x8000, 0x99f, 0x10, 0x400, 0x8, 0x90, 0x8, 0x7, 0x4, 0x8, 0x7f, 0xfffffffe, 0x7, 0x800, 0x3, 0x3, 0x6, 0x3, 0x5, 0xb78, 0x0, 0x6, 0x7, 0x400, 0xfff, 0x4, 0x8000, 0x6, 0x1, 0x6, 0x8, 0x7, 0x3, 0x0, 0x3, 0xbd, 0xf, 0x7, 0x2, 0x3, 0x0, 0x5, 0xa5, 0x80000000, 0x101, 0x3, 0x6, 0x7fff, 0x6, 0x40, 0x8c, 0xfa, 0xe, 0x9, 0x5, 0x5, 0x6, 0xfffffff8, 0x2, 0x1, 0x0, 0x4, 0x47a1, 0x9, 0x3, 0x2, 0xfffffffe, 0x3, 0x10001, 0x7, 0x10001, 0x6, 0x9, 0x8, 0xfffffffc, 0x3, 0xfffffffd, 0x1, 0x5, 0x653, 0x4, 0x1, 0x1, 0x7fffffff, 0x53b6, 0x6c, 0x5, 0xd4, 0xe785, 0x3, 0x3, 0xac28]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x4, 0x7, 0x7, 0x6, {0x9e, 0x2, 0x8a, 0xa, 0x6, 0x7fffffff}, {0x3, 0x1, 0x200, 0x5, 0x98, 0x7}, 0xfff, 0x10001, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x3, 0x8b0, 0x3, 0x9, 0x5, 0x5, 0x6, 0x1000, 0x2, 0xfffffff5, 0x7ff, 0x2, 0x2, 0x2, 0x3, 0x80000001, 0x3ff, 0x5, 0x3, 0x8, 0x7, 0x5, 0x80000000, 0x1, 0x2, 0x0, 0x4, 0x20ae, 0xfff, 0x4, 0x4, 0x8, 0x3, 0x3, 0x100, 0x4fb, 0x38e, 0x2, 0x7ff, 0x3, 0xffffffe9, 0x7, 0x3, 0x3, 0x4, 0x4, 0x1, 0x4, 0x800, 0x7f, 0x0, 0x6, 0x64, 0xfffffffc, 0x8, 0x81, 0xa0000, 0x9, 0x25387c17, 0xd, 0x4, 0x8c, 0xb, 0x3ff, 0x4, 0x6, 0xe318, 0x943, 0x3, 0x7, 0x10000, 0x5, 0x3, 0x7, 0x9, 0x10, 0x9, 0xd, 0xc6, 0x7, 0xfffff00b, 0x2, 0x7aba, 0x1, 0x1, 0x3, 0x3ff, 0x7, 0xb2b, 0x88b9, 0xfffffe00, 0xc, 0x8, 0x200, 0x9, 0x8, 0x802f, 0x9, 0x3ff, 0xda, 0x4, 0xa, 0x2, 0x4, 0xf, 0x6, 0x1, 0x8, 0x6, 0x2b2, 0x1, 0x50fb, 0x4, 0xfffffffa, 0x10001, 0x0, 0x1, 0x2, 0x582f, 0x1, 0x7, 0x3, 0x4ad, 0x6, 0x8, 0x7ff, 0xe, 0x100, 0x3, 0x2, 0xaa81, 0x0, 0x4, 0x1, 0x5, 0x9, 0xa, 0x4, 0x3, 0x8, 0x8, 0x10001, 0x800, 0x3, 0x1, 0x1, 0x3, 0x1, 0xbf0, 0x9, 0x7, 0xffffffff, 0xe184, 0x200, 0x9, 0x80000000, 0x0, 0x7, 0x26871979, 0x80000000, 0x4, 0x1c, 0x8, 0x5, 0x7f, 0x0, 0x1, 0x1, 0x8001, 0xaa, 0x3545, 0x7, 0x34671ddd, 0x3, 0x2, 0x3, 0x9, 0x6, 0x5, 0x7ff, 0xff, 0x5f1, 0x6, 0x7, 0xfffffe51, 0x100, 0x4, 0x6, 0xf, 0x1ff, 0x4, 0x7ff, 0x5, 0x9, 0x5, 0x1, 0x6, 0x0, 0x0, 0x6, 0x6, 0x80000000, 0xa1e, 0x0, 0x0, 0x6, 0x51c, 0x1, 0x1, 0x6, 0x4, 0x800, 0x9, 0xfffffffe, 0x8ae6, 0xf2da, 0x80000001, 0x0, 0x101, 0x82, 0x4, 0xfffffff7, 0x5, 0x1, 0x5, 0x9719, 0x6, 0x8fd, 0x14c20000, 0x6, 0x7fff, 0x9, 0x81, 0x401, 0x2, 0x2, 0xc, 0x5, 0x5, 0x2, 0x69e8, 0x3bf, 0x1000, 0xe, 0xd0, 0x5, 0x7, 0x0, 0x4, 0x180000, 0x3, 0x3, 0xe, 0x5, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4516}, @TCA_POLICE_RATE={0x404, 0x2, [0xba5, 0x3ff, 0x4, 0x101, 0x7f, 0xfff, 0xffffffff, 0x8, 0x4, 0xe8, 0x9, 0x8, 0xffffffff, 0x0, 0xfffffffc, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x7fff, 0x9, 0x2, 0x2, 0xd21, 0xc, 0x6, 0x8, 0x679e, 0x7ff, 0x9, 0x5a, 0x202, 0x9, 0x2, 0x1839ea52, 0x0, 0x4, 0x4, 0x9, 0xf, 0x101, 0x1b, 0x800, 0xf77, 0x8, 0x9, 0xfffffffd, 0xd2, 0xa6b0, 0x9, 0x7f, 0x8, 0x6, 0x3, 0xcf1, 0xe000, 0x6, 0x38e, 0x2, 0xd9, 0x8, 0x3, 0xfffffff2, 0x9, 0x200, 0xffe00000, 0x8f7, 0x8, 0x2, 0x91, 0x5, 0x6, 0x3, 0x8, 0xbfc9, 0x5, 0x9, 0xfffffffe, 0xff, 0x3, 0x5, 0x9, 0xeedb710, 0x4, 0x9, 0x6, 0x8001, 0xffffffff, 0xbc00, 0xce2, 0x7f, 0x9, 0x4, 0x5, 0x5, 0x8, 0x8, 0xb, 0x2, 0x2, 0x1000, 0x2, 0x9, 0x0, 0x31616413, 0x5, 0x0, 0x2, 0x9, 0xc, 0x1, 0x7, 0x40, 0x3, 0x3, 0x3, 0x1, 0x3, 0x5a0, 0x8, 0x0, 0x10000, 0x2, 0x800, 0x3, 0x800, 0x1, 0x3, 0x2, 0xfffffffb, 0x1, 0xd61, 0x0, 0x80, 0x10000, 0x9, 0x6d9a, 0x7, 0x1, 0x1, 0x7, 0x162, 0x7, 0x7, 0xe, 0x80, 0x0, 0x919b, 0x3, 0x10, 0x3, 0x1, 0x9, 0x0, 0xfffffff8, 0x0, 0x6, 0x1, 0x400, 0xfffffff8, 0x8f04, 0x4, 0x1fa5, 0x4, 0x8000, 0x5, 0x0, 0x2, 0xc01, 0xcad1, 0x1ff, 0x6, 0x1, 0x0, 0x4, 0x4, 0x3, 0x3, 0x4, 0x2, 0xfffffffa, 0x400, 0x0, 0x8001, 0xd2, 0x6, 0xb9, 0x3, 0x4a, 0x5, 0x8, 0x2, 0x6, 0x1000, 0x3, 0x10001, 0x6, 0x7, 0xa6a, 0xffff1f3d, 0x7, 0x800, 0xe9b0, 0x101, 0x8, 0x2, 0xa6, 0x8, 0x3, 0xc19, 0x81, 0x4, 0x0, 0x10, 0x5, 0x0, 0x101, 0x9, 0x374cff51, 0x0, 0x7f, 0x7, 0x3, 0x0, 0x2, 0xff, 0x1, 0x1, 0xfffffffd, 0x8, 0x9, 0x1, 0x8000, 0xae, 0x0, 0x6, 0x81, 0x101, 0x7, 0x2, 0xffffffff, 0x0, 0x9, 0xa, 0x5, 0x4, 0x62, 0xc44, 0x0, 0x26, 0x1, 0x3, 0x3, 0x9, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x40, 0xa, 0x9, 0x9, 0xfffffff7, 0xffff7fff, 0xb, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x7f, 0x9, 0x2, 0x6, 0x8000, 0x8001, 0xd, 0xfff, 0x8, 0x5, 0x0, 0xfff, 0x7, 0x5, 0x3ff, 0x4, 0x1, 0x10000, 0x7, 0x538c, 0x6, 0x3, 0x0, 0x400, 0x200, 0x7, 0x5, 0x1ff, 0x2, 0x1, 0x7, 0x3, 0x8, 0x9, 0x100, 0x6, 0x9, 0x1, 0x0, 0x40e, 0x1, 0x3, 0x6, 0x4, 0x5, 0x0, 0x10, 0x7, 0x1, 0x7, 0x0, 0x8, 0x2, 0xe, 0xffffff7f, 0x101, 0x4, 0x0, 0x7, 0xfffffffa, 0x4, 0x0, 0x6, 0x3, 0x6, 0x0, 0x6, 0x81, 0xffff, 0x6, 0x8, 0x1, 0x8, 0xe, 0x80000000, 0xfffffff8, 0x6, 0xfffffffb, 0x9, 0xe6b8, 0x2, 0xfff, 0x0, 0xe6c7, 0x7, 0x80, 0x0, 0x0, 0x7b, 0x1, 0x653f, 0x2, 0x2, 0x5, 0x7, 0x9d96, 0x62b1dbaa, 0x7ff, 0x8, 0x9, 0x1, 0x800, 0x658, 0x9, 0x1000, 0x4, 0x3, 0x34dbf12f, 0x40, 0x8, 0x4, 0xff, 0x1, 0x10001, 0xe0, 0x7, 0x2, 0x200, 0x0, 0x6, 0x54, 0x488, 0x5, 0x0, 0x5, 0x0, 0x800, 0x5, 0x0, 0x6, 0x4, 0x8fb9, 0xfc, 0x81, 0x5, 0xd0ac, 0x1, 0xff, 0x7, 0x8, 0xb1e, 0x3, 0x8, 0x81, 0x2, 0x3225d5, 0x9, 0x6, 0x2, 0x40, 0x8, 0x3, 0xffffffff, 0x6, 0x0, 0x2, 0x6, 0x4, 0xe, 0x4, 0x9, 0x59, 0x0, 0x400, 0xfffffff1, 0x3, 0xe95, 0x100, 0x4, 0x3ff, 0x1e, 0x32698e4, 0x4, 0x9, 0x3, 0x4, 0x8, 0x1, 0x1, 0x6, 0x10000, 0x200, 0x8, 0x10000, 0x2, 0x80000001, 0xf, 0x1, 0xb3bc, 0x8, 0x10001, 0x6f0, 0x8, 0x5, 0x3000, 0x2, 0x8, 0x7, 0x2, 0x62, 0x9, 0x6e, 0x10001, 0x9, 0xff, 0x5, 0x401, 0x1, 0x0, 0x6, 0x1, 0x4c0b, 0x1, 0x5cc00000, 0x7f, 0x3, 0xd, 0xc, 0x23, 0x200, 0x9, 0xc, 0x5, 0x7f, 0x2, 0x1000, 0x0, 0x7, 0x2, 0x7, 0x4, 0x8001, 0x4, 0x4a2, 0x0, 0x5, 0x51e, 0xffff, 0x8, 0x1, 0x7ff, 0xff]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x6bba, 0x0, 0x5, 0x1000, 0x7, 0x20, 0x4, 0x2, 0x0, 0x10000, 0x5, 0x9, 0xa, 0x2, 0x80000001, 0x0, 0x6, 0x9, 0x8001, 0x8, 0x0, 0x7e0, 0x1000, 0xfff, 0x2, 0x7, 0x6, 0xfff, 0xa, 0x7, 0x4, 0x6, 0x4, 0x8a02, 0x8, 0x8, 0xffffffe7, 0xf, 0x2, 0xee8, 0x400, 0x9, 0x2, 0x1, 0x7418, 0x2, 0x7, 0xe, 0x0, 0x4, 0x0, 0x1, 0x10, 0x7, 0x1ff, 0x81, 0x6, 0xe, 0x4, 0xffffffff, 0x7ff, 0x3, 0x8, 0x534, 0x4, 0x101, 0x4, 0x0, 0x4, 0x1, 0xd, 0x401, 0x2, 0x2, 0x1f9, 0x4, 0x1, 0x6, 0x1, 0xc86, 0x1, 0x4, 0x7, 0x80000001, 0xf, 0xffffff81, 0x1, 0xfffffffe, 0x40, 0x7, 0x6, 0x6, 0x5, 0x9, 0xffffffff, 0x5, 0x658b, 0x4, 0x1, 0x1e, 0xfffffe00, 0xea57, 0x6, 0x0, 0x1ff, 0x404a, 0x5720, 0x3, 0x18, 0x10000, 0x7, 0x9a, 0xff, 0x1, 0x685a, 0x7, 0x1ff, 0x9, 0x5, 0x8, 0x1, 0x8, 0x5, 0x9, 0x0, 0x370, 0x4, 0x3, 0x10001, 0xf6ad, 0x7, 0x6, 0x4, 0x80000001, 0x2948, 0xa99, 0x1, 0x80000000, 0x3, 0x2, 0x8, 0x9, 0x6, 0x1df, 0x7, 0x6, 0x2, 0x8, 0x2, 0x7fff, 0x6, 0xffffffff, 0x0, 0x8, 0x4, 0x5, 0x7ff, 0x0, 0x8, 0x0, 0x8, 0x48cb, 0x81, 0x6, 0x9, 0x0, 0x8, 0x3, 0xd, 0x1200000, 0xa3fb, 0x9, 0xb43, 0xc815, 0x1, 0x7ff, 0x7, 0x1, 0x4, 0x4, 0xdf0, 0x3, 0x2, 0x1, 0xffff63ca, 0x4, 0x728, 0x200, 0x2, 0x3e, 0x7c58, 0x4, 0x200, 0x6, 0x9, 0xfbe, 0x6, 0x1e1, 0x5, 0x0, 0x8000, 0x3d23, 0x9, 0x44a, 0x1, 0x101, 0x0, 0xff, 0x8, 0xbb, 0x3, 0x8, 0x5, 0x6e4f, 0xd, 0x0, 0x5, 0xc, 0x1, 0x4, 0x6, 0x0, 0xfb0, 0xd93, 0x0, 0x6c8, 0x0, 0x9, 0x0, 0x7, 0x7, 0x9, 0x8, 0x7fff, 0x4, 0xec2, 0xb, 0x9, 0xe, 0xa, 0x0, 0x7, 0x0, 0x5, 0x80, 0x5, 0xff, 0x0, 0x9, 0x7a9e, 0xfffffff8, 0x7, 0x1, 0x4, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]]}, {0xd0, 0x6, "957aece93dff42efb83b10388f11bcf27b63e891d35e98a77cb9ba6e2a2315e046df902e4b0f0e20f7b2df5992ff49c00a9e8d98dfea60816b24b8fea359272f6085cbfc119ee7aed64e92275252bb0815aa76017e6158a93247654359caa05620cffd4d1db7409f04a85eb1b0c20fdfa0e6b15db0787bce1f4374421dee4b3b63fa65598f1d12c4e377549d666e25f043ab2abb22444e585d197cdf6b7201e9a4d4193b23f24cf11cef49923080769bca2f9dd758ba4fb12dc290d642b053f76b14312e8abe39dc2d1f7d37"}, {0xc}, {0xc}}}, @m_skbmod={0x180, 0x8, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x4652, 0x6, 0xd911, 0x8}, 0x8}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x2, 0x2, 0xf7, 0x100}, 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xa0dbc3491741512d}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x1, 0x5, 0x8, 0x7fffffff}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0xa5, 0x6, "c07befdadd450ac00ad837d0616ea1fd335526b01456920d21358aed1e73cb73d720913bac9d092134161d51dc298745500be9284d856fdc912d99ff1f60898cd4e1fb5f2d76625c24942efeb3f672a2112e2000496f8ab193da8e081ed6d808c8ef4fd38437dcc9919c265d202a2ab59d4ee18659342f0bccfffd7afe6a3ba4aa51b902721b26aba2e2d08522e1268b716b796bd4ef5098f5a6fc1c6c43a0dd64"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x100, 0x1a, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0x401, 0x7, 0x8001, {0x7, 0x1, 0x8001, 0xeb93, 0x82b, 0x400}, {0x40, 0x1, 0x0, 0x6, 0xf4, 0x1}, 0x4, 0x3, 0x6}}]]}, {0x8f, 0x6, "7c3f3b46d47932946dd8e6b64d3cea424597c7e7ca10bafa7a1fc07cdce12a73c5d128f8b8db2e57dd96c6f5e43b253940a9e55cce5cd53f2a5162a6b8db7f43c1abf753cb1f1acac48fa33229a95bb6d5431676c4935e2d6f853c15c4d134aa074881cd45a0ae835a7eeb968d5aa392536a831684b28256cef57d4ea2408c95dbcb2b559e2928b6133135"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x23c, 0xc, 0x0, 0x0, {{0x7}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x925fca40144bb67c}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xed, 0x6, {0x6, 'filter\x00', 0xa9, 0xfff7, "847c5243c5b614f3be71a21d9afee2686b253a6ca0cfa616221d9c37d0f92bb189b2f978d00d5c68771418d087ff461e0b4a94030fd51a0c74ecff99d7a4e91c55fed96d4693989d6d1dd711cef25d0fd52d0b8064dc1600ce6373beb085778a685bf5a0b4de3688b43bacba23081ce8f91ecdc13631b5614aa9a52560f5a951539b7c04478d050414a4b9e1e31112696cfdcead853389e46ee0fdc682764f16812d80c1099a289f5b43feb10177cd376faf4a9739bca75d8351bc92d1be1a65b4712c"}}]}, {0xf8, 0x6, "51475e66b5cba1f3aeeb7eccc4d087c2c7233f792bb81aa132ee8383978c7d6a9b29311dc62e61e116782097152c4326c0fdb292847c1301c6421c43312cc3cd592d9acfbc2fdf954283198cf029861ce5ac39c2671da0b7f6cb3751d29df72430566c4ebbd396b7aa691334e9e1788dddc4690ee31f956eb27ac67ec56319fe6c999df971943ab6983731d66d0b1d10c44ddbbcf0d7a241f7898c08186968033c123ea67dfa1f49613ca06670c33fb7ecf56adc961b8e8ba6a8ec7ef14b8cee3ced47c0b90c4d169cc4c469e62f886a8b0adcc9ee98c4db64747a18c40aa721a6acdf44acecc158d224b052031f9f04aaa95442"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xf0, 0x19, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xa, 0x2, 0x10000000, 0xeb11}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x18c6, 0x8001, 0xab20043797b54b72, 0x0, 0xfff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x94000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x9, 0x3, 0x4, 0xe}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x43, 0x6, "eb3b89e7e1af919a7cc2f8f3dd4a25c6e0d76415b7e5ba5c305d62d7040799397d67eb9f1ca34540418b7ae6277d66d12c2369ad08e2620cb05b39063fcc5a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x744, 0x1, [@m_ctinfo={0xf4, 0x9, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xb83}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffff8, 0x8a, 0x10000000, 0x0, 0x4}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xa1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3fc}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8001}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xaf}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x78, 0x6, "8c1c0d9f4a5c30fed7905c83290294db3c4e1bfb93e7e3859761c8cc07da19180240215a35f64185f9c4c5e79e012ea283ea5511b9d5a8fa1fa87c4f620c61fa875c0cdbb6be64d948f9506d7df28e07ca6df414cce7153958c2425e9bcecd49a3e34e2bb97910d2a163cc51439fad17cbfc46f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x118, 0xc, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xd0, 0x6, "61f9b735805e6272951fab5fe55f784445b284a7f188ef6955cba608d4d2b682bae4654315d354a3e2873f6fd8a09d05c1d3ce47304129e015340a89071ff1a5439ce0c1f232416c7f51a1da23be0b55ea1f37f5ca386830f7056dc6c755d8a44ea4d34acdfe2093675144594c3c71e5d9c45736e0cee9cd3db39ca91b30be8f1759616dd4514062ff7074d9e9ee00f0b70002d157646cb139b7f44fd85636a48b1b753d075d3042658e7dbe62e3b07b2434cbc28adfbd0e074f7e92c5fe6e2baf07b7f0ba1a1fd8fb75a310"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1a8, 0x16, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xee2, 0x0, 0x101, 0x80000000}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x40, 0x1, 0x9, 0xdf}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x10000000, 0x8435, 0x8001}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x8, 0xfff, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2b10, 0x8, 0x800, 0x1}, 0x7e}}]}, {0xef, 0x6, "8a9a19a214556d2e1c2f08d14b15d2bd73a691e5836507caf94e55e8ec219f59f23ca8020b0a9b0a60a162086bc91cd9d11181ccc60e9e42f721ef17a9a78800a3297b924e66681d8a5905925109d73134318e2ad5789884e60e4829e838f629cbdcb1d32bc6afef45c26547f618266fc3bd4e35671559056be4f2245074a2a05f6c7c43455131c406fad8ba1472e0f278d758c46af9525bfeac816a637c0e2e7951d555a91fe9008eb4ef28205aff1afa0695e6c99f184c1dd4c15079d5000bde4ee5e80d35878f3191cc5da594476246f2969c5a76b2f786f5e4ebe6b2b30309d896545b3ff571ad5c7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xa4, 0xc, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x1, 0x6, 0x7ff8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4ab8, 0xffffffffffffffff, 0x54, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x53a, 0xf, 0x8, 0x4, 0x8}, 0x100}}]}, {0x20, 0x6, "26c0d4773fb4bd5c5dfa64e006837393fbb29cb3bfbbbec591932c8a"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1ec, 0x1a, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x5, 0x7ff, 0x2}, @loopback, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xba, 0x6, 0x1, 0x3, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0x2, 0xffffffffffffffff, 0xffff1c02, 0x6}, @remote, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x87, 0x0, 0x4, 0x3ff}, @remote, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x2, 0x7fff, 0x5}, @multicast2, @empty, 0x81e03217a9ebed00, 0x1}}]}, {0xfc, 0x6, "9daf40421d02d5bfedcddf7d01f0d7891792b69f25716aae5c04d1c573e7c9db6f27dbffee8c08119b81bac98f5ba2cd21bfaccd3bc69eff806b898c96b7ffc0e055d2c23ba95a4f4d2797c4d869b9249623b5564204a249338c0943b8dc17472b1d454d2cc223934ec7e381ecd694e0ba135fd5477f874a2b802ea7067bcdab36f9386815b18fc8eeb35a75ec7ca5c6fac7bf387487495fdbea36a075a81400e6574673664dd178d83cfaaf7f5812ee00d63f80af86f90e9d1f609c9be0639861f0df8d594e75d8dc9a9c85e4f3eebbc53481ab99051b51cd44afa8ae19604360ab9cf0bd7406e212765e47746e183dd56c5a523de0bfd1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xfc, 0x4, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x1, 0x6, 0x1, 0x2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3e7}]}, {0x8e, 0x6, "5212c1595a19de076eb38cd4fa7200e8f46831fd9991d3944c6668841cd0b75319c0f428d39b60d1f55b26d9f40a06d25f460cbe5b7ddfc098d807c1eb4f80bc8705e95c75fe667ebfd5fc98ab58eff6d3a6eca5f0c2a4663ed859934c3dbce0fb8b7b1aafd140126b138f32e6fa2d89aec95437c0d23942eb898330dad9b6ca9ae1b91f9e5762811a91"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, {0x1e4c, 0x1, [@m_gact={0xd0, 0x1d, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x244a, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xccd, 0x7, 0x7, 0xf1}}]}, {0x7f, 0x6, "736d9d812d50d266707509363df4fa0b0ddc51b5fde700c61a80c79b987281537ef5c8b59951b3ea1f29a32e771f047bb185cd928dbff6f5aab168dd9654395f688ac49b73c50addde2534830fe2cf836b86d63209de21921eab441833a21a77014df220bd6edb6077406f44db06aa935500689654983bd92b4c03"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x180, 0x16, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffff7, 0x0, 0xfffffff7, 0x7}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xee0a, 0xffff, 0x7, 0x1000, 0xfffffff0}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xc0, 0x20000000, 0x7, 0x9}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x81, 0x10000000, 0x1, 0x1ff}, 0x55}}]}, {0xe1, 0x6, "310df5e18903ee38feb25981f9885a17e19a35e144c5e1f011114dd41ef3a6b6191b9783a8ffe783f451bb41c8fb5c3ffb2f206a887dd403f6268d960004400ec002b94f7fa4c548bf956cf8a2f3e939fe67d994f1f10738de30063954f3bd1641f90b047f85418c7cd5edcfbf8225992029e24ee38481f3e9892ee3c64683dfbf5451327cfcdf5a5266a3d6ccd94fc01e213a4d8a4bad87302dc7088b98388df8155402a2d2d634582b3b7731400caa212d954c35dbd7af06f388d7d2c2195cab07cabf45a294f379cac40a0914521f68701abf89b250e16636c46562"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x1178, 0xd, 0x0, 0x0, {{0xa}, {0x10b4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x148, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x8, 0x503, 0x7, 0x0, 0x5}, 0x0, 0x81, [{0x4, 0x4, 0xe83, 0x3ff, 0x99, 0x7}, {0x7, 0x0, 0x799b, 0x3, 0x3ff, 0x6c5}, {0x9, 0xffffffff, 0x1000, 0x1ff, 0x3, 0x10}]}, [{0x6, 0x900, 0x0, 0x2, 0x2, 0xf90e}, {0xfffffffe, 0x80, 0x7fffffff, 0x7, 0xf524, 0x9}, {0x80000000, 0x7, 0x3, 0x1, 0x6}, {0x7, 0x8, 0x2, 0x4, 0x6, 0x6}, {0x0, 0x986b, 0x8, 0xad3, 0x3f7597e0, 0xfffffffa}, {0x9, 0xffff, 0x2, 0x7, 0x5, 0x2}, {0xbd, 0x0, 0x1, 0x101, 0x10000, 0x6}, {0x2, 0x10000, 0x2, 0x1, 0xffff3c0a, 0x800}, {0xf, 0x8001, 0x0, 0x10, 0x80, 0x3}, {0x2, 0xfff, 0x0, 0xfffffffa, 0x5, 0x2}, {0x261, 0x7fffffff, 0xfffffffa, 0x7, 0x3, 0xb}, {0x1, 0x8, 0x10, 0x2, 0x3, 0xb1b1}, {0x3, 0x1, 0x3, 0x8, 0x6, 0x8}, {0x2, 0x1, 0x4, 0x33, 0x9, 0x10}, {0x1, 0x3, 0x0, 0xaa7, 0x80000000, 0x570}, {0x101, 0x8, 0x7, 0x1, 0x8, 0xf2c0}, {0x8, 0x8, 0x0, 0x7, 0xa, 0xd}, {0x2, 0xfffffffb, 0x80000000, 0xa777, 0xff, 0x26}, {0x8, 0x4, 0x5, 0x101, 0x0, 0x40}, {0x101, 0xfb, 0x8048, 0x5, 0x1ff, 0x3ff}, {0x6, 0xfac, 0x57, 0x1, 0x5, 0xc}, {0x99, 0xbf9, 0xe, 0xe0, 0xfff, 0x9}, {0x2, 0x5, 0x0, 0x10, 0x4, 0x6}, {0x7fff, 0xac, 0x7, 0xffffffff, 0x0, 0xee58}, {0x34, 0x2, 0xfffffffb, 0x8, 0x3, 0xb22}, {0x8, 0x3, 0x5, 0xfffffffa, 0x1, 0x1}, {0x4, 0x5, 0x20a, 0x5, 0x7, 0xff}, {0xfffffff9, 0x8, 0x3ff, 0x7f, 0x7, 0x3}, {0xa, 0xd, 0x2, 0x30a9, 0x4f, 0x1}, {0xf, 0x6, 0x169, 0x101, 0x800}, {0x40000, 0x5, 0x6, 0xc284, 0xd474, 0x10000}, {0x8, 0x9, 0x0, 0x9, 0x4, 0x4}, {0x7, 0x1, 0x6, 0xffff, 0x7ff, 0x10000}, {0x0, 0x80, 0x7, 0x4, 0x8ae, 0x5}, {0x0, 0x9, 0xd1c, 0x3, 0xce6, 0x7fff}, {0x2, 0x10, 0x1, 0xff, 0x8, 0x4}, {0x99d, 0x4, 0x6, 0x3, 0x4, 0x8}, {0x16, 0x4, 0xa, 0x2, 0x5, 0x7}, {0x2, 0x94db, 0x2, 0x1, 0x9, 0x868}, {0x8, 0x1, 0x100, 0x7, 0x3, 0x9}, {0x3e, 0xa, 0xb6, 0x7, 0x4, 0x800}, {0x7, 0x7fffffff, 0x3, 0x4, 0x3, 0x6}, {0x0, 0xb, 0xfffffffe, 0x1, 0x1, 0x7}, {0xfffff157, 0x80, 0x8000, 0xffffffc0, 0x8ba, 0x2}, {0x8, 0xff, 0x4, 0x9, 0x8000, 0xa}, {0x9, 0xff, 0x7fff, 0xffffffff, 0x5, 0x4}, {0xfffffffc, 0x5, 0x7, 0x7, 0x1, 0x10001}, {0x9, 0xffff, 0x8, 0x3, 0x8, 0x10000}, {0x9, 0x6, 0x9, 0xb, 0xfe9e, 0xbfe9}, {0x5, 0x5, 0x100, 0x8, 0x7, 0x5}, {0x8, 0x3, 0x8, 0xc061, 0xfffffff7, 0xff}, {0x0, 0x5, 0x1ff, 0x34fd857c, 0xf, 0xe1}, {0x0, 0x80000000, 0x7, 0x2, 0x5, 0xffffff00}, {0x2, 0x0, 0x3, 0x5, 0x6, 0x5aa18387}, {0x46, 0x3c7f8410, 0x7ff, 0x3, 0x2}, {0x2bbe, 0xff, 0x9, 0x8, 0xffffffff, 0x4}, {0xc9, 0x40, 0x4c5, 0x9, 0x7, 0x2d2}, {0x10, 0x374, 0xb, 0x8, 0x6, 0x9}, {0x9, 0x2ede00be, 0x6, 0x1, 0x2, 0xffffffff}, {0xfffffff8, 0x7, 0x7, 0x4, 0xad49, 0x4f}, {0x4, 0x2, 0x5, 0x0, 0x2, 0x1}, {0x1c000, 0x4, 0x6, 0x50000, 0x84c, 0x1000}, {0x9, 0x7, 0x10001, 0x3, 0x2, 0x62}, {0xd0b6, 0x1000, 0x6, 0xad46, 0x7c, 0xc}, {0xfffffffb, 0x768d927, 0x77ed51d4, 0x5, 0x800, 0x899}, {0x6, 0x3, 0x8, 0x8, 0x1f8c, 0x10001}, {0x3, 0x7, 0x7f, 0x45, 0x7ff, 0x4}, {0xa0000000, 0x9, 0x1, 0x7fffffff, 0x6, 0x2}, {0xed, 0xc, 0x101, 0x1, 0xab, 0x5}, {0x100, 0x7fff, 0x70df, 0xa, 0x80, 0x1}, {0x1, 0xd83d, 0x6, 0xf, 0x8, 0xae}, {0x165, 0x401, 0x0, 0x7, 0x8, 0x10}, {0x80000000, 0x4, 0x1, 0x1, 0x4, 0x5}, {0xfffffffc, 0x62, 0x6, 0x3ff, 0xcf39, 0x5}, {0x9, 0xffffffff, 0x401, 0x47, 0x8, 0x4}, {0x8, 0x5, 0xa8, 0x800, 0x8, 0x200}, {0x7fff, 0x200, 0x7, 0x0, 0x4, 0x5}, {0xfffffe01, 0x7, 0xfffffffc, 0x9, 0x4, 0x6}, {0xfffffff5, 0x9, 0x3, 0xa, 0xc7, 0x4}, {0x8, 0x3, 0xfffffff8, 0x4, 0xe9, 0x5}, {0x5, 0x0, 0xe, 0x10000, 0x9, 0x1}, {0x4, 0x6, 0x6, 0x200, 0x7, 0x1e9a}, {0xfffffffb, 0xfffffffe, 0x0, 0x3, 0x6a, 0x5}, {0x8, 0x1f4c, 0x3a, 0x1000, 0x7fffffff, 0x6}, {0x4, 0x9, 0x7fff, 0x8, 0x2, 0x800}, {0x9, 0x80000000, 0x81, 0x5, 0x7, 0x1d}, {0x400, 0xfffffffc, 0xfffffffb, 0x3, 0x5, 0x4}, {0x3, 0x9, 0x65, 0x0, 0x8, 0xa}, {0x4, 0xe7e, 0x81, 0x10, 0x6, 0x9}, {0x419, 0xe, 0x5, 0x2, 0xad, 0xffffffff}, {0x3ff, 0x9, 0x5277, 0x7, 0x41d, 0xb}, {0x6, 0x81, 0x8, 0x6, 0x3, 0x80000001}, {0x9, 0x0, 0xfff, 0x9, 0x1, 0xb}, {0x4, 0x10, 0x2, 0x10000, 0xc, 0x5}, {0x2, 0x1, 0x5, 0x100, 0x9, 0x3}, {0x9, 0x4, 0x7f, 0x57, 0x8, 0xffffafc6}, {0x4a, 0xb4bbef0, 0xe0c, 0x3ff, 0xb, 0x5}, {0x4, 0xfffffff8, 0x7, 0x1, 0xffff, 0xc0}, {0x2, 0xff, 0x40, 0x4, 0x80000001, 0xa1fc}, {0x10001, 0x8, 0x101, 0xfffffffa, 0xffffff99}, {0x100, 0x8, 0x1, 0xd, 0x6, 0x83b}, {0xdb3f, 0x80, 0xc50, 0x10, 0x5f7ee511, 0x8}, {0x8001, 0x71cbbaad, 0x7ff, 0x3, 0x1, 0x4}, {0x8153, 0x8, 0x7, 0x2, 0xff, 0xea4}, {0x9, 0x7311, 0x8, 0x8, 0x80, 0xea8}, {0x3, 0x401, 0x8, 0x3, 0x4cf8, 0x5}, {0x9, 0x1ff, 0x3, 0x0, 0x8, 0x5}, {0x0, 0x3, 0x9, 0x64, 0x5, 0x3}, {0xb, 0x6, 0x7, 0x1, 0x7, 0x4}, {0x3, 0x5, 0x3, 0x80, 0x0, 0x60}, {0x88, 0x80, 0x40800000, 0x2, 0x3, 0x3}, {0x9, 0x7, 0x3, 0xb97, 0xd}, {0x1ff, 0x6, 0xb6, 0x1, 0x0, 0x4}, {0x1, 0xb0a, 0x0, 0x0, 0x8, 0x8}, {0xde1a, 0x8, 0x8000, 0x9, 0x5, 0x83}, {0x70000000, 0xb31, 0xf, 0x4, 0xfffffffb, 0x4}, {0x6, 0x200, 0x5, 0x1, 0xa, 0xe88}, {0xffffffff, 0x5, 0x8, 0x6fe74d8d, 0x9, 0x2}, {0x6, 0x58, 0x6, 0x2, 0x7, 0x360f684b}, {0x9, 0x7f, 0x74, 0x6, 0x401, 0x6}, {0x5, 0x1, 0x2, 0x8, 0x3, 0x10000}, {0x7ff, 0x8, 0x7f, 0x7f, 0xf8000000, 0x61c94e1d}, {0x6, 0x3, 0x9, 0x5, 0x3, 0x7}, {0x8, 0x8, 0x6, 0xa0c, 0x2, 0xd}, {0x8, 0x9, 0x0, 0x5f, 0xc0000000, 0x8000}, {0x400, 0x5, 0x3ff, 0x6, 0x9, 0x101}, {0x3, 0x80000001, 0x1660, 0x800, 0xc968, 0x1}, {0xa, 0xf544, 0x7, 0x9, 0x0, 0x800}], [{0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x7a79c34c27a1eed9}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x5}, {0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x1}, {0x5}, {0x2}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x7, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x3}, {0x4}, {0x5}, {0x4}, {0x4}, {0x5}, {0x83bba335feb08248, 0x1}, {0x5, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_KEYS_EX={0xbc, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x9a, 0x6, "363b62b45705c37aaac2c90c009c2255bf2d52536584de669f3add4c25a70ecc3c52d141da5240028c1e0347beb85838dcfa3a88c2511a0cfc5bf2d10d48353cadad6c8710cb1b3faf741e1ad5f10d4c7625cc0381cf17f90ce0362f8e365da45fb9d25616359b0677de47ebf281b548e4a465c7d99d4519862d015ab60fe8416cd7e80824a386144ed7e0c6f9cb853810ca861134f5"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xd8, 0x1a, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xc7, 0x0, 0x8, 0x7, 0xfffffff8}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xce8f}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}]}, {0x34, 0x6, "f502268741ce530959a006856a13374fb596822c76255e51183e514c4cffc634e8f8f2bb0b7778d53d5d6a457d3e2e7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x4bc, 0x11, 0x0, 0x0, {{0xb}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x5b, 0x1, 0x8, {0x20, 0x0, 0x1ff, 0x8, 0x5, 0xc}, {0x81, 0x0, 0x5, 0x2, 0x5, 0xfffffffe}, 0x1e13, 0x800, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff09}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xe, 0xfffffffd, 0x9, 0x5, 0x0, 0x0, 0x5, 0x4, 0x1, 0x1, 0xefd, 0x400, 0x518, 0x800, 0x9, 0x7fffffff, 0x5, 0x7, 0x200, 0x6, 0x7, 0x2, 0xb16, 0x1492, 0x0, 0x800, 0x8, 0x81, 0xbb, 0x5df7, 0x8, 0x2, 0x8, 0x4, 0x5, 0x80, 0x5, 0x3ff, 0x0, 0x10, 0x4, 0x80000001, 0x2, 0x3, 0x5, 0x8, 0x88, 0x3, 0x5, 0x2, 0x4, 0x5, 0x40000000, 0x3ff, 0xfc28, 0x7fff, 0x3, 0x6, 0x8, 0x3, 0x2, 0x341, 0xbe, 0x7b, 0x5, 0x10001, 0x3, 0x2, 0x8, 0x7, 0x1000, 0x0, 0x401, 0x3, 0x9, 0x7, 0x3, 0x4, 0x9, 0xe, 0x595, 0x8, 0x8, 0x6, 0x0, 0x5, 0xe9fe, 0x200, 0xffffffff, 0x9, 0xa8e9, 0x7fffffff, 0xd9a1, 0x101, 0x1, 0x52, 0x0, 0x4, 0xbf, 0x228f, 0x9, 0x1, 0x1, 0x401, 0x8, 0x6, 0x3d, 0x3b7, 0x81, 0x3, 0x2, 0x6c, 0x7ff, 0xff, 0x3, 0xffff8001, 0xffff, 0xa0e2, 0x6, 0x0, 0x0, 0x2, 0x35, 0xa, 0x5, 0xe, 0x1649, 0x1000, 0x521d, 0x1, 0x1, 0x800, 0x22d6, 0x3, 0x1000, 0xfffffffb, 0x6, 0x4, 0x7, 0x524, 0x7, 0x0, 0x7, 0x6ff, 0x8, 0x5, 0x800000, 0xffffffff, 0x2, 0x1, 0x5c, 0x7ff, 0x6, 0x1, 0x8, 0xffff, 0x9c6, 0x3, 0x2800000, 0x11a0, 0x7, 0x8, 0x4f8, 0xf0b, 0x1, 0x6, 0x8, 0x5, 0xb, 0x2, 0x4, 0x7, 0xc09d, 0xffff1bf4, 0x7, 0x0, 0x3, 0x6, 0xb, 0xfffffff5, 0x9c5, 0x3, 0x10, 0x6, 0x10001, 0x8, 0xff, 0x1, 0x40000, 0x9, 0xfffffffa, 0x0, 0x9f, 0x7, 0x6, 0x92, 0x3, 0xff, 0x7, 0x10001, 0x7, 0x3, 0x4, 0x2, 0xb, 0x5, 0x0, 0x3, 0x200, 0x7, 0x10001, 0x3, 0x7, 0x8efc, 0x5, 0x9, 0x1, 0x5, 0xcc, 0x7, 0x4, 0x1, 0xffffffff, 0xc7a, 0x7ff, 0x6, 0x0, 0x0, 0x7fffffff, 0x6, 0x40, 0x8, 0xffff8001, 0x6868eead, 0x8, 0x9, 0x3, 0xff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x7, 0x6, 0x1, 0x6e9, 0x2e23, 0xfffffff2, 0x8, 0x1000, 0x2, 0x3, 0x9, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]]}, {0x3c, 0x6, "6e388b0899a327d5e25636fa450c584a009a766b401b4b8064c7fe03b0cf79cf53ffc1c7c77b3a2b4de094e0527ae0d1deadfcded57b83fd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x164, 0x18, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x17}]}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xc8, 0x12, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x7c, 0x6, "c2e8d7287734d5a2d99cfbc5a88232ea6d638ab3d22cd4038df810b7d543bc07513397d94b744f4733775b06b93fcd69816823a947fe097099993264c1e7c17d6eb9d589af72d48660038d98836400aa517fe7d28dbe8e0351cff4bdd10c2c1212c09a0d45136672b496e1429fcf825ad6924d8e53bf79a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x144, 0x11, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x7fffffff, 0xffffffffffffffff, 0x80000001, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xe8, 0x6, "6e32a5d08a5aa7e2215daf7e7515b97f9486ab7d26cf8c19af85f7e12052f4bdde585b47ec36eb15b1ebbb33d941e2a7292012d4371f6faa255fd6ee4b6f1bf18172342b626b859d88a646ef231cda1e4e70ddb0af937b285a5e8035d956468be57fd746e5c855fb0d233d84c2a910806978d48238b46dbbc92d207b1873b83cf35aa598d45d118ae02f0cfc5b4a9cf92734dbad5f54c1c5ab6034bfd2da7213105d73233c1717230dc0a473aabaa70d5dd85fa939513fe64b4c2c384e2aa1ba22ba9a6db3929d2d58a8c25538588270eb67d5adeb321069c994fe3f8f5e4d957e8e3ec7"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x17c, 0x1b, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x79, 0x6, {0x7fff, 'mangle\x00', 0x4, 0xdc13, "bfae08b0f5b9f15c71a86a5de8fa1b5486d8f667afbb0824120dc096aa21b823c611b71cf7cdc0e4b01b3f712e92e5b88fe2cd87d7a2a25f3ce955599a04103e5935ce89122b85bcf6037930b547aa"}}]}, {0xd8, 0x6, "af33634c5f0be87cfe6b0f1f2fa826cd6ec86024eb134e8ee176459c8322e0d7afc87feb2d9d403afe1c5b0f67e3bcd6497ce5f58221e2649030bdcface60a3dded86ab04dd689ce117348e0499dbf82865bff64d5d467f8f390b5fecd4762821453089817581521abdbe93e07e6fb9ab81fc0ae26ab7adcfa30642fb7d02695492ce2a0b43b127352c62aefcc5922c7c3b573b24e8e4bc70577cdf756e9940e38f2fb1f9778e60f27c32343868bb252620d1534f51606b696095351d353842c90d7cdd0f00484e33181d697218b452d6155c4af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4b48}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000500)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) (async) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r9, &(0x7f00000006c0), 0x9) (async) sendfile(r9, r5, 0x0, 0x10000) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000890) r11 = accept4(r1, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80, 0x0) (async) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x4, 0x4}}, 0x10) 16.391081309s ago: executing program 4 (id=8846): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x4b, 0xe, [0x4, 0x589, 0xfffffff7, 0x5, 0x2, 0x7, 0x6, 0x7, 0x0, 0x2, 0x5ff9, 0xf, 0x1, 0x9, 0x7ff, 0x1, 0x5, 0x4, 0x66, 0xfffffffb, 0x5, 0x40000000, 0x6, 0x4, 0x1, 0xb, 0x8, 0x6, 0xffffffff, 0x0, 0x5, 0xfffff801, 0x5, 0x2800000, 0xc, 0x4d98, 0x9, 0x0, 0x8, 0xfc21, 0x9, 0x9, 0x7, 0x49c35fd6, 0xd8, 0x8, 0x1, 0x7fff, 0x2c, 0x3, 0x92e7a30, 0x7, 0x7fff, 0x50d9dec4, 0x2, 0xa5a, 0xff, 0x7655, 0x7f0000, 0x4, 0x585, 0x0, 0x1, 0x3, 0x3, 0xfffffffc, 0x1c5d, 0xfffffffe, 0x1, 0x8, 0x5, 0x7, 0x7, 0x0, 0x3, 0x0, 0x0, 0xb283, 0x3, 0x7f, 0x4, 0xe2bd, 0x1, 0x2e7, 0xffff8001, 0x8, 0xf9a, 0xffffffff, 0x401, 0x0, 0x9, 0x401, 0x1, 0xfc, 0x3, 0xfffffffe, 0x82, 0x23, 0xf8, 0x4, 0xfffffff8, 0x7fffffff, 0x6, 0x3ff, 0x97, 0x3, 0x80000000, 0x5, 0xffffff81, 0xf, 0x9, 0x4, 0x7fffffff, 0x3, 0xe, 0x8, 0x9, 0x8, 0x0, 0x5, 0xfffffffa, 0xd2, 0x7, 0x40, 0xd, 0x4, 0x8ef1, 0x7]}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 16.162512296s ago: executing program 4 (id=8849): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd60fc414a00343c0020010000000000000000000000000001fe8000000000000000000000000000aa3303000000000000c910e1"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000010000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f809ffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e80)={r3, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) syz_emit_ethernet(0x6a, &(0x7f0000000ec0)=ANY=[], 0x0) 15.971752378s ago: executing program 4 (id=8854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000680)='GPL\x00'}, 0x48) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x3fa, 0x4) listen(r1, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000740)="a06ad876d56a0064d082778c3938", &(0x7f0000000780)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0x0, 0x4}, 0x28) 15.718227052s ago: executing program 4 (id=8856): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@float={0xe, 0x0, 0x0, 0x10, 0x8}, @func_proto]}, {0x0, [0x2e, 0x2e, 0x5f, 0x61, 0x2e, 0x30]}}, 0x0, 0x38, 0x0, 0x0, 0x4}, 0x28) pipe(&(0x7f0000000380)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@map_fd={0x18, 0xa, 0x1, 0x0, r2}]}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4f}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008d5a27927ddb7594f480030e6de26c1ea40588e18b97cd0edcc20363e09e96764f6478714cb837348a8d9f90c9aa4040dbc220f8ca92286d4f6ed891ab2c7f3db9fa16814630c805900f71d95539fc32e853048fd65de7d0088f8dc709a1b3a6615b58c8f78044e9789a1d59728ca47843930f0e82abe40320af878a09d6ac6e13da7c321da35aaf4f257943a30ee78d735be1ee00ececbc1526f8c04d7d90b0f17bb98e12066a64ba9da2ae4c2ccaa36a8512a13fc611a85ffcb3bf25ca09e2"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x1}, 0x90) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) 3.761693986s ago: executing program 2 (id=8949): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000003f000a00000000000006"], 0x30}}, 0x4004890) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000855ceff605233379105c188f8fed2b304e18e7420f7b2ac7da060713bfc98ffc49eda87d224eacd1f4df4846721b1937b1b78cc60c45d7021b59b368766ce3ad6eb9a23df163fec4762a96bd1000b9574d56301ddeada122ae414aa09ef1e3985d2d7da6636f012ec329cb75c1934c632ab46de796350853bf91eff", @ANYRES16=r6, @ANYBLOB="200028bd7000fcdbdf250600000008000500ac141430"], 0x1c}, 0x1, 0x0, 0x0, 0x2040080}, 0x20000011) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x3, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x40, 0x0, 0x4], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x91e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xa8}}, 0x0) socket$packet(0x11, 0x2, 0x300) 3.38125443s ago: executing program 1 (id=8954): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r0 = socket$inet(0x2, 0x5, 0x5) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@dev, @remote, 0x0}, &(0x7f0000000080)=0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000001380)={{'\x00', 0x1}, {0x3}, 0x90, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="1a356c6a4758f90c3eab47", 0xb, 0x0, &(0x7f00000001c0)={0x2, 0x191, {0x1, 0xc, 0xe3, "6f5064e961dbc4b2b373c740ac40d7cb550dfecd008c807f629f090589a70021257485124890d2f7017a634988f88567bc76935eb386437de1f795f70894655fbd544d27916eba9ac61c8c3694611a1b648cdf0002b9a76f90da624557e2e192c8a4b41961f2940f182d620b6b46bae1cb91504e9f96dd48b61a93178b27ad2dc44c6d7f5c9bde08bd7950e18abe284d1049f284e18e54bfa06b57398500a7116e681ceae3fd82ec03c58588d88a90196f049435733b98b667ac648c346a5c92f9733ca38573f0d4183f8be3c7280eb1f27af1a15acd562b48224dd03ea115a20c0590", 0xa1, "29de97ac8b9cf7bdd045808592181f10430ca99610e35437daef2227dd9960d88be72179abbfb2015fce1517adf5993fd90dc03f899e321d506631f122a726bafd36ae7654193d4fc8df1737c6c17fc2cc6c1fde69e35b9a444a815ed804df09e5cd2a6d539450b5764c123f387562501ac2a885d1cd8268c2b9ed3c0f9065019afe8f6729d359c234e98df8df7164ffbd1878c56a4439f63cf471fef85e9e5367"}, 0x1000, "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"}, 0x119d}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@delnexthop={0x30, 0x69, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{0x8}, {0x8}, {0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x8040) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000001540), &(0x7f0000001580)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000016c0)={'nat\x00', 0x0, 0x3, 0x1e, [0x0, 0x3, 0x9, 0x1, 0x1, 0x6], 0x9, &(0x7f00000015c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001680)=""/30}, &(0x7f0000001740)=0x78) (async) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001780)) (async) socket$kcm(0x29, 0x7, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000001940)={&(0x7f00000017c0), 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xa0, r7, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008805}, 0x20008000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000001fc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001a00)={0x550, r8, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x210, 0x11d, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xff05, 0x8, 0x7, 0xe3e, 0x9, 0x200, 0x92]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x7fff, 0x1, 0x2, 0x683, 0x9, 0xd1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x18, 0x4, 0x16, 0x4, 0xb, 0x2, 0x2, 0x18, 0x30, 0x12, 0x48, 0x12, 0x24, 0x3, 0x60, 0x12, 0x30, 0x9, 0x16, 0x30, 0x16, 0xc, 0x60, 0x3b, 0x6c, 0x48, 0x9, 0x3, 0x24]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0xc, 0xffff, 0x9, 0x6, 0x100, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8000, 0x0, 0x7, 0x9, 0xc18, 0xe, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}]}, {0x150, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x140, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7f, 0x8001, 0xff, 0x6, 0x3, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x83a, 0x1, 0x3, 0x1000, 0x8, 0x9, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xd, 0x5, 0x4, 0x2, 0x6, 0x1, 0x9]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xffff, 0x8001, 0xf2bc, 0x2, 0x5, 0x6, 0x4]}}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x23, 0x0, 0x8000, 0xb11f, 0x2, 0x4, 0x8, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf0bb, 0xfe4a, 0x6, 0x6, 0x3bd8, 0xf, 0x4, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x9, 0x4, 0x1ff, 0x5, 0x1ff, 0x6]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x1}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x4, 0x6}, {0x2, 0x7}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0x3}, {0x1}, {0x0, 0x6}, {0x6, 0x3}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x3}, {0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0x3}, {0x6}, {0x6, 0x6}, {0x5, 0xa}, {0x6, 0x1}, {0x4, 0x2}, {0x6}, {0x1, 0x4}, {0x4, 0xa}, {0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x5e08, 0x7, 0x8001, 0x8a22, 0x5, 0x401]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x6}, {0x5}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x5, 0x2}, {0x5, 0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x1, 0x3}, {0x7}, {0x4, 0xa}, {0x3, 0x9}, {0x7, 0xa}, {0x4, 0x8}, {}, {0x7, 0x6}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0xa}, {0x7, 0x13}, {0x3, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x4, 0x6, 0xc, 0x3, 0x1431, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x6c, 0x30, 0x17, 0x16, 0x0, 0x18, 0x9, 0x48, 0x16, 0x3, 0x48]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x48, 0x6, 0x6c, 0x2, 0x2, 0x9, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}]}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x4}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffa}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbd9c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x104, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x74, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x94, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x44}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}]}]}, 0x550}, 0x1, 0x0, 0x0, 0x4}, 0x8810) epoll_create(0x8) (async) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000002000)={0x8, 0xffffffffffffffff, 0x1, 0x0, 0x0, [{{r0}, 0xf0}]}) sendmsg$nl_route_sched(r3, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff5, 0xfff3}, {0x9, 0xa}, {0xe, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@bloom_filter={0x1e, 0x1, 0x7, 0x608, 0x0, r2, 0x1c, '\x00', r1, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002240)={{r5, 0xffffffffffffffff}, &(0x7f00000021c0), &(0x7f0000002200)}, 0x20) ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f0000002280)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r10, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x39}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c044}, 0x4044) r11 = socket(0x4, 0x4, 0x350000) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x2c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x8014) (async) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f00000024c0)={@broadcast, @rand_addr=0x64010102, 0x0, "bdbcb8d1487c9cb523befb3fa6891e10e306a5188f0dfd71f72882e9e35d2a21", 0x2, 0x0, 0x5, 0xa4}, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)=@deltclass={0x30, 0x29, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x5, 0x5}, {0xe, 0x8}, {0x1fffd, 0x3}}, [@tclass_kind_options=@c_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) 2.950682276s ago: executing program 3 (id=8958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0xd, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x1, &(0x7f0000000340)="000200010000000000000002020000000f0000006c61706230") r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x5e21, @broadcast}, 0x0, 0x4, 0x3, 0x4}}, 0x2e) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000440)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100230100003702000002000000080001002ce3151b07ddffb04bb2c21903f9f50a76313dbec442ee14fb1a", @ANYRESOCT=0x0, @ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read$nci(r4, &(0x7f0000000580)=""/235, 0xeb) r8 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r9, 0x84, 0x83, &(0x7f00000003c0)={0x1}, 0x8) bind$xdp(r2, &(0x7f0000000080)={0x2c, 0x1, r3, 0x0, r8}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000700), 0x4) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x13, 0x0, 0xffffff01}, 0x20000000) recvmsg$unix(r10, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) socket$inet(0x2, 0x3, 0x33) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000800)) 2.730506918s ago: executing program 1 (id=8959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007112150000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x541acf2d}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) close(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket(0xb, 0x3, 0x8) 2.712910079s ago: executing program 2 (id=8960): socket$nl_crypto(0x10, 0x3, 0x15) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'pim6reg0\x00', {}, 0xff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x7, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x7, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"26cf081ccc4cc4184d39763b74d45110", 0x0, 0x0, {0x7, 0xfffff7f4}, {0x2, 0x5}, 0x1, [0x1, 0x0, 0xb, 0x800, 0x8, 0x4, 0x0, 0x3, 0x9, 0x1c0400, 0x66, 0x9, 0x2, 0x2, 0x7, 0x3]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"26cf081ccc4cc4184d39763b74d45110", 0x0, 0x0, {0x7, 0xfffff7f4}, {0x2, 0x5}, 0x1, [0x1, 0x0, 0xb, 0x800, 0x8, 0x4, 0x0, 0x3, 0x9, 0x1c0400, 0x66, 0x9, 0x2, 0x2, 0x7, 0x3]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"e47a407acaf2d68f679f72643d2744f2", r2, r3, {0x3ff, 0x8}, {0xaa, 0x9}, 0x1, [0x8, 0x3, 0x4, 0xfffffffffffffffb, 0x7, 0x10, 0xfffffffffffffffa, 0xb2b9, 0x7, 0x1b1, 0x6, 0x8000, 0x0, 0xfffffffffffffffa, 0x1, 0x101]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"e47a407acaf2d68f679f72643d2744f2", r2, r3, {0x3ff, 0x8}, {0xaa, 0x9}, 0x1, [0x8, 0x3, 0x4, 0xfffffffffffffffb, 0x7, 0x10, 0xfffffffffffffffa, 0xb2b9, 0x7, 0x1b1, 0x6, 0x8000, 0x0, 0xfffffffffffffffa, 0x1, 0x101]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000015c0)={{r0, &(0x7f00000004c0)='^\x00', 0x82080, &(0x7f0000000500)={@_ha_fsid={[0x2, 0x4]}, {0x0, 0xed1, 0x4, 0x400}}, 0x607959eb, &(0x7f0000000540), &(0x7f0000000580)=0x9d}, {[0x8001, 0x7fffffff, 0x4, 0x5]}, 0xc, 0x1000, &(0x7f00000005c0)=""/4096}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000001640)={{0x3a, @rand_addr=0x64010102, 0x4e23, 0x0, 'sh\x00', 0x9, 0x2, 0x4}, {@multicast1, 0x4e23, 0x3, 0x9, 0x609}}, 0x44) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000001780)={{@_ha_fsid={[0x5, 0x5]}, {0x5, 0x5, 0x9, 0x1}}, {{[0x6, 0x7fffffff, 0xfc87, 0x8]}, 0x0, 0x0, 0xcd, 0x0, &(0x7f00000016c0)=[{{@align=0x401, {0xe96d, 0xd, 0x937b, 0x20}}, 0x6, 0x0, 'pim6reg0\x00'}, {{@_ha_fsid={[0x4]}, {0x2, 0x6, 0xffffffff, 0xa47}}, 0xb2, 0x0, '\x00'}, {{@_ha_fsid={[0x5, 0xff]}, {0x2, 0xc6c8, 0x2, 0x81}}, 0x5, 0x0, '\x00'}, {{@align=0x9, {0x3, 0x4, 0x7fffffff, 0xfffffffffffffe00}}, 0x1, 0x0, '(+#(/[\x00'}, {{@_ha_fsid={[0xf4, 0x9]}, {0x9, 0x3d15, 0x5c1, 0x6}}, 0x4830, 0x0, '^\x00'}]}}) syz_genetlink_get_family_id$smc(&(0x7f0000001800), r4) (async) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001800), r4) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000001900)={0x7, 0xf}) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000001940)={0x10, 0x0, "b18e94983a7b9c302757690fad33ffef"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001cc0)={&(0x7f00000019c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x124, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x14, 0x7, 0x1, 0x0, "0e729187f925f243ce173ba539214b89"}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x70, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2cc}, 0x1, 0x0, 0x0, 0x4044404}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001d80)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001d80)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x200040c1) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x200040c1) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000001e80)={0x3, 0x10, 0x7, 0x3, 0xe6}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000002000)={r0, &(0x7f0000001f00)='bond_slave_0\x00', 0x400, &(0x7f0000001f40)={@align=0x2, {0xf9c3, 0x5, 0x7, 0x100000001}}, 0x0, &(0x7f0000001f80), &(0x7f0000001fc0)=0xa8a5}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000002000)={r0, &(0x7f0000001f00)='bond_slave_0\x00', 0x400, &(0x7f0000001f40)={@align=0x2, {0xf9c3, 0x5, 0x7, 0x100000001}}, 0x0, &(0x7f0000001f80), &(0x7f0000001fc0)=0xa8a5}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r4) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x9}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x2000000) socket$key(0xf, 0x3, 0x2) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000002180)=""/17, &(0x7f00000021c0)=0x11) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002500)=@bpf_tracing={0x1a, 0x1, &(0x7f0000002240)=@raw=[@jmp={0x5, 0x1, 0x1, 0xa, 0x0, 0xffffffffffffffc0, 0x8}], &(0x7f0000002280)='syzkaller\x00', 0x189f4000, 0xf4, &(0x7f00000022c0)=""/244, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000023c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x19574, r8, 0xa, &(0x7f0000002400)=[r8], &(0x7f0000002440)=[{0x4, 0x5, 0x6, 0x9}, {0x2, 0x5, 0x7, 0x5}, {0x3, 0x3, 0xa, 0xc}, {0x4, 0x4, 0x4}, {0x0, 0x4, 0xc, 0x1f}, {0x3, 0x1, 0xc, 0x4}, {0x0, 0x2, 0x9, 0x2}, {0x2, 0x4, 0x4, 0x4}, {0x5, 0x2, 0x5, 0x5}, {0x4, 0x1, 0x1}], 0x10, 0x98}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002600)={{r4, 0xffffffffffffffff}, &(0x7f0000002200), &(0x7f00000025c0)=r10}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002640)={'batadv_slave_0\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000002780)={r11, &(0x7f0000002680)='ip_vti0\x00', 0x20000, &(0x7f00000026c0)={@_ha_fsid={[0x9, 0x5]}, {0x0, 0x4, 0x8, 0x1}}, 0x1bda, &(0x7f0000002700), &(0x7f0000002740)=0x5}) sendmsg$NFT_MSG_GETRULE(r12, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x5c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x24, 0x7, 0x1, 0x0, "360168903c742930fcc8d8938c4059b6824857cdd542b1c4353235110d6c33a8"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44800) 2.494494176s ago: executing program 2 (id=8962): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xfe2c, 0x0, &(0x7f00000005c0)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.484159177s ago: executing program 1 (id=8963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="ac0000001800dd8d0310000000000000022000000000ff06002000200600150001000000880016808400010001000000000000003a0004000750610000000000ac964dd89475610000d6d36ed67d5a6ba1aeefdb0000000000000000000100000000000000000000000000000001fc0000000000000000000000000000000000000000000000000000000000000100000000000000000000000000b32e1a70a1eb1d90cb80e84929000001fc000000000000000000000000000000fe8000000000000000000000000000aa8aa8899e31ec62da2c44cabf7a811315e03ec466bd4061bc7d191f2b29f68065b2c794aad3dd69f6c01434c4e2d19beaac8f357a5d41ba4e9e8b755f1f24e5bcd9dfd417f9bb973c7b609c6a9d5010b6aea662d9b5243d63e08faa940056b3b0d08b7c64446eaf"], 0xac}}, 0x4000880) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000780)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f00000011c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000001240)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000001340)=[@op={0x18}], 0x18}], 0x1, 0x40800) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5, 0xc1a, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000300)=0x2, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000840)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000880)={'veth1', 0x32, 0x33}, 0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000004c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000500), 0x9) (async) r8 = openat$cgroup_procs(r6, &(0x7f0000000540)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000580), 0x12) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000600)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000640)=0x1, 0x12) (async) write$cgroup_pid(r10, &(0x7f0000000680), 0x12) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10006) (async) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) (async) recvfrom$inet6(r3, 0x0, 0x0, 0x10000, &(0x7f0000000440)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) (async) recvmsg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000009c0), 0x100000000000007e}, 0x0) 2.285453317s ago: executing program 2 (id=8964): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4c040) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, 0x0, 0x5d) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454ca, &(0x7f0000000200)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40080c0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000140)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast1}}}}], 0x28}}], 0x2, 0x40000000) mmap(&(0x7f000009c000/0x1000)=nil, 0x1000, 0x0, 0x1c, r2, 0xffffc000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, r1, 0xd0fb8000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 2.170730383s ago: executing program 0 (id=8966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x80, 0x0, @mcast2={0xff, 0x3}, 0x80000}, 0x1c) (async) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000480)={0x1}, 0x8) (async) sendmmsg$sock(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="dce4c739", 0x4}], 0x1, &(0x7f00000005c0)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x20000000) (async) listen(r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000900)={r4}, 0xc) (async, rerun: 64) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x6}, 0x4) (async, rerun: 64) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000340)=[{0x1d, 0x0, 0x1, 0xfffff034}, {0xb1}, {0x6, 0x0, 0xfc, 0x7}]}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'xfrm0\x00'}) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{0x303}, "01a7bcc07010970f", "76f9a8be16101e955d71ff9522e5d949", "040ccbad", "a6a9785f7fd68212"}, 0x28) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) write(r7, &(0x7f0000000380)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500020003670000", 0x38) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$int_in(r8, 0x5421, &(0x7f0000000000)=0x1) (async) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000180)="e25baccdac84097fef489a877933ce159cd3dba56ba3cff806691bcdc56ac10bbcbe0970b16f4aac2ef0835e33080f8ea3a4c7bbb0a43b1af75773018cd4da8494b0a1b3bb736cdcf50da7ac1f4c38337c8e0080b962", 0x1}, {&(0x7f0000000200)="1c53003e97ecd5bbd9b774050b20c40c523ebae257305e3a7e7dfca85b4c39fcde0936ad4c0e4c7213dd2db728013ad9ac2aae846dd27d10064091d1c71530803893b523755cf33664bb73ad7fb8f4da126420de91011305e8ba09bb0254e1c37a239b64444b6b2b202515e708ce5c6c2c3f23b4dbdc0d45d1d35e4249a2999dec314010f7e2b4d47e3898c3d4872b66578c60e3df2692abfb07d76a65afd5"}, {&(0x7f00000009c0)="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"}], 0x1, 0x0, 0xffffffffffffff15}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x54) 1.975839152s ago: executing program 2 (id=8967): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0x0, 0x0, "000000ae00"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000024000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000184902b10400008466fc6644147f3fcc2294cd11ae42faf4ee7b581903d2af358ddf0bfcceed4cb49c427b68b4ec84243e351a55074e50f3d3fc5c3fba0b1eca01b7e15315282feefd06f9fd4a1ce4c4900a438716be2c3cb6f2ebc8c2f8b950ca21f48f0c6359e1fca8dc9b005d5acf4e89e9ee", @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000800000029000000"], 0x28}}, 0x40008c0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0x0, 0x0, "000000ae00"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000024000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000184902b10400008466fc6644147f3fcc2294cd11ae42faf4ee7b581903d2af358ddf0bfcceed4cb49c427b68b4ec84243e351a55074e50f3d3fc5c3fba0b1eca01b7e15315282feefd06f9fd4a1ce4c4900a438716be2c3cb6f2ebc8c2f8b950ca21f48f0c6359e1fca8dc9b005d5acf4e89e9ee", @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000800000029000000"], 0x28}}, 0x40008c0) (async) 1.973146119s ago: executing program 3 (id=8968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_getrule={0x1c, 0x22, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x14, 0x10, 0xe, 0xe, 0x0, 0x0, 0x2, 0x8}, [""]}, 0x1c}, 0x304, 0x0, 0x0, 0x4000000}, 0x2000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d0c0009800800014008"], 0x98}}, 0x20050800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x4, @loopback, 0xfffffffe}, 0x1c) 1.909294591s ago: executing program 3 (id=8969): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\r\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000400000000000000000000000000000000000000d040bd55dab56d"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) unshare(0x800) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000040)=0x5cbe) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'macvlan1\x00', &(0x7f0000000140)=@ethtool_channels={0x1, 0x7, 0xd8a, 0x1, 0x2, 0x48, 0x5, 0x3, 0x80000001}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.850964344s ago: executing program 2 (id=8970): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = epoll_create1(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000580)=0x6, 0x4) (async) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x9000001d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x7b7306ca40510a6}) (async, rerun: 64) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="034886dd01000000000014000000"], 0xfdef) (async, rerun: 32) epoll_pwait(r3, &(0x7f0000000100)=[{}, {}], 0x2, 0x200, 0x0, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 1.718173971s ago: executing program 0 (id=8971): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x67, @multicast1, 0x4e23, 0x0, 'nq\x00', 0x10, 0x4, 0x43}, 0x2c) 1.674902666s ago: executing program 0 (id=8972): mmap(&(0x7f000018d000/0x1000)=nil, 0x1000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd12000) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140)=0x100, 0x4) epoll_create(0x400) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x109541, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x6020400) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000a80)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000ac0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000b00), 0x1) (async) sendto$inet6(r2, &(0x7f0000000b40)='l', 0x1, 0x0, &(0x7f0000000b80)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000bc0)='&', 0x1, 0x40894, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f0000000c00)="87", 0x1, 0x20004000, 0x0, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='E', 0x1}], 0x1}}], 0x1, 0x4000000) getsockopt$sock_int(r1, 0x1, 0x4a, 0x0, &(0x7f00000009c0)) (async) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x37d, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="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"], 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="850000000000e1ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000500"/28], 0x50) (async) r4 = socket$igmp(0x2, 0x3, 0x2) unshare(0x26020480) (async) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r5, &(0x7f0000000a00)=@hci={0x1f, 0x1, 0x3}, 0x80) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000900), 0x4) (async) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000900)=ANY=[], 0x32600) (async) mmap(&(0x7f00002e3000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT=r5, @ANYBLOB="7ca384b98dcf9b569067a0715b53cc06eb2c1e8ad7b8666454ab2f00f1ef4c393afa89dae7c987106757e0d9a7776e67d23f9a41c97e2165ad9881cc61a3b3599062fdcd3a32c0c1c599457e6ec24409e49f", @ANYRES8=r0, @ANYRES16=r2, @ANYRES64=r6], 0x50) 1.632652203s ago: executing program 3 (id=8973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000e5", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250c00000008000b000900000008000300", @ANYRES32=r1, @ANYBLOB="08000100010000000200060002000000000000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000580)={'wlan1\x00', @random="0200ac7f7f00"}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="d2eef68c560515e7fe3106"], 0x3c}}, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r6) (async) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@delchain={0x44, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2f}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r9, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000027bd7000fcdb330000003400a6800a000600ffffffffffff00000a000600ffffffe90c00000000000000ffffffffffff00000a0006000802110000010000"], 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040804) (async) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r9) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000740)={'veth1_to_hsr\x00', 0x0}) r15 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xfffc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r10, 0x40089416, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4880) (async) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f00000009c0)) (async) sendmsg$IPVS_CMD_ZERO(r10, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00032cbd709c17096c975f21847100ffdbdf2510000000080004000010000028000380080003000000000005000800fe00000014000600200100000000000000000000000000020c00018008000800fcffffffecb5d4377f3e60c5700fd23cba749937d4f25f522466c0a812aff362b80f121745595d47a495aed870ed6338883d6de6151a1c24cc38f39f012f2f0514002e28ea8a3f5dbfe4350334ee6f247604d2aaddf32f4b4eca658ec0505c"], 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x1) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70f44e99", @ANYRES16=r8, @ANYBLOB="00012abd7000fcdbdf2506000000080005007f0000011400060070696d36726567310000000000000000140002000000000000000000000000000000000108000500ffffffff14000300fe880000000000000000000000000001140006006772653000"/110], 0x74}, 0x1, 0x0, 0x0, 0x8000000}, 0x4008880) 1.490405428s ago: executing program 1 (id=8974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080004000b0007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b705000000000000850000006300000015000200000000008101000000000000850000005600000095"], &(0x7f00000009c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4d}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB="84010000564ae3c2c1cf75ad8a5748e9cc0000000000001a1b5e5650a9ca9217ff0e77cc58500533c2da7750f140d3f3f6f373839f43464a2d049e8a50b9a2090cdd8f2a50302b05f06eef8afe222de581cd7182b487e6b0d335d19a635d8949d6571bf8f39dd7a6dc3393c71356e923362964f3a7399823a33e8d14f92dbaa40700ad5d9ef8ad543115bc1f8b665e364fd0ddc312cda549575d3b33076c6bd37de294a3bc094c423316ea5fcd106ac0a9477ca902374cbd3fa3554cf01283ea3a08fda0064a08", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf2567000000080001003900000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1.468958127s ago: executing program 0 (id=8975): unshare(0x20000400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000008c0)={0x3, 0x3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000ac0)={0x2, 0xffff, @local}, 0x10) connect$inet(r1, &(0x7f0000000b00)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000000b40), 0x2d, 0x0) 1.264130904s ago: executing program 1 (id=8976): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x34}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfb}]}]}]}, 0x40}}, 0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x700, 0x7f50, 0x8000, 0xb6, {{0xa, 0x4, 0x0, 0x1e, 0x28, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x2, [{@empty, 0x4}]}, @end, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000400), &(0x7f0000000440)=r5}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0xa, 0x76, 0x9, 0x24, @remote, @mcast1, 0x0, 0x50, 0x1f5, 0x5}}) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="180200003e000000000000000600400018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000032ff00008500000006000000180100002020692500000000002020207b1af8ff00000100bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000007b0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x99a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000740)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000780)=0x800001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x4, &(0x7f0000000880)=ANY=[@ANYRES64=r8], &(0x7f00000008c0)='GPL\x00', 0x402, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYBLOB='&'], 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) listen(r8, 0x0) sendmsg$xdp(r5, 0x0, 0x44000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r6}, &(0x7f0000000a80)=0x2, &(0x7f0000000ac0)=r5}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b00)={r4}) 1.074151099s ago: executing program 0 (id=8977): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'wg2\x00', {0x2, 0x4e23, @multicast1}}) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x20000011, 0xe, 0x0, &(0x7f0000000600)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xc, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffd, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0xfffffe29, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) 1.07090757s ago: executing program 3 (id=8978): socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x3, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair(0x2, 0x5, 0x4, 0x0) (async) socketpair(0x2, 0x5, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="e07ac47a0866a7f7261d6118000000000000d394ea9de6d5255c000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000740)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f92, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10ffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r3, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000840)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000840)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) close(0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) unshare(0x22020600) (async) unshare(0x22020600) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r9, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r9, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r9, 0x0) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r2, 0x0) (async) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r2, 0x0) mmap(&(0x7f00008d5000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2c5b9000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 584.623834ms ago: executing program 4 (id=8861): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000140)=0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000940), 0x4) r8 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000380)='GPL\x00', 0x8, 0xfb, &(0x7f00000003c0)=""/251, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000980)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) bind$tipc(r8, &(0x7f00000004c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r8, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], &(0x7f0000000540)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$tipc(r10, &(0x7f0000000680)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r10, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10) bind$tipc(r10, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000780)={0x1, [0x0]}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000800)={r5, @in={{0x2, 0x4e24, @multicast2}}, 0x800, 0x6}, 0x1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060e193bd28aa18be9000300ac03b947f1edf7fbe76b9073bdc21414aa"], 0x28}}, 0x0) 243.741204ms ago: executing program 3 (id=8979): r0 = socket(0x1e, 0x4, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000009e000000720a00ff0000000079"], 0x0, 0x2}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) connect$inet6(r2, &(0x7f0000000580)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000005c0)='highspeed', 0x6) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(0x4) 62.668528ms ago: executing program 0 (id=8980): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newlink={0x3c, 0x10, 0x801, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e, 0x8}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0xb9666000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet6(0xa, 0x1, 0x3) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) close(r6) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x0, [0x2, 0x1, 0x7, 0x80, 0x100, 0x3], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c0003800600010000000000efff02000200000006000300a3aa0000080001"], 0x5c}}, 0x0) 0s ago: executing program 1 (id=8981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x4, 0x102, 0x0, r4}, 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x3, &(0x7f0000000340)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0x9}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000b40), &(0x7f0000000b80)=r7}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000bc0)={r7}, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @broadcast}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) syz_emit_ethernet(0x46, &(0x7f0000002140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) write$tun(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="01000400fdff14000000458900160065000060029078f3000000000000000000d35780b3af7b861383df77685bd1b2e808045a51ba6c6636e0f35fb79ed611a6e074a985e604494adbcc1b0ba93975abcb9d3a9eaa8c31f38e"], 0x20) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="20000000030301000000000000000000020000000c0002000000020100000001"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 37][ T4303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7670'. [ 959.104157][ T4301] tipc: Enabling of bearer rejected, already enabled [ 959.197820][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7673'. [ 959.508022][ T4328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 959.654275][ T4330] vlan0: entered promiscuous mode [ 963.380201][ T4397] sctp: [Deprecated]: syz.3.7695 (pid 4397) Use of int in max_burst socket option. [ 963.380201][ T4397] Use struct sctp_assoc_value instead [ 963.429274][ T4407] __nla_validate_parse: 1 callbacks suppressed [ 963.429294][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7697'. [ 963.729075][ T4414] veth1_vlan: left promiscuous mode [ 963.757590][ T4414] macvlan0: entered promiscuous mode [ 964.314399][ T4430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.314433][ T4430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.673236][ T4430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.673273][ T4430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.950107][ T4430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.950139][ T4430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.299418][ T4430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.299440][ T4430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.931996][ T4574] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 965.942122][T16193] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.942152][T16193] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.174356][T16193] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.174391][T16193] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.174425][T16193] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.174447][T16193] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.174476][T16193] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.174498][T16193] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.682234][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7721'. [ 966.801807][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7721'. [ 966.828554][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7722'. [ 969.706459][ T4611] ipvlan0: left promiscuous mode [ 969.709418][ T4611] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 969.938613][ T4627] rxe_eth0 speed is unknown, defaulting to 1000 [ 970.059571][ T4636] 8021q: VLANs not supported on gre0 [ 970.466550][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7732'. [ 970.513481][ T4648] 8021q: adding VLAN 0 to HW filter on device bond8 [ 971.102859][ T4666] Bluetooth: MGMT ver 1.23 [ 971.464785][ T4670] netlink: 'syz.3.7736': attribute type 10 has an invalid length. [ 973.158981][ T4648] lo: entered promiscuous mode [ 973.181033][ T4648] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 973.325075][ T4648] 8021q: adding VLAN 0 to HW filter on device bond8 [ 973.349267][ T4648] bond8: (slave lo): Enslaving as an active interface with an up link [ 973.349356][ T4630] rxe_eth0 speed is unknown, defaulting to 1000 [ 973.447737][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.449180][ T4668] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.569844][ T4668] veth0_to_bridge: left promiscuous mode [ 973.609816][ T4681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7738'. [ 973.622445][ T4668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 973.622472][ T4668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 973.648793][ T4668] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 974.121683][ T4699] veth0: entered promiscuous mode [ 974.140755][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7743'. [ 974.952070][ T4702] No such timeout policy "syz1" [ 975.066797][ T4717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 975.096824][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7749'. [ 975.099120][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7749'. [ 975.179295][ T4723] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 975.235420][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7750'. [ 975.628085][ T4741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.630688][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7758'. [ 975.845188][ T4755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7759'. [ 975.845211][ T4755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7759'. [ 976.039913][ T4777] syzkaller1: entered promiscuous mode [ 976.039936][ T4777] syzkaller1: entered allmulticast mode [ 976.324841][ T4792] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7771'. [ 976.539094][ T4806] nbd: must specify a size in bytes for the device [ 976.540651][ T4806] netlink: 'syz.1.7775': attribute type 9 has an invalid length. [ 976.566001][ T4806] bridge5: entered promiscuous mode [ 976.569275][ T4806] nbd: must specify a size in bytes for the device [ 976.570837][ T4806] netlink: 'syz.1.7775': attribute type 9 has an invalid length. [ 976.606204][ T4806] bridge6: entered promiscuous mode [ 976.609065][ T4804] tap0: tun_chr_ioctl cmd 1074025680 [ 976.882520][ T4830] FAULT_INJECTION: forcing a failure. [ 976.882520][ T4830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.882549][ T4830] CPU: 1 UID: 0 PID: 4830 Comm: syz.2.7780 Not tainted syzkaller #0 PREEMPT(full) [ 976.882567][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 976.882576][ T4830] Call Trace: [ 976.882582][ T4830] [ 976.882590][ T4830] dump_stack_lvl+0xe8/0x150 [ 976.882621][ T4830] should_fail_ex+0x3eb/0x540 [ 976.882647][ T4830] _copy_from_user+0x2d/0xb0 [ 976.882669][ T4830] ___sys_recvmsg+0x173/0x5a0 [ 976.882698][ T4830] ? __pfx____sys_recvmsg+0x10/0x10 [ 976.882723][ T4830] ? lock_acquire+0x115/0x350 [ 976.882759][ T4830] ? __fget_files+0x2a/0x420 [ 976.882779][ T4830] ? __fget_files+0x3a2/0x420 [ 976.882798][ T4830] ? __fget_files+0x2a/0x420 [ 976.882823][ T4830] ? fdget+0x1ac/0x250 [ 976.882845][ T4830] do_recvmmsg+0x31a/0x800 [ 976.882873][ T4830] ? __pfx_do_recvmmsg+0x10/0x10 [ 976.882904][ T4830] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 976.882934][ T4830] ? fdget+0x1ac/0x250 [ 976.882968][ T4830] __x64_sys_recvmmsg+0x198/0x250 [ 976.882990][ T4830] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 976.883021][ T4830] do_syscall_64+0x166/0x520 [ 976.883041][ T4830] ? trace_irq_disable+0x3b/0x140 [ 976.883063][ T4830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.883080][ T4830] ? clear_bhb_loop+0x70/0xc0 [ 976.883102][ T4830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.883118][ T4830] RIP: 0033:0x7ff25b39fb19 [ 976.883133][ T4830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.883149][ T4830] RSP: 002b:00007ff25c1ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 976.883169][ T4830] RAX: ffffffffffffffda RBX: 00007ff25b625fa0 RCX: 00007ff25b39fb19 [ 976.883188][ T4830] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 976.883199][ T4830] RBP: 00007ff25c1ea090 R08: 0000000000000000 R09: 0000000000000000 [ 976.883208][ T4830] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 976.883219][ T4830] R13: 00007ff25b626038 R14: 00007ff25b625fa0 R15: 00007ffe674dbe78 [ 976.883250][ T4830] [ 977.178776][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7785'. [ 977.178821][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7785'. [ 977.403874][ T4852] netlink: 'syz.3.7787': attribute type 1 has an invalid length. [ 977.403896][ T4852] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.7787'. [ 977.404757][ T4852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7787'. [ 978.303717][ T4893] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7800'. [ 978.381608][ T4896] ip_tables: iptables: counters copy to user failed while replacing table [ 978.393157][ T4896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7801'. [ 978.492199][ T4897] x_tables: duplicate underflow at hook 2 [ 978.616812][ T4906] netlink: 'syz.4.7804': attribute type 21 has an invalid length. [ 978.616840][ T4906] IPv6: NLM_F_CREATE should be specified when creating new route [ 979.789925][ T4936] netlink: 'syz.4.7816': attribute type 4 has an invalid length. [ 980.226820][ T4975] netlink: 'syz.0.7823': attribute type 11 has an invalid length. [ 980.542228][ T4997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 980.660145][ T4997] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.662456][ T4997] tipc: Resetting bearer [ 980.730698][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.734834][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.799869][ T5006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 980.852201][ T4997] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 980.856083][ T4997] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 980.859095][ T4997] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.860617][ T4997] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 980.874969][ T3279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.909976][ T3279] bond8: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 980.923625][ T3279] bond8: (slave veth0_to_bond): making interface the new active one [ 980.939904][ T3279] bond8: active interface up! [ 981.243932][ T176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.243974][ T176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.254361][T12907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.301726][ T5014] __nla_validate_parse: 5 callbacks suppressed [ 981.301750][ T5014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7830'. [ 982.314957][ T5066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7842'. [ 982.681931][ T5085] atomic_op ffff88802d2ef9e0 conn xmit_atomic 0000000000000000 [ 982.991439][ T5100] netlink: 'syz.1.7852': attribute type 11 has an invalid length. [ 983.235028][ T5116] FAULT_INJECTION: forcing a failure. [ 983.235028][ T5116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.235057][ T5116] CPU: 0 UID: 0 PID: 5116 Comm: syz.0.7859 Not tainted syzkaller #0 PREEMPT(full) [ 983.235076][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 983.235087][ T5116] Call Trace: [ 983.235094][ T5116] [ 983.235102][ T5116] dump_stack_lvl+0xe8/0x150 [ 983.235135][ T5116] should_fail_ex+0x3eb/0x540 [ 983.235162][ T5116] _copy_from_user+0x2d/0xb0 [ 983.235186][ T5116] ___sys_sendmsg+0x1c6/0x360 [ 983.235205][ T5116] ? __lock_acquire+0x747/0x2de0 [ 983.235233][ T5116] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.235290][ T5116] ? __fget_files+0x3a2/0x420 [ 983.235311][ T5116] ? __fget_files+0x2a/0x420 [ 983.235340][ T5116] __x64_sys_sendmsg+0x1b1/0x290 [ 983.235362][ T5116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 983.235404][ T5116] do_syscall_64+0x166/0x520 [ 983.235425][ T5116] ? trace_irq_disable+0x3b/0x140 [ 983.235449][ T5116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.235466][ T5116] ? clear_bhb_loop+0x70/0xc0 [ 983.235489][ T5116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.235507][ T5116] RIP: 0033:0x7f37d759fb19 [ 983.235524][ T5116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.235545][ T5116] RSP: 002b:00007f37d851d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.235564][ T5116] RAX: ffffffffffffffda RBX: 00007f37d7825fa0 RCX: 00007f37d759fb19 [ 983.235577][ T5116] RDX: 0000000020000004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 983.235588][ T5116] RBP: 00007f37d851d090 R08: 0000000000000000 R09: 0000000000000000 [ 983.235598][ T5116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.235609][ T5116] R13: 00007f37d7826038 R14: 00007f37d7825fa0 R15: 00007ffd03893348 [ 983.235639][ T5116] [ 983.450672][ T5121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7860'. [ 983.688505][ T5125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7862'. [ 983.715261][ T5125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.957879][ T5129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7864'. [ 983.977366][ T5129] 8021q: adding VLAN 0 to HW filter on device bond6 [ 983.981946][ T5129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7864'. [ 983.987660][ T5129] bond6: entered promiscuous mode [ 983.987715][ T5129] bond6: entered allmulticast mode [ 984.002490][ T5129] dummy0: entered promiscuous mode [ 984.002670][ T5129] dummy0: entered allmulticast mode [ 984.008369][ T5129] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 984.011789][ T5129] netlink: 'syz.1.7864': attribute type 10 has an invalid length. [ 984.011809][ T5129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7864'. [ 984.025211][ T5129] bond6: (slave dummy0): Releasing backup interface [ 984.051691][ T5129] dummy0: left promiscuous mode [ 984.052149][ T5129] dummy0: left allmulticast mode [ 984.131314][ T5133] syzkaller0: entered promiscuous mode [ 984.131328][ T5133] syzkaller0: entered allmulticast mode [ 984.385372][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7869'. [ 984.443358][ T5150] sctp: [Deprecated]: syz.2.7871 (pid 5150) Use of int in max_burst socket option. [ 984.443358][ T5150] Use struct sctp_assoc_value instead [ 984.758553][ T5164] bond7: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 984.758579][ T5164] bond7: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 984.758794][ T5164] bond7: entered allmulticast mode [ 984.857370][ T5175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7880'. [ 984.939976][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7880'. [ 984.980546][ T5178] netlink: 'syz.4.7880': attribute type 2 has an invalid length. [ 985.499587][ T5213] bond0: Unable to set up delay as MII monitoring is disabled [ 985.597813][ T5221] bridge5: entered promiscuous mode [ 985.748315][ T5226] netlink: 'syz.2.7894': attribute type 10 has an invalid length. [ 985.772574][ T5226] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 985.772768][ T5226] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 985.772788][ T5226] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 985.928070][ T5235] netlink: 'syz.1.7899': attribute type 4 has an invalid length. [ 986.325830][ T5258] __nla_validate_parse: 2 callbacks suppressed [ 986.325854][ T5258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7905'. [ 986.346549][ T5262] netlink: 'syz.2.7906': attribute type 1 has an invalid length. [ 986.346568][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7906'. [ 986.417355][ T5269] syzkaller0: entered promiscuous mode [ 986.417377][ T5269] syzkaller0: entered allmulticast mode [ 986.440971][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7907'. [ 986.648131][ T5275] netlink: 'syz.1.7908': attribute type 1 has an invalid length. [ 986.698962][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7910'. [ 986.759186][ T5275] 8021q: adding VLAN 0 to HW filter on device bond8 [ 986.819140][ T5286] bond8: (slave veth7): Enslaving as an active interface with a down link [ 986.822184][ T5280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7910'. [ 987.430872][ T5329] netlink: 'syz.4.7920': attribute type 10 has an invalid length. [ 987.556052][ T5335] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7922'. [ 987.561149][ T5337] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7922'. [ 987.690593][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7924'. [ 987.891282][ T5350] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7923'. [ 987.947822][ T5352] bond6: (slave lo): Releasing backup interface [ 987.951779][ T5352] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 988.009280][ T5352] veth0: left allmulticast mode [ 988.010824][ T5352] bridge0: port 1(veth0) entered disabled state [ 988.039105][ T5352] bond8: (slave veth0_to_bond): Releasing active interface [ 988.066654][ T5352] bond0: (slave bond_slave_0): Releasing backup interface [ 988.075719][ T5352] bond0: (slave bond_slave_1): Releasing backup interface [ 988.096152][ T5352] team0: Port device team_slave_0 removed [ 988.112052][ T5352] team0: Port device team_slave_1 removed [ 988.112674][ T5352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.112690][ T5352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.114666][ T5352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.114685][ T5352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.141271][ T5352] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 988.141294][ T5352] batman_adv: batadv0: Removing interface: syzkaller0 [ 988.172571][ T5352] bond2: (slave xfrm1): Releasing backup interface [ 988.172598][ T5352] xfrm1: left promiscuous mode [ 988.196477][ T5352] bond5: (slave veth5): Releasing active interface [ 988.211943][ T5352] bond7: (slave ip6gre1): Releasing backup interface [ 988.211969][ T5352] ip6gre1: left promiscuous mode [ 988.224868][ T5352] batman_adv: batadv0: Interface deactivated: gretap2 [ 988.224890][ T5352] batman_adv: batadv0: Removing interface: gretap2 [ 988.258318][T16193] tipc: Resetting bearer [ 988.689783][ T5375] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 988.845205][ T5384] syz_tun: left allmulticast mode [ 988.845232][ T5384] syz_tun: left promiscuous mode [ 988.845469][ T5384] bridge0: port 3(syz_tun) entered disabled state [ 988.890471][ T5384] bridge_slave_1: left allmulticast mode [ 988.890501][ T5384] bridge_slave_1: left promiscuous mode [ 988.892652][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.955411][ T5384] bridge_slave_0: left allmulticast mode [ 988.955441][ T5384] bridge_slave_0: left promiscuous mode [ 988.956382][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.050073][ T5395] netlink: 'syz.0.7939': attribute type 30 has an invalid length. [ 989.109227][ T5399] netlink: 'syz.0.7939': attribute type 30 has an invalid length. [ 989.224575][ T5403] netlink: 300 bytes leftover after parsing attributes in process `syz.4.7940'. [ 990.163582][ T5436] netlink: 'syz.1.7948': attribute type 4 has an invalid length. [ 990.803608][ T5460] netlink: 'syz.3.7957': attribute type 1 has an invalid length. [ 992.132884][ T5519] __nla_validate_parse: 6 callbacks suppressed [ 992.132904][ T5519] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7971'. [ 992.243810][ T5524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7972'. [ 992.592311][ T5539] FAULT_INJECTION: forcing a failure. [ 992.592311][ T5539] name failslab, interval 1, probability 0, space 0, times 0 [ 992.592340][ T5539] CPU: 1 UID: 0 PID: 5539 Comm: syz.1.7978 Not tainted syzkaller #0 PREEMPT(full) [ 992.592361][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 992.592373][ T5539] Call Trace: [ 992.592381][ T5539] [ 992.592389][ T5539] dump_stack_lvl+0xe8/0x150 [ 992.592425][ T5539] should_fail_ex+0x3eb/0x540 [ 992.592452][ T5539] ? __alloc_skb+0x1db/0x7a0 [ 992.592471][ T5539] should_failslab+0xa8/0x100 [ 992.592491][ T5539] ? __alloc_skb+0x1db/0x7a0 [ 992.592507][ T5539] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 992.592529][ T5539] ? __alloc_skb+0x18d/0x7a0 [ 992.592558][ T5539] ? __alloc_skb+0x1db/0x7a0 [ 992.592582][ T5539] __alloc_skb+0x1db/0x7a0 [ 992.592608][ T5539] netlink_ack+0x136/0xb30 [ 992.592632][ T5539] ? __pfx_genl_rcv_msg+0x10/0x10 [ 992.592670][ T5539] netlink_rcv_skb+0x2a4/0x4a0 [ 992.592696][ T5539] ? __pfx_genl_rcv_msg+0x10/0x10 [ 992.592719][ T5539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 992.592761][ T5539] ? down_read+0x2b9/0x320 [ 992.592791][ T5539] genl_rcv+0x28/0x40 [ 992.592811][ T5539] netlink_unicast+0x8ef/0xa80 [ 992.592854][ T5539] netlink_sendmsg+0x7f0/0xb20 [ 992.592879][ T5539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.592900][ T5539] ? aa_sock_msg_perm+0x144/0x210 [ 992.592925][ T5539] ? apparmor_socket_sendmsg+0x18b/0x360 [ 992.592949][ T5539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.592964][ T5539] sock_sendmsg_nosec+0x14e/0x190 [ 992.592989][ T5539] ____sys_sendmsg+0x54e/0x850 [ 992.593012][ T5539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 992.593039][ T5539] ? import_iovec+0x73/0xa0 [ 992.593066][ T5539] ___sys_sendmsg+0x2a5/0x360 [ 992.593082][ T5539] ? __lock_acquire+0x747/0x2de0 [ 992.593108][ T5539] ? __pfx____sys_sendmsg+0x10/0x10 [ 992.593167][ T5539] ? __fget_files+0x3a2/0x420 [ 992.593189][ T5539] ? __fget_files+0x2a/0x420 [ 992.593221][ T5539] __x64_sys_sendmsg+0x1b1/0x290 [ 992.593246][ T5539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 992.593291][ T5539] do_syscall_64+0x166/0x520 [ 992.593313][ T5539] ? trace_irq_disable+0x3b/0x140 [ 992.593336][ T5539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.593355][ T5539] ? clear_bhb_loop+0x70/0xc0 [ 992.593378][ T5539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.593396][ T5539] RIP: 0033:0x7f830cd9fb19 [ 992.593413][ T5539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.593428][ T5539] RSP: 002b:00007f830dd45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.593448][ T5539] RAX: ffffffffffffffda RBX: 00007f830d025fa0 RCX: 00007f830cd9fb19 [ 992.593462][ T5539] RDX: 0000000020000004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 992.593474][ T5539] RBP: 00007f830dd45090 R08: 0000000000000000 R09: 0000000000000000 [ 992.593485][ T5539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.593496][ T5539] R13: 00007f830d026038 R14: 00007f830d025fa0 R15: 00007ffff8a37008 [ 992.593529][ T5539] [ 992.669503][ T5541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7979'. [ 992.669599][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7979'. [ 992.671188][ T5541] smc: removing ib device rxe0 [ 992.881651][ T5541] smbdirect: ib_dev[rxe0] removed [ 993.235728][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7983'. [ 993.464624][ T5562] ip_tables: iptables: counters copy to user failed while replacing table [ 993.535583][ T5562] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7985'. [ 993.546354][ T5563] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7985'. [ 993.580463][ T5569] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 993.582410][ T5569] netlink: 'syz.3.7988': attribute type 1 has an invalid length. [ 993.793734][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7991'. [ 993.793792][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7991'. [ 993.794384][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7991'. [ 993.855483][ T5569] 8021q: adding VLAN 0 to HW filter on device bond7 [ 996.557223][ T5638] veth1_to_team: entered allmulticast mode [ 996.650233][ T5641] xt_cgroup: invalid path, errno=-2 [ 997.315170][ T5657] __nla_validate_parse: 3 callbacks suppressed [ 997.315190][ T5657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8011'. [ 997.318742][ T5657] netlink: 'syz.0.8011': attribute type 16 has an invalid length. [ 997.318761][ T5657] netlink: 'syz.0.8011': attribute type 17 has an invalid length. [ 997.340024][ T5657] 0ªX¹¦Dö»: left allmulticast mode [ 997.350002][ T5657] sit0: left promiscuous mode [ 997.467583][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8013'. [ 997.467644][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8013'. [ 997.552181][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8013'. [ 997.552218][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8013'. [ 997.558703][ T5657] ip6tnl0: left promiscuous mode [ 997.649040][ T5657] bridge_slave_0: left promiscuous mode [ 997.677180][ T5657] veth1_to_team: left allmulticast mode [ 997.710451][ T5657] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 997.803884][ T1102] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 997.803930][ T1102] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 997.803961][ T1102] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 997.803989][ T1102] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 997.900751][ T5683] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 997.915489][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8017'. [ 998.097963][ T5691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8018'. [ 998.097986][ T5691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8018'. [ 998.098000][ T5691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8018'. [ 998.238700][ T5694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8020'. [ 999.499155][ T5757] batadv0: entered promiscuous mode [ 999.499179][ T5757] batadv0: entered allmulticast mode [ 999.700290][ T5770] ip_tables: iptables: counters copy to user failed while replacing table [ 999.872273][ T5786] netlink: 'syz.1.8041': attribute type 1 has an invalid length. [ 999.918128][ T5786] 8021q: adding VLAN 0 to HW filter on device bond9 [ 999.957323][ T5786] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 999.973401][ T5792] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1000.113306][ T5802] : renamed from bridge_slave_0 (while UP) [ 1000.418186][ T5809] FAULT_INJECTION: forcing a failure. [ 1000.418186][ T5809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.418216][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.4.8046 Not tainted syzkaller #0 PREEMPT(full) [ 1000.418237][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1000.418248][ T5809] Call Trace: [ 1000.418256][ T5809] [ 1000.418264][ T5809] dump_stack_lvl+0xe8/0x150 [ 1000.418299][ T5809] should_fail_ex+0x3eb/0x540 [ 1000.418328][ T5809] _copy_from_user+0x2d/0xb0 [ 1000.418353][ T5809] core_sys_select+0x509/0xb40 [ 1000.418374][ T5809] ? get_pid_task+0x20/0x1f0 [ 1000.418409][ T5809] ? __pfx_core_sys_select+0x10/0x10 [ 1000.418455][ T5809] ? __pfx_set_user_sigmask+0x10/0x10 [ 1000.418477][ T5809] ? kmem_cache_free+0x182/0x650 [ 1000.418510][ T5809] __se_sys_pselect6+0x267/0x320 [ 1000.418537][ T5809] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1000.418556][ T5809] ? __pfx_ksys_write+0x10/0x10 [ 1000.418583][ T5809] ? __x64_sys_pselect6+0x21/0xf0 [ 1000.418605][ T5809] do_syscall_64+0x166/0x520 [ 1000.418627][ T5809] ? trace_irq_disable+0x3b/0x140 [ 1000.418650][ T5809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.418668][ T5809] ? clear_bhb_loop+0x70/0xc0 [ 1000.418691][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.418708][ T5809] RIP: 0033:0x7fa8b8f9fb19 [ 1000.418726][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.418742][ T5809] RSP: 002b:00007fa8b9e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1000.418762][ T5809] RAX: ffffffffffffffda RBX: 00007fa8b9225fa0 RCX: 00007fa8b8f9fb19 [ 1000.418775][ T5809] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1000.418786][ T5809] RBP: 00007fa8b9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.418798][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.418808][ T5809] R13: 00007fa8b9226038 R14: 00007fa8b9225fa0 R15: 00007ffce4699018 [ 1000.418840][ T5809] [ 1001.168028][ T5836] FAULT_INJECTION: forcing a failure. [ 1001.168028][ T5836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.168058][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz.4.8052 Not tainted syzkaller #0 PREEMPT(full) [ 1001.168078][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1001.168089][ T5836] Call Trace: [ 1001.168097][ T5836] [ 1001.168106][ T5836] dump_stack_lvl+0xe8/0x150 [ 1001.168139][ T5836] should_fail_ex+0x3eb/0x540 [ 1001.168167][ T5836] _copy_from_user+0x2d/0xb0 [ 1001.168192][ T5836] ___sys_recvmsg+0x173/0x5a0 [ 1001.168220][ T5836] ? __pfx____sys_recvmsg+0x10/0x10 [ 1001.168246][ T5836] ? lock_acquire+0x115/0x350 [ 1001.168299][ T5836] do_recvmmsg+0x31a/0x800 [ 1001.168329][ T5836] ? __pfx_do_recvmmsg+0x10/0x10 [ 1001.168362][ T5836] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1001.168390][ T5836] ? fdget+0x1ac/0x250 [ 1001.168424][ T5836] __x64_sys_recvmmsg+0x198/0x250 [ 1001.168448][ T5836] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1001.168482][ T5836] do_syscall_64+0x166/0x520 [ 1001.168504][ T5836] ? trace_irq_disable+0x3b/0x140 [ 1001.168527][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.168546][ T5836] ? clear_bhb_loop+0x70/0xc0 [ 1001.168568][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.168586][ T5836] RIP: 0033:0x7fa8b8f9fb19 [ 1001.168603][ T5836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.168618][ T5836] RSP: 002b:00007fa8b9e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1001.168638][ T5836] RAX: ffffffffffffffda RBX: 00007fa8b9225fa0 RCX: 00007fa8b8f9fb19 [ 1001.168651][ T5836] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1001.168663][ T5836] RBP: 00007fa8b9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.168674][ T5836] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1001.168685][ T5836] R13: 00007fa8b9226038 R14: 00007fa8b9225fa0 R15: 00007ffce4699018 [ 1001.168717][ T5836] [ 1001.194269][ T5835] pim6reg: entered allmulticast mode [ 1001.278000][ T5833] pim6reg: left allmulticast mode [ 1001.629478][ T5848] netlink: 'syz.4.8057': attribute type 1 has an invalid length. [ 1001.885159][ T5867] netlink: 'syz.2.8060': attribute type 8 has an invalid length. [ 1001.885182][ T5867] netlink: 'syz.2.8060': attribute type 9 has an invalid length. [ 1001.885195][ T5867] netlink: 'syz.2.8060': attribute type 10 has an invalid length. [ 1001.885208][ T5867] netlink: 'syz.2.8060': attribute type 11 has an invalid length. [ 1001.996510][ T5869] nbd: must specify an index to disconnect [ 1002.044876][ T5871] xt_hashlimit: size too large, truncated to 1048576 [ 1002.147926][ T5879] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1002.177641][ T5879] xt_hashlimit: size too large, truncated to 1048576 [ 1002.556403][ T5894] IPv6: addrconf: prefix option has invalid lifetime [ 1005.040215][ T5912] ip_tables: iptables: counters copy to user failed while replacing table [ 1005.511545][ T5943] sctp: [Deprecated]: syz.0.8080 (pid 5943) Use of int in max_burst socket option deprecated. [ 1005.511545][ T5943] Use struct sctp_assoc_value instead [ 1005.787040][ T5960] IPVS: Unknown mcast interface: vcan0 [ 1006.590947][ T5990] __nla_validate_parse: 8 callbacks suppressed [ 1006.591134][ T5990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8094'. [ 1006.618130][ T5989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8094'. [ 1006.827214][ T5998] netpci0: tun_chr_ioctl cmd 1074025678 [ 1006.827236][ T5998] netpci0: group set to 0 [ 1007.078489][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8100'. [ 1007.275100][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8104'. [ 1007.355955][ T6034] Cannot find add_set index 34 as target [ 1007.360930][ T6034] netlink: 'syz.1.8104': attribute type 16 has an invalid length. [ 1007.360952][ T6034] netlink: 'syz.1.8104': attribute type 17 has an invalid length. [ 1007.640730][ T6034] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1007.655532][ T6032] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8108'. [ 1007.661715][ T6053] netlink: 'syz.2.8111': attribute type 1 has an invalid length. [ 1007.661777][ T6053] netlink: 'syz.2.8111': attribute type 1 has an invalid length. [ 1007.847656][ T6061] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1007.847760][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1007.905824][ T6059] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1008.197585][ T6079] FAULT_INJECTION: forcing a failure. [ 1008.197585][ T6079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.197614][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz.1.8119 Not tainted syzkaller #0 PREEMPT(full) [ 1008.197634][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1008.197644][ T6079] Call Trace: [ 1008.197652][ T6079] [ 1008.197659][ T6079] dump_stack_lvl+0xe8/0x150 [ 1008.197691][ T6079] should_fail_ex+0x3eb/0x540 [ 1008.197715][ T6079] core_sys_select+0x8be/0xb40 [ 1008.197733][ T6079] ? get_pid_task+0x20/0x1f0 [ 1008.197762][ T6079] ? __pfx_core_sys_select+0x10/0x10 [ 1008.197801][ T6079] ? __pfx_set_user_sigmask+0x10/0x10 [ 1008.197821][ T6079] ? __fget_files+0x3a2/0x420 [ 1008.197841][ T6079] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1008.197872][ T6079] __se_sys_pselect6+0x267/0x320 [ 1008.197896][ T6079] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1008.197911][ T6079] ? __pfx_ksys_write+0x10/0x10 [ 1008.197932][ T6079] ? __x64_sys_pselect6+0x21/0xf0 [ 1008.197948][ T6079] do_syscall_64+0x166/0x520 [ 1008.197964][ T6079] ? trace_irq_disable+0x3b/0x140 [ 1008.197981][ T6079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.197996][ T6079] ? clear_bhb_loop+0x70/0xc0 [ 1008.198013][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.198025][ T6079] RIP: 0033:0x7f830cd9fb19 [ 1008.198039][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.198050][ T6079] RSP: 002b:00007f830dd45028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1008.198064][ T6079] RAX: ffffffffffffffda RBX: 00007f830d025fa0 RCX: 00007f830cd9fb19 [ 1008.198074][ T6079] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1008.198082][ T6079] RBP: 00007f830dd45090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.198090][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.198097][ T6079] R13: 00007f830d026038 R14: 00007f830d025fa0 R15: 00007ffff8a37008 [ 1008.198119][ T6079] [ 1008.198177][ T6075] xt_l2tp: v2 sid > 0xffff: 33554432 [ 1008.198399][ T6080] xt_l2tp: v2 sid > 0xffff: 33554432 [ 1008.273488][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8118'. [ 1008.467714][ T6081] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1008.481193][ T6081] bond10 (unregistering): Released all slaves [ 1008.648474][ T6090] netlink: 'syz.3.8122': attribute type 10 has an invalid length. [ 1008.648591][ T6090] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 1008.712297][ T6092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8123'. [ 1009.139707][ T6107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8126'. [ 1009.369082][ T6123] FAULT_INJECTION: forcing a failure. [ 1009.369082][ T6123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.369111][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.0.8130 Not tainted syzkaller #0 PREEMPT(full) [ 1009.369131][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1009.369141][ T6123] Call Trace: [ 1009.369149][ T6123] [ 1009.369157][ T6123] dump_stack_lvl+0xe8/0x150 [ 1009.369191][ T6123] should_fail_ex+0x3eb/0x540 [ 1009.369220][ T6123] _copy_from_user+0x2d/0xb0 [ 1009.369245][ T6123] __sys_bpf+0x2e7/0xe00 [ 1009.369273][ T6123] ? __pfx___sys_bpf+0x10/0x10 [ 1009.369303][ T6123] ? __fget_files+0x2a/0x420 [ 1009.369345][ T6123] ? ksys_write+0x242/0x270 [ 1009.369373][ T6123] ? __pfx_ksys_write+0x10/0x10 [ 1009.369404][ T6123] __x64_sys_bpf+0xba/0xd0 [ 1009.369432][ T6123] do_syscall_64+0x166/0x520 [ 1009.369455][ T6123] ? trace_irq_disable+0x3b/0x140 [ 1009.369478][ T6123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.369496][ T6123] ? clear_bhb_loop+0x70/0xc0 [ 1009.369519][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.369536][ T6123] RIP: 0033:0x7f37d759fb19 [ 1009.369554][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.369568][ T6123] RSP: 002b:00007f37d851d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1009.369586][ T6123] RAX: ffffffffffffffda RBX: 00007f37d7825fa0 RCX: 00007f37d759fb19 [ 1009.369599][ T6123] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1009.369614][ T6123] RBP: 00007f37d851d090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.369625][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.369636][ T6123] R13: 00007f37d7826038 R14: 00007f37d7825fa0 R15: 00007ffd03893348 [ 1009.369669][ T6123] [ 1009.758919][ T6133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8136'. [ 1009.758949][ T6133] tipc: Enabling of bearer rejected, media not registered [ 1010.062050][ T6150] netlink: 'syz.0.8142': attribute type 1 has an invalid length. [ 1010.102708][ T6150] bond5: entered promiscuous mode [ 1010.108728][ T6150] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1010.126395][ T6150] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1010.197405][ T6154] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1010.211478][ T6154] lo: entered promiscuous mode [ 1010.218490][ T6154] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1010.238844][ T6154] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1010.258984][ T6154] bond10: (slave lo): Enslaving as an active interface with an up link [ 1010.649278][ T6194] netlink: 'syz.0.8156': attribute type 6 has an invalid length. [ 1010.649298][ T6194] netlink: 'syz.0.8156': attribute type 5 has an invalid length. [ 1011.338371][T12793] dummy0: entered promiscuous mode [ 1011.338559][ T6282] macvlan2: entered allmulticast mode [ 1011.338575][ T6282] dummy0: entered allmulticast mode [ 1011.466043][ T6300] FAULT_INJECTION: forcing a failure. [ 1011.466043][ T6300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1011.466070][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.0.8166 Not tainted syzkaller #0 PREEMPT(full) [ 1011.466090][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1011.466099][ T6300] Call Trace: [ 1011.466106][ T6300] [ 1011.466113][ T6300] dump_stack_lvl+0xe8/0x150 [ 1011.466147][ T6300] should_fail_ex+0x3eb/0x540 [ 1011.466175][ T6300] _copy_from_user+0x2d/0xb0 [ 1011.466198][ T6300] bpf_test_init+0xd8/0x150 [ 1011.466229][ T6300] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1011.466269][ T6300] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1011.466311][ T6300] ? __fget_files+0x2a/0x420 [ 1011.466339][ T6300] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1011.466366][ T6300] bpf_prog_test_run+0x2c5/0x340 [ 1011.466388][ T6300] __sys_bpf+0xb1e/0xe00 [ 1011.466416][ T6300] ? __pfx___sys_bpf+0x10/0x10 [ 1011.466446][ T6300] ? __fget_files+0x2a/0x420 [ 1011.466488][ T6300] ? ksys_write+0x242/0x270 [ 1011.466516][ T6300] ? __pfx_ksys_write+0x10/0x10 [ 1011.466544][ T6300] __x64_sys_bpf+0xba/0xd0 [ 1011.466571][ T6300] do_syscall_64+0x166/0x520 [ 1011.466592][ T6300] ? trace_irq_disable+0x3b/0x140 [ 1011.466618][ T6300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.466637][ T6300] ? clear_bhb_loop+0x70/0xc0 [ 1011.466659][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.466676][ T6300] RIP: 0033:0x7f37d759fb19 [ 1011.466693][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.466709][ T6300] RSP: 002b:00007f37d851d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1011.466728][ T6300] RAX: ffffffffffffffda RBX: 00007f37d7825fa0 RCX: 00007f37d759fb19 [ 1011.466741][ T6300] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1011.466753][ T6300] RBP: 00007f37d851d090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.466764][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.466775][ T6300] R13: 00007f37d7826038 R14: 00007f37d7825fa0 R15: 00007ffd03893348 [ 1011.466806][ T6300] [ 1011.832297][ T6330] netlink: 'syz.4.8169': attribute type 21 has an invalid length. [ 1011.832317][ T6330] __nla_validate_parse: 8 callbacks suppressed [ 1011.832326][ T6330] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8169'. [ 1011.832369][ T6330] netlink: 'syz.4.8169': attribute type 4 has an invalid length. [ 1011.832380][ T6330] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8169'. [ 1012.123640][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8171'. [ 1012.323296][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8172'. [ 1012.331234][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8172'. [ 1012.631479][ T6348] nbd: must specify a size in bytes for the device [ 1012.807145][ T6354] FAULT_INJECTION: forcing a failure. [ 1012.807145][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.807174][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.4.8178 Not tainted syzkaller #0 PREEMPT(full) [ 1012.807193][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1012.807204][ T6354] Call Trace: [ 1012.807211][ T6354] [ 1012.807219][ T6354] dump_stack_lvl+0xe8/0x150 [ 1012.807253][ T6354] should_fail_ex+0x3eb/0x540 [ 1012.807280][ T6354] should_failslab+0xa8/0x100 [ 1012.807300][ T6354] __kvmalloc_node_noprof+0x171/0x820 [ 1012.807324][ T6354] ? unwind_get_return_address+0x4d/0x90 [ 1012.807348][ T6354] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1012.807371][ T6354] ? arch_stack_walk+0xfb/0x150 [ 1012.807431][ T6354] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1012.807449][ T6354] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1012.807474][ T6354] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1012.807496][ T6354] ? __pfx_stack_trace_save+0x10/0x10 [ 1012.807522][ T6354] ? stack_depot_save_flags+0x33/0x810 [ 1012.807551][ T6354] ? kasan_save_track+0x4f/0x80 [ 1012.807573][ T6354] ? kasan_save_track+0x3e/0x80 [ 1012.807595][ T6354] ? __kasan_kmalloc+0x93/0xb0 [ 1012.807617][ T6354] ? __kmalloc_noprof+0x366/0x710 [ 1012.807642][ T6354] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1012.807658][ T6354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.807713][ T6354] ? lock_acquire+0x115/0x350 [ 1012.807747][ T6354] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1012.807767][ T6354] ? __might_fault+0xaf/0x130 [ 1012.807791][ T6354] ? _copy_from_user+0x94/0xb0 [ 1012.807815][ T6354] ? bpf_test_init+0x113/0x150 [ 1012.807839][ T6354] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1012.807860][ T6354] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1012.807904][ T6354] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1012.807935][ T6354] ? __fget_files+0x2a/0x420 [ 1012.807964][ T6354] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1012.807992][ T6354] bpf_prog_test_run+0x2c5/0x340 [ 1012.808017][ T6354] __sys_bpf+0xb1e/0xe00 [ 1012.808052][ T6354] ? __pfx___sys_bpf+0x10/0x10 [ 1012.808083][ T6354] ? __fget_files+0x2a/0x420 [ 1012.808117][ T6354] ? ksys_write+0x242/0x270 [ 1012.808143][ T6354] ? __pfx_ksys_write+0x10/0x10 [ 1012.808171][ T6354] __x64_sys_bpf+0xba/0xd0 [ 1012.808199][ T6354] do_syscall_64+0x166/0x520 [ 1012.808221][ T6354] ? trace_irq_disable+0x3b/0x140 [ 1012.808243][ T6354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.808259][ T6354] ? clear_bhb_loop+0x70/0xc0 [ 1012.808279][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.808294][ T6354] RIP: 0033:0x7fa8b8f9fb19 [ 1012.808309][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.808322][ T6354] RSP: 002b:00007fa8b9e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1012.808339][ T6354] RAX: ffffffffffffffda RBX: 00007fa8b9225fa0 RCX: 00007fa8b8f9fb19 [ 1012.808351][ T6354] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1012.808361][ T6354] RBP: 00007fa8b9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.808373][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.808383][ T6354] R13: 00007fa8b9226038 R14: 00007fa8b9225fa0 R15: 00007ffce4699018 [ 1012.808417][ T6354] [ 1013.114918][ T6358] tipc: Enabled bearer , priority 0 [ 1013.140132][ T6358] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 1013.140165][ T6358] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 1013.228097][ T6358] tipc: Resetting bearer [ 1013.275736][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8182'. [ 1013.648394][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1013.691112][ T6387] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1013.966021][ T6392] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8188'. [ 1013.966151][ T6392] xt_IDLETIMER: label is empty or not nul-terminated [ 1014.266438][T29758] tipc: Node number set to 2738464728 [ 1014.412662][ T6420] FAULT_INJECTION: forcing a failure. [ 1014.412662][ T6420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.412690][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.2.8194 Not tainted syzkaller #0 PREEMPT(full) [ 1014.412708][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1014.412718][ T6420] Call Trace: [ 1014.412725][ T6420] [ 1014.412736][ T6420] dump_stack_lvl+0xe8/0x150 [ 1014.412765][ T6420] should_fail_ex+0x3eb/0x540 [ 1014.412791][ T6420] _copy_from_user+0x2d/0xb0 [ 1014.412814][ T6420] ___sys_recvmsg+0x173/0x5a0 [ 1014.412840][ T6420] ? __pfx____sys_recvmsg+0x10/0x10 [ 1014.412897][ T6420] do_recvmmsg+0x31a/0x800 [ 1014.412924][ T6420] ? __pfx_do_recvmmsg+0x10/0x10 [ 1014.412963][ T6420] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1014.412989][ T6420] ? fdget+0x1ac/0x250 [ 1014.413016][ T6420] __x64_sys_recvmmsg+0x198/0x250 [ 1014.413038][ T6420] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1014.413067][ T6420] do_syscall_64+0x166/0x520 [ 1014.413086][ T6420] ? trace_irq_disable+0x3b/0x140 [ 1014.413108][ T6420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.413124][ T6420] ? clear_bhb_loop+0x70/0xc0 [ 1014.413143][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.413159][ T6420] RIP: 0033:0x7ff25b39fb19 [ 1014.413174][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.413187][ T6420] RSP: 002b:00007ff25c1ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1014.413205][ T6420] RAX: ffffffffffffffda RBX: 00007ff25b625fa0 RCX: 00007ff25b39fb19 [ 1014.413216][ T6420] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1014.413226][ T6420] RBP: 00007ff25c1ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.413236][ T6420] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1014.413246][ T6420] R13: 00007ff25b626038 R14: 00007ff25b625fa0 R15: 00007ffe674dbe78 [ 1014.413275][ T6420] [ 1014.660194][ T6423] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.829593][ T6427] gretap0: entered promiscuous mode [ 1015.416292][ T6441] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1015.421176][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8203'. [ 1015.421197][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8203'. [ 1015.432311][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.467611][ T6441] bond8: (slave bond0): Enslaving as an active interface with a down link [ 1018.715764][ T6463] netlink: 4664 bytes leftover after parsing attributes in process `syz.4.8210'. [ 1018.763788][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1018.766017][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1018.766475][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1018.977715][ T6478] validate_nla: 2 callbacks suppressed [ 1018.977735][ T6478] netlink: 'syz.2.8213': attribute type 10 has an invalid length. [ 1018.977747][ T6478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1019.461856][ T6506] FAULT_INJECTION: forcing a failure. [ 1019.461856][ T6506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.461887][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.0.8223 Not tainted syzkaller #0 PREEMPT(full) [ 1019.461908][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1019.461920][ T6506] Call Trace: [ 1019.461928][ T6506] [ 1019.461936][ T6506] dump_stack_lvl+0xe8/0x150 [ 1019.461971][ T6506] should_fail_ex+0x3eb/0x540 [ 1019.462000][ T6506] _copy_from_user+0x2d/0xb0 [ 1019.462024][ T6506] ___sys_recvmsg+0x173/0x5a0 [ 1019.462054][ T6506] ? __pfx____sys_recvmsg+0x10/0x10 [ 1019.462080][ T6506] ? lock_acquire+0x115/0x350 [ 1019.462147][ T6506] do_recvmmsg+0x31a/0x800 [ 1019.462179][ T6506] ? __pfx_do_recvmmsg+0x10/0x10 [ 1019.462213][ T6506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1019.462243][ T6506] ? fdget+0x1ac/0x250 [ 1019.462273][ T6506] __x64_sys_recvmmsg+0x198/0x250 [ 1019.462298][ T6506] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1019.462332][ T6506] do_syscall_64+0x166/0x520 [ 1019.462352][ T6506] ? trace_irq_disable+0x3b/0x140 [ 1019.462374][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.462391][ T6506] ? clear_bhb_loop+0x70/0xc0 [ 1019.462413][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.462429][ T6506] RIP: 0033:0x7f37d759fb19 [ 1019.462447][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.462462][ T6506] RSP: 002b:00007f37d851d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1019.462481][ T6506] RAX: ffffffffffffffda RBX: 00007f37d7825fa0 RCX: 00007f37d759fb19 [ 1019.462494][ T6506] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1019.462507][ T6506] RBP: 00007f37d851d090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.462518][ T6506] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1019.462529][ T6506] R13: 00007f37d7826038 R14: 00007f37d7825fa0 R15: 00007ffd03893348 [ 1019.462558][ T6506] [ 1019.519970][ T6507] bond0: (slave ip6tnl0): refused to change device type [ 1019.749333][ T6511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1019.985260][ T6519] ip6gre2: entered promiscuous mode [ 1019.985283][ T6519] ip6gre2: entered allmulticast mode [ 1020.083945][ T6520] sctp: [Deprecated]: syz.0.8228 (pid 6520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1020.083945][ T6520] Use struct sctp_sack_info instead [ 1020.098188][ T6526] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8229'. [ 1020.098286][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8229'. [ 1020.146028][ T6531] veth0_to_bond: entered allmulticast mode [ 1020.151730][ T6529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.271432][ T6538] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1020.334447][ T6544] hsr0: entered promiscuous mode [ 1020.741011][ T6571] netlink: 'syz.2.8245': attribute type 61 has an invalid length. [ 1020.741035][ T6571] netlink: 'syz.2.8245': attribute type 268 has an invalid length. [ 1020.801920][ T6574] netlink: 'syz.2.8245': attribute type 61 has an invalid length. [ 1020.801942][ T6574] netlink: 'syz.2.8245': attribute type 268 has an invalid length. [ 1021.641952][ T6607] syzkaller0: left promiscuous mode [ 1021.641975][ T6607] syzkaller0: left allmulticast mode [ 1021.787441][ T6613] netlink: 'syz.3.8255': attribute type 1 has an invalid length. [ 1022.189897][ T6622] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 1022.189920][ T6622] syzkaller1: ignored: set checksum enabled [ 1022.246990][ T6596] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1022.565388][ T6646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8264'. [ 1022.569367][ T6648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8264'. [ 1022.815459][ T6663] netlink: 'syz.0.8271': attribute type 1 has an invalid length. [ 1022.815485][ T6663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1022.817472][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1022.832620][ T6661] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 1022.832979][ T6661] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 1022.833137][ T6661] veth1_virt_wifi: entered allmulticast mode [ 1022.951106][ T6669] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8267'. [ 1023.214722][ T6693] tipc: Enabling of bearer rejected, already enabled [ 1023.754195][ T6712] __nla_validate_parse: 36 callbacks suppressed [ 1023.754215][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8281'. [ 1024.046743][ T6720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1024.141879][ T6722] FAULT_INJECTION: forcing a failure. [ 1024.141879][ T6722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.141906][ T6722] CPU: 1 UID: 0 PID: 6722 Comm: syz.4.8285 Not tainted syzkaller #0 PREEMPT(full) [ 1024.141926][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1024.141936][ T6722] Call Trace: [ 1024.141943][ T6722] [ 1024.141952][ T6722] dump_stack_lvl+0xe8/0x150 [ 1024.141986][ T6722] should_fail_ex+0x3eb/0x540 [ 1024.142014][ T6722] _copy_from_user+0x2d/0xb0 [ 1024.142038][ T6722] ___sys_recvmsg+0x173/0x5a0 [ 1024.142068][ T6722] ? __pfx____sys_recvmsg+0x10/0x10 [ 1024.142095][ T6722] ? lock_acquire+0x115/0x350 [ 1024.142148][ T6722] do_recvmmsg+0x31a/0x800 [ 1024.142178][ T6722] ? __pfx_do_recvmmsg+0x10/0x10 [ 1024.142218][ T6722] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1024.142247][ T6722] ? fdget+0x1ac/0x250 [ 1024.142278][ T6722] __x64_sys_recvmmsg+0x198/0x250 [ 1024.142307][ T6722] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1024.142342][ T6722] do_syscall_64+0x166/0x520 [ 1024.142364][ T6722] ? trace_irq_disable+0x3b/0x140 [ 1024.142389][ T6722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.142407][ T6722] ? clear_bhb_loop+0x70/0xc0 [ 1024.142431][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.142449][ T6722] RIP: 0033:0x7fa8b8f9fb19 [ 1024.142467][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.142483][ T6722] RSP: 002b:00007fa8b9e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1024.142504][ T6722] RAX: ffffffffffffffda RBX: 00007fa8b9225fa0 RCX: 00007fa8b8f9fb19 [ 1024.142517][ T6722] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1024.142529][ T6722] RBP: 00007fa8b9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.142541][ T6722] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1024.142551][ T6722] R13: 00007fa8b9226038 R14: 00007fa8b9225fa0 R15: 00007ffce4699018 [ 1024.142584][ T6722] [ 1024.285543][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8287'. [ 1024.285568][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8287'. [ 1024.397858][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8287'. [ 1024.415998][ T6728] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1024.542771][ T6728] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1025.085748][ T6774] FAULT_INJECTION: forcing a failure. [ 1025.085748][ T6774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.085783][ T6774] CPU: 1 UID: 0 PID: 6774 Comm: syz.2.8297 Not tainted syzkaller #0 PREEMPT(full) [ 1025.085803][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1025.085813][ T6774] Call Trace: [ 1025.085821][ T6774] [ 1025.085831][ T6774] dump_stack_lvl+0xe8/0x150 [ 1025.085867][ T6774] should_fail_ex+0x3eb/0x540 [ 1025.085895][ T6774] _copy_from_user+0x2d/0xb0 [ 1025.085920][ T6774] ___sys_recvmsg+0x173/0x5a0 [ 1025.085949][ T6774] ? __pfx____sys_recvmsg+0x10/0x10 [ 1025.085976][ T6774] ? lock_acquire+0x115/0x350 [ 1025.086031][ T6774] do_recvmmsg+0x31a/0x800 [ 1025.086062][ T6774] ? __pfx_do_recvmmsg+0x10/0x10 [ 1025.086096][ T6774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1025.086126][ T6774] ? fdget+0x1ac/0x250 [ 1025.086156][ T6774] __x64_sys_recvmmsg+0x198/0x250 [ 1025.086178][ T6774] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1025.086212][ T6774] do_syscall_64+0x166/0x520 [ 1025.086232][ T6774] ? trace_irq_disable+0x3b/0x140 [ 1025.086261][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.086279][ T6774] ? clear_bhb_loop+0x70/0xc0 [ 1025.086301][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.086318][ T6774] RIP: 0033:0x7ff25b39fb19 [ 1025.086336][ T6774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.086350][ T6774] RSP: 002b:00007ff25c1ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1025.086370][ T6774] RAX: ffffffffffffffda RBX: 00007ff25b625fa0 RCX: 00007ff25b39fb19 [ 1025.086383][ T6774] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1025.086395][ T6774] RBP: 00007ff25c1ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.086406][ T6774] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1025.086417][ T6774] R13: 00007ff25b626038 R14: 00007ff25b625fa0 R15: 00007ffe674dbe78 [ 1025.086450][ T6774] [ 1025.415087][ T6779] sctp: [Deprecated]: syz.0.8298 (pid 6779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1025.415087][ T6779] Use struct sctp_sack_info instead [ 1025.499661][ T6788] syzkaller1: entered promiscuous mode [ 1025.499679][ T6788] syzkaller1: entered allmulticast mode [ 1025.737446][ T6805] netlink: 'syz.0.8306': attribute type 1 has an invalid length. [ 1025.786528][ T6810] syzkaller1: entered promiscuous mode [ 1025.786552][ T6810] syzkaller1: entered allmulticast mode [ 1025.851426][ T6805] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1025.860265][ T6805] bond6: (slave bond7): making interface the new active one [ 1025.860771][ T6805] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1025.922811][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8306'. [ 1027.166400][ T6861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8320'. [ 1027.632030][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8329'. [ 1027.704421][ T6887] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1027.865462][ T6899] ipt_REJECT: ECHOREPLY no longer supported. [ 1028.392875][ T6923] netlink: 'syz.2.8339': attribute type 8 has an invalid length. [ 1028.422152][ T6925] syzkaller0: left promiscuous mode [ 1028.422175][ T6925] syzkaller0: left allmulticast mode [ 1028.577872][ T6938] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8342'. [ 1028.795793][ T6945] pimreg0: tun_chr_ioctl cmd 1074025677 [ 1028.795903][ T6945] pimreg0: linktype set to 778 [ 1028.887335][ T6947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1029.068786][ T6953] ip_tables: iptables: counters copy to user failed while replacing table [ 1029.094185][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8346'. [ 1029.110137][ T6956] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1029.129127][ T6958] netlink: 'syz.3.8346': attribute type 1 has an invalid length. [ 1029.145692][ T30] audit: type=1800 audit(1794056919.055:33): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8347" name="memory.events" dev="tmpfs" ino=2614 res=0 errno=-22 [ 1029.152312][ T6954] team0: Mode changed to "activebackup" [ 1030.328071][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8363'. [ 1030.330540][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8363'. [ 1030.476632][ T7011] vlan2: entered promiscuous mode [ 1030.476654][ T7011] bridge0: entered promiscuous mode [ 1030.891571][ T7033] FAULT_INJECTION: forcing a failure. [ 1030.891571][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.891627][ T7033] CPU: 0 UID: 0 PID: 7033 Comm: syz.1.8366 Not tainted syzkaller #0 PREEMPT(full) [ 1030.891647][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1030.891656][ T7033] Call Trace: [ 1030.891663][ T7033] [ 1030.891672][ T7033] dump_stack_lvl+0xe8/0x150 [ 1030.891705][ T7033] should_fail_ex+0x3eb/0x540 [ 1030.891733][ T7033] _copy_from_user+0x2d/0xb0 [ 1030.891756][ T7033] ___sys_recvmsg+0x173/0x5a0 [ 1030.891785][ T7033] ? __pfx____sys_recvmsg+0x10/0x10 [ 1030.891810][ T7033] ? lock_acquire+0x115/0x350 [ 1030.891871][ T7033] do_recvmmsg+0x31a/0x800 [ 1030.891903][ T7033] ? __pfx_do_recvmmsg+0x10/0x10 [ 1030.891934][ T7033] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1030.891962][ T7033] ? fdget+0x1ac/0x250 [ 1030.891992][ T7033] __x64_sys_recvmmsg+0x198/0x250 [ 1030.892015][ T7033] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1030.892046][ T7033] do_syscall_64+0x166/0x520 [ 1030.892068][ T7033] ? trace_irq_disable+0x3b/0x140 [ 1030.892091][ T7033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.892110][ T7033] ? clear_bhb_loop+0x70/0xc0 [ 1030.892133][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.892151][ T7033] RIP: 0033:0x7f830cd9fb19 [ 1030.892168][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.892184][ T7033] RSP: 002b:00007f830dd45028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1030.892204][ T7033] RAX: ffffffffffffffda RBX: 00007f830d025fa0 RCX: 00007f830cd9fb19 [ 1030.892218][ T7033] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1030.892230][ T7033] RBP: 00007f830dd45090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.892241][ T7033] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1030.892252][ T7033] R13: 00007f830d026038 R14: 00007f830d025fa0 R15: 00007ffff8a37008 [ 1030.892283][ T7033] [ 1030.921368][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8367'. [ 1030.971181][ T7036] bridge6: entered promiscuous mode [ 1031.733093][ T7054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8372'. [ 1032.400076][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8375'. [ 1032.400098][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8375'. [ 1032.452409][ T7073] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8375'. [ 1032.513921][ T7077] FAULT_INJECTION: forcing a failure. [ 1032.513921][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.513950][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.1.8379 Not tainted syzkaller #0 PREEMPT(full) [ 1032.513970][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1032.513980][ T7077] Call Trace: [ 1032.513987][ T7077] [ 1032.513996][ T7077] dump_stack_lvl+0xe8/0x150 [ 1032.514030][ T7077] should_fail_ex+0x3eb/0x540 [ 1032.514058][ T7077] _copy_from_user+0x2d/0xb0 [ 1032.514082][ T7077] ___sys_recvmsg+0x173/0x5a0 [ 1032.514110][ T7077] ? __pfx____sys_recvmsg+0x10/0x10 [ 1032.514137][ T7077] ? lock_acquire+0x115/0x350 [ 1032.514206][ T7077] do_recvmmsg+0x31a/0x800 [ 1032.514243][ T7077] ? __pfx_do_recvmmsg+0x10/0x10 [ 1032.514277][ T7077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1032.514306][ T7077] ? fdget+0x1ac/0x250 [ 1032.514336][ T7077] __x64_sys_recvmmsg+0x198/0x250 [ 1032.514361][ T7077] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1032.514395][ T7077] do_syscall_64+0x166/0x520 [ 1032.514416][ T7077] ? trace_irq_disable+0x3b/0x140 [ 1032.514440][ T7077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.514459][ T7077] ? clear_bhb_loop+0x70/0xc0 [ 1032.514480][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.514496][ T7077] RIP: 0033:0x7f830cd9fb19 [ 1032.514512][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.514526][ T7077] RSP: 002b:00007f830dd45028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1032.514543][ T7077] RAX: ffffffffffffffda RBX: 00007f830d025fa0 RCX: 00007f830cd9fb19 [ 1032.514555][ T7077] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1032.514566][ T7077] RBP: 00007f830dd45090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.514575][ T7077] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1032.514586][ T7077] R13: 00007f830d026038 R14: 00007f830d025fa0 R15: 00007ffff8a37008 [ 1032.514618][ T7077] [ 1032.665983][ T7079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8378'. [ 1032.793761][ T7084] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8381'. [ 1033.048915][ T7093] veth13: entered allmulticast mode [ 1033.967867][ T7137] FAULT_INJECTION: forcing a failure. [ 1033.967867][ T7137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.967896][ T7137] CPU: 0 UID: 0 PID: 7137 Comm: syz.3.8392 Not tainted syzkaller #0 PREEMPT(full) [ 1033.967916][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1033.967927][ T7137] Call Trace: [ 1033.967934][ T7137] [ 1033.967942][ T7137] dump_stack_lvl+0xe8/0x150 [ 1033.967976][ T7137] should_fail_ex+0x3eb/0x540 [ 1033.968006][ T7137] _copy_from_user+0x2d/0xb0 [ 1033.968031][ T7137] ___sys_recvmsg+0x173/0x5a0 [ 1033.968061][ T7137] ? __pfx____sys_recvmsg+0x10/0x10 [ 1033.968087][ T7137] ? lock_acquire+0x115/0x350 [ 1033.968141][ T7137] do_recvmmsg+0x31a/0x800 [ 1033.968172][ T7137] ? __pfx_do_recvmmsg+0x10/0x10 [ 1033.968205][ T7137] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1033.968241][ T7137] ? fdget+0x1ac/0x250 [ 1033.968273][ T7137] __x64_sys_recvmmsg+0x198/0x250 [ 1033.968297][ T7137] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1033.968332][ T7137] do_syscall_64+0x166/0x520 [ 1033.968354][ T7137] ? trace_irq_disable+0x3b/0x140 [ 1033.968377][ T7137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.968396][ T7137] ? clear_bhb_loop+0x70/0xc0 [ 1033.968418][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.968436][ T7137] RIP: 0033:0x7f84afb9fb19 [ 1033.968453][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.968467][ T7137] RSP: 002b:00007f84b0a2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1033.968488][ T7137] RAX: ffffffffffffffda RBX: 00007f84afe25fa0 RCX: 00007f84afb9fb19 [ 1033.968501][ T7137] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1033.968513][ T7137] RBP: 00007f84b0a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.968524][ T7137] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1033.968535][ T7137] R13: 00007f84afe26038 R14: 00007f84afe25fa0 R15: 00007ffda6440078 [ 1033.968566][ T7137] [ 1034.223879][ T7139] __nla_validate_parse: 2 callbacks suppressed [ 1034.223894][ T7139] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1034.296825][ T7139] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1034.615532][ T7139] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1034.655266][ T7139] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1035.035418][ T7179] netlink: 'syz.1.8403': attribute type 1 has an invalid length. [ 1035.035440][ T7179] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8403'. [ 1035.242431][ T7197] syz_tun: entered allmulticast mode [ 1035.315986][ T7201] Bluetooth: hci0: unsupported parameter 5135 [ 1035.316001][ T7201] Bluetooth: hci0: unsupported parameter 8192 [ 1035.316008][ T7201] Bluetooth: hci0: unsupported parameter 5135 [ 1035.316014][ T7201] Bluetooth: hci0: unsupported parameter 8192 [ 1035.459280][ T7206] sch_tbf: burst 12 is lower than device syzkaller0 mtu (65500) ! [ 1035.471949][ T7206] tipc: Enabled bearer , priority 0 [ 1035.486575][ T7206] tipc: Resetting bearer [ 1035.600149][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8414'. [ 1035.684398][ T7212] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1035.702099][ T7214] bond8: (slave lo): Releasing backup interface [ 1035.711150][ T7214] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1035.712071][ T7214] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1035.746259][ T7214] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1035.755883][ T7214] bond10: (slave lo): Enslaving as an active interface with an up link [ 1035.998951][ T7231] bridge0: port 1(dummy0) entered blocking state [ 1036.000755][ T7231] bridge0: port 1(dummy0) entered disabled state [ 1036.000918][ T7231] dummy0: entered allmulticast mode [ 1036.022788][ T7231] dummy0: entered promiscuous mode [ 1036.031076][ T7231] bridge0: port 1(dummy0) entered blocking state [ 1036.031169][ T7231] bridge0: port 1(dummy0) entered forwarding state [ 1036.190585][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8420'. [ 1036.234885][ T7237] ip6tnl0: entered promiscuous mode [ 1036.495956][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8427'. [ 1036.801335][T12804] tipc: Node number set to 1147817004 [ 1037.002089][ T7277] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1037.002713][ T7277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1038.719267][ T7291] tipc: New replicast peer: 255.255.255.255 [ 1038.720411][ T7291] tipc: Enabled bearer , priority 5 [ 1038.927802][ T7308] netlink: 'syz.0.8441': attribute type 2 has an invalid length. [ 1038.988738][ T7314] x_tables: duplicate underflow at hook 1 [ 1039.046152][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1039.046178][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1040.041847][ T7371] sctp: [Deprecated]: syz.0.8454 (pid 7371) Use of int in max_burst socket option. [ 1040.041847][ T7371] Use struct sctp_assoc_value instead [ 1043.279467][ T7395] SET target dimension over the limit! [ 1043.282095][ T7401] SET target dimension over the limit! [ 1043.399395][ T7402] syzkaller0: entered promiscuous mode [ 1043.400600][ T7402] syzkaller0: entered allmulticast mode [ 1044.017268][ T7444] netlink: 'syz.1.8475': attribute type 21 has an invalid length. [ 1044.088846][ T7444] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1044.096772][ T7444] bond11 (unregistering): Released all slaves [ 1044.330201][ T7456] netlink: 'syz.2.8478': attribute type 19 has an invalid length. [ 1044.430123][ T7465] xt_hashlimit: size too large, truncated to 1048576 [ 1044.479552][ T7458] bond9: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1044.750332][ T7458] bond9 (unregistering): Released all slaves [ 1045.296155][ T7483] __nla_validate_parse: 1 callbacks suppressed [ 1045.296174][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8488'. [ 1045.332087][ T7481] FAULT_INJECTION: forcing a failure. [ 1045.332087][ T7481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.335576][ T7481] CPU: 0 UID: 0 PID: 7481 Comm: syz.3.8486 Not tainted syzkaller #0 PREEMPT(full) [ 1045.335604][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1045.335615][ T7481] Call Trace: [ 1045.335624][ T7481] [ 1045.335633][ T7481] dump_stack_lvl+0xe8/0x150 [ 1045.335667][ T7481] should_fail_ex+0x3eb/0x540 [ 1045.335696][ T7481] _copy_from_user+0x2d/0xb0 [ 1045.335720][ T7481] ___sys_recvmsg+0x173/0x5a0 [ 1045.335750][ T7481] ? __pfx____sys_recvmsg+0x10/0x10 [ 1045.335776][ T7481] ? lock_acquire+0x115/0x350 [ 1045.335830][ T7481] do_recvmmsg+0x31a/0x800 [ 1045.335862][ T7481] ? __pfx_do_recvmmsg+0x10/0x10 [ 1045.335897][ T7481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1045.335927][ T7481] ? fdget+0x1ac/0x250 [ 1045.335956][ T7481] __x64_sys_recvmmsg+0x198/0x250 [ 1045.335982][ T7481] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1045.336017][ T7481] do_syscall_64+0x166/0x520 [ 1045.336039][ T7481] ? trace_irq_disable+0x3b/0x140 [ 1045.336063][ T7481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.336081][ T7481] ? clear_bhb_loop+0x70/0xc0 [ 1045.336103][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.336121][ T7481] RIP: 0033:0x7f84afb9fb19 [ 1045.336139][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.336155][ T7481] RSP: 002b:00007f84b0a2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1045.336176][ T7481] RAX: ffffffffffffffda RBX: 00007f84afe25fa0 RCX: 00007f84afb9fb19 [ 1045.336189][ T7481] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1045.336201][ T7481] RBP: 00007f84b0a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.336213][ T7481] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1045.336224][ T7481] R13: 00007f84afe26038 R14: 00007f84afe25fa0 R15: 00007ffda6440078 [ 1045.336257][ T7481] [ 1045.378379][ T7488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1045.410737][ T7475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.410771][ T7475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.461512][ T7479] syzkaller0: entered promiscuous mode [ 1045.461535][ T7479] syzkaller0: entered allmulticast mode [ 1045.464405][ T7484] mac80211_hwsim hwsim62 syzkaller0: left promiscuous mode [ 1045.464427][ T7484] mac80211_hwsim hwsim62 syzkaller0: left allmulticast mode [ 1045.501293][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8487'. [ 1045.525249][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8487'. [ 1045.658254][ T7493] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8491'. [ 1045.717858][ T7495] syzkaller0: MTU not usable for tipc bearer [ 1045.717903][ T7495] tipc: Enabling of bearer rejected, failed to enable media [ 1045.733135][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8485'. [ 1045.733432][ T7495] syzkaller0: mtu less than device minimum [ 1045.780925][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8490'. [ 1045.929796][ T7475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.929831][ T7475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.948481][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8490'. [ 1046.092147][ T7475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.092181][ T7475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.272616][ T7475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.272651][ T7475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.546629][T12906] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.546662][T12906] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.614029][T12906] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.614061][T12906] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.663166][T12906] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.663198][T12906] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.669429][ T7516] netlink: 'syz.4.8496': attribute type 10 has an invalid length. [ 1046.669453][ T7516] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8496'. [ 1046.673944][T19565] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.673973][T19565] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.724282][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8497'. [ 1046.830677][ T7522] bond10: (slave lo): Releasing backup interface [ 1046.833413][ T7522] bond10: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1046.879362][ T7522] bond0: (slave bond_slave_0): Releasing backup interface [ 1046.901621][ T7522] bond0: (slave bond_slave_1): Releasing backup interface [ 1046.927683][ T7522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1047.285826][ T7536] FAULT_INJECTION: forcing a failure. [ 1047.285826][ T7536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.285855][ T7536] CPU: 1 UID: 0 PID: 7536 Comm: syz.3.8501 Not tainted syzkaller #0 PREEMPT(full) [ 1047.285876][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1047.285887][ T7536] Call Trace: [ 1047.285894][ T7536] [ 1047.285903][ T7536] dump_stack_lvl+0xe8/0x150 [ 1047.285937][ T7536] should_fail_ex+0x3eb/0x540 [ 1047.285967][ T7536] _copy_from_user+0x2d/0xb0 [ 1047.285992][ T7536] ___sys_recvmsg+0x173/0x5a0 [ 1047.286021][ T7536] ? __pfx____sys_recvmsg+0x10/0x10 [ 1047.286050][ T7536] ? lock_acquire+0x115/0x350 [ 1047.286106][ T7536] do_recvmmsg+0x31a/0x800 [ 1047.286137][ T7536] ? __pfx_do_recvmmsg+0x10/0x10 [ 1047.286172][ T7536] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1047.286201][ T7536] ? fdget+0x1ac/0x250 [ 1047.286232][ T7536] __x64_sys_recvmmsg+0x198/0x250 [ 1047.286257][ T7536] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1047.286292][ T7536] do_syscall_64+0x166/0x520 [ 1047.286314][ T7536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.286333][ T7536] ? clear_bhb_loop+0x70/0xc0 [ 1047.286356][ T7536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.286373][ T7536] RIP: 0033:0x7f84afb9fb19 [ 1047.286390][ T7536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.286405][ T7536] RSP: 002b:00007f84b0a2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1047.286424][ T7536] RAX: ffffffffffffffda RBX: 00007f84afe25fa0 RCX: 00007f84afb9fb19 [ 1047.286438][ T7536] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1047.286450][ T7536] RBP: 00007f84b0a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.286462][ T7536] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1047.286474][ T7536] R13: 00007f84afe26038 R14: 00007f84afe25fa0 R15: 00007ffda6440078 [ 1047.286507][ T7536] [ 1048.119673][ T7567] netlink: 'syz.3.8510': attribute type 1 has an invalid length. [ 1048.240990][ T7567] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1048.338675][ T7576] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1048.431280][ T7586] nftables ruleset with unbound set [ 1048.495200][ T7581] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1048.655205][ T7586] tipc: Enabling of bearer rejected, already enabled [ 1049.252496][ T7628] xt_TCPMSS: Only works on TCP SYN packets [ 1049.371445][ T7632] bond11 (unregistering): Released all slaves [ 1049.483998][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1049.484765][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1050.162361][ T7665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.956578][ T7699] __nla_validate_parse: 14 callbacks suppressed [ 1050.958167][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8548'. [ 1051.141072][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8550'. [ 1051.215072][ T7708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8550'. [ 1051.376938][ T7714] tipc: Enabling of bearer rejected, failed to enable media [ 1051.406070][ T7714] ip6tnl3: entered promiscuous mode [ 1051.406091][ T7714] ip6tnl3: entered allmulticast mode [ 1052.118462][ T7763] netlink: 'syz.0.8571': attribute type 14 has an invalid length. [ 1054.371716][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8574'. [ 1054.547084][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1054.769982][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8584'. [ 1054.783400][ T7812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1055.399805][ T7848] openvswitch: netlink: Key 4 has unexpected len 36 expected 12 [ 1055.432478][ T7848] bridge7: entered promiscuous mode [ 1055.432543][ T7848] bridge7: entered allmulticast mode [ 1055.610528][ T7857] bond8: (slave bond0): Releasing active interface [ 1055.627190][ T7857] dummy0: left allmulticast mode [ 1055.627278][ T7857] dummy0: left promiscuous mode [ 1055.627531][ T7857] bridge0: port 1(dummy0) entered disabled state [ 1055.847710][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8596'. [ 1056.120414][ T7885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8601'. [ 1056.242012][ T7889] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8603'. [ 1056.501430][ T7898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1056.536336][ T7900] FAULT_INJECTION: forcing a failure. [ 1056.536336][ T7900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.536366][ T7900] CPU: 1 UID: 0 PID: 7900 Comm: syz.4.8606 Not tainted syzkaller #0 PREEMPT(full) [ 1056.536386][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1056.536396][ T7900] Call Trace: [ 1056.536404][ T7900] [ 1056.536412][ T7900] dump_stack_lvl+0xe8/0x150 [ 1056.536445][ T7900] should_fail_ex+0x3eb/0x540 [ 1056.536473][ T7900] _copy_from_user+0x2d/0xb0 [ 1056.536496][ T7900] ___sys_recvmsg+0x173/0x5a0 [ 1056.536523][ T7900] ? __pfx____sys_recvmsg+0x10/0x10 [ 1056.536550][ T7900] ? lock_acquire+0x115/0x350 [ 1056.536612][ T7900] do_recvmmsg+0x31a/0x800 [ 1056.536643][ T7900] ? __pfx_do_recvmmsg+0x10/0x10 [ 1056.536677][ T7900] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1056.536706][ T7900] ? fdget+0x1ac/0x250 [ 1056.536736][ T7900] __x64_sys_recvmmsg+0x198/0x250 [ 1056.536761][ T7900] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1056.536796][ T7900] do_syscall_64+0x166/0x520 [ 1056.536816][ T7900] ? trace_irq_disable+0x3b/0x140 [ 1056.536840][ T7900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.536858][ T7900] ? clear_bhb_loop+0x70/0xc0 [ 1056.536880][ T7900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.536898][ T7900] RIP: 0033:0x7fa8b8f9fb19 [ 1056.536915][ T7900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.536930][ T7900] RSP: 002b:00007fa8b9e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1056.536950][ T7900] RAX: ffffffffffffffda RBX: 00007fa8b9225fa0 RCX: 00007fa8b8f9fb19 [ 1056.536963][ T7900] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1056.536976][ T7900] RBP: 00007fa8b9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.536987][ T7900] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1056.537001][ T7900] R13: 00007fa8b9226038 R14: 00007fa8b9225fa0 R15: 00007ffce4699018 [ 1056.537033][ T7900] [ 1056.700393][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034553c00: rx timeout, send abort [ 1057.191843][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88808e261800: rx timeout, send abort [ 1057.205721][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034553c00: abort rx timeout. Force session deactivation [ 1057.345817][ T7935] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8616'. [ 1057.359178][ T7935] gretap0: entered promiscuous mode [ 1057.486453][ T7941] FAULT_INJECTION: forcing a failure. [ 1057.486453][ T7941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.486482][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.1.8618 Not tainted syzkaller #0 PREEMPT(full) [ 1057.486502][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1057.486511][ T7941] Call Trace: [ 1057.486518][ T7941] [ 1057.486525][ T7941] dump_stack_lvl+0xe8/0x150 [ 1057.486558][ T7941] should_fail_ex+0x3eb/0x540 [ 1057.486585][ T7941] _copy_from_user+0x2d/0xb0 [ 1057.486609][ T7941] ___sys_recvmsg+0x173/0x5a0 [ 1057.486639][ T7941] ? __pfx____sys_recvmsg+0x10/0x10 [ 1057.486696][ T7941] do_recvmmsg+0x31a/0x800 [ 1057.486726][ T7941] ? __pfx_do_recvmmsg+0x10/0x10 [ 1057.486758][ T7941] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1057.486784][ T7941] ? fdget+0x1ac/0x250 [ 1057.486811][ T7941] __x64_sys_recvmmsg+0x198/0x250 [ 1057.486834][ T7941] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1057.486865][ T7941] do_syscall_64+0x166/0x520 [ 1057.486884][ T7941] ? trace_irq_disable+0x3b/0x140 [ 1057.486906][ T7941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.486923][ T7941] ? clear_bhb_loop+0x70/0xc0 [ 1057.486945][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.486963][ T7941] RIP: 0033:0x7f830cd9fb19 [ 1057.486980][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.486995][ T7941] RSP: 002b:00007f830dd45028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1057.487014][ T7941] RAX: ffffffffffffffda RBX: 00007f830d025fa0 RCX: 00007f830cd9fb19 [ 1057.487027][ T7941] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1057.487039][ T7941] RBP: 00007f830dd45090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.487050][ T7941] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1057.487060][ T7941] R13: 00007f830d026038 R14: 00007f830d025fa0 R15: 00007ffff8a37008 [ 1057.487091][ T7941] [ 1057.696255][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88808e261800: abort rx timeout. Force session deactivation [ 1057.700799][ T7947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1058.265008][ T7969] ip_tables: iptables: counters copy to user failed while replacing table [ 1058.336833][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8631'. [ 1058.336857][ T7973] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8631'. [ 1058.402352][ T7978] netlink: 'syz.1.8632': attribute type 1 has an invalid length. [ 1058.440142][ T7978] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8632'. [ 1058.548389][ T7990] netlink: 'syz.2.8635': attribute type 1 has an invalid length. [ 1058.548408][ T7990] netlink: 'syz.2.8635': attribute type 2 has an invalid length. [ 1058.549525][ T7989] netlink: 'syz.2.8635': attribute type 1 has an invalid length. [ 1058.549539][ T7989] netlink: 'syz.2.8635': attribute type 2 has an invalid length. [ 1058.629802][ T7994] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8632'. [ 1058.680339][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8636'. [ 1058.925223][ T8008] netlink: 'syz.2.8639': attribute type 49 has an invalid length. [ 1060.017559][ T8020] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.8643'. [ 1060.065160][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8644'. [ 1060.149561][ T8022] only policy match revision 0 supported [ 1060.149574][ T8022] unable to load match [ 1060.580262][T16193] tipc: Subscription rejected, illegal request [ 1060.845645][ T8067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1061.231458][ T8089] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1061.495897][ T8105] __nla_validate_parse: 4 callbacks suppressed [ 1061.495918][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.496102][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.499013][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.499165][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.499304][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.499437][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.500778][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.500929][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.501068][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.502306][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1061.830998][ T8120] openvswitch: netlink: Key type 144 is out of range max 32 [ 1061.860290][ T8123] openvswitch: netlink: Key type 144 is out of range max 32 [ 1061.918421][ T8129] ip_tables: iptables: counters copy to user failed while replacing table [ 1061.934787][ T8129] xt_hashlimit: size too large, truncated to 1048576 [ 1062.442223][ T8152] netlink: 'syz.0.8677': attribute type 1 has an invalid length. [ 1062.532089][ T8152] bond10: (slave veth0_to_bond): making interface the new active one [ 1062.541400][ T8152] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1062.559203][ T8152] macvlan2: entered promiscuous mode [ 1062.559224][ T8152] macvlan2: entered allmulticast mode [ 1062.559753][ T8152] bond10: entered promiscuous mode [ 1062.559768][ T8152] veth0_to_bond: entered promiscuous mode [ 1062.560122][ T8152] bond10: entered allmulticast mode [ 1062.560136][ T8152] veth0_to_bond: entered allmulticast mode [ 1062.561696][ T8152] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1062.562838][ T8152] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1062.564119][ T8152] bond10: left allmulticast mode [ 1062.564135][ T8152] veth0_to_bond: left allmulticast mode [ 1062.564151][ T8152] bond10: left promiscuous mode [ 1062.564161][ T8152] veth0_to_bond: left promiscuous mode [ 1062.623486][ T8165] netlink: 'syz.0.8677': attribute type 1 has an invalid length. [ 1062.726659][ T8173] FAULT_INJECTION: forcing a failure. [ 1062.726659][ T8173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.726690][ T8173] CPU: 1 UID: 0 PID: 8173 Comm: syz.3.8682 Not tainted syzkaller #0 PREEMPT(full) [ 1062.726710][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1062.726721][ T8173] Call Trace: [ 1062.726729][ T8173] [ 1062.726738][ T8173] dump_stack_lvl+0xe8/0x150 [ 1062.726770][ T8173] should_fail_ex+0x3eb/0x540 [ 1062.726800][ T8173] _copy_from_user+0x2d/0xb0 [ 1062.726822][ T8173] ___sys_recvmsg+0x173/0x5a0 [ 1062.726848][ T8173] ? __pfx____sys_recvmsg+0x10/0x10 [ 1062.726874][ T8173] ? lock_acquire+0x115/0x350 [ 1062.726925][ T8173] do_recvmmsg+0x31a/0x800 [ 1062.726954][ T8173] ? __pfx_do_recvmmsg+0x10/0x10 [ 1062.726983][ T8173] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1062.727010][ T8173] ? fdget+0x1ac/0x250 [ 1062.727043][ T8173] __x64_sys_recvmmsg+0x198/0x250 [ 1062.727068][ T8173] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1062.727100][ T8173] do_syscall_64+0x166/0x520 [ 1062.727122][ T8173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.727137][ T8173] ? clear_bhb_loop+0x70/0xc0 [ 1062.727159][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.727176][ T8173] RIP: 0033:0x7f84afb9fb19 [ 1062.727193][ T8173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.727208][ T8173] RSP: 002b:00007f84b0a2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1062.727227][ T8173] RAX: ffffffffffffffda RBX: 00007f84afe25fa0 RCX: 00007f84afb9fb19 [ 1062.727240][ T8173] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1062.727253][ T8173] RBP: 00007f84b0a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.727264][ T8173] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1062.727275][ T8173] R13: 00007f84afe26038 R14: 00007f84afe25fa0 R15: 00007ffda6440078 [ 1062.727305][ T8173] [ 1062.844115][ T8166] macvlan2: entered promiscuous mode [ 1062.844139][ T8166] macvlan2: entered allmulticast mode [ 1062.848173][ T8166] bond10: entered promiscuous mode [ 1062.848196][ T8166] veth0_to_bond: entered promiscuous mode [ 1062.848644][ T8166] bond10: entered allmulticast mode [ 1062.848659][ T8166] veth0_to_bond: entered allmulticast mode [ 1062.850883][ T8166] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1062.857301][ T8166] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1062.857385][ T8166] bond10: left allmulticast mode [ 1062.857398][ T8166] veth0_to_bond: left allmulticast mode [ 1062.857415][ T8166] bond10: left promiscuous mode [ 1062.857426][ T8166] veth0_to_bond: left promiscuous mode [ 1063.442228][ T8176] netlink: 'syz.1.8681': attribute type 15 has an invalid length. [ 1063.653205][ T8205] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1063.931760][ T8220] netlink: 'syz.4.8693': attribute type 1 has an invalid length. [ 1064.001941][ T8226] xt_hashlimit: size too large, truncated to 1048576 [ 1064.015997][ T8220] bond13: entered promiscuous mode [ 1064.030204][ T8220] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1064.046993][ T8232] netlink: 'syz.4.8693': attribute type 1 has an invalid length. [ 1064.118428][ T8232] bond14: entered promiscuous mode [ 1064.121046][ T8232] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1064.254483][ T8248] netlink: 'syz.4.8701': attribute type 13 has an invalid length. [ 1064.638970][ T8263] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 1064.638995][ T8263] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 1064.767194][ T8276] netlink: 'syz.2.8706': attribute type 1 has an invalid length. [ 1064.826111][ T8279] vcan0: tx address claim with dest, not broadcast [ 1065.725248][ T8312] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1066.498845][ T8347] vlan0: entered promiscuous mode [ 1066.631476][ T8358] team0: Mode changed to "loadbalance" [ 1066.852247][ T8374] netlink: 'syz.3.8730': attribute type 1 has an invalid length. [ 1067.090064][ T8388] __nla_validate_parse: 34 callbacks suppressed [ 1067.090085][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8731'. [ 1067.215032][ T8392] smc: net device lo applied user defined pnetid SYZ0 [ 1067.335713][ T8395] SET target dimension over the limit! [ 1067.349391][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1067.377919][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8737'. [ 1067.380182][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1067.380432][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1067.380666][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1067.380876][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1067.381073][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1067.381276][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1067.381477][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1067.761333][ T8426] xt_hashlimit: size too large, truncated to 1048576 [ 1067.846658][ T8426] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 1067.891044][ T8430] veth7: entered allmulticast mode [ 1068.356264][ T8460] mac80211_hwsim hwsim62 syzkaller0: left promiscuous mode [ 1068.356311][ T8460] mac80211_hwsim hwsim62 syzkaller0: left allmulticast mode [ 1068.357034][ T8460] tipc: Enabling of bearer rejected, already enabled [ 1069.290534][ T8509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1069.405313][ T8518] netlink: 'syz.4.8763': attribute type 1 has an invalid length. [ 1069.494977][ T8518] bond15: entered promiscuous mode [ 1069.496754][ T8518] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1069.583762][ T8518] bond15: entered allmulticast mode [ 1069.681320][ T8535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1072.380989][ T8540] tipc: Resetting bearer [ 1072.404347][ T8569] __nla_validate_parse: 98 callbacks suppressed [ 1072.404368][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8775'. [ 1072.406767][ T8568] netlink: 'syz.0.8776': attribute type 4 has an invalid length. [ 1072.669840][ T8540] tipc: Resetting bearer [ 1072.839255][ T8580] netlink: 'syz.2.8780': attribute type 1 has an invalid length. [ 1072.894079][ T3343] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.894112][ T3343] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.894147][ T3343] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.894168][ T3343] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.894197][ T3343] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.894219][ T3343] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.894248][ T3343] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.894269][ T3343] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.980338][ T8583] macvtap1: entered allmulticast mode [ 1073.028337][ T8583] macvtap2: entered allmulticast mode [ 1073.041848][ T8587] FAULT_INJECTION: forcing a failure. [ 1073.041848][ T8587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.041876][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.3.8784 Not tainted syzkaller #0 PREEMPT(full) [ 1073.041896][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1073.041906][ T8587] Call Trace: [ 1073.041913][ T8587] [ 1073.041922][ T8587] dump_stack_lvl+0xe8/0x150 [ 1073.041955][ T8587] should_fail_ex+0x3eb/0x540 [ 1073.041983][ T8587] _copy_from_user+0x2d/0xb0 [ 1073.042006][ T8587] ___sys_recvmsg+0x173/0x5a0 [ 1073.042035][ T8587] ? __pfx____sys_recvmsg+0x10/0x10 [ 1073.042061][ T8587] ? lock_acquire+0x115/0x350 [ 1073.042114][ T8587] do_recvmmsg+0x31a/0x800 [ 1073.042143][ T8587] ? __pfx_do_recvmmsg+0x10/0x10 [ 1073.042173][ T8587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1073.042201][ T8587] ? fdget+0x1ac/0x250 [ 1073.042227][ T8587] __x64_sys_recvmmsg+0x198/0x250 [ 1073.042245][ T8587] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1073.042276][ T8587] do_syscall_64+0x166/0x520 [ 1073.042296][ T8587] ? trace_irq_disable+0x3b/0x140 [ 1073.042318][ T8587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.042333][ T8587] ? clear_bhb_loop+0x70/0xc0 [ 1073.042354][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.042371][ T8587] RIP: 0033:0x7f84afb9fb19 [ 1073.042388][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.042403][ T8587] RSP: 002b:00007f84b0a2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1073.042422][ T8587] RAX: ffffffffffffffda RBX: 00007f84afe25fa0 RCX: 00007f84afb9fb19 [ 1073.042435][ T8587] RDX: 000000000400023c RSI: 0000200000000fc0 RDI: 0000000000000005 [ 1073.042446][ T8587] RBP: 00007f84b0a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.042457][ T8587] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1073.042465][ T8587] R13: 00007f84afe26038 R14: 00007f84afe25fa0 R15: 00007ffda6440078 [ 1073.042490][ T8587] [ 1073.133750][ T8583] bond11: (slave bridge6): making interface the new active one [ 1073.209262][ T8583] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 1073.318200][ T8595] bond8: option mode: unable to set because the bond device is up [ 1073.342164][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8786'. [ 1073.342186][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8786'. [ 1073.425512][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8788'. [ 1073.708783][ T8607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1076.178258][ T8643] netlink: 'syz.4.8798': attribute type 1 has an invalid length. [ 1076.178282][ T8643] netlink: 'syz.4.8798': attribute type 8 has an invalid length. [ 1076.247621][ T8643] tc_dump_action: action bad kind [ 1076.402326][T12900] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1076.408537][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8805'. [ 1076.413167][T16193] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1076.413208][T16193] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1076.413238][T16193] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1076.507414][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8806'. [ 1076.745372][ T8681] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1076.877972][ T8691] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8810'. [ 1076.878178][ T8692] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8810'. [ 1080.216038][ T1163] ip6gretap0: left allmulticast mode [ 1080.216064][ T1163] ip6gretap0: left promiscuous mode [ 1080.216880][ T1163] bridge0: port 1(ip6gretap0) entered disabled state [ 1080.219351][ T1163] bridge_slave_1: left allmulticast mode [ 1080.219368][ T1163] bridge_slave_1: left promiscuous mode [ 1080.220454][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.602421][ T1163] bond9 (unregistering): (slave gretap2): Releasing active interface [ 1080.665561][ T1163] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1080.700436][ T1163] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1080.828952][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.834895][T16193] smbdirect: ib_dev[syz1] removed [ 1080.855723][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.861055][ T1163] bond0 (unregistering): Released all slaves [ 1080.885465][ T1163] bond1 (unregistering): Released all slaves [ 1080.901800][ T1163] bond2 (unregistering): Released all slaves [ 1080.917886][ T1163] bond3 (unregistering): Released all slaves [ 1080.933634][ T1163] bond4 (unregistering): Released all slaves [ 1080.941427][ T1163] bond5 (unregistering): Released all slaves [ 1080.959139][ T1163] bond6 (unregistering): Released all slaves [ 1080.976583][ T1163] bond7 (unregistering): Released all slaves [ 1080.991518][ T1163] bond8 (unregistering): Released all slaves [ 1081.007212][ T1163] bond9 (unregistering): Released all slaves [ 1081.022744][ T1163] team0: Port device bond10 removed [ 1081.029461][ T1163] bond10 (unregistering): Released all slaves [ 1081.046000][ T1163] bond11 (unregistering): Released all slaves [ 1081.058568][ T1163] bond12 (unregistering): Released all slaves [ 1081.070167][ T1163] bond13 (unregistering): (slave veth9): Releasing active interface [ 1081.071320][ T1163] bond13 (unregistering): Released all slaves [ 1081.091158][ T1163] bond14 (unregistering): Released all slaves [ 1081.106534][ T3343] tipc: Resetting bearer [ 1081.376843][ T1163] !: left promiscuous mode [ 1081.438428][ T1163] tipc: Disabling bearer [ 1081.449723][ T1163] tipc: Left network mode [ 1081.742005][ T1163] hsr_slave_0: left promiscuous mode [ 1081.742447][ T1163] hsr_slave_1: left promiscuous mode [ 1081.747926][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.765675][ T1163] veth1_macvtap: left promiscuous mode [ 1081.765698][ T1163] veth0_macvtap: left promiscuous mode [ 1081.765840][ T1163] veth1_vlan: left promiscuous mode [ 1081.765857][ T1163] veth0_vlan: left promiscuous mode [ 1082.057661][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 1082.071995][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 1082.475818][ T1163] IPVS: stop unused estimator thread 0... [ 1117.266043][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8815'. [ 1117.275370][ T8707] netlink: 'syz.4.8816': attribute type 5 has an invalid length. [ 1117.448768][ T8719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8818'. [ 1117.602773][ T8729] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 1117.602998][ T8729] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 1117.603101][ T8729] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 1117.603244][ T8729] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 1117.603341][ T8729] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 1117.603433][ T8729] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 1117.603526][ T8729] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 1117.603647][ T8729] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 1117.603767][ T8729] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 1118.313492][ T8747] bond12: entered promiscuous mode [ 1118.314059][ T8747] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1118.350004][ T8747] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1118.350338][ T8747] bond12: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1118.350357][ T8747] bond12: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 1118.390463][ T8747] bond12: (slave ip6gre3): making interface the new active one [ 1118.390489][ T8747] ip6gre3: entered promiscuous mode [ 1118.396355][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8828'. [ 1118.399597][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8826'. [ 1118.399618][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8826'. [ 1118.415867][ T8747] bond12: (slave ip6gre3): Enslaving as an active interface with an up link [ 1118.457989][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8825'. [ 1118.458024][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8825'. [ 1118.853583][ T8778] bond13 (unregistering): Released all slaves [ 1118.882617][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8832'. [ 1118.897653][ T8783] tipc: New replicast peer: 255.255.255.255 [ 1118.898747][ T8783] tipc: Enabled bearer , priority 5 [ 1119.269915][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8837'. [ 1119.403726][ T8801] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1119.420372][ T8801] xt_NFQUEUE: number of total queues is 0 [ 1119.835130][ T8814] tc_dump_action: action bad kind [ 1120.246000][ T8834] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1120.412155][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8847'. [ 1120.472212][ T8843] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 1120.521652][ T8840] xt_nfacct: accounting object `syz1' does not exist [ 1120.661380][ T8850] syzkaller1: entered promiscuous mode [ 1120.661400][ T8850] syzkaller1: entered allmulticast mode [ 1120.696844][ T8854] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1120.696993][ T8854] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1121.046761][ T8874] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1121.347716][ T8881] ip_tables: iptables: counters copy to user failed while replacing table [ 1121.422023][ T8881] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1121.455474][T31133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1121.462232][T31133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1121.471658][T31133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1121.490010][T31133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1121.490670][T31133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1121.551752][ T8890] bond12: (slave gretap1): making interface the new active one [ 1121.562075][ T8890] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 1122.121536][T31194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1122.130437][T31194] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1122.145225][T31194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1122.147089][T31194] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1122.147873][T31194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1122.490055][ T8935] __nla_validate_parse: 4 callbacks suppressed [ 1122.490073][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8872'. [ 1122.598788][ T8935] validate_nla: 59 callbacks suppressed [ 1122.598809][ T8935] netlink: 'syz.3.8872': attribute type 219 has an invalid length. [ 1122.609596][ T8940] netlink: 'syz.3.8872': attribute type 219 has an invalid length. [ 1122.646803][ T8929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8870'. [ 1122.681732][ T8929] netlink: 292 bytes leftover after parsing attributes in process `syz.2.8870'. [ 1123.038549][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1123.060268][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1123.061155][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1123.357572][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8880'. [ 1123.378683][ T8972] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1123.411885][ T8889] infiniband rxe0: set active [ 1123.411942][T29760] rxe_eth0 speed is unknown, defaulting to 1000 [ 1123.412005][ T8889] infiniband rxe0: added rxe_eth0 [ 1123.454790][ T8889] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1123.454826][ T8889] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1123.454860][ T8889] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1123.531380][ T8889] RDS/IB: rxe0: added [ 1123.533880][ T8889] smc: adding ib device rxe0 with port count 1 [ 1123.533904][ T8889] smc: ib device rxe0 port 1 has no pnetid [ 1123.534971][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1123.535379][T29760] rxe_eth0 speed is unknown, defaulting to 1000 [ 1123.791369][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1124.162400][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1124.204447][T31194] Bluetooth: hci3: command tx timeout [ 1124.227390][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8885'. [ 1124.227426][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8885'. [ 1124.315143][ T8992] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1124.611751][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1124.639618][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1124.657714][ T9022] tc_dump_action: action bad kind [ 1124.728362][ T9025] netlink: 'syz.2.8890': attribute type 2 has an invalid length. [ 1124.728384][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8890'. [ 1124.806872][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8892'. [ 1124.830278][ T9028] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1124.830464][ T9028] team0: Device macsec1 is already an upper device of the team interface [ 1125.012022][ T9033] syzkaller0: Caught tx_queue_len zero misconfig [ 1125.182276][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1125.269636][ T9047] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8898'. [ 1125.322196][ T9050] can: request_module (can-proto-0) failed. [ 1125.666309][ T9067] tc_dump_action: action bad kind [ 1125.679620][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1126.170170][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1126.284611][T31194] Bluetooth: hci3: command 0x041b tx timeout [ 1126.665627][ T9107] tc_dump_action: action bad kind [ 1126.669414][ T9107] netlink: 'syz.3.8917': attribute type 2 has an invalid length. [ 1126.778016][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1126.783407][ T9109] netlink: 'syz.1.8918': attribute type 4 has an invalid length. [ 1127.231751][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1127.365806][ T9138] netlink: 'syz.3.8926': attribute type 1 has an invalid length. [ 1127.365832][ T9138] NCSI netlink: No device for ifindex 0 [ 1127.530461][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1127.609977][ T9148] tc_dump_action: action bad kind [ 1127.613978][ T9150] __nla_validate_parse: 6 callbacks suppressed [ 1127.613995][ T9150] netlink: 22960 bytes leftover after parsing attributes in process `syz.0.8928'. [ 1127.708095][ T9153] netlink: 'syz.1.8930': attribute type 2 has an invalid length. [ 1127.708118][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8930'. [ 1127.735895][ T9150] ip_tables: iptables: counters copy to user failed while replacing table [ 1127.985228][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1128.165707][ T9163] netlink: 'syz.2.8933': attribute type 39 has an invalid length. [ 1128.336288][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1128.365005][T31194] Bluetooth: hci3: command 0x041b tx timeout [ 1128.980395][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.980600][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.980734][ T8889] bridge_slave_0: entered allmulticast mode [ 1128.982492][ T8889] bridge_slave_0: entered promiscuous mode [ 1128.986185][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.986360][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.986773][ T8889] bridge_slave_1: entered allmulticast mode [ 1128.988376][ T8889] bridge_slave_1: entered promiscuous mode [ 1129.022431][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.029180][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.061473][ T8889] team0: Port device team_slave_0 added [ 1129.065653][ T8889] team0: Port device team_slave_1 added [ 1129.103743][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.103761][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.103782][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.106209][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.106223][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.106245][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.159812][ T8889] hsr_slave_0: entered promiscuous mode [ 1129.160868][ T8889] hsr_slave_1: entered promiscuous mode [ 1129.161658][ T8889] debugfs: 'hsr0' already exists in 'hsr' [ 1129.161672][ T8889] Cannot create hsr debugfs directory [ 1130.443402][T31194] Bluetooth: hci3: command 0x041b tx timeout [ 1130.859407][ T8889] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1130.996520][ T9183] IPVS: set_ctl: invalid protocol: 74 0.0.0.0:20004 [ 1131.098152][ T8889] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.126175][ T9189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8937'. [ 1131.153564][ T9185] sctp: [Deprecated]: syz.2.8936 (pid 9185) Use of int in max_burst socket option. [ 1131.153564][ T9185] Use struct sctp_assoc_value instead [ 1131.306090][ T8889] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.511984][ T9195] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1131.570428][ T8889] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.131183][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8944'. [ 1132.135250][ T8889] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1132.164305][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1132.170852][ T8889] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1132.212173][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8944'. [ 1132.439353][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8946'. [ 1132.524064][T31194] Bluetooth: hci3: command 0x041b tx timeout [ 1132.528628][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1132.552173][ T9233] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1132.552845][ T9235] hsr0: entered allmulticast mode [ 1132.552865][ T9235] hsr_slave_0: entered allmulticast mode [ 1132.582809][ T9235] hsr_slave_1: entered allmulticast mode [ 1132.697705][ T9246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8948'. [ 1132.697967][ T9247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8948'. [ 1132.838268][ T9239] hsr_slave_0: left promiscuous mode [ 1132.841393][ T9239] hsr_slave_1: left promiscuous mode [ 1132.915885][ T9239] hsr0 (unregistering): left allmulticast mode [ 1132.943491][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8949'. [ 1132.949977][ T8889] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1132.970847][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1132.979189][ T8889] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1132.994616][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1133.197614][ T9272] netlink: 'syz.0.8953': attribute type 1 has an invalid length. [ 1133.255517][ T9272] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1133.261467][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.327920][ T8889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.357651][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.357761][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.389037][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.389142][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.432632][ T9287] syzkaller1: entered promiscuous mode [ 1133.432656][ T9287] syzkaller1: entered allmulticast mode [ 1133.480839][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8956'. [ 1133.737308][ T9302] netlink: 3604 bytes leftover after parsing attributes in process `syz.0.8957'. [ 1133.762678][ T9253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1133.777437][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8957'. [ 1133.777462][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8957'. [ 1134.016705][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8961'. [ 1134.220071][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.401687][ T9337] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 1134.636985][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1134.910786][ T8889] veth0_vlan: entered promiscuous mode [ 1134.935930][ T8889] veth1_vlan: entered promiscuous mode [ 1135.036451][ T8889] veth0_macvtap: entered promiscuous mode [ 1135.040886][ T8889] veth1_macvtap: entered promiscuous mode [ 1135.081028][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.094558][ T9380] nbd10: detected capacity change from 0 to 63 [ 1135.115495][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.131061][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8973'. [ 1135.156622][T12906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.156671][T12906] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.156705][T12906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.156737][T12906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.280836][T31194] block nbd10: Receive control failed (result -104) [ 1135.421847][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.421870][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.539744][T12899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.539766][T12899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.532090][T12900] [ 1136.534478][T12900] ====================================================== [ 1136.541502][T12900] WARNING: possible circular locking dependency detected [ 1136.548549][T12900] syzkaller #0 Not tainted [ 1136.552969][T12900] ------------------------------------------------------ [ 1136.559994][T12900] kworker/u8:14/12900 is trying to acquire lock: [ 1136.566331][T12900] ffffffff90294f80 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1136.576199][T12900] [ 1136.576199][T12900] but task is already holding lock: [ 1136.583571][T12900] ffff888034db0260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1136.591939][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 1136.601863][T12900] [ 1136.601863][T12900] which lock already depends on the new lock. [ 1136.601863][T12900] [ 1136.612297][T12900] [ 1136.612297][T12900] the existing dependency chain (in reverse order) is: [ 1136.621318][T12900] [ 1136.621318][T12900] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1136.629242][T12900] lock_sock_nested+0x41/0x100 [ 1136.634557][T12900] __inet6_bind+0x301/0xf30 [ 1136.639705][T12900] mptcp_bind+0x110/0x1d0 [ 1136.644659][T12900] __sys_bind+0x2e3/0x410 [ 1136.649610][T12900] __x64_sys_bind+0x7a/0x90 [ 1136.654656][T12900] do_syscall_64+0x166/0x520 [ 1136.659784][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.666219][T12900] [ 1136.666219][T12900] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1136.673959][T12900] lock_sock_nested+0x41/0x100 [ 1136.679272][T12900] inet_shutdown+0x6a/0x390 [ 1136.684296][T12900] nbd_mark_nsock_dead+0x2cb/0x550 [ 1136.690041][T12900] sock_shutdown+0x15e/0x260 [ 1136.695260][T12900] nbd_clear_sock+0x24/0x170 [ 1136.700362][T12900] nbd_config_put+0x477/0x7e0 [ 1136.705574][T12900] nbd_genl_connect+0x19b8/0x1cd0 [ 1136.711111][T12900] genl_family_rcv_msg_doit+0x233/0x340 [ 1136.717171][T12900] genl_rcv_msg+0x614/0x7a0 [ 1136.722205][T12900] netlink_rcv_skb+0x226/0x4a0 [ 1136.727511][T12900] genl_rcv+0x28/0x40 [ 1136.732018][T12900] netlink_unicast+0x8ef/0xa80 [ 1136.737295][T12900] netlink_sendmsg+0x7f0/0xb20 [ 1136.742584][T12900] sock_sendmsg_nosec+0x14e/0x190 [ 1136.748128][T12900] ____sys_sendmsg+0x54e/0x850 [ 1136.753406][T12900] ___sys_sendmsg+0x2a5/0x360 [ 1136.758608][T12900] __x64_sys_sendmsg+0x1b1/0x290 [ 1136.764056][T12900] do_syscall_64+0x166/0x520 [ 1136.769190][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.775596][T12900] [ 1136.775596][T12900] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1136.783227][T12900] __mutex_lock+0x197/0x15a0 [ 1136.788340][T12900] nbd_queue_rq+0x373/0xff0 [ 1136.793353][T12900] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1136.799518][T12900] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1136.806430][T12900] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1136.812933][T12900] blk_mq_run_work_fn+0x167/0x2f0 [ 1136.818489][T12900] process_scheduled_works+0xc3d/0x1630 [ 1136.824554][T12900] worker_thread+0xa47/0xfb0 [ 1136.829678][T12900] kthread+0x38b/0x480 [ 1136.834255][T12900] ret_from_fork+0x514/0xb70 [ 1136.839394][T12900] ret_from_fork_asm+0x1a/0x30 [ 1136.844696][T12900] [ 1136.844696][T12900] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1136.851887][T12900] __mutex_lock+0x197/0x15a0 [ 1136.856994][T12900] nbd_queue_rq+0xc1/0xff0 [ 1136.861926][T12900] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1136.867987][T12900] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1136.874831][T12900] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1136.881323][T12900] blk_mq_run_work_fn+0x167/0x2f0 [ 1136.886863][T12900] process_scheduled_works+0xc3d/0x1630 [ 1136.892931][T12900] worker_thread+0xa47/0xfb0 [ 1136.898056][T12900] kthread+0x38b/0x480 [ 1136.902638][T12900] ret_from_fork+0x514/0xb70 [ 1136.907760][T12900] ret_from_fork_asm+0x1a/0x30 [ 1136.913046][T12900] [ 1136.913046][T12900] -> #3 (set->srcu){.+.+}-{0:0}: [ 1136.920173][T12900] __synchronize_srcu+0xca/0x2f0 [ 1136.925644][T12900] elevator_switch+0x1e8/0x7b0 [ 1136.930973][T12900] elevator_change+0x2fa/0x480 [ 1136.936261][T12900] elevator_set_default+0x375/0x440 [ 1136.941982][T12900] blk_register_queue+0x404/0x4f0 [ 1136.947607][T12900] __add_disk+0x6b8/0xdb0 [ 1136.952485][T12900] add_disk_fwnode+0x100/0x3a0 [ 1136.957768][T12900] nbd_dev_add+0x733/0xb60 [ 1136.962704][T12900] nbd_init+0x168/0x1f0 [ 1136.967492][T12900] do_one_initcall+0x250/0x870 [ 1136.972783][T12900] do_initcall_level+0x10a/0x1a0 [ 1136.978374][T12900] do_initcalls+0x59/0xa0 [ 1136.983224][T12900] kernel_init_freeable+0x29d/0x3e0 [ 1136.988942][T12900] kernel_init+0x22/0x1d0 [ 1136.993785][T12900] ret_from_fork+0x514/0xb70 [ 1136.998886][T12900] ret_from_fork_asm+0x1a/0x30 [ 1137.004164][T12900] [ 1137.004164][T12900] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1137.011986][T12900] __mutex_lock+0x197/0x15a0 [ 1137.017099][T12900] elevator_change+0x1af/0x480 [ 1137.022381][T12900] elevator_set_none+0xb5/0x140 [ 1137.027745][T12900] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 1137.034062][T12900] nbd_start_device+0x189/0xb30 [ 1137.039424][T12900] nbd_genl_connect+0x167d/0x1cd0 [ 1137.044979][T12900] genl_family_rcv_msg_doit+0x233/0x340 [ 1137.051046][T12900] genl_rcv_msg+0x614/0x7a0 [ 1137.056073][T12900] netlink_rcv_skb+0x226/0x4a0 [ 1137.061362][T12900] genl_rcv+0x28/0x40 [ 1137.065946][T12900] netlink_unicast+0x8ef/0xa80 [ 1137.071225][T12900] netlink_sendmsg+0x7f0/0xb20 [ 1137.076497][T12900] sock_sendmsg_nosec+0x14e/0x190 [ 1137.082037][T12900] ____sys_sendmsg+0x54e/0x850 [ 1137.087309][T12900] ___sys_sendmsg+0x2a5/0x360 [ 1137.092500][T12900] __x64_sys_sendmsg+0x1b1/0x290 [ 1137.097946][T12900] do_syscall_64+0x166/0x520 [ 1137.103047][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.109454][T12900] [ 1137.109454][T12900] -> #1 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 1137.118057][T12900] blk_alloc_queue+0x544/0x690 [ 1137.123351][T12900] __blk_mq_alloc_disk+0x194/0x390 [ 1137.128973][T12900] nbd_dev_add+0x494/0xb60 [ 1137.133896][T12900] nbd_init+0x168/0x1f0 [ 1137.138564][T12900] do_one_initcall+0x250/0x870 [ 1137.143834][T12900] do_initcall_level+0x10a/0x1a0 [ 1137.149282][T12900] do_initcalls+0x59/0xa0 [ 1137.154127][T12900] kernel_init_freeable+0x29d/0x3e0 [ 1137.159833][T12900] kernel_init+0x22/0x1d0 [ 1137.164672][T12900] ret_from_fork+0x514/0xb70 [ 1137.169781][T12900] ret_from_fork_asm+0x1a/0x30 [ 1137.175050][T12900] [ 1137.175050][T12900] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1137.182245][T12900] __lock_acquire+0x164c/0x2de0 [ 1137.187607][T12900] lock_acquire+0x115/0x350 [ 1137.192619][T12900] fs_reclaim_acquire+0x71/0x100 [ 1137.198072][T12900] kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1137.204419][T12900] __alloc_skb+0x1db/0x7a0 [ 1137.209350][T12900] tcp_stream_alloc_skb+0x3f/0x5d0 [ 1137.215071][T12900] tcp_connect+0xf58/0x4b70 [ 1137.220150][T12900] tcp_v6_connect+0x15dc/0x1e60 [ 1137.225584][T12900] __inet_stream_connect+0x28c/0xf50 [ 1137.231381][T12900] inet_stream_connect+0x66/0xa0 [ 1137.236836][T12900] kernel_connect+0x141/0x1c0 [ 1137.242026][T12900] rds_tcp_conn_path_connect+0x6e9/0x920 [ 1137.248269][T12900] rds_connect_worker+0x1d8/0x290 [ 1137.253871][T12900] process_scheduled_works+0xc3d/0x1630 [ 1137.259936][T12900] worker_thread+0xa47/0xfb0 [ 1137.265038][T12900] kthread+0x38b/0x480 [ 1137.269617][T12900] ret_from_fork+0x514/0xb70 [ 1137.274727][T12900] ret_from_fork_asm+0x1a/0x30 [ 1137.280005][T12900] [ 1137.280005][T12900] other info that might help us debug this: [ 1137.280005][T12900] [ 1137.290215][T12900] Chain exists of: [ 1137.290215][T12900] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1137.290215][T12900] [ 1137.303155][T12900] Possible unsafe locking scenario: [ 1137.303155][T12900] [ 1137.310608][T12900] CPU0 CPU1 [ 1137.315988][T12900] ---- ---- [ 1137.321343][T12900] lock(k-sk_lock-AF_INET6); [ 1137.326023][T12900] lock(sk_lock-AF_INET6); [ 1137.333046][T12900] lock(k-sk_lock-AF_INET6); [ 1137.340247][T12900] lock(fs_reclaim); [ 1137.344225][T12900] [ 1137.344225][T12900] *** DEADLOCK *** [ 1137.344225][T12900] [ 1137.352364][T12900] locks held by kworker/u8:14/12900: 4, last CPU#1: [ 1137.358939][T12900] #0: ffff888077e44148 ((wq_completion)krds_cp_wq#42/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1137.370996][T12900] #1: ffffc9000ffa7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1137.383813][T12900] #2: ffff88802e1ac680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1137.394911][T12900] #3: ffff888034db0260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1137.405053][T12900] [ 1137.405053][T12900] stack backtrace: [ 1137.410937][T12900] CPU: 1 UID: 0 PID: 12900 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 1137.420568][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1137.430623][T12900] Workqueue: krds_cp_wq#42/0 rds_connect_worker [ 1137.436872][T12900] Call Trace: [ 1137.440152][T12900] [ 1137.443073][T12900] dump_stack_lvl+0xe8/0x150 [ 1137.447674][T12900] print_circular_bug+0x2e2/0x300 [ 1137.452710][T12900] check_noncircular+0x12f/0x150 [ 1137.457651][T12900] __lock_acquire+0x164c/0x2de0 [ 1137.462500][T12900] ? __lock_acquire+0x747/0x2de0 [ 1137.467444][T12900] lock_acquire+0x115/0x350 [ 1137.471942][T12900] ? kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1137.477939][T12900] ? lock_acquire+0x115/0x350 [ 1137.482610][T12900] ? __alloc_skb+0x1db/0x7a0 [ 1137.487195][T12900] fs_reclaim_acquire+0x71/0x100 [ 1137.492136][T12900] ? kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1137.498110][T12900] kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1137.503915][T12900] ? lock_acquire+0x115/0x350 [ 1137.508616][T12900] ? __alloc_skb+0x1db/0x7a0 [ 1137.513200][T12900] __alloc_skb+0x1db/0x7a0 [ 1137.517626][T12900] tcp_stream_alloc_skb+0x3f/0x5d0 [ 1137.522750][T12900] ? __asan_memset+0x22/0x50 [ 1137.527346][T12900] tcp_connect+0xf58/0x4b70 [ 1137.531853][T12900] ? inet6_ehashfn+0x2f/0x3b0 [ 1137.536620][T12900] ? inet6_hash_connect+0xeb/0x170 [ 1137.541780][T12900] tcp_v6_connect+0x15dc/0x1e60 [ 1137.546632][T12900] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1137.551831][T12900] __inet_stream_connect+0x28c/0xf50 [ 1137.557118][T12900] ? do_raw_spin_lock+0x12b/0x2f0 [ 1137.562136][T12900] ? __pfx___inet_stream_connect+0x10/0x10 [ 1137.567946][T12900] ? inet_stream_connect+0x51/0xa0 [ 1137.573056][T12900] ? __local_bh_enable_ip+0xd6/0x140 [ 1137.578357][T12900] inet_stream_connect+0x66/0xa0 [ 1137.583304][T12900] kernel_connect+0x141/0x1c0 [ 1137.587997][T12900] ? __pfx_kernel_connect+0x10/0x10 [ 1137.593200][T12900] ? preempt_schedule_thunk+0x16/0x40 [ 1137.598576][T12900] rds_tcp_conn_path_connect+0x6e9/0x920 [ 1137.604215][T12900] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1137.610365][T12900] ? lock_acquire+0x115/0x350 [ 1137.615043][T12900] rds_connect_worker+0x1d8/0x290 [ 1137.620072][T12900] ? process_scheduled_works+0x97a/0x1630 [ 1137.625795][T12900] process_scheduled_works+0xc3d/0x1630 [ 1137.631358][T12900] ? __pfx_process_scheduled_works+0x10/0x10 [ 1137.637343][T12900] ? assign_work+0x3cf/0x5d0 [ 1137.641934][T12900] worker_thread+0xa47/0xfb0 [ 1137.646536][T12900] kthread+0x38b/0x480 [ 1137.650604][T12900] ? __pfx_worker_thread+0x10/0x10 [ 1137.655709][T12900] ? __pfx_kthread+0x10/0x10 [ 1137.660292][T12900] ret_from_fork+0x514/0xb70 [ 1137.664894][T12900] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.669997][T12900] ? __switch_to+0xc78/0x1410 [ 1137.674676][T12900] ? __pfx_kthread+0x10/0x10 [ 1137.679261][T12900] ret_from_fork_asm+0x1a/0x30 [ 1137.684017][T12900] [ 1141.643462][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!