last executing test programs: 23.232689494s ago: executing program 0 (id=1849): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) listen(r1, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4a6467f010104266) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x80) 22.814795625s ago: executing program 0 (id=1855): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={r2, 0x7c, 0x4, 0x101, 0x400, 0x4, 0x1000, 0x4, {0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2d}}, 0xdf, 0xd7, 0x0, 0x1, 0x1}}, &(0x7f00000000c0)=0xb0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xe285f15, @remote, 0x8a6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 21.848556568s ago: executing program 0 (id=1863): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7fffffff, 0x0, 0x1}, 0x48) 21.638292972s ago: executing program 0 (id=1868): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @loopback}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000300)="dcc8", 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x800, 0x5d) sendfile(r1, r2, 0x0, 0xffffffff000) connect$llc(r1, &(0x7f0000000600)={0x1a, 0x204, 0x7, 0x5, 0xb, 0x8, @local}, 0x10) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 21.356324061s ago: executing program 0 (id=1872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000030101010000f09e8b6d1fd9ddb82b84434fff000000000100000808001540000000031c74730baf5c20a34e3d1a3ab9a32dff500ed104daf367f7ce197738ce56f1b119a31d23971db4704923681e9bbc1b8851524aa4f82ece01811a3579faacfbb8cca5550528737a695ae45b828653c47c61b29e96b5d12d1d8a82795f8933629d787024e95cbbef24246530c3896ce29ffa0a6fda3d314bc26b40ab242a221eb8b951532564df7656a224e42cbe1b56bff753114d24c3d6cd93d4b60c2c4e38042bb588e63b87d9a10692c6526b1b8fff32905ceea1a9c6ad5e8bee1cdf43dbb6e8a62a3e0bffb9a6477b77f8ec582f9ff3025042cba11ec8eb0d224f320bc5d567257d44a7211e89312711dae1a864eca804d3f65725"], 0x1c}, 0x1, 0x0, 0x0, 0x4048004}, 0x4040000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r4 = socket(0x15, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x0, 0xff}, 0x1}, 0x18) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket(0x1d, 0x2, 0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) recvmmsg(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000440)=""/100, 0x64}], 0x2}, 0x4ce0}], 0x1, 0x20, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004940)=@newchain={0x55bc, 0x64, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x8, 0x7}, {0xb, 0x7}, {0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffc0}, @filter_kind_options=@f_basic={{0xa}, {0x22e0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xffe0}}, @TCA_BASIC_ACT={0x5ac, 0x3, [@m_bpf={0xf4, 0x1c, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x8, 0x2, 0xa, 0xbf}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x6, 0x8, 0xbe, 0x6}, {0x1, 0x6, 0xff, 0xc}, {0x8, 0xc, 0x5, 0x7}, {0x8, 0x8, 0x1, 0x5}, {0x101, 0xe, 0x8, 0x1}, {0x101, 0x5, 0x4, 0x7}, {0x5, 0x5, 0x2, 0x5}]}]}, {0x6a, 0x6, "14977038b297127907cc9e7255531b8cf4981a54effaa151d3fb92fd5682289788c6b1a163ed0cfb70d48a007fb89d53d48cdb9a26d34e107eabe2f797bf9b9ba17701907f82b1781df401a843592329fd482ca5cb85918893a859b7e29a80a971cdbde80247"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x100, 0x14, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x13d}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x65}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x81, 0x6, "3f5fdfe51390e530704b88849c6915635f28491c0a63e7000154d4d32e46e0b1b302d27fc8a57a8633c941b08a4bef23a55d14fd7c3a164b9ede57534a19b45c20385afce2d8f4373ee25a555352802c15ef65b68ef39c68dac8532f1a0a2c20bdf44465236c28f2954c7787a412233195427013875de0044cf61281a2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x158, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x2b, 0x6, 0x8, 0x1}, 0x2, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xd88, 0x2, 0x6, 0x1}, 0x0, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd83, 0x2, 0x8, 0x4, 0x7}, 0x3, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1000, 0x5, 0xd34, 0x7fffffff}, 0x1}}]}, {0xac, 0x6, "4a134ab3ca472bef536e3f9cee09f9b1688c8cfe0eebb26fc370729e7c2244376b1b3e9d148941809db89b5edf6477672a8a778edbbc774f45876bf017a35589647a17e459a50a91914d47b255acb4492bf49f74e9f8b323cd938188b44e4a962c08bff554a569f5e60f74517ab7bc4e62e43344b7cc1044671a3c4e08c7bdd9d5e003bbdfb59fc08b97b1a01f4e9f65a6052d695ba3f922730f2b7184658dac00608bc15d65d809"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xa4, 0x16, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "afced1d88b743920aa837c991fa7f9d1"}]}, {0x20, 0x6, "1d1063253347ae03f24282df7bfd4c5808512ff27307419149c7314d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xa8, 0x6, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r12}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa, 0x6, 0x9, 0x8}, {0xcb, 0x6, 0x6, 0x7}, {0xe75, 0x96, 0x4, 0x18d}, {0x8, 0xc, 0x7, 0x6b9d}, {0x7, 0x67, 0x6, 0x5}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x39, 0x6, "ec29af475bfa60d05600c34a119ac3b0abb3dabb0fcf3d052265e31db73f31fe7717be26ac3f44d6d11e61b981ffc54e4ff1c1a701"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x110, 0x1c, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x3, 0x8, 0x2, 0x4}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x71, 0xffff00da, 0x0, 0xfffffe00, 0x8}, 0x3, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x101, 0x4, 0x2, 0xffffffdb}, 0x0, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1, 0x20000000, 0x6, 0x78}, 0x4, r5}}]}, {0x64, 0x6, "f1af02c3b89d8cedf01535aa51ec6b83670c6733183c78c0f6ccbd0dd5e868357b7d60dd877399e9c99686dfa4c8fbff41756287cd95da820cfda795085ada5ffeb74ccb2572351d37e4a70492f2cfbe63401dbc84ab3290a59c90503eced401"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_BASIC_POLICE={0x1454, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x7, 0x3ff, 0x7f, 0x48, 0x9, 0x100, 0x5, 0x9, 0x8, 0xf56, 0xc052, 0x401, 0x5, 0x3ff, 0x401, 0x61, 0x4, 0x3, 0xffffff6e, 0xa, 0x400, 0x2, 0x80, 0xd4, 0x3, 0x2, 0x8, 0x7, 0x782, 0x2, 0x5, 0x2b5, 0x3, 0x0, 0x0, 0x800000, 0x8, 0x5, 0xa, 0x0, 0x10001, 0x31, 0xe9ce, 0x690dccf5, 0x7f, 0x4, 0x2, 0x0, 0x80, 0x10, 0x1, 0x0, 0xc, 0x5, 0x7, 0xc5cf, 0x3, 0x6, 0x8, 0x3, 0x8d8, 0x3c5, 0x9, 0x5, 0xffff, 0x5, 0x591, 0x5, 0x5, 0x3, 0xfffffffd, 0x1f30, 0x5d9, 0x81, 0x2170, 0x0, 0xfffffffd, 0x8, 0x7, 0x9, 0x0, 0x80, 0x2, 0x1ff, 0xb24a, 0x3, 0x4, 0x8, 0x1, 0x83, 0x4, 0x3, 0x6, 0x2, 0x5, 0x5799, 0x7, 0x0, 0x9, 0x5, 0x3600000, 0x4, 0xfffffff9, 0x9, 0x0, 0x4, 0x59d, 0x4, 0x6, 0xffd, 0x8, 0xfffffffd, 0xffff, 0x9, 0x3, 0x80000001, 0x80000001, 0x8a3b, 0x81, 0x4088, 0x8b2, 0x1, 0x4513, 0x7f, 0x84, 0xfffffff7, 0x81, 0x5, 0x1, 0xbdf3, 0x4, 0x1, 0x2, 0xfffffffd, 0x6, 0x3, 0x3, 0x1, 0x81, 0x8, 0x1, 0x537, 0x5, 0x7, 0x4, 0x0, 0x4, 0x0, 0x9, 0x8000000, 0x0, 0x79d, 0x2, 0x2, 0x7f, 0x9, 0x7, 0xfffffffe, 0x4, 0x6, 0x1, 0x6, 0x54, 0x3, 0x5be, 0x240a, 0x6, 0x7, 0x4, 0x7022, 0x2, 0x400, 0x6, 0x5, 0x8, 0x1, 0x4, 0x80000000, 0x6, 0x0, 0x7c5, 0xfffffc01, 0x1000, 0xfff, 0x2, 0x42c7c25, 0x1, 0x6f5a55bd, 0x6, 0x5, 0xffffffff, 0x1, 0x0, 0x0, 0x3, 0x9, 0x3ff, 0x3, 0x2, 0x592b9817, 0x0, 0xf499, 0x200, 0x8, 0xfb64, 0x4ac9, 0x9, 0x101, 0x6, 0x3, 0x8, 0x80000000, 0xa41, 0x6, 0x40, 0x4, 0x1, 0x3, 0xd, 0x9, 0x6, 0x5df5c73a, 0x2, 0x2, 0x1ff, 0x401, 0x7, 0x1, 0x7fffffff, 0x1ff, 0x800, 0x2d9, 0x5718, 0xd, 0x1, 0xffffffff, 0x80000000, 0x101, 0xffff, 0xf77, 0xce0, 0x7, 0xffffff7f, 0x7, 0x7f, 0x9, 0x800, 0x3, 0x8, 0x4, 0x101, 0x1, 0x800, 0x8, 0xdf29]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0x4305, 0x9, 0x4, 0x7, 0x5, 0x9, 0x6, 0x4, 0xf07, 0x5, 0xd, 0x3, 0x9, 0xfffffff7, 0x5, 0xfff, 0x4, 0x4, 0x8, 0x6, 0xffffffff, 0x1, 0x1, 0x2, 0x8, 0x3, 0x3, 0x8, 0x0, 0x6, 0x4, 0xd50000, 0x6, 0x3, 0x2, 0x6, 0x4, 0x2, 0xfff, 0xff, 0x0, 0x8, 0xdbf, 0x6, 0xe, 0x2a01, 0x1000, 0x2, 0x1, 0x3, 0x7, 0x7, 0x8000, 0x5, 0x6, 0xd52, 0x3, 0x0, 0x80, 0x5, 0x1, 0x1, 0x1, 0xffff, 0x100, 0xf8, 0x674, 0x1, 0x2, 0x6, 0x7, 0x4, 0x1, 0xbd6, 0x8, 0xb0, 0x80, 0x9, 0x3, 0x7, 0x2, 0x3, 0x1, 0x1, 0x180, 0x6, 0x0, 0x5, 0x3, 0x4, 0x5, 0x4, 0x2, 0x0, 0x6, 0x2, 0x3585, 0xf393, 0x80, 0x10, 0x7, 0x6, 0x80000001, 0x401, 0xe, 0x7ff, 0x10000, 0x0, 0x8, 0x80000001, 0x40, 0x9, 0x98, 0x3, 0xd40, 0x1, 0x1d8f, 0x7fff, 0xd, 0xfffffffb, 0x5, 0x9f, 0x1, 0xa, 0x8, 0x3, 0xc8, 0x5, 0x8, 0xfff, 0x3, 0x8000, 0x8000, 0xf9c1, 0x5, 0x9, 0x692, 0x8, 0x633, 0xb, 0xfffff001, 0x100, 0xfffffff9, 0x10, 0x800, 0x9, 0xb, 0x8, 0xffffffff, 0x6, 0x6, 0x200, 0x7, 0x7, 0x252, 0x40000000, 0x891, 0x0, 0x3, 0x3, 0x4d7, 0xfffffff9, 0x4, 0x1ff, 0x400, 0xfffffff8, 0xffffff7d, 0x0, 0x80000000, 0x9, 0x2, 0x8000, 0x5, 0x2, 0x8001, 0x5, 0x8, 0x1c, 0x6, 0x5, 0x3, 0x52, 0x7, 0xa4, 0x1, 0xfffffffd, 0x5, 0xb35b, 0xfffffff7, 0xfffffffa, 0x0, 0x3, 0x5, 0x100, 0x2, 0x6, 0x5, 0xc, 0x554dd7a9, 0xe, 0x7, 0x418, 0xfffffffa, 0x7, 0xfffffffd, 0x10000, 0x0, 0x9, 0x7, 0x8, 0x24, 0x9, 0x1, 0x5, 0xfffffffd, 0x8, 0x4, 0x10001, 0x3, 0xfffffffa, 0xfffffffe, 0x5, 0x5, 0x100, 0x0, 0x6, 0x5, 0x6, 0x5, 0x4, 0x4, 0x79c5, 0x0, 0x7, 0xfff, 0xba3, 0x9, 0x3, 0x8, 0x3, 0xffff, 0x40, 0x10, 0x94, 0x9, 0x3, 0x5, 0x10, 0x5e2, 0x4, 0xe24c, 0x200, 0x3bdb8cce, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0xd, 0x0, 0x4, 0x3, {0x9, 0x0, 0x7e, 0x2, 0x2, 0x7}, {0xbe, 0x0, 0x6, 0x7, 0x2, 0x7}, 0x8, 0x10, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4c, 0x4b, 0x2, 0x7, 0x4, 0xdb, 0x4, 0x4, 0x40, 0x2, 0x0, 0xd6b, 0x2, 0xf1f, 0x8, 0x7, 0x0, 0x7ff, 0x9, 0x414b, 0x6, 0x9, 0x80000001, 0x9, 0x2, 0x4, 0x4, 0x6, 0x10, 0x0, 0x4, 0x6, 0xe, 0xfff, 0x757, 0xeb, 0xa70, 0x6, 0x2c3, 0x3, 0x9, 0x4, 0x5, 0x6, 0xfffffff9, 0x7, 0xe, 0x1, 0x7, 0x5, 0x9, 0x309, 0x8b4, 0x80000001, 0x9, 0x6, 0x1, 0xd99, 0x5, 0x3d10, 0x3, 0x200, 0x9, 0xfffffffc, 0x6a2, 0x8, 0x2, 0x472e, 0x0, 0x6, 0x7, 0x40000000, 0xe, 0x30, 0xc6e2, 0x1, 0xda, 0x81, 0x6, 0xeab, 0x7, 0x3ff, 0x1, 0x100, 0x200, 0x10001, 0x7a28, 0x4a, 0x4, 0x5, 0x401, 0x4, 0x4, 0x6, 0x3dd9, 0x433, 0x300000, 0x6, 0x3, 0x1, 0x8, 0xd, 0x4, 0xfffffffe, 0xb7, 0x6, 0x0, 0xffffffff, 0x81, 0x9, 0x10, 0x7f, 0xe, 0x1, 0x5, 0x81, 0xf0, 0x5e00, 0x2, 0xb6a3a299, 0xc, 0x4, 0x5, 0x6ab, 0x6, 0x0, 0x6, 0x4b3, 0xffff, 0x2, 0x9, 0xd, 0x0, 0x60, 0x1ff, 0x5, 0x107, 0x7, 0x827, 0x80000000, 0x9, 0x0, 0x5, 0x1000, 0x2, 0x419e, 0x39b, 0x8000, 0xba13f56, 0x8, 0xc, 0x0, 0x90, 0xff, 0x7b0, 0x4, 0xffffff01, 0xe, 0x5, 0x0, 0x426, 0x7ff, 0x0, 0x9, 0x0, 0x4, 0x2, 0x8, 0x1, 0x80000000, 0x9, 0x1, 0x5, 0x2, 0x6, 0x1, 0x1, 0xc, 0xffff, 0x2, 0x401, 0xd0, 0x6, 0x3, 0x3, 0x100, 0xffff, 0xb, 0x6, 0x5, 0x4, 0x3, 0x8, 0x2, 0x1, 0x8, 0xb54, 0x0, 0x2, 0x2, 0x7fffffff, 0x5, 0x7, 0xd2, 0x5, 0x1c00000, 0x9, 0xfffffff9, 0x7fff, 0xffffffff, 0x3, 0x41000000, 0x240, 0xd, 0x7, 0x0, 0x0, 0xf69, 0xb, 0x5, 0x29, 0x3, 0x5, 0x80000001, 0x0, 0x81, 0x2, 0xac, 0x5, 0x5, 0x5, 0x28000, 0x2, 0x8f, 0x1, 0x1, 0x81, 0x3, 0x9, 0x8000, 0x8, 0x4, 0x3, 0x5, 0xcdf0, 0xd91, 0xe20, 0x1, 0xffffffc0, 0x2, 0x2, 0x8, 0x5, 0x8, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x9515, 0x8001, 0x13b80000, 0xfffffe25, 0x2, 0xb, 0x80000001, 0x8, 0x8, 0x5, 0x6, 0x3, 0x0, 0x7, 0xff, 0x5, 0x9, 0x8, 0x4, 0x6, 0x80000001, 0x5ce, 0xfffffff9, 0xfffff801, 0x1c, 0x26f, 0x6, 0x4, 0x9, 0x7ff, 0x800, 0x7, 0x5, 0x6, 0x8, 0xa9f, 0x1, 0xb8, 0x2, 0x9, 0x6, 0x5, 0xa00, 0xffff, 0x6, 0xa900, 0x4, 0x3, 0x8, 0x20, 0x7ff, 0xf41d, 0x6, 0x3, 0x7fff, 0x3, 0xfff, 0x1000, 0x2, 0x400, 0xf6, 0x5, 0x6, 0xdbe, 0x3, 0x2d8c, 0x1, 0x0, 0x10000, 0x4d, 0x0, 0x6, 0x9, 0x6, 0x7fff, 0x6, 0x7, 0x80, 0x22b, 0x4, 0xffffffff, 0x7fc000, 0xa, 0x4430, 0x7, 0x6, 0x80000000, 0x0, 0x7, 0x4, 0x6, 0x2, 0x4, 0x3, 0x80000000, 0x1, 0x3, 0x8, 0x4, 0x9, 0xfffffff0, 0x2, 0x6, 0x61b, 0x3, 0x4, 0x1, 0x8, 0x6, 0x7, 0x9, 0x8, 0x9, 0x5, 0xffffffff, 0x2, 0x71, 0x8, 0x9, 0x5, 0xe, 0xc77, 0x51, 0x2, 0x3, 0x8c3, 0xfffffff5, 0xe, 0x5, 0x5, 0x3, 0x1, 0xfffffff9, 0x6, 0x7, 0x5, 0x7, 0x7, 0xfffffffc, 0x6, 0xfba, 0x8, 0x9, 0x2, 0x5, 0x9, 0x2, 0x2, 0x30, 0x1, 0x2, 0x7fffffff, 0x3ff, 0x7, 0xfffffff9, 0x402, 0x24, 0x3, 0x1, 0xbf, 0x9, 0x40, 0x9, 0xfab, 0x1, 0xad, 0x7, 0x0, 0x1, 0x3, 0x6, 0x7, 0x3e13, 0x7fff, 0x9, 0x100, 0x40, 0x14f, 0x5, 0x5, 0x8, 0x7ff, 0xfffffffc, 0x1cf, 0x1, 0x8, 0x3, 0x8, 0x7ff, 0x0, 0x800, 0x3, 0x101, 0x7, 0x8, 0x4, 0x5, 0x85, 0x8001, 0x8000, 0x40, 0xfffffff9, 0x5, 0x3, 0x2, 0xe045, 0xa, 0xffff8001, 0xffffffff, 0x100, 0x6, 0x5, 0x2, 0xb, 0x299b, 0xc2, 0x0, 0xfffffffd, 0x401, 0x4, 0x101, 0x3, 0x1, 0x0, 0x5, 0x8, 0x5, 0x2, 0x2, 0x5, 0x6, 0x7, 0x9, 0x1ff, 0x2, 0x6, 0x2c9, 0x7, 0x7, 0x362e, 0x5, 0x100, 0xff, 0x3, 0x7, 0x40, 0xb6, 0x5, 0x0, 0xf93b, 0x6, 0xf6, 0xfffffffb, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x70af, 0x0, 0x7, 0x1, 0x0, 0x0, 0x7, 0x8, 0x1, 0x137, 0x7, 0x6, 0x40, 0x3, 0x7, 0x9, 0x2, 0x1, 0x3, 0xb, 0x5, 0x9, 0x40, 0x3, 0x9, 0x7, 0x7dbe, 0x0, 0x6, 0x7, 0x2, 0x9, 0x5f3, 0x2, 0x7fff, 0xffff, 0x1, 0x4, 0xbd1f, 0x5, 0xfffffffb, 0x5, 0xfffffff7, 0x8, 0x0, 0x0, 0x8, 0x7fff, 0x5, 0x4, 0x1, 0x6, 0x117, 0x1, 0x3, 0x8, 0x1, 0x9370, 0x8000, 0x1ff, 0x7, 0xb02a, 0x6, 0xb78, 0x10, 0x8, 0x6, 0x3, 0x7, 0x6, 0x400, 0x67, 0x5, 0x2, 0x9, 0x1, 0xb, 0x0, 0x800, 0x5, 0x7, 0x6, 0x1, 0x0, 0x48b, 0x1, 0x2, 0x2, 0x0, 0x10000, 0x6, 0x7, 0x8, 0x5, 0x6, 0x62a, 0x6, 0x200, 0x4, 0x7, 0x39b, 0x62b1, 0x9e6, 0x3, 0x1, 0x1000, 0x5, 0x3, 0x90ef, 0x200, 0x6, 0x1dc8fc9f, 0x3, 0x3, 0x6, 0xf, 0x4, 0x7, 0x9, 0x9, 0x2, 0x925, 0xb5c, 0x4, 0x3, 0x1, 0x6, 0x43a, 0x7fff, 0x2, 0x4000, 0x6, 0x1ff, 0x4, 0x7fffffff, 0x10, 0x4, 0xb, 0x82dc, 0xfffffff9, 0x658ef6e4, 0x1ff, 0x40, 0x5, 0x7, 0x1, 0x7, 0x8, 0x9, 0xfffffffe, 0x10, 0x7, 0xc0, 0xffffffff, 0xf8b3, 0xa000, 0x9, 0x3, 0x8, 0x5, 0xfffffffa, 0x28, 0x40, 0xa1b6, 0xc2, 0x1, 0x3c16, 0x4, 0x7, 0xfffffffe, 0xe, 0x58, 0xf48, 0x8, 0xbc, 0xf, 0xffff1f47, 0xffffffa7, 0x9, 0x37d, 0x4, 0x8, 0x438, 0x6f581e06, 0x1000, 0x4, 0xa, 0xe6, 0x0, 0x6c, 0x8, 0x3, 0x2, 0x2, 0xee7, 0x1ff, 0x7271efa, 0xd, 0x2, 0x6e, 0x5, 0xfffffff9, 0xfffffffd, 0xe39, 0x2, 0xfffffffe, 0xe8, 0xfffffe01, 0x77c, 0x1, 0x8001, 0x2, 0xd, 0x4, 0x4, 0x1ac, 0x1, 0x2, 0x8, 0x7fffffff, 0xcb8, 0xffffffff, 0x6, 0x6, 0x97, 0x80000001, 0x2, 0x2, 0x5, 0x5, 0x1, 0xff, 0x101, 0x5, 0x7, 0x84ea, 0x2, 0x9, 0x4, 0x9, 0x9, 0xfffffffa, 0x5, 0x2, 0x7c2a, 0x9817, 0x77, 0x6, 0xc048, 0x4, 0x1, 0x7, 0x4, 0x2, 0x4]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xa}}, @TCA_BASIC_ACT={0x3b8, 0x3, [@m_ctinfo={0x158, 0x1a, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x100}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xbb57}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}]}, {0xe4, 0x6, "c7ca73418c34a3ce509fca4efde4be68781ef249ee5c9f60c4dc7d21d8daa117f6f166b62c628fd7f36b4ceea98c8b25776b0059f3fed6938c416e11f1c135056d5411d76236713163c17bfde299002cc75ebe72101dffc60c2ac61efad42b44fd6b103e78363289aa6713211e64efd35ee28ac9c005cafd638c96eb0fc98124521986ac1f36365866a7e52a73e524dd8740af9f7d07874f7290b1883abce78e4623458edae9beeefb0fffe611c45fbf45c5e30c80e909945490cffab71a5bcc0c80e50df7251bf1b666e3034c8746ed827ccc46dedab8202180d22a993fa5e3"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x118, 0x1a, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0xe2, 0x6, "5bd4d2153b9e9ffa61723cdbf7ca4e0d6732c35b8ed36a87f58b16a65669e85b0bf0f23332e6cceb42ef50ff816dbf45053031d81c36fa3f0533232afe91e82d9dad565ce752486ab350e76075fe338d8eaf59afc1e381ab81757756377d5bb401103b0be7e3b0b3d8bb7afae755d79d37c5ca5a773a71097ad741de5e0407b3be0575401b75e16f2a70419519e319c5bf2dfa1942469787d60aab0b5eb5978549df565bdad8cc2d277e4b1b767167bdd1d46ff5fd2ab0c7f77028bf84beb01af7ebef640ffaaaedd3c0a4bf8d473537f8ed3b9f2de0b860135f7ac61f20"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xd3, 0x6, {0x858, 'raw\x00', 0x4, 0x4, "e374fe0f8c31177ac0a58410472ee603491dced2a00cd0a3726551dac990a5fe7228e35050a5bb9f9f4a44f1a82e8fce0938509f4a84801610dc2473589eecc16600c409812c6c1195fee5b94440192a8ceba88adc0b8cd7a2bdadaba26d3b533fc0f705337a1cc4e8513975a77c54376090ed0f5dc32b3e3891797820313e1ecd2ac2a46ae32b6a201bdfa2ca91b315362b3ff28b10eb5b1c143361092d9f5652336ae38da2389b8e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}]}, {0x1a, 0x6, "9fa65c235e61d8e37ff52cbb18115995923221c75379"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BASIC_ACT={0x514, 0x3, [@m_simple={0xd0, 0x1a, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xf99c, 0x6, 0x9, 0x2}}, @TCA_DEF_DATA={0x8, 0x3, '#\\%\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xb7, 0x3, 0x8f026ce351aef2fb, 0x78d, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x3, 0x4, 0x0, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x48, 0x20000000, 0x3c1c1dff, 0x73}}]}, {0x3a, 0x6, "5104cb937b850badfc8b02dd2a50db45d256863ddbe16f7db4573a1da1931779b703c387ac6aa1f98b11140feef078357510129d75b1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0xe0, 0x11, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8b3c3}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8863}]}, {0x71, 0x6, "9a80d17f85acbc8d980716df75512cecdf45c88c12ffe137da3679cb4bfa60b0afc945b2817d56d4038f3420fac95e8070c3f02c42d2b8c66deefefd0eff1d232cb7238e6cc2e6580f941a5407a3128db53537bd0fd495af9799a516dfe9b6277d027f0229aa1734ae3eab5c6e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x150, 0x4, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x6, 0x0, 0x2, 0xffff}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0xf7, 0x6, "a78da84548ed25725a42a260958fbb6a6c8d417ef1f9c6ad33cd46dd67236391ccd3134e85ece86834f89f081e0d7ac2004094864b08e281cf22e55e11fa563a19ef7a292048c8c5cc4dd76b505b8ae5ec1c455a7ca1a2f3a8f8b010b91d5231a5a30a63fd2e6745f6cc1f402f5bafae2e7f5d3d238b41755c048b47f9c810fecef750787870de7d3a6979c1b2d1310008b94365ae5a914493a6ec261b1b55bb6cb3ff3b7e867fe8cffe4f6836033a6494a16267b64e5f4cf4be7feff52eccdb1382c977482520def561566c2a91a8fc6608755f1bc43010e707f23dfff1daa6f505e79a21e57e8dae28aea2b138071eb12ca5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0xe0, 0x11, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x93, 0x6, "7fab21d7142198da27a27d21a16f0fb1c097e3ed9effa51b6f165cc8db85bbad7b0a6b59445ccd76b36f5cd1ddc15efd5fbcf6af7d6622a49d59dded6095c46e7aec13f55ee77d3c245263f9e17a9a8f847ab3dd118086bef28b9566a0f79abe13079b7a40e5d45c908d079dd5e560073ce90ad43f0ebba0e2995ccfd9faf366a6665a28d4a44d5d5af3dba31bac52"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x130, 0x14, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0x6, 0x6, 0xd3, 0x9}}, @TCA_DEF_DATA={0x7, 0x3, '\\!\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2000000, 0xf, 0x4, 0x7, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x0, 0x2, 0x4, 0x1000}}]}, {0xa0, 0x6, "3c62fbfadb58c5af0f725efd40694c5e09b174f338b4b37ffea3d426d946530bc9f7e6c12add87da5862171ce2d87c55409dc0bb281705ab474d0702a653b16c01d98b2b89a922e503a47db3151aaa61e63ad56c2caa2152974ee191655a7ade5f5a27b55260d01f4f9f4c7f87f8fceddcf7d9350fbddc90d0db9ca1c84860d94aaf1d0adde0be22ea1ce496d99253a8f9dbbc16ab2d5367cd363161"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x30a}, @TCA_RATE={0x6, 0x5, {0x10, 0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x324c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x4}}, @TCA_FW_INDEV={0x14, 0x3, 'virt_wifi0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xfff3}}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_ACT={0x12a0, 0x4, [@m_nat={0x94, 0x14, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0xa4a6, 0x1, 0x7f, 0x400}, @multicast1, @private=0xa010100, 0xffffff00}}]}, {0x42, 0x6, "fcc4df1c4f06bb2e9c06755f6118234d0673c5fa1e4f1073d8bbcae03153e4888af579cdbe9617fac69aa41aaa5d682af9351a8817fd4386257c13f189e3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x9c, 0x7, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x10001, 0x4, 0x1, 0x3}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1768, 0x8, 0x8, 0x47}, 0x2c}}]}, {0x35, 0x6, "63035a3de48a1fcd9b8f45ba28de278ec70645cb52c7e05aea6a5ba513161aa303b27ee99d85397506bdd544f8e9cd1e93"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x144, 0x14, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6cf}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xfe, 0x6, "c707a38d98d3825a09231489580c78b18023691b6a7a63749f4eb72e272d7ab7cce797302013cc55212ea163d6d34241633de0706fc34d512e4279556a4528df64ac83b1b5b1316c680fcb6319af903d54c80148850a484325ec7b303ada8ad24e26835f27aec2ed9e13a1a2b7b516e5bccd957661eb83bc973c2739844d95f1a48cc97c3c714bd08999989e376a295f8e995558be70dbf425438e5dd3a65e2dcd7a067cf3b5e3c26599bbb33eb6ea4019f3121f1d933bddb31ca3319b86fb1ee0ac84ab3f248c1d9c127f5125771b09d78b5e5f6d8c74001bd73e79049d1882ae672d5dd597a9d1c503fd5468327de247cf1c95bbecdaa3384e"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_connmark={0x134, 0x5, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x7fffffff, 0x10000003, 0x3, 0x70}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x7, 0x9, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x101, 0x6, 0x9, 0x5}, 0x85}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x75, 0x4, 0x9, 0x2710fdd3}, 0xce8d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x4d3a, 0x4, 0x200, 0x9}, 0x7730}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x779ae06b, 0xffffffffffffffff, 0x401, 0x1}, 0x5777}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x3, 0xd7f, 0x8}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x1, 0xfffffff9, 0x3078fbed}, 0x27}}]}, {0x23, 0x6, "200dd67b437b94584bea5a6e4d059a1e70b611c096b546939352b21c87845d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xef4, 0xf, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x81, 0x3, 0x8, 0x1, 0x100}, 0xf, 0x6, [{0x1, 0xd0b0c05, 0xfffffff9, 0x8, 0x101, 0x10001}, {0x6b7, 0x6, 0x40, 0x1, 0xfffffff9, 0xffffffff}, {0x5, 0xffff, 0x6, 0x7f, 0x2, 0xfffffffc}, {0x6, 0x8a, 0x5, 0x4, 0x50, 0xe14}]}, [{0x1, 0x9, 0x6, 0x8000, 0xff, 0x81}, {0x3, 0xff, 0x3ff, 0x2, 0x8, 0x4}, {0x7ff, 0x906, 0x9, 0x7fff, 0x2, 0x9}, {0x5, 0x8, 0x4581, 0x9, 0x7, 0xfffffe7e}, {0x8, 0x200, 0x2, 0x4, 0x8, 0x7}, {0x3d7, 0x5, 0x89, 0x400, 0x7, 0xc}, {0x10, 0x6, 0x21fd, 0x5, 0x200, 0x9}, {0x4, 0x0, 0x8, 0x101, 0x8, 0x8}, {0x5c2, 0xa, 0x1, 0xc8, 0x4f1, 0x9}, {0x9e, 0x8, 0x6, 0xfffffff8, 0x5, 0x8000}, {0x9, 0x10, 0xa, 0x4, 0x5, 0x7b}, {0x8, 0x3, 0x2c6, 0x200, 0x6b, 0xa}, {0x2, 0x8, 0xb84dfbdc, 0xb572, 0x1, 0x6}, {0x7fff, 0xa, 0x0, 0x4, 0x80000000, 0x5}, {0x29, 0x9, 0x9, 0x31, 0x0, 0x4c}, {0x2, 0x7fffffff, 0x8001, 0x800, 0x10000, 0x9}, {0x3ff, 0x3, 0xfffffffa, 0x5, 0x5, 0x400}, {0x1, 0x0, 0x4, 0x7fffffff, 0x6, 0x101}, {0x4, 0x8, 0x0, 0x2, 0x101, 0x8b7}, {0x0, 0x3, 0xf, 0xffc, 0x4}, {0xb9, 0x3, 0x2, 0xfffffff7, 0xad76, 0x2}, {0x7e2, 0xf0, 0xf3, 0x6, 0x5, 0x7}, {0x1, 0x200, 0x3, 0xfffffffc, 0x7fffffff, 0xfffffff9}, {0x2000, 0xf8efc07, 0x5, 0xffffffff, 0xdf2, 0x38000000}, {0x3ff, 0x2, 0x9e4b3cec, 0x5, 0xa, 0x9}, {0x9, 0x1, 0x1, 0x3, 0x3, 0xfff}, {0x1, 0x3, 0xd, 0xb, 0x1, 0xc5c9}, {0xf, 0xb, 0x0, 0xf, 0x8, 0x4}, {0x2, 0x1455, 0x6f2, 0x89, 0x9, 0x34}, {0x80000000, 0x1, 0x444, 0x7, 0x3, 0x6}, {0x33, 0x5, 0x3, 0x5, 0xf23e, 0x7823aa7a}, {0x6, 0x838, 0x3, 0xf, 0x5, 0x10000}, {0x2, 0x2, 0x4, 0x8, 0x7, 0xbb}, {0x6, 0xffffffff, 0x4, 0xef10, 0x2, 0xbe4}, {0xe, 0x8, 0x837f, 0x3, 0xffff, 0x72}, {0x2, 0xc5ba, 0x4, 0x3, 0x5, 0x7fff}, {0x1, 0x800, 0xa173, 0xa, 0x4, 0x6}, {0x0, 0x8, 0xff, 0x1, 0x8000, 0xfffffffd}, {0x2, 0x5, 0x2, 0x8000, 0x0, 0xe9bd}, {0x62800, 0x7ff, 0x7, 0x1, 0x8001, 0xb}, {0x0, 0x7, 0x7, 0x3, 0x2, 0x6}, {0x1000, 0x5, 0x0, 0x100, 0x10001, 0x800}, {0x2, 0x338a, 0x5, 0x600, 0xf, 0xf1}, {0x1, 0x4, 0x5, 0x5b08ac4c, 0x7ff, 0x3}, {0x5, 0x5, 0x9, 0x6, 0x2, 0x4}, {0x0, 0x9, 0xfffffffb, 0xffffff80, 0x8, 0x3}, {0xffffffff, 0x5, 0x1, 0xbcdd, 0xa329, 0x8}, {0xfffffffa, 0x0, 0x4, 0x9, 0x7ff, 0x9}, {0x8, 0x6ce45304, 0x6, 0x8129, 0x0, 0x2}, {0x8001, 0x0, 0x1654, 0x2, 0xb6, 0x7}, {0x8b, 0x6a, 0x3, 0xaede, 0x4, 0xb07e}, {0xffff8001, 0x800, 0x5, 0x80000000, 0xff}, {0xb, 0x0, 0x4, 0x3d26, 0x3a5, 0x40}, {0x5, 0x2, 0x0, 0x9, 0xc, 0x6}, {0x0, 0x8df9, 0x0, 0x7ff, 0x1, 0x8}, {0x1578, 0xa6, 0x200, 0x9, 0x118b, 0xafa0bae}, {0x3, 0x401, 0x2, 0x6, 0x6, 0x200}, {0x4, 0x10000, 0xfff, 0xe988, 0xc, 0xff}, {0x10000, 0x8001, 0x10000000, 0x10000, 0x9, 0x7}, {0x7, 0x7, 0x9, 0x8, 0xfffffff7, 0x1ff}, {0x4, 0x4, 0x4, 0x4, 0x2, 0xa}, {0x9, 0x6ce, 0x3, 0x7, 0x5}, {0x81, 0x10, 0x2, 0x2, 0xccf, 0xffff6123}, {0x80000000, 0x36, 0x2, 0x8000, 0x401, 0x8}, {0x401, 0x907e, 0x7, 0x3, 0x5, 0x3}, {0x7, 0x5, 0x4, 0xfffffffc, 0x4, 0x8}, {0x8, 0x2, 0x5, 0x9, 0x2, 0x6}, {0xe0000000, 0xffff, 0xf17b, 0x329, 0x5, 0x2}, {0x2, 0x0, 0x8, 0x8, 0x0, 0x7}, {0x6, 0xffff0000, 0x6, 0x1, 0x6, 0x70000000}, {0x6, 0x2, 0x100, 0x4, 0x7, 0xfffffffb}, {0x7fff8000, 0x2b, 0x0, 0x1ff, 0x9, 0x100}, {0xffffffff, 0x7, 0x8, 0x6b1, 0x3, 0x6}, {0x81, 0x5, 0x7, 0x41, 0x100, 0x8000}, {0x8, 0x800, 0x3, 0x3, 0x8001, 0xf8b}, {0x7, 0x853, 0xfffffffd, 0x2, 0x9, 0xff}, {0x7fffffff, 0xd59f, 0x80000000, 0x40, 0x8001, 0x1}, {0x1, 0x2, 0x800, 0x7, 0xc, 0xffff}, {0x7fff, 0x7, 0x6, 0x7, 0x2, 0x3}, {0x2, 0xa89, 0xfcd7, 0x5, 0x9, 0x400}, {0x100, 0xbd, 0xffffff7f, 0x8, 0x17, 0x24dd}, {0x7, 0x3, 0x7, 0x8, 0x5, 0x1}, {0xffffff3c, 0x9, 0x6, 0x3, 0xfff, 0x94}, {0x0, 0x8, 0x10001, 0x0, 0x29, 0x7}, {0x3, 0x1, 0x9, 0x3ff, 0x0, 0x8}, {0x4, 0x101, 0x6, 0x80000001, 0xc2f3, 0x1ff}, {0x2, 0x81, 0x80, 0x8, 0xb, 0x4}, {0x5a9, 0x5, 0x4, 0x3, 0x8, 0x7}, {0x718, 0xffff8000, 0x8000, 0x10, 0x1, 0x5}, {0xffffffff, 0x4, 0x811, 0x619, 0x4, 0x5}, {0x1, 0x0, 0x3, 0x6, 0x8, 0x2}, {0x3, 0x975, 0x9, 0x0, 0x121, 0x3}, {0x6, 0xb4, 0x3, 0x1, 0x0, 0x2}, {0xd, 0x8000, 0xda7, 0x0, 0x5, 0x8738}, {0xfffffff7, 0x8, 0x1ff, 0x80, 0x6, 0x6de}, {0x9, 0x8, 0x3, 0x0, 0x10, 0x7}, {0x7, 0x4, 0x1, 0x6, 0x6, 0x3}, {0xd7e, 0x9, 0x5, 0x4, 0x4, 0x4}, {0x6, 0x0, 0x1, 0x4251136a, 0x7d4, 0x3}, {0x5, 0x5, 0x401, 0x7, 0xa4, 0x6}, {0xd, 0x23f7ce3, 0x8, 0x3ff, 0x8001, 0x1800}, {0x3ff, 0x2, 0x6, 0x8001, 0x8, 0x399}, {0x8, 0x8, 0x81, 0x9, 0x3, 0x7fffffff}, {0x8001, 0x0, 0x5, 0x6, 0x1, 0x9}, {0x3, 0x0, 0xa, 0x81, 0x10, 0x7}, {0x8, 0x8001, 0x7, 0x42b0, 0x0, 0x9}, {0x8, 0x5, 0x0, 0x5, 0x4, 0x7f}, {0x0, 0x1, 0x71b3, 0x6, 0x6, 0x401}, {0x1, 0x1, 0x4, 0x4, 0x7, 0x4}, {0x80000000, 0x3, 0x7, 0x4, 0x700000, 0x8a7}, {0x10, 0xc0, 0x7fffffff, 0x3, 0x5, 0xe862}, {0x3, 0x3, 0x394c, 0x0, 0x66, 0x6}, {0x1, 0x2, 0x1, 0x1ff, 0xffffffff, 0x7}, {0x6, 0x7, 0x6, 0x6, 0x9, 0x4}, {0xfffffff9, 0x4, 0x3, 0x1, 0xff, 0x6}, {0x5, 0x2, 0x8, 0x80, 0x3, 0x9}, {0xb1bf, 0x8, 0x4, 0xbc, 0x0, 0xe468}, {0x3, 0x6, 0x3, 0xc, 0x7, 0x5d}, {0x5, 0x4, 0x4, 0x8, 0x3ff, 0x2}, {0x8000, 0x8001, 0x4, 0x80000001, 0x4, 0x7}, {0x4, 0x1, 0x8, 0xffffffd4, 0x8}, {0x2, 0x1, 0x7, 0x8000, 0x4ca, 0x1}, {0xfffffffa, 0xffff, 0x8, 0xf, 0x7, 0xffffffc0}, {0xff, 0x7f, 0x89, 0x8, 0xa000000, 0x21}, {0xfff, 0x10, 0x7, 0xfff, 0x6cc, 0x4}, {0x5, 0x3, 0x7, 0x4, 0xfffffffc, 0x7}, {0x1, 0x1, 0x9, 0x1, 0xe7a5, 0x2}, {0x24b, 0x80000001, 0x40, 0xfffffff9, 0x2, 0x6}], [{0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {}, {}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {}, {}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x7}, {0x5, 0x1}, {0x1}, {0x4}, {}, {0x3}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0xecad322cf7dd599a}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}], 0x1}}]}, {0x45, 0x6, "dbcbedbff4f1f860ce5f22e82637daac5039846b576f5b0cb2a0de773e24b1cb3619f590b90a78e3117cff4fe7f6240f6bf3925f1b2c29d790fc4ba7c48fb5ec44"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_ACT={0x1450, 0x4, [@m_mpls={0x180, 0x7, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x7fffffff, 0xffffffffffffffff, 0xffffff86, 0xf}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc97a3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0xffffffffeffffffa, 0x9, 0x2}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xc4, 0x1d, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x1, 0x6, 0xe, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0xa, 0x7, 0x67, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x400, 0x6, 0xffffffff, 0xfffffffb}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xe, 0x1, 0x8, 0x7}, 0x4}}]}, {0x22, 0x6, "df988a283b298bf8ab5373a6355a0b4c50fc37887dc7fb47f334981ef484"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x10c8, 0x18, 0x0, 0x0, {{0x9}, {0x9c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10, 0xa0, 0x1, 0x0, 0x2}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x81, 0x4, 0xb45, 0x3}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0xff}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x59, 0x4, 0x1, 0x1}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x0, 0x7, 0x2}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x68229}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x75257e6477c586b4}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x140, 0x5, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfa, 0x8, 0xf1ac, 0x5a82}, 0x4, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xe, 0x8, 0x5a, 0x8001}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0xb91, 0x0, 0x9, 0x8}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0xffffffff, 0x1, 0x4, 0x1}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9348, 0x7, 0x1, 0x8, 0x101}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x78, 0x3, 0x0, 0x3}, 0x4}}]}, {0x54, 0x6, "a476c8cde8ae8676c404c7268555ed335e2529f8c8135e954d7e732ff2b7e5d57c490b57e40f8845d63f68cc19a91be90bc5c2142ea6d37adb45feba2ab2243b17a68a09f919575ae76bbca7c87c882e"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xcd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x40, 0x3ff, 0x2, 0x1, 0xffffffff, 0x6, 0x8, 0x9, 0x1, 0x9, 0x0, 0x3, 0x20fe, 0x1, 0xcd, 0x0, 0x3, 0x9, 0x4, 0x10000, 0x7fff, 0xffff0cb8, 0x3, 0x859f, 0x3, 0x6, 0x0, 0xc, 0x3, 0x1, 0x81, 0xf, 0x4, 0x1, 0xd, 0xa, 0x9, 0x4, 0x2, 0x14, 0x8, 0x10000, 0x200, 0x4, 0x625e, 0x4, 0x2400, 0x3, 0x7, 0x400, 0x9, 0x1, 0x6, 0xe3f5, 0x9, 0x6, 0x81, 0x0, 0x7fffffff, 0x1, 0x3ff, 0x6, 0x6, 0x7, 0x2, 0xfffffffe, 0x8000, 0x8ea, 0x0, 0x7, 0x6, 0x647e, 0xfffffff9, 0x7ff, 0x80000000, 0x2, 0xf, 0x31, 0x800, 0xfffffeb5, 0x6, 0x0, 0x7fffffff, 0xfffffffc, 0xc87c, 0x4, 0x5, 0x6, 0x8, 0x40000, 0x7f8, 0xfffeffff, 0x6, 0x3, 0x100, 0x3, 0x1, 0xffffffff, 0x81, 0x9, 0x515, 0x3f27, 0xb4f, 0xa, 0x6, 0x5, 0xd3, 0x4, 0x98a0, 0xdcd, 0x0, 0x0, 0x9, 0x6, 0x61e, 0x75, 0x6, 0x80000001, 0x3, 0x9, 0x7, 0x10, 0x5, 0x9, 0x8, 0x1, 0x9, 0x9, 0x9, 0xe, 0x0, 0x9, 0x2, 0x4, 0xfffff000, 0x401, 0x7ff, 0x6, 0x2, 0x9, 0xa68e, 0x6, 0x2, 0xd, 0x5, 0x35d6, 0xffff12c3, 0x10, 0x3, 0x9, 0x0, 0x0, 0x8, 0x4, 0x7, 0xe, 0x8, 0x6, 0x10001, 0x6, 0x3ff, 0x9, 0xb2, 0x80, 0x3, 0x9, 0xee, 0x7, 0x2, 0x1ff, 0x0, 0x7ff, 0x6, 0x4, 0x0, 0x1e0da016, 0x23, 0x2, 0x5, 0x1, 0x278, 0x72, 0x7, 0x5, 0x3ff, 0x6, 0x792, 0x4, 0x7, 0x7, 0x3, 0xfffffffb, 0x2, 0xc1, 0x1fc0, 0x9, 0x5, 0x6, 0xaa63, 0x8, 0x1, 0x2, 0x66, 0x1, 0x1e7c, 0x5, 0x65dd0eca, 0x6, 0x101, 0x7, 0x7, 0x8, 0x3, 0x7, 0x5, 0x400, 0x8, 0x400, 0x6, 0x0, 0x9, 0x1, 0x8, 0x3e08, 0x0, 0x3, 0x3, 0x9, 0x0, 0x400, 0x3, 0x3, 0xb, 0x5, 0xe, 0x7, 0x2, 0xb, 0x8, 0x46e, 0x1, 0x2, 0x3, 0x100, 0xfffffffd, 0x7ff, 0x0, 0xe, 0xfffffffc, 0x13, 0x0, 0x0, 0x4, 0x100400, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x2, 0x9, 0xa, 0xa, 0x1, 0xc, 0x6, 0x3, 0x5, 0x10001, 0x2d7, 0x7fffffff, 0x4, 0x84, 0xb84d, 0xb, 0x2, 0xc86, 0x3, 0x3, 0x2, 0x7, 0x4, 0x8, 0x8, 0x3, 0x80000000, 0x0, 0xc1, 0xfffffff8, 0x7f, 0x8, 0x9, 0x80000000, 0x2, 0x3, 0x2, 0x8, 0x2, 0x4, 0x1, 0x0, 0x6, 0x10001, 0x81, 0x3, 0x6, 0x2, 0x8000, 0x4, 0x8, 0x6, 0xfffffffd, 0x0, 0x2, 0x6, 0xffffffff, 0x1, 0x1, 0x4, 0x6, 0xd2, 0x1000, 0x80000000, 0x8b98, 0x2, 0x1, 0x6, 0xff, 0x2, 0xd, 0x2, 0x4, 0xc, 0x5, 0x953, 0xfffffffb, 0x2, 0x5, 0x9, 0x9, 0x7, 0x7, 0x45d616ee, 0x10001, 0x5, 0x2, 0x81, 0xffffffff, 0xd9af, 0x2, 0x57, 0x4, 0x0, 0xe78, 0x1d940000, 0x10000, 0x100, 0x6, 0x1, 0x400, 0x6, 0x8, 0x1, 0x6, 0x8, 0x8, 0x2, 0x9, 0x68, 0x4958, 0x8, 0x4a, 0xb, 0x4, 0x7, 0x4, 0x6, 0x6, 0x7, 0xa8, 0x3, 0x3, 0x9, 0x7, 0x7, 0xbe, 0x5, 0x59c8, 0x51d4, 0x9, 0x7, 0x5, 0xab3, 0x2, 0x101, 0x0, 0x3, 0x9, 0x3b, 0x3, 0xd4, 0x6, 0x2, 0x4, 0x7, 0xd9b7, 0x7, 0x8000, 0x4, 0x6, 0x10001, 0x3, 0x85aa, 0x10, 0x101, 0x5, 0x5b9f44da, 0x6, 0x6, 0x3f9c, 0x6, 0x9, 0x0, 0x0, 0xa, 0x7, 0x5, 0x167, 0x0, 0x4, 0x7, 0x73f, 0xff, 0x8, 0xc, 0x0, 0x7, 0x4, 0x7, 0x2, 0x4, 0x3, 0x7, 0x2, 0x7, 0x2, 0x0, 0x8, 0x3, 0xfa, 0x949, 0x2, 0x858, 0x39, 0x4, 0x3, 0x4, 0xe, 0x5, 0x0, 0x4, 0x0, 0xffffffff, 0x4bc, 0xd, 0x0, 0x3b, 0x9, 0x3, 0x2, 0x4, 0xe, 0xb, 0x9, 0x5, 0x0, 0xfffffffb, 0x2, 0xffffffff, 0x101, 0x6, 0x9, 0x8, 0x100, 0xa00, 0x6, 0x7fffffff, 0x3, 0x0, 0x6, 0x0, 0xe, 0xfc, 0x8, 0x9, 0x9, 0x400, 0x192ae639, 0x4, 0x1, 0xc84, 0xfffffff8, 0x3fea, 0x80000001, 0x8000, 0x4, 0x8, 0x1, 0x9, 0x4, 0xfff, 0x650, 0xffffffc0]}]}, @TCA_FW_ACT={0x2e4, 0x4, [@m_sample={0xac, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x7, 0x3, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100}]}, {0x60, 0x6, "777d730e0e3504beafd1f7b8965a7394e1e711854e4c32913235000d70beea8da069adaa07bfd43f22c4cbd57487f9643cc920df430b4f64f6fe8f2d32da8f75e86c78d494c47b68263125a3423d7fc231c24ea2fc0d8fb417f827ea"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mirred={0x100, 0x1c, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3e, 0x1, 0x7, 0x4a, 0x400}, 0x1, r5}}]}, {0xb3, 0x6, "055b70670a3f24e59a706588b60e0966ab6a88d92b2736252bee201ecc08968f0e32fb743431346a986a6f44a912ba85461e281a995d3d36f007a30a5ac06fdc3bfc546f8382bd79229b4bfa878b5071f8f5426610af6abf5c874033294ea3b32b671f09505d1af5657c7cb789b2dc7d3cfefc528a0d37e4fec4d5cea7cf96354efb4bfd068373c51686d49cdaf55dcb2f0a1533c02ae364c03db75122e02ea56ba5f89e48f22ee29bfa85ffa94337"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x8c, 0x18, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x5, 0x28000006, 0x8, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1d3, 0x3b0, 0x4, 0x8, 0x3}, 0x1, r13}}]}, {0x1d, 0x6, "98d2166a0b3182a6a807713f5bd09c40e3ba4e5491ceff3a3c"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0xa8, 0x15, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x4, 0x7, 0xb, 0xb974}, {0x1b, 0x1, 0x2}, {0x31, 0x19, 0x2}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x9, 0xa, 0x2, 0x1}, {0x1, 0x6, 0xb3, 0x1000}, {0x9, 0x10, 0x2, 0x9}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x3b, 0x6, "e89a8c8d5c70a0330540ad6b6803b296fa2c62d7c5164d156b8e42649758a197b1a56a4c21e8c6b68411bc7d1067f8826e93f709ec50fb"}, {0xc, 0x7, {0x0, 0xd0f29422fd2b3895}}, {0xc, 0x8, {0x6}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xffe0}}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x24}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}]}, 0x55bc}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 21.013547801s ago: executing program 0 (id=1874): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c851) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110500000000feffffff0500"], 0x21}}, 0xa000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x408d4) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d570020005001300000000000800050000000000050008000900000005000a0000000000060010004e24000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="97b48d0fa587361dda32131607001a744e205a17e3c56188e58148c7871d75d8e23980c7e3073dd68191f7eb2301501ceb4261bd79463763a4331bc16b9c413d6e184b2227a234d5c42cdf95ac320597f4cefc9ba1c3671d60707f25f5734b6105d4def5c3829ced097a54823e582bc5fb68e878ea0fe70f28ea3cfe0ce1d1330fffca9113776b427be2da3b4416272683394d28eadf05530f"], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ffc}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) 20.955096366s ago: executing program 1 (id=1875): socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xbf44, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r3, 0x20, &(0x7f0000000280)={&(0x7f0000000140)=""/183, 0xb7, 0x0, &(0x7f0000000080)=""/106, 0x6a}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r3, 0x20, &(0x7f0000000280)={&(0x7f0000000140)=""/183, 0xb7, 0x0, &(0x7f0000000080)=""/106, 0x6a}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002c00018006000340000100000c00028004e6010088000000140001800800010064010102080002"], 0x88}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113100000000000bfa000000000000007000000ee00160e5e03010000000000140500000000000069163a0000000000bf07200000000000360507000fff0720670600003f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 20.884977933s ago: executing program 4 (id=1878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) (async) accept$alg(r1, 0x0, 0x0) close(0x4) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) (async) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0x34}, 0x1, 0x0, 0x0, 0x4046814}, 0x20048810) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040441}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r5], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='sys_exit\x00'}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='sys_exit\x00'}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x404c804) socket$nl_netfilter(0x10, 0x3, 0xc) 20.755179533s ago: executing program 1 (id=1879): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x50, 0x9, 0x0, 0x80000001}, {0x6, 0x60, 0xb4}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000340)=0x3) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r4, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000005000f40fe00000e", 0x24) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030005000000bca900000000000035090500000000007400000000000000b509020002000000739a00fe00000000b509000004000000c39a04fee1000000bf87000000000000079e93cad05e080300f8ffffffbfa420000800000000000000f0ffff424a0200000800000003220000000000000021580000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 19.755439357s ago: executing program 1 (id=1885): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8f5) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x80000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)={0x1d, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xff}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x4}]}, 0x18) 19.739251503s ago: executing program 1 (id=1886): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000, 0xfffffffe]}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f00000007c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x103}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9c1fe0ad824544b2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r6, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001440)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3, 0x0, 0x1fffe}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="80210000a40c010014000300776c616e300000000000000000000000080002000e04008018001680140001801000020004000000010e000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20084881}, 0x0) 19.46337063s ago: executing program 2 (id=1888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000100040200000800020002"], 0x50}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000015c0)=0x1c00) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014010020bd7000fddbdf250800150000000000080001000000000008004a0000000000080003000100000008004b00130007"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) accept4$rose(r3, 0x0, &(0x7f0000000080), 0x0) 19.433696504s ago: executing program 1 (id=1889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10014}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e64}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) (async) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) (rerun: 64) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 64) recvmmsg(r5, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r7 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x2, 0x0, 0x0, 0x7d}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x69, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x7, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0x3a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000c6000003000000000000000085000000bc0000009500000000000000c61e486a4029bad435cfd52b0367a9fa4bdbf3f15ca7e801b4d078422c1c4620b46bbd2995116567dfde68734cc0cb89e44a4263244ea46c8aa7091d5458ec3b0a0c120dbf2c207a3be7544105c485a1d6bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ID={0xfffffffffffffe32}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x100, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd4, 0x3, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "3dfd2ed268470db32bb16aff5622acc9eac80b80887705794e2d101989048cecadbbfc1d15820df224075fc978e89400e40b7c1bf6052dbe8911a3228215635fc009f0de3bb98ff55d10f4bddd9548ea6f318bbc4a53ea2f02d14aaf97c00bb94289e202710ad9906abf"}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x160}, 0x1, 0x0, 0x0, 0x4000850}, 0x24028010) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000815da2cd05000000000000000200fc0200000000003ab578640000000000"], 0x5c}}, 0x0) 19.303475432s ago: executing program 2 (id=1890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @empty, 0x1}, 0x1c) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000240)) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1800002, 0x12, r9, 0x88fa6000) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd0, &(0x7f00000002c0)=0x1, 0x4) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x73}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r11 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000140)=0x10, 0xc0000) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) 19.011348795s ago: executing program 1 (id=1891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socketpair(0x18, 0x80000, 0x1, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="b3e46f72c41b113d41ba9fa37731e790be04053bd736ebc074f2582397e689f301e25c2ab4f419af94c57e5cd7e21ab470876a21e0656a5c86af7526a17f4d0a8bcb8d85ca2e8dd9cb9f6f49259800c336fde5be5aa3f59a04e502c4bdc1a10f888b14fd454adf70863ec00b8fe179d08e4210fe6b0cfcdb876200000000000000", @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700ddffffffffffff6474683a73"], 0x38}}, 0x4004000) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x2}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5a8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r9) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r6, 0x411, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb5}, @exit], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18.801270765s ago: executing program 2 (id=1892): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031600160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xff4a}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00959efce9000010000104ee7300eeffffe6ff937800f6", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095", @ANYRES32=r7, @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@deltfilter={0x44, 0x2d, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0xa}, {0x5, 0x9}, {0x1, 0x10}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xb6c8}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000be9a87cf1216000000020000002c0002800c00028005000105000000001400018008000100e000000108000200ac1e0001060003400000000006001240000200"/79], 0x48}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f00000005c0)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfefffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000780)={0x5}, 0x4) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='writeback_pages_written\x00', r2, 0x0, 0x8}, 0x18) 18.632486513s ago: executing program 2 (id=1893): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000003c0)='%-010d \x00'}, 0x20) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0)=0x1, 0x8) 18.431426139s ago: executing program 2 (id=1894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$inet(r2, &(0x7f0000000a80)={&(0x7f0000000600)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000900)="8fc29d75d26148749ad942363cf082a504cebf5148623eaf6568345e26139dd98b89d4152438a09c4500de00d7f47b3c497472c7d0ba17c9ab66178d6fcccfc1", 0x40}, {&(0x7f0000000980)="57328339cbd2acca88d124f1eee84cf6c5ff93c3c74098e4fe6a49f03b916e6be3c999d07240e3f5dd2916a09b71717e57fdad5e6ac623041870ebeb2473", 0x3e}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x30}, 0x20008080) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4040850}, 0x40) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r8 = gettid() r9 = socket(0x10, 0x803, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1, 0x4, 0x7, 0xa3, 0x10}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x2}, 0x38) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r7, @ANYBLOB="049c01000750050008001300", @ANYRES32=r8, @ANYBLOB="140003007600"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 18.386795026s ago: executing program 4 (id=1896): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000940)={@remote, @multicast2, 0x20, 0x17}}) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000030000001868ffe90e00000000000000080000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r2], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x27, 0xe, 0x0, &(0x7f0000000480)="0300f977ea0e00c00c00004256fd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r6, 0x25, 0x2, @void}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6], 0x20}}, 0x8080) socket(0x11, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000002c0)="96bced8af9c8", 0x6}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}, 0x42090) listen(r8, 0xffffffff) sendmmsg(r8, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="af9b"], 0xfe61}}], 0x2, 0x40c88c4) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc540000190001000000000003000000f702529600000000c6eb00ffffffff01fe8000000000000000000000000000aa00020000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="200080289ee525372217d2f54200", @ANYRES16=r11, @ANYBLOB="05000000000000000000220000000a0001007770616e31000000"], 0x20}}, 0x4000000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000a00)="cfb7d78ca7baf4901baa1db77dd8946960b57bfc86bd3c230a965a389234cdce4b387d08453a5f6b487bb7c29b6f1009a494e1da8a3d09f3ffffffffffffff197aae66757af82afc7442cc66b948deea7d4f380511004ff83faead0ecc1d8a2acb1e0a95ecfae3933a", 0x80000002, r1}, 0x38) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x46, r6}) 18.174371857s ago: executing program 2 (id=1898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/4096, 0x33, 0x1000, 0x0, 0x7, 0x10000}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/4096, 0x33, 0x1000, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x3a6, 0x0, r2, 0xffffffff, '\x00', r3, r4, 0x1, 0x2, 0x4}, 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x3a6, 0x0, r2, 0xffffffff, '\x00', r3, r4, 0x1, 0x2, 0x4}, 0x50) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001280)=0x0) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000012c0)={r7, r8, r1}, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r9, 0x8921, &(0x7f0000001300)={'netpci0\x00'}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) write$nci(r10, &(0x7f0000001380)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x6, {0x7, 0x6, 0x20, 0x1, 0x76}}, 0xc) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000013c0), &(0x7f0000001400)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000013c0), &(0x7f0000001400)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r11, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0xc, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xd1}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r2) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r2) sendmsg$NL80211_CMD_RADAR_DETECT(r12, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x5c, r13, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r12, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x5c, r13, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000016c0)={0x80}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000016c0)={0x80}) ioctl$PPPOEIOCDFWD(r11, 0xb101, 0x0) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r14, 0x29, 0xcb, &(0x7f0000001780)={0x0, 0xbfc784668cff4d1f, 0x1, r3, 0x3}, 0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f00000017c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @in6=@mcast2, 0x4e22, 0xf1b, 0x4e21, 0xf59d, 0xa, 0x80, 0x20, 0x0, r3, r8}, {0xf3ad, 0xb, 0x7a29, 0x9, 0x0, 0xfd6, 0x9, 0x5}, {0x6, 0x100, 0xfffffffffffffe01, 0x76}, 0x80, 0x6e6bba, 0x0, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0x4d5, 0x2b}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x9, 0x8, 0x5, 0x10000}}, 0xe8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f00000018c0)={0x0, 'nr0\x00', {0x3}}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f00000018c0)={0x0, 'nr0\x00', {0x3}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{0x1, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x11, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xcf4b}]}, &(0x7f0000001a80)='GPL\x00', 0x3, 0x32, &(0x7f0000001ac0)=""/50, 0x41000, 0x1, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x2, 0x6, 0xa20b, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001c40)=[0xffffffffffffffff, r2, r5, r2, r2], &(0x7f0000001c80)=[{0x0, 0x1, 0xa, 0x5}, {0x0, 0x2, 0xa, 0x9}, {0x3, 0x2, 0x8, 0xc}, {0x4, 0x3, 0xb, 0x8}, {0x4, 0x3, 0x4, 0x7}], 0x10, 0x1}, 0x94) 18.004350387s ago: executing program 4 (id=1899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00050073193c99a8772efb0c0002"], 0x3c}}, 0x20000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000200)={0x1d, r6}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r11, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000000140)={0x7, 0x81, 0x8dc4, 0x7f}, 0x10) sendmsg$NFT_MSG_GETGEN(r11, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r12, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x38, 0x140e, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x8040) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r10, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r13}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x19, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000822b00000000000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000700000085000000820000009500000000000000655bed4df5b50a3aff8e4770660f920cdf3ad7d3bedc7be0b1aaae183ccb88212c4fc6bb0f1be89589719d651f592e01d1afed54b1fdd25b0b97b41546911020764a8e8e91af4cbc20010f4858ce49f4169fabc73a63aa9a0090c076bf2d5150e6022697c8192d3ab107c7803383fd407a99f240cc3b48305ad7de85ae42263f1e100126d7b11b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) 17.743559529s ago: executing program 4 (id=1900): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x36, 0x80000002}, {0x6, 0xfc, 0xfe, 0x6cf}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xbfd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x9}, 0x8) write(r0, &(0x7f0000000240)="45032a4a", 0x4) 17.720752479s ago: executing program 3 (id=1901): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @local, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x218, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800"/35], 0x0, 0x32}, 0x28) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x44, &(0x7f0000000140)=0x1, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESDEC=r2], 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800002c9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="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"], 0x50) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f0000000200)) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$sock_int(r8, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0400005e00010100000001ffffffff0c0010000000000000008000"], 0x1c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB="240000001200010000000000000009250700200008000000060000000800e88004004380"], 0x24}}, 0x40d0) 17.629469482s ago: executing program 4 (id=1902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x0, 0x7, 'nat\x00'}]}], {0x14, 0x10}}, 0x184}}, 0x0) 17.463357756s ago: executing program 4 (id=1903): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000f000d000000f6ffff2f619944"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x71, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf110011aaaa432e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000ae0000009500006d0000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000400000000000000000000faffffffffffff0400010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e657400e503d7"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@gettaction={0x128, 0x32, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x9c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffb5}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 17.206531808s ago: executing program 3 (id=1904): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x27d3dc28, 0x1, 0x2, 0x0, 0x22ec, 0x7}, &(0x7f0000000080)=0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111ac0000000000850000008c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00$'], 0x50}}], 0x1, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4) socket$unix(0x1, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x29, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x21, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1880}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd4e9}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000000c0), &(0x7f00000001c0)=0x40) 16.335307599s ago: executing program 3 (id=1905): socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000030000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a31000000002800048008000240000000000800014000000005140003006272696467655f736c6176655f30f7ff0800010073797a310000000014000000110001000000"], 0x9c}}, 0x0) 16.078575588s ago: executing program 3 (id=1906): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket(0x28, 0x6, 0x0) sendto(r2, &(0x7f0000000d00)="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", 0x1000, 0x0, &(0x7f0000000180)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x800020000000005) accept4$llc(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trmw'], 0xa) r10 = socket$netlink(0x10, 0x3, 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r11, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600ffa600000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 15.147029713s ago: executing program 3 (id=1907): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x15, 0x0, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x1843}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20008080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x2000c805}, 0x4000046) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x1f, &(0x7f0000000440)=ANY=[@ANYBLOB="180000004d6a8f37000000006f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000703bf8ff04000000ac888000010000007b870200f0ffffff850000008800000000a900040800000018250000", @ANYRES32=r8, @ANYBLOB="00000000030000000de606000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000060000000000000000000000186400000a0000000000000011cc0000bf91000000000000b702000000000100850000008400"/96], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b0000001801000020206c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000002d0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xa75cd5a461b44c41, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_route(0x10, 0x3, 0x0) 15.02982388s ago: executing program 3 (id=1908): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xa1, @mcast1, 0x6}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000301010100000000000000000200000018000280140001800a000100ac141436080002004b4101010c0019800800020002"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200300, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0a9}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010041, 0x0) 5.508482276s ago: executing program 32 (id=1874): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c851) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110500000000feffffff0500"], 0x21}}, 0xa000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x408d4) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d570020005001300000000000800050000000000050008000900000005000a0000000000060010004e24000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="97b48d0fa587361dda32131607001a744e205a17e3c56188e58148c7871d75d8e23980c7e3073dd68191f7eb2301501ceb4261bd79463763a4331bc16b9c413d6e184b2227a234d5c42cdf95ac320597f4cefc9ba1c3671d60707f25f5734b6105d4def5c3829ced097a54823e582bc5fb68e878ea0fe70f28ea3cfe0ce1d1330fffca9113776b427be2da3b4416272683394d28eadf05530f"], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ffc}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) 4.006780948s ago: executing program 33 (id=1891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socketpair(0x18, 0x80000, 0x1, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="b3e46f72c41b113d41ba9fa37731e790be04053bd736ebc074f2582397e689f301e25c2ab4f419af94c57e5cd7e21ab470876a21e0656a5c86af7526a17f4d0a8bcb8d85ca2e8dd9cb9f6f49259800c336fde5be5aa3f59a04e502c4bdc1a10f888b14fd454adf70863ec00b8fe179d08e4210fe6b0cfcdb876200000000000000", @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700ddffffffffffff6474683a73"], 0x38}}, 0x4004000) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x2}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5a8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r9) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r6, 0x411, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb5}, @exit], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.505137831s ago: executing program 34 (id=1898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/4096, 0x33, 0x1000, 0x0, 0x7, 0x10000}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/4096, 0x33, 0x1000, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x3a6, 0x0, r2, 0xffffffff, '\x00', r3, r4, 0x1, 0x2, 0x4}, 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x3a6, 0x0, r2, 0xffffffff, '\x00', r3, r4, 0x1, 0x2, 0x4}, 0x50) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001280)=0x0) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000012c0)={r7, r8, r1}, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r9, 0x8921, &(0x7f0000001300)={'netpci0\x00'}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) write$nci(r10, &(0x7f0000001380)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x6, {0x7, 0x6, 0x20, 0x1, 0x76}}, 0xc) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000013c0), &(0x7f0000001400)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000013c0), &(0x7f0000001400)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r11, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0xc, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xd1}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r2) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r2) sendmsg$NL80211_CMD_RADAR_DETECT(r12, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x5c, r13, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r12, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x5c, r13, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000016c0)={0x80}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000016c0)={0x80}) ioctl$PPPOEIOCDFWD(r11, 0xb101, 0x0) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r14, 0x29, 0xcb, &(0x7f0000001780)={0x0, 0xbfc784668cff4d1f, 0x1, r3, 0x3}, 0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f00000017c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @in6=@mcast2, 0x4e22, 0xf1b, 0x4e21, 0xf59d, 0xa, 0x80, 0x20, 0x0, r3, r8}, {0xf3ad, 0xb, 0x7a29, 0x9, 0x0, 0xfd6, 0x9, 0x5}, {0x6, 0x100, 0xfffffffffffffe01, 0x76}, 0x80, 0x6e6bba, 0x0, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0x4d5, 0x2b}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x9, 0x8, 0x5, 0x10000}}, 0xe8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f00000018c0)={0x0, 'nr0\x00', {0x3}}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f00000018c0)={0x0, 'nr0\x00', {0x3}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{0x1, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x11, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xcf4b}]}, &(0x7f0000001a80)='GPL\x00', 0x3, 0x32, &(0x7f0000001ac0)=""/50, 0x41000, 0x1, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x2, 0x6, 0xa20b, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001c40)=[0xffffffffffffffff, r2, r5, r2, r2], &(0x7f0000001c80)=[{0x0, 0x1, 0xa, 0x5}, {0x0, 0x2, 0xa, 0x9}, {0x3, 0x2, 0x8, 0xc}, {0x4, 0x3, 0xb, 0x8}, {0x4, 0x3, 0x4, 0x7}], 0x10, 0x1}, 0x94) 2.47762919s ago: executing program 35 (id=1903): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000f000d000000f6ffff2f619944"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x71, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf110011aaaa432e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000ae0000009500006d0000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000400000000000000000000faffffffffffff0400010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e657400e503d7"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@gettaction={0x128, 0x32, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x9c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffb5}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 36 (id=1908): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xa1, @mcast1, 0x6}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000301010100000000000000000200000018000280140001800a000100ac141436080002004b4101010c0019800800020002"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200300, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0a9}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010041, 0x0) kernel console output (not intermixed with test programs): bridge0: port 1(bridge_slave_0) entered disabled state [ 161.938719][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.993513][ T8068] netlink: 'syz.0.504': attribute type 27 has an invalid length. [ 161.998219][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.220148][ T8045] geneve2: left promiscuous mode [ 162.272225][ T8068] geneve3: left promiscuous mode [ 162.321625][ T8068] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 162.339462][ T8068] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 162.356232][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.416049][ T8050] wg1 speed is unknown, defaulting to 1000 [ 162.425839][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.454071][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.510313][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 162.516898][ T8050] wlan0 speed is unknown, defaulting to 1000 [ 162.520936][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.608386][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.627575][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.706460][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.726194][ T8089] xt_TCPMSS: Only works on TCP SYN packets [ 162.739605][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.757567][ T8084] syzkaller0: entered promiscuous mode [ 162.764394][ T8084] syzkaller0: entered allmulticast mode [ 162.819533][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 163.192652][ T8095] netlink: 76 bytes leftover after parsing attributes in process `syz.3.510'. [ 163.402125][ T8100] bond2: entered promiscuous mode [ 163.407744][ T8100] bond2: entered allmulticast mode [ 163.420141][ T8100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.573088][ T30] audit: type=1800 audit(1763513870.728:2): pid=8089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.508" name="cgroup.controllers" dev="tmpfs" ino=578 res=0 errno=0 [ 163.650560][ T8110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.514'. [ 163.834992][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 163.933179][ T8119] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 163.956659][ T8119] bond3 (unregistering): Released all slaves [ 164.395374][ T8136] wg1 speed is unknown, defaulting to 1000 [ 164.433594][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 164.472564][ T8139] wg1 speed is unknown, defaulting to 1000 [ 164.514743][ T8136] wlan0 speed is unknown, defaulting to 1000 [ 164.570452][ T8139] wlan0 speed is unknown, defaulting to 1000 [ 164.697285][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 164.722879][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 164.815300][ T8152] netlink: 'syz.2.525': attribute type 1 has an invalid length. [ 165.292415][ T8177] netlink: 'syz.2.533': attribute type 3 has an invalid length. [ 165.662155][ T8186] TC_ACT_REPEAT abuse ? [ 166.016031][ T8170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.632907][ T8208] syzkaller0: entered promiscuous mode [ 166.640067][ T8208] syzkaller0: entered allmulticast mode [ 166.794789][ T8221] __nla_validate_parse: 3 callbacks suppressed [ 166.794808][ T8221] netlink: 2 bytes leftover after parsing attributes in process `syz.3.547'. [ 167.072472][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 167.084237][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 167.206877][ T5830] block nbd0: Receive control failed (result -107) [ 167.247223][ T8239] dummy0: left allmulticast mode [ 167.252920][ T8239] dummy0: left promiscuous mode [ 167.259022][ T8239] bridge0: port 3(dummy0) entered disabled state [ 167.267721][ T8239] bridge_slave_1: left allmulticast mode [ 167.274100][ T8239] bridge_slave_1: left promiscuous mode [ 167.280448][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.290848][ T8239] bridge_slave_0: left allmulticast mode [ 167.301302][ T8239] bridge_slave_0: left promiscuous mode [ 167.307616][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.000115][ T8255] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 169.011847][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.021289][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.035423][ T8258] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 169.180797][ T8270] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 169.260573][ T8270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.281798][ T8279] netlink: 72 bytes leftover after parsing attributes in process `syz.4.557'. [ 169.298359][ T8270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.305657][ T8270] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.317813][ T8275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'. [ 169.318599][ T8270] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 169.354618][ T8283] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 169.373592][ T8283] bond2: (slave wlan0): Opening slave failed [ 169.511682][ T8284] wg1 speed is unknown, defaulting to 1000 [ 169.533302][ T8284] wlan0 speed is unknown, defaulting to 1000 [ 169.732164][ T8298] xt_TCPMSS: Only works on TCP SYN packets [ 169.826524][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 170.324670][ T8318] wg1 speed is unknown, defaulting to 1000 [ 170.360584][ T8318] wlan0 speed is unknown, defaulting to 1000 [ 170.713224][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 170.756323][ T8334] bond2: option mode: invalid value (254) [ 170.781028][ T8334] bond2 (unregistering): Released all slaves [ 170.798983][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 170.883168][ T8343] netlink: 'syz.1.575': attribute type 6 has an invalid length. [ 170.892061][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'. [ 170.907675][ T8343] netlink: 'syz.1.575': attribute type 6 has an invalid length. [ 171.020069][ T8347] batadv1: entered promiscuous mode [ 171.038135][ T8350] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.540741][ T8363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.671672][ T8363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.843245][ T8363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.017280][ T8363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.084336][ T8391] wg1 speed is unknown, defaulting to 1000 [ 172.095918][ T8391] wlan0 speed is unknown, defaulting to 1000 [ 172.182999][ T8402] netlink: 76 bytes leftover after parsing attributes in process `syz.4.589'. [ 172.197515][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 172.210359][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 172.270784][ T1153] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.295497][ T8402] netlink: 'syz.4.589': attribute type 13 has an invalid length. [ 172.304613][ T8402] netlink: 'syz.4.589': attribute type 17 has an invalid length. [ 172.321669][ T1153] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.409598][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.591'. [ 172.444403][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.452428][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.463741][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 172.474997][ T8402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.546315][ T1153] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.558967][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 172.580360][ T8409] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 172.590053][ T8409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.590'. [ 172.644706][ T1153] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.800731][ T8425] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.594'. [ 173.110536][ T8447] sctp: [Deprecated]: syz.4.599 (pid 8447) Use of int in max_burst socket option. [ 173.110536][ T8447] Use struct sctp_assoc_value instead [ 173.361194][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 173.687188][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.702269][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.777380][ T8449] macsec1: left promiscuous mode [ 173.788548][ T8449] macsec1: left allmulticast mode [ 173.830828][ T8459] hsr_slave_0: left promiscuous mode [ 173.837834][ T8459] hsr_slave_1: left promiscuous mode [ 173.857122][ T5894] wg1 speed is unknown, defaulting to 1000 [ 173.865154][ T8476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.608'. [ 173.874850][ T5894] syz: Port: 1 Link DOWN [ 173.888706][ T48] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.905914][ T48] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.928500][ T48] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.949123][ T48] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.056099][ T8483] geneve2: entered promiscuous mode [ 174.250017][ T8488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.280955][ T8488] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.308684][ T8488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.418782][ T8496] syzkaller0: entered promiscuous mode [ 174.424315][ T8496] syzkaller0: entered allmulticast mode [ 174.536548][ T8496] bond2: entered allmulticast mode [ 174.546714][ T8496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.694157][ T8514] netlink: 'syz.0.619': attribute type 18 has an invalid length. [ 176.079211][ T8520] wg1 speed is unknown, defaulting to 1000 [ 176.087625][ T8520] wlan0 speed is unknown, defaulting to 1000 [ 176.131218][ T8524] wg1 speed is unknown, defaulting to 1000 [ 176.177161][ T8524] wlan0 speed is unknown, defaulting to 1000 [ 176.607779][ T8524] netlink: 'syz.1.623': attribute type 2 has an invalid length. [ 176.767795][ T8547] x_tables: ip_tables: osf match: only valid for protocol 6 [ 177.348687][ T8570] __nla_validate_parse: 24 callbacks suppressed [ 177.348707][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'. [ 177.461860][ T8570] bond3: entered allmulticast mode [ 177.494546][ T8570] bond3 (unregistering): Released all slaves [ 177.741261][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.640'. [ 177.835702][ T8596] netlink: 'syz.2.642': attribute type 10 has an invalid length. [ 177.858043][ T8596] netlink: 156 bytes leftover after parsing attributes in process `syz.2.642'. [ 177.890030][ T8596] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 177.937374][ T8602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.644'. [ 177.980527][ T8604] macvlan0: entered allmulticast mode [ 178.056471][ T8606] netlink: 'syz.4.646': attribute type 16 has an invalid length. [ 178.065112][ T8606] netlink: 22474 bytes leftover after parsing attributes in process `syz.4.646'. [ 178.215406][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 178.291117][ T8625] ¾x9ÿ: renamed from bridge_slave_0 [ 178.429906][ T8635] 8021q: VLANs not supported on lo [ 178.900723][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 179.164965][ T8071] hid-generic 0005:046D:05DF.0001: item fetching failed at offset 0/1 [ 179.190049][ T8071] hid-generic 0005:046D:05DF.0001: probe with driver hid-generic failed with error -22 [ 179.380264][ T8684] wg1 speed is unknown, defaulting to 1000 [ 179.387510][ T8684] wlan0 speed is unknown, defaulting to 1000 [ 179.536377][ T8687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.738526][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.739414][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 179.867830][ T8702] netlink: 'syz.3.671': attribute type 4 has an invalid length. [ 179.879352][ T8698] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 179.889668][ T8702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.671'. [ 179.923242][ T8701] vlan3: entered promiscuous mode [ 179.941107][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.671'. [ 179.952267][ T8701] bond0: entered promiscuous mode [ 180.074175][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.671'. [ 180.079780][ T8700] wg1 speed is unknown, defaulting to 1000 [ 180.116634][ T8700] wlan0 speed is unknown, defaulting to 1000 [ 180.552881][ T8714] netlink: 'syz.2.677': attribute type 2 has an invalid length. [ 180.609427][ T8714] : entered promiscuous mode [ 181.205491][ T8738] bridge0: entered promiscuous mode [ 181.212515][ T8738] macsec2: entered promiscuous mode [ 181.220325][ T8738] bridge0: port 3(macsec2) entered blocking state [ 181.227159][ T8738] bridge0: port 3(macsec2) entered disabled state [ 181.234624][ T8738] macsec2: entered allmulticast mode [ 181.240587][ T8738] bridge0: entered allmulticast mode [ 181.260514][ T8738] macsec2: left allmulticast mode [ 181.270868][ T8738] bridge0: left allmulticast mode [ 181.290793][ T8738] bridge0: left promiscuous mode [ 181.400664][ T8737] syzkaller0: entered promiscuous mode [ 181.406189][ T8737] syzkaller0: entered allmulticast mode [ 182.409863][ T8773] __nla_validate_parse: 1 callbacks suppressed [ 182.409883][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 182.862590][ T56] block nbd3: Possible stuck request ffff88802548e000: control (read@0,1024B). Runtime 60 seconds [ 182.875501][ T56] block nbd3: Possible stuck request ffff88802548e1c0: control (read@1024,1024B). Runtime 60 seconds [ 182.887160][ T56] block nbd3: Possible stuck request ffff88802548e380: control (read@2048,1024B). Runtime 60 seconds [ 182.899297][ T56] block nbd3: Possible stuck request ffff88802548e540: control (read@3072,1024B). Runtime 60 seconds [ 184.036639][ T8751] tipc: Started in network mode [ 184.048046][ T8751] tipc: Node identity 080211, cluster identity 4711 [ 184.058774][ T8751] tipc: Enabled bearer , priority 0 [ 184.411510][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 184.552042][ T8802] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 184.573471][ T8802] syzkaller1: entered promiscuous mode [ 184.584557][ T8802] syzkaller1: entered allmulticast mode [ 184.856512][ T8806] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 184.868490][ T8806] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 184.942022][ T8812] netlink: 'syz.3.701': attribute type 2 has an invalid length. [ 184.959596][ T8812] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 184.967682][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 185.180958][ T5901] tipc: Node number set to 134353152 [ 185.286653][ T8820] netlink: 56 bytes leftover after parsing attributes in process `syz.0.705'. [ 185.380799][ T8825] netlink: 116 bytes leftover after parsing attributes in process `syz.2.707'. [ 185.411428][ T8827] syzkaller1: entered promiscuous mode [ 185.417068][ T8827] syzkaller1: entered allmulticast mode [ 185.440532][ T8827] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 185.474355][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.704'. [ 185.732557][ T8842] xt_CT: No such helper "snmp" [ 185.842173][ T8847] wg1 speed is unknown, defaulting to 1000 [ 185.867519][ T8847] wlan0 speed is unknown, defaulting to 1000 [ 186.044855][ T8854] wg1 speed is unknown, defaulting to 1000 [ 186.214808][ T8854] wlan0 speed is unknown, defaulting to 1000 [ 186.414361][ T8869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.718'. [ 186.434924][ T8869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.718'. [ 186.457557][ T8869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.718'. [ 186.508740][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 187.095870][ T8890] xfrm1: entered allmulticast mode [ 187.202794][ T8898] syzkaller0: entered promiscuous mode [ 187.231814][ T8898] syzkaller0: entered allmulticast mode [ 187.488780][ T8902] syzkaller0: entered promiscuous mode [ 187.501914][ T8902] syzkaller0: entered allmulticast mode [ 187.769437][ T8912] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 192.012661][ T8943] netlink: 'syz.2.737': attribute type 2 has an invalid length. [ 192.102542][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.737'. [ 192.273057][ T8957] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 192.312814][ T8964] netlink: 'syz.1.740': attribute type 3 has an invalid length. [ 192.333455][ T8964] netlink: 'syz.1.740': attribute type 3 has an invalid length. [ 192.479963][ T8957] bond0: (slave bond_slave_0): Releasing backup interface [ 192.495472][ T8969] netlink: 'syz.4.739': attribute type 10 has an invalid length. [ 192.629942][ T8957] bond0: (slave bond_slave_1): Releasing backup interface [ 192.658344][ T8970] netlink: 47 bytes leftover after parsing attributes in process `syz.3.741'. [ 192.687678][ T8957] team0: Port device team_slave_0 removed [ 192.703479][ T8957] team0: Port device team_slave_1 removed [ 192.717226][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.740323][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.750620][ T8957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.855933][ T8969] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 192.949464][ T8969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.964371][ T8969] bond0: (slave wlan1): Opening slave failed [ 192.990214][ T8988] netlink: 428 bytes leftover after parsing attributes in process `syz.2.747'. [ 193.114301][ T8990] syzkaller0: entered promiscuous mode [ 193.128696][ T8990] syzkaller0: entered allmulticast mode [ 193.565058][ T9018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.756'. [ 193.587594][ T9022] netlink: 7 bytes leftover after parsing attributes in process `syz.4.757'. [ 193.619775][ T9020] netlink: 7 bytes leftover after parsing attributes in process `syz.4.757'. [ 193.666407][ T9022] netlink: 7 bytes leftover after parsing attributes in process `syz.4.757'. [ 193.667704][ T9024] netlink: 'syz.4.757': attribute type 6 has an invalid length. [ 193.695643][ T9024] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.695735][ T9020] netlink: 'syz.4.757': attribute type 6 has an invalid length. [ 194.007014][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 194.112159][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.766'. [ 194.260465][ T9071] netlink: 'syz.3.769': attribute type 39 has an invalid length. [ 194.469105][ T9082] syzkaller0: entered promiscuous mode [ 194.474799][ T9082] syzkaller0: entered allmulticast mode [ 195.039751][ T9111] netlink: 96 bytes leftover after parsing attributes in process `syz.0.779'. [ 195.066951][ T9111] 8021q: VLANs not supported on ip6gre0 [ 195.090988][ T9116] netlink: 'syz.1.781': attribute type 11 has an invalid length. [ 195.122417][ T9111] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 195.134409][ T30] audit: type=1800 audit(1763513902.298:3): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.780" name="memory.events" dev="tmpfs" ino=767 res=0 errno=0 [ 195.158373][ T9118] tipc: Enabling of bearer rejected, failed to enable media [ 195.407259][ T9130] syzkaller0: entered promiscuous mode [ 195.413199][ T9130] syzkaller0: entered allmulticast mode [ 195.522323][ T9134] netlink: 'syz.2.787': attribute type 4 has an invalid length. [ 198.206925][ T9219] __nla_validate_parse: 8 callbacks suppressed [ 198.206948][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 198.350678][ T9223] bond2: (slave veth5): Enslaving as an active interface with a down link [ 198.361081][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 198.409257][ T9216] bond2: (slave ip6gretap2): making interface the new active one [ 198.421654][ T9216] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 198.463488][ T9226] wg1 speed is unknown, defaulting to 1000 [ 198.495539][ T9226] wlan0 speed is unknown, defaulting to 1000 [ 198.759116][ T9247] syzkaller1: entered promiscuous mode [ 198.765890][ T9247] syzkaller1: entered allmulticast mode [ 198.785017][ T9242] can: request_module (can-proto-4) failed. [ 198.901832][ T9252] syzkaller0: entered promiscuous mode [ 198.907368][ T9252] syzkaller0: entered allmulticast mode [ 199.352436][ T9268] validate_nla: 1 callbacks suppressed [ 199.352703][ T9268] netlink: 'syz.4.825': attribute type 12 has an invalid length. [ 199.489179][ T9274] wg1 speed is unknown, defaulting to 1000 [ 199.497544][ T9274] wlan0 speed is unknown, defaulting to 1000 [ 200.137653][ T9289] netlink: 104 bytes leftover after parsing attributes in process `syz.4.830'. [ 200.179492][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 200.499001][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.832'. [ 200.591527][ T8074] IPVS: starting estimator thread 0... [ 200.688131][ T9307] IPVS: using max 27 ests per chain, 64800 per kthread [ 201.300376][ T9319] syzkaller0: entered promiscuous mode [ 201.318829][ T9319] syzkaller0: entered allmulticast mode [ 201.342321][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 201.447555][ T9321] macvtap1: entered promiscuous mode [ 201.488181][ T9321] batadv0: entered promiscuous mode [ 201.499358][ T9321] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 201.845995][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 202.371588][ T9353] netlink: 'syz.2.844': attribute type 11 has an invalid length. [ 202.388588][ T9353] netlink: 244 bytes leftover after parsing attributes in process `syz.2.844'. [ 202.462727][ T9353] netlink: 'syz.2.844': attribute type 13 has an invalid length. [ 202.742252][ T9364] syzkaller0: entered promiscuous mode [ 202.747790][ T9364] syzkaller0: entered allmulticast mode [ 202.771237][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.849'. [ 202.886313][ T9370] netlink: 'syz.1.849': attribute type 13 has an invalid length. [ 202.900697][ T9370] netlink: 'syz.1.849': attribute type 17 has an invalid length. [ 202.928148][ T9372] syzkaller0: entered promiscuous mode [ 202.933907][ T9372] syzkaller0: entered allmulticast mode [ 203.110357][ T9370] 8021q: adding VLAN 0 to HW filter on device ` [ 203.127307][ T9370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.183635][ T9384] netlink: 'syz.3.853': attribute type 1 has an invalid length. [ 203.286321][ T9385] wg1 speed is unknown, defaulting to 1000 [ 203.300125][ T9385] wlan0 speed is unknown, defaulting to 1000 [ 203.442487][ T9390] wg1 speed is unknown, defaulting to 1000 [ 203.573050][ T9390] wlan0 speed is unknown, defaulting to 1000 [ 204.776548][ T9253] Set syz1 is full, maxelem 65536 reached [ 205.924417][ T9422] IPVS: Error connecting to the multicast addr [ 206.227037][ T9429] syzkaller0: entered promiscuous mode [ 206.233252][ T9429] syzkaller0: entered allmulticast mode [ 206.257483][ T9428] 0: reclassify loop, rule prio 0, protocol 800 [ 206.316097][ T9437] netlink: 'syz.2.866': attribute type 29 has an invalid length. [ 206.518376][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 206.539716][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.869'. [ 206.660996][ T9452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.868'. [ 206.684979][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'. [ 206.704431][ T9456] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 206.738149][ T5916] wg1 speed is unknown, defaulting to 1000 [ 206.744446][ T5916] syz: Port: 1 Link ACTIVE [ 206.760239][ T9459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 206.807560][ T9455] wg1 speed is unknown, defaulting to 1000 [ 206.837491][ T9455] wlan0 speed is unknown, defaulting to 1000 [ 207.098356][ T9471] nbd: nbd3 already in use [ 207.103622][ T9471] block nbd3: NBD_DISCONNECT [ 207.130043][ T9471] block nbd3: Send disconnect failed -32 [ 207.136037][ T9471] block nbd3: shutting down sockets [ 207.202294][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.211707][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 207.219576][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.228756][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 207.236646][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.245760][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 207.253653][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.262935][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 207.273378][ T5879] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.302299][ T5879] Buffer I/O error on dev nbd3, logical block 0, async page read [ 207.318264][ T5879] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.351815][ T5879] Buffer I/O error on dev nbd3, logical block 1, async page read [ 207.369701][ T5879] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.398058][ T5879] Buffer I/O error on dev nbd3, logical block 2, async page read [ 207.439251][ T5879] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.456839][ T5879] Buffer I/O error on dev nbd3, logical block 3, async page read [ 207.465802][ T5879] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.475576][ T5879] Buffer I/O error on dev nbd3, logical block 0, async page read [ 207.488721][ T5879] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.498055][ T5879] Buffer I/O error on dev nbd3, logical block 1, async page read [ 207.512435][ T5879] ldm_validate_partition_table(): Disk read failed. [ 207.523323][ T5879] Dev nbd3: unable to read RDB block 0 [ 207.548525][ T5879] nbd3: unable to read partition table [ 207.599978][ T5879] ldm_validate_partition_table(): Disk read failed. [ 207.653938][ T5879] Dev nbd3: unable to read RDB block 0 [ 207.662927][ T5879] nbd3: unable to read partition table [ 207.730405][ T9496] wg1 speed is unknown, defaulting to 1000 [ 207.746685][ T9496] wlan0 speed is unknown, defaulting to 1000 [ 207.779782][ T5879] udevd[5879]: failed to send result of seq 12353 to main daemon: Connection refused [ 208.049318][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'. [ 208.353390][ T9533] pim6reg: entered allmulticast mode [ 208.383454][ T9540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.886'. [ 208.414933][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.886'. [ 208.551218][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.888'. [ 208.560568][ T9545] netlink: 'syz.0.888': attribute type 7 has an invalid length. [ 208.571579][ T9545] netlink: 'syz.0.888': attribute type 8 has an invalid length. [ 208.593548][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 208.941678][ T9558] wg1 speed is unknown, defaulting to 1000 [ 208.960653][ T9558] wlan0 speed is unknown, defaulting to 1000 [ 209.227574][ T9555] wg1 speed is unknown, defaulting to 1000 [ 209.237128][ T9555] wlan0 speed is unknown, defaulting to 1000 [ 209.352238][ T9575] wg1 speed is unknown, defaulting to 1000 [ 209.366390][ T9575] wlan0 speed is unknown, defaulting to 1000 [ 209.757061][ T9584] tipc: Enabling of bearer rejected, already enabled [ 209.770328][ T9584] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 209.777771][ T9584] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 209.912760][ T9590] bridge_slave_1: left allmulticast mode [ 209.944982][ T9590] bridge_slave_1: left promiscuous mode [ 209.968554][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.000757][ T9590] bridge_slave_0: left allmulticast mode [ 210.006550][ T9590] bridge_slave_0: left promiscuous mode [ 210.039197][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.245346][ T9594] tipc: Resetting bearer [ 210.267382][ T9596] tipc: Enabled bearer , priority 0 [ 210.368345][ T9592] tipc: Disabling bearer [ 210.413581][ T9608] macsec1: entered promiscuous mode [ 210.419671][ T9608] team0: entered promiscuous mode [ 210.425072][ T9608] macsec1: entered allmulticast mode [ 210.472758][ T9608] team0: entered allmulticast mode [ 210.491264][ T9608] team0: Device macsec1 is already an upper device of the team interface [ 210.520402][ T9608] team0: left allmulticast mode [ 210.530218][ T9608] team0: left promiscuous mode [ 211.117761][ T9637] wg1 speed is unknown, defaulting to 1000 [ 211.127758][ T9637] wlan0 speed is unknown, defaulting to 1000 [ 211.415114][ T9664] sctp: [Deprecated]: syz.1.917 (pid 9664) Use of int in max_burst socket option. [ 211.415114][ T9664] Use struct sctp_assoc_value instead [ 211.617706][ T9681] __nla_validate_parse: 6 callbacks suppressed [ 211.617729][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.922'. [ 211.638158][ T9681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.922'. [ 211.686417][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 211.687159][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 211.699585][ T9676] tipc: Enabled bearer , priority 0 [ 211.716171][ T9676] syzkaller0: entered promiscuous mode [ 211.722327][ T9676] syzkaller0: entered allmulticast mode [ 211.729982][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 211.808102][ T9676] tipc: Resetting bearer [ 211.815867][ T9687] syzkaller0: entered promiscuous mode [ 211.826626][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 211.826849][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 211.834182][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 211.848349][ T9687] syzkaller0: entered allmulticast mode [ 211.857375][ T9625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.864182][ T9625] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 211.873651][ T9675] tipc: Resetting bearer [ 211.884177][ T9625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.909887][ T9625] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 211.934856][ T9675] tipc: Disabling bearer [ 211.944124][ T9625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.956983][ T9625] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 211.980465][ T9625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.987027][ T9625] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 212.013528][ T9693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.925'. [ 212.069581][ T9692] wg1 speed is unknown, defaulting to 1000 [ 212.079678][ T9692] wlan0 speed is unknown, defaulting to 1000 [ 212.179480][ T9699] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 212.187744][ T9699] netlink: 'syz.2.927': attribute type 3 has an invalid length. [ 212.204662][ T9699] netlink: 224 bytes leftover after parsing attributes in process `syz.2.927'. [ 212.353568][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 212.365761][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 212.716190][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 213.275323][ T9749] syzkaller0: entered promiscuous mode [ 213.289117][ T9749] syzkaller0: entered allmulticast mode [ 213.327394][ T9746] wg1 speed is unknown, defaulting to 1000 [ 213.391308][ T9746] wlan0 speed is unknown, defaulting to 1000 [ 213.562167][ T9756] bond1: option mode: unable to set because the bond device has slaves [ 214.037401][ T9776] wg1 speed is unknown, defaulting to 1000 [ 214.058696][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 214.100353][ T9776] wlan0 speed is unknown, defaulting to 1000 [ 214.248515][ T9789] syz.3.950: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.298768][ T9789] CPU: 1 UID: 0 PID: 9789 Comm: syz.3.950 Not tainted syzkaller #0 PREEMPT(full) [ 214.298798][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.298809][ T9789] Call Trace: [ 214.298817][ T9789] [ 214.298825][ T9789] dump_stack_lvl+0x189/0x250 [ 214.298862][ T9789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.298898][ T9789] ? __pfx__printk+0x10/0x10 [ 214.298919][ T9789] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 214.298946][ T9789] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 214.298974][ T9789] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 214.299004][ T9789] warn_alloc+0x214/0x310 [ 214.299042][ T9789] ? __pfx_warn_alloc+0x10/0x10 [ 214.299082][ T9789] ? __get_vm_area_node+0x28f/0x300 [ 214.299108][ T9789] ? packet_set_ring+0x6f3/0x2120 [ 214.299143][ T9789] __vmalloc_node_range_noprof+0x690/0x12d0 [ 214.299207][ T9789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.299236][ T9789] ? alloc_pages_mpol+0x3cd/0x4a0 [ 214.299260][ T9789] ? packet_set_ring+0x6f3/0x2120 [ 214.299281][ T9789] vzalloc_noprof+0xb2/0xf0 [ 214.299308][ T9789] ? packet_set_ring+0x6f3/0x2120 [ 214.299330][ T9789] packet_set_ring+0x6f3/0x2120 [ 214.299378][ T9789] ? __pfx_packet_set_ring+0x10/0x10 [ 214.299422][ T9789] ? _copy_from_user+0x94/0xb0 [ 214.299453][ T9789] packet_setsockopt+0xc5a/0x12c0 [ 214.299477][ T9789] ? __pfx_packet_setsockopt+0x10/0x10 [ 214.299499][ T9789] ? file_init_path+0x3b/0x590 [ 214.299537][ T9789] ? aa_sk_perm+0x81e/0x950 [ 214.299570][ T9789] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.299599][ T9789] ? aa_sock_opt_perm+0xff/0x1b0 [ 214.299632][ T9789] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 214.299651][ T9789] ? __pfx_packet_setsockopt+0x10/0x10 [ 214.299673][ T9789] do_sock_setsockopt+0x17c/0x1b0 [ 214.299701][ T9789] __x64_sys_setsockopt+0x13f/0x1b0 [ 214.299730][ T9789] do_syscall_64+0xfa/0xfa0 [ 214.299748][ T9789] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.299768][ T9789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.299793][ T9789] ? clear_bhb_loop+0x60/0xb0 [ 214.299817][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.299836][ T9789] RIP: 0033:0x7f19a5f8f6c9 [ 214.299854][ T9789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.299869][ T9789] RSP: 002b:00007f19a6d52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.299898][ T9789] RAX: ffffffffffffffda RBX: 00007f19a61e6180 RCX: 00007f19a5f8f6c9 [ 214.299912][ T9789] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000006 [ 214.299923][ T9789] RBP: 00007f19a6011f91 R08: 000000000000001c R09: 0000000000000000 [ 214.299935][ T9789] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 214.299947][ T9789] R13: 00007f19a61e6218 R14: 00007f19a61e6180 R15: 00007fff1dd72fb8 [ 214.299982][ T9789] [ 214.302387][ T9789] Mem-Info: [ 214.610605][ T9789] active_anon:5608 inactive_anon:0 isolated_anon:0 [ 214.610605][ T9789] active_file:3338 inactive_file:39931 isolated_file:0 [ 214.610605][ T9789] unevictable:768 dirty:140 writeback:0 [ 214.610605][ T9789] slab_reclaimable:11505 slab_unreclaimable:135671 [ 214.610605][ T9789] mapped:30233 shmem:1358 pagetables:962 [ 214.610605][ T9789] sec_pagetables:0 bounce:0 [ 214.610605][ T9789] kernel_misc_reclaimable:0 [ 214.610605][ T9789] free:1291893 free_pcp:16143 free_cma:0 [ 214.679330][ T9789] Node 0 active_anon:22432kB inactive_anon:0kB active_file:13352kB inactive_file:159520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120932kB dirty:560kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11880kB pagetables:3704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.776342][ T9789] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.856827][ T9789] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.949612][ T9789] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 214.955555][ T9789] Node 0 DMA32 free:1256616kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22796kB inactive_anon:0kB active_file:13352kB inactive_file:159520kB unevictable:1536kB writepending:564kB zspages:0kB present:3129332kB managed:2565104kB mlocked:0kB bounce:0kB free_pcp:46948kB local_pcp:21268kB free_cma:0kB [ 215.094148][ T9789] lowmem_reserve[]: 0 0 0 0 0 [ 215.105712][ T9789] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.208698][ T9789] lowmem_reserve[]: 0 0 0 0 0 [ 215.216601][ T9789] Node 1 Normal free:3894092kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18032kB local_pcp:11304kB free_cma:0kB [ 215.217405][ T9802] syzkaller0: entered promiscuous mode [ 215.266636][ T9789] lowmem_reserve[]: 0 0 0 0 0 [ 215.286490][ T9802] syzkaller0: entered allmulticast mode [ 215.302811][ T9789] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.340336][ T9789] Node 0 DMA32: 820*4kB (UME) 480*8kB (ME) 466*16kB (UME) 1316*32kB (UME) 422*64kB (UME) 141*128kB (UME) 86*256kB (UME) 60*512kB (UM) 39*1024kB (UE) 21*2048kB (UM) 249*4096kB (UM) = 1257328kB [ 215.378206][ T9789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.405586][ T9789] Node 1 Normal: 213*4kB (UE) 55*8kB (UME) 48*16kB (UME) 72*32kB (UME) 17*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894092kB [ 215.455833][ T9789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.478622][ T9789] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.528078][ T9789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.566613][ T9807] syzkaller0: entered promiscuous mode [ 215.573300][ T9807] syzkaller0: entered allmulticast mode [ 215.588943][ T9789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.600401][ T9789] 44638 total pagecache pages [ 215.605361][ T9789] 0 pages in swap cache [ 215.611127][ T9789] Free swap = 124996kB [ 215.615965][ T9789] Total swap = 124996kB [ 215.621390][ T9789] 2097051 pages RAM [ 215.678169][ T9789] 0 pages HighMem/MovableOnly [ 215.683018][ T9789] 424133 pages reserved [ 215.704623][ T9789] 0 pages cma reserved [ 217.567079][ T9857] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 219.646745][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.661331][ T9913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.760741][ T9916] netlink: 'syz.1.970': attribute type 13 has an invalid length. [ 219.786560][ T9916] netlink: 'syz.1.970': attribute type 17 has an invalid length. [ 219.820515][ T9916] netlink: 'syz.1.970': attribute type 27 has an invalid length. [ 220.120173][ T9929] delete_channel: no stack [ 220.121556][ T9937] __nla_validate_parse: 2 callbacks suppressed [ 220.121573][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 220.159683][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'. [ 220.259692][ T9943] netlink: 'syz.4.979': attribute type 21 has an invalid length. [ 220.273710][ T9943] netlink: 128 bytes leftover after parsing attributes in process `syz.4.979'. [ 220.287184][ T9943] netlink: 'syz.4.979': attribute type 5 has an invalid length. [ 220.296977][ T9943] netlink: 'syz.4.979': attribute type 6 has an invalid length. [ 220.307395][ T9943] netlink: 3 bytes leftover after parsing attributes in process `syz.4.979'. [ 220.331092][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 220.363160][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'. [ 220.388016][ T9945] netlink: 56 bytes leftover after parsing attributes in process `syz.1.980'. [ 220.470414][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 220.479381][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 220.830750][ T9963] syzkaller0: entered promiscuous mode [ 220.836507][ T9963] syzkaller0: entered allmulticast mode [ 220.844380][ T9974] netlink: 'syz.3.988': attribute type 22 has an invalid length. [ 220.854000][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 220.871407][ T9977] syzkaller0: entered promiscuous mode [ 220.877292][ T9977] syzkaller0: entered allmulticast mode [ 221.952670][ T9997] netlink: 'syz.2.992': attribute type 9 has an invalid length. [ 222.864695][ T9890] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.883761][ T9890] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.907149][ T9992] wg1 speed is unknown, defaulting to 1000 [ 222.919533][ T9890] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.938308][ T9890] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.955244][ T9992] wlan0 speed is unknown, defaulting to 1000 [ 223.113823][T10018] raw_sendmsg: syz.2.997 forgot to set AF_INET. Fix it! [ 223.414556][T10033] wg1 speed is unknown, defaulting to 1000 [ 223.443754][T10033] wlan0 speed is unknown, defaulting to 1000 [ 223.462883][T10031] IPVS: Scheduler module ip_vs_ not found [ 223.482103][T10038] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 223.767066][T10047] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 223.786408][T10045] syzkaller0: entered promiscuous mode [ 223.828088][T10045] syzkaller0: entered allmulticast mode [ 223.951938][T10057] netlink: 'syz.3.1006': attribute type 10 has an invalid length. [ 224.040691][T10058] wg1 speed is unknown, defaulting to 1000 [ 224.049286][T10058] wlan0 speed is unknown, defaulting to 1000 [ 224.206594][T10066] wg1 speed is unknown, defaulting to 1000 [ 224.240845][T10066] wlan0 speed is unknown, defaulting to 1000 [ 225.280839][T10113] syzkaller0: entered promiscuous mode [ 225.286468][T10113] syzkaller0: entered allmulticast mode [ 225.336119][T10133] __nla_validate_parse: 4 callbacks suppressed [ 225.336139][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 225.817304][T10152] wg1 speed is unknown, defaulting to 1000 [ 225.825612][T10152] wlan0 speed is unknown, defaulting to 1000 [ 226.035474][T10165] wg1 speed is unknown, defaulting to 1000 [ 226.060206][T10165] wlan0 speed is unknown, defaulting to 1000 [ 226.100094][T10171] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1032'. [ 226.126238][T10171] openvswitch: netlink: Flow key attr not present in new flow. [ 226.453825][T10189] validate_nla: 1 callbacks suppressed [ 226.453845][T10189] netlink: 'syz.2.1035': attribute type 1 has an invalid length. [ 226.533050][T10189] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 226.578660][T10198] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1037'. [ 226.605669][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 226.759992][T10214] syzkaller1: entered promiscuous mode [ 226.765545][T10214] syzkaller1: entered allmulticast mode [ 227.050547][T10231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.086103][T10228] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig [ 227.609548][T10266] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1055'. [ 227.634788][T10266] netlink: 91 bytes leftover after parsing attributes in process `syz.1.1055'. [ 227.649071][T10268] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 227.724353][T10268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.808985][T10270] vlan0: entered promiscuous mode [ 227.814166][T10270] bond3: entered promiscuous mode [ 227.846857][T10270] vlan0: entered allmulticast mode [ 227.854240][T10270] bond3: entered allmulticast mode [ 227.901349][T10268] bond3: (slave gretap1): making interface the new active one [ 227.911559][T10268] gretap1: entered promiscuous mode [ 227.917065][T10268] gretap1: entered allmulticast mode [ 227.926748][T10268] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 227.947747][T10268] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 228.187283][T10296] netlink: 'syz.0.1064': attribute type 13 has an invalid length. [ 228.195876][T10296] netlink: 'syz.0.1064': attribute type 17 has an invalid length. [ 228.541163][T10308] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 228.549401][T10308] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1069'. [ 228.764967][T10311] syzkaller0: entered promiscuous mode [ 228.781139][T10311] syzkaller0: entered allmulticast mode [ 228.795537][T10311] 0: reclassify loop, rule prio 0, protocol 800 [ 228.998489][T10321] tipc: Failed to remove unknown binding: 66,1,1/0:2604774096/2604774098 [ 229.006254][T10317] bridge_slave_0: left allmulticast mode [ 229.019924][T10317] bridge_slave_0: left promiscuous mode [ 229.021155][T10320] tipc: Failed to remove unknown binding: 66,1,1/0:2604774096/2604774098 [ 229.029655][T10317] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.078241][T10319] tipc: Failed to remove unknown binding: 66,1,1/0:2604774096/2604774098 [ 229.105152][T10319] tipc: Failed to remove unknown binding: 66,1,1/0:2604774096/2604774098 [ 229.136209][T10317] bridge_slave_1: left allmulticast mode [ 229.142702][T10317] bridge_slave_1: left promiscuous mode [ 229.148860][T10317] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.165523][T10325] netlink: 'syz.0.1073': attribute type 10 has an invalid length. [ 229.297701][T10317] bond0: (slave bond_slave_0): Releasing backup interface [ 229.315400][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 229.326139][T10317] bond0: (slave bond_slave_1): Releasing backup interface [ 229.345475][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 229.392221][T10317] team0: Port device team_slave_0 removed [ 229.415854][T10332] netlink: 'syz.4.1075': attribute type 5 has an invalid length. [ 229.432717][T10332] netlink: 'syz.4.1075': attribute type 6 has an invalid length. [ 229.463595][T10317] team0: Port device team_slave_1 removed [ 229.473728][T10317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.482925][T10317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.664784][T10317] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.769787][T10325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.780238][T10325] bond0: (slave wlan1): Opening slave failed [ 229.848357][T10338] tipc: Enabling of bearer rejected, already enabled [ 230.279939][T10369] syzkaller0: entered promiscuous mode [ 230.295903][T10369] syzkaller0: entered allmulticast mode [ 230.319879][T10376] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 230.328518][T10376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.548351][T10393] netlink: 'syz.4.1091': attribute type 9 has an invalid length. [ 230.789232][T10400] wg1 speed is unknown, defaulting to 1000 [ 230.797613][T10400] wlan0 speed is unknown, defaulting to 1000 [ 231.073474][T10420] wg1 speed is unknown, defaulting to 1000 [ 231.084621][T10420] wlan0 speed is unknown, defaulting to 1000 [ 231.336623][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 231.349252][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1101'. [ 232.159106][T10488] team0: Caught tx_queue_len zero misconfig [ 232.491729][T10498] Cannot find del_set index 4 as target [ 232.583533][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'. [ 232.597696][T10503] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1111'. [ 232.874621][T10520] tap0: tun_chr_ioctl cmd 1074025681 [ 233.118148][T10533] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1118'. [ 233.170246][T10535] dummy0: entered promiscuous mode [ 233.191729][T10535] bond0: entered promiscuous mode [ 233.212361][T10535] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 233.222832][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 233.234759][T10535] hsr1: entered allmulticast mode [ 233.242445][T10535] dummy0: entered allmulticast mode [ 233.261519][T10535] bond0: entered allmulticast mode [ 233.532793][T10554] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1124'. [ 233.542717][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 233.564213][T10554] IPv6: sit1: Disabled Multicast RS [ 233.570875][T10554] sit1: entered allmulticast mode [ 233.700922][T10565] wg1 speed is unknown, defaulting to 1000 [ 233.729274][T10565] wlan0 speed is unknown, defaulting to 1000 [ 233.919373][T10579] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 234.097501][T10589] netlink: 'syz.2.1139': attribute type 1 has an invalid length. [ 234.180133][T10589] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.188362][T10587] tipc: Enabled bearer , priority 0 [ 234.203709][T10595] netlink: 'syz.3.1133': attribute type 11 has an invalid length. [ 234.233122][T10595] netlink: 'syz.3.1133': attribute type 11 has an invalid length. [ 234.243852][T10594] syzkaller0: entered promiscuous mode [ 234.250077][T10594] syzkaller0: entered allmulticast mode [ 234.265264][T10589] bond3: (slave dummy0): making interface the new active one [ 234.266384][T10595] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1133'. [ 234.274616][T10589] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 234.311400][T10572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.450303][T10587] tipc: Resetting bearer [ 234.506998][T10586] tipc: Resetting bearer [ 234.529420][T10586] tipc: Disabling bearer [ 234.534596][T10607] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1145'. [ 234.680526][T10610] wg1 speed is unknown, defaulting to 1000 [ 234.695697][T10610] wlan0 speed is unknown, defaulting to 1000 [ 234.973672][T10619] openvswitch: netlink: Flow actions attr not present in new flow. [ 235.010127][T10619] openvswitch: netlink: Missing key (keys=40, expected=100) [ 235.160423][T10632] wg1 speed is unknown, defaulting to 1000 [ 235.168711][T10632] wlan0 speed is unknown, defaulting to 1000 [ 235.250592][T10629] wg1 speed is unknown, defaulting to 1000 [ 235.283392][T10629] wlan0 speed is unknown, defaulting to 1000 [ 235.290264][T10635] wg1 speed is unknown, defaulting to 1000 [ 235.299215][T10638] IPv6: Can't replace route, no match found [ 235.334770][T10635] wlan0 speed is unknown, defaulting to 1000 [ 235.531194][T10649] netlink: 'syz.3.1155': attribute type 5 has an invalid length. [ 235.785895][T10643] wg1 speed is unknown, defaulting to 1000 [ 235.816771][T10643] wlan0 speed is unknown, defaulting to 1000 [ 235.965841][T10667] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 236.417228][T10686] __nla_validate_parse: 1 callbacks suppressed [ 236.417249][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 236.432340][T10691] wg1 speed is unknown, defaulting to 1000 [ 236.441925][T10691] wlan0 speed is unknown, defaulting to 1000 [ 236.779739][T10707] netlink: 'syz.0.1169': attribute type 4 has an invalid length. [ 236.805193][T10708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1171'. [ 237.166100][T10719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1174'. [ 237.520063][T10737] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 237.528043][T10736] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 237.536300][T10737] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1178'. [ 237.562588][T10736] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1178'. [ 237.752684][T10741] syzkaller0: entered promiscuous mode [ 237.758978][T10741] syzkaller0: entered allmulticast mode [ 238.327012][T10747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1181'. [ 238.447121][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 238.495528][T10761] wg1 speed is unknown, defaulting to 1000 [ 238.504041][T10765] wg1 speed is unknown, defaulting to 1000 [ 238.524783][T10765] wlan0 speed is unknown, defaulting to 1000 [ 238.546082][T10761] wlan0 speed is unknown, defaulting to 1000 [ 238.895371][T10772] wg1 speed is unknown, defaulting to 1000 [ 238.911798][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 238.922099][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 238.954300][T10772] wlan0 speed is unknown, defaulting to 1000 [ 239.108612][T10794] tipc: Enabled bearer , priority 0 [ 239.124577][T10794] syzkaller0: entered promiscuous mode [ 239.138807][T10794] syzkaller0: entered allmulticast mode [ 239.165807][T10794] syzkaller0: MTU too low for tipc bearer [ 239.177710][T10794] tipc: Disabling bearer [ 239.285797][T10802] geneve2: entered promiscuous mode [ 239.291369][T10802] geneve2: entered allmulticast mode [ 239.622894][T10813] wg1 speed is unknown, defaulting to 1000 [ 239.630273][T10813] wlan0 speed is unknown, defaulting to 1000 [ 239.661230][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 239.826943][T10820] netlink: 'syz.0.1203': attribute type 10 has an invalid length. [ 239.831182][T10822] batadv_slave_1: entered promiscuous mode [ 239.853843][T10820] geneve0: entered promiscuous mode [ 239.865266][T10820] team0: Port device geneve0 added [ 239.871185][ T79] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.950842][T10822] batadv_slave_1 (unregistering): left promiscuous mode [ 239.980631][ T79] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.989879][ T79] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.038346][ T79] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.361585][T10836] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.442753][T10840] bridge0: entered allmulticast mode [ 240.486368][T10845] nbd: socks must be embedded in a SOCK_ITEM attr [ 240.499189][T10836] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.514814][T10845] block nbd1: shutting down sockets [ 240.771560][T10836] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.935877][T10836] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.077880][T10869] wg1 speed is unknown, defaulting to 1000 [ 241.102177][T10869] wlan0 speed is unknown, defaulting to 1000 [ 241.147494][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.216840][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.280049][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.322739][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.391309][T10882] syzkaller0: entered promiscuous mode [ 241.403519][T10882] syzkaller0: entered allmulticast mode [ 241.777297][T10899] wg1 speed is unknown, defaulting to 1000 [ 241.786506][T10899] wlan0 speed is unknown, defaulting to 1000 [ 241.819085][T10906] __nla_validate_parse: 5 callbacks suppressed [ 241.819108][T10906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1224'. [ 241.837353][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1225'. [ 241.892604][T10904] can: request_module (can-proto-5) failed. [ 241.924481][T10907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.991040][T10909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.999364][T10909] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 242.011869][T10909] bond3: (slave sit1): Error -95 calling set_mac_address [ 242.364307][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 242.400109][T10933] netlink: 'syz.1.1231': attribute type 13 has an invalid length. [ 242.462810][T10935] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 242.508816][T10936] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1228'. [ 242.561880][T10944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'. [ 242.574274][T10946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'. [ 242.587116][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 242.609324][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 242.635648][T10944] netlink: 'syz.2.1233': attribute type 18 has an invalid length. [ 243.188752][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.218319][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.233904][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.270479][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.552191][T10966] wg1 speed is unknown, defaulting to 1000 [ 243.596733][T10966] wlan0 speed is unknown, defaulting to 1000 [ 243.870124][T10989] geneve1: mtu less than device minimum [ 243.877052][T10994] netlink: 'syz.2.1245': attribute type 39 has an invalid length. [ 243.987080][T10999] netlink: 'syz.4.1247': attribute type 1 has an invalid length. [ 244.101703][T11009] No such timeout policy "syz0" [ 244.277460][T11015] FAULT_INJECTION: forcing a failure. [ 244.277460][T11015] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 244.294626][T11015] CPU: 0 UID: 0 PID: 11015 Comm: syz.4.1251 Not tainted syzkaller #0 PREEMPT(full) [ 244.294654][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.294664][T11015] Call Trace: [ 244.294671][T11015] [ 244.294690][T11015] dump_stack_lvl+0x189/0x250 [ 244.294719][T11015] ? __pfx____ratelimit+0x10/0x10 [ 244.294744][T11015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.294764][T11015] ? __pfx__printk+0x10/0x10 [ 244.294781][T11015] ? __might_fault+0xb0/0x130 [ 244.294821][T11015] should_fail_ex+0x414/0x560 [ 244.294852][T11015] _copy_from_iter+0x1de/0x1790 [ 244.294878][T11015] ? rcu_is_watching+0x15/0xb0 [ 244.294902][T11015] ? kmalloc_reserve+0xbd/0x290 [ 244.294920][T11015] ? __pfx__copy_from_iter+0x10/0x10 [ 244.294941][T11015] ? __build_skb_around+0x262/0x3f0 [ 244.294961][T11015] ? netlink_sendmsg+0x642/0xb30 [ 244.294976][T11015] ? skb_put+0x11b/0x210 [ 244.294998][T11015] netlink_sendmsg+0x6b2/0xb30 [ 244.295025][T11015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.295048][T11015] ? aa_sock_msg_perm+0xf1/0x1d0 [ 244.295074][T11015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.295090][T11015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.295110][T11015] __sock_sendmsg+0x21c/0x270 [ 244.295137][T11015] __sys_sendto+0x3bd/0x520 [ 244.295160][T11015] ? __pfx___sys_sendto+0x10/0x10 [ 244.295175][T11015] ? count_memcg_event_mm+0x21/0x260 [ 244.295225][T11015] ? exc_page_fault+0x82/0x100 [ 244.295246][T11015] ? do_user_addr_fault+0xc85/0x1380 [ 244.295269][T11015] __x64_sys_sendto+0xde/0x100 [ 244.295291][T11015] do_syscall_64+0xfa/0xfa0 [ 244.295307][T11015] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.295324][T11015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.295339][T11015] ? clear_bhb_loop+0x60/0xb0 [ 244.295360][T11015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.295376][T11015] RIP: 0033:0x7f536719155c [ 244.295393][T11015] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 244.295407][T11015] RSP: 002b:00007f536801bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 244.295427][T11015] RAX: ffffffffffffffda RBX: 00007f536801bfc0 RCX: 00007f536719155c [ 244.295439][T11015] RDX: 0000000000000020 RSI: 00007f536801c010 RDI: 0000000000000005 [ 244.295451][T11015] RBP: 0000000000000000 R08: 00007f536801bf14 R09: 000000000000000c [ 244.295461][T11015] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 244.295471][T11015] R13: 00007f536801bf68 R14: 00007f536801c010 R15: 0000000000000000 [ 244.295502][T11015] [ 244.613730][T11023] syzkaller0: entered promiscuous mode [ 244.619670][T11023] syzkaller0: entered allmulticast mode [ 244.870033][T11042] tipc: Enabled bearer , priority 0 [ 244.880310][T11043] syzkaller0: entered promiscuous mode [ 244.898329][T11043] syzkaller0: entered allmulticast mode [ 244.934287][T11049] vlan4: entered promiscuous mode [ 244.941238][T11049] vlan4: entered allmulticast mode [ 244.946552][T11049] hsr_slave_1: entered allmulticast mode [ 244.954175][T11042] tipc: Resetting bearer [ 244.976912][T11042] tipc: Disabling bearer [ 244.998763][T11049] wg1 speed is unknown, defaulting to 1000 [ 245.005699][T11049] wlan0 speed is unknown, defaulting to 1000 [ 245.351597][T11054] wg1 speed is unknown, defaulting to 1000 [ 245.383758][T11054] wlan0 speed is unknown, defaulting to 1000 [ 245.410396][T11069] FAULT_INJECTION: forcing a failure. [ 245.410396][T11069] name failslab, interval 1, probability 0, space 0, times 1 [ 245.425428][T11069] CPU: 1 UID: 0 PID: 11069 Comm: syz.0.1265 Not tainted syzkaller #0 PREEMPT(full) [ 245.425453][T11069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.425465][T11069] Call Trace: [ 245.425473][T11069] [ 245.425480][T11069] dump_stack_lvl+0x189/0x250 [ 245.425511][T11069] ? __pfx____ratelimit+0x10/0x10 [ 245.425539][T11069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.425564][T11069] ? __pfx__printk+0x10/0x10 [ 245.425591][T11069] ? __lock_acquire+0xab9/0xd20 [ 245.425620][T11069] should_fail_ex+0x414/0x560 [ 245.425656][T11069] should_failslab+0xa8/0x100 [ 245.425679][T11069] kmem_cache_alloc_noprof+0x74/0x6e0 [ 245.425715][T11069] ? skb_clone+0x212/0x3a0 [ 245.425746][T11069] skb_clone+0x212/0x3a0 [ 245.425773][T11069] __netlink_deliver_tap+0x404/0x850 [ 245.425811][T11069] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.425834][T11069] netlink_deliver_tap+0x19c/0x1b0 [ 245.425855][T11069] netlink_unicast+0x7fa/0x9e0 [ 245.425896][T11069] ? __pfx_netlink_unicast+0x10/0x10 [ 245.425928][T11069] ? netlink_sendmsg+0x642/0xb30 [ 245.425945][T11069] ? skb_put+0x11b/0x210 [ 245.425969][T11069] netlink_sendmsg+0x805/0xb30 [ 245.426002][T11069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.426028][T11069] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.426059][T11069] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.426078][T11069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.426100][T11069] __sock_sendmsg+0x21c/0x270 [ 245.426130][T11069] __sys_sendto+0x3bd/0x520 [ 245.426154][T11069] ? __pfx___sys_sendto+0x10/0x10 [ 245.426170][T11069] ? count_memcg_event_mm+0x21/0x260 [ 245.426224][T11069] ? exc_page_fault+0x82/0x100 [ 245.426248][T11069] ? do_user_addr_fault+0xc85/0x1380 [ 245.426275][T11069] __x64_sys_sendto+0xde/0x100 [ 245.426300][T11069] do_syscall_64+0xfa/0xfa0 [ 245.426318][T11069] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.426336][T11069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.426355][T11069] ? clear_bhb_loop+0x60/0xb0 [ 245.426380][T11069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.426399][T11069] RIP: 0033:0x7f8f32f9155c [ 245.426417][T11069] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 245.426433][T11069] RSP: 002b:00007f8f33dc5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 245.426456][T11069] RAX: ffffffffffffffda RBX: 00007f8f33dc5fc0 RCX: 00007f8f32f9155c [ 245.426470][T11069] RDX: 0000000000000020 RSI: 00007f8f33dc6010 RDI: 0000000000000005 [ 245.426483][T11069] RBP: 0000000000000000 R08: 00007f8f33dc5f14 R09: 000000000000000c [ 245.426515][T11069] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 245.426527][T11069] R13: 00007f8f33dc5f68 R14: 00007f8f33dc6010 R15: 0000000000000000 [ 245.426562][T11069] [ 245.817824][T11076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.945062][T11085] netlink: 'syz.0.1271': attribute type 9 has an invalid length. [ 246.506203][T11113] wg1 speed is unknown, defaulting to 1000 [ 246.513355][T11113] wlan0 speed is unknown, defaulting to 1000 [ 246.731323][T11118] FAULT_INJECTION: forcing a failure. [ 246.731323][T11118] name failslab, interval 1, probability 0, space 0, times 0 [ 246.746330][T11118] CPU: 0 UID: 0 PID: 11118 Comm: syz.4.1279 Not tainted syzkaller #0 PREEMPT(full) [ 246.746360][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.746371][T11118] Call Trace: [ 246.746380][T11118] [ 246.746389][T11118] dump_stack_lvl+0x189/0x250 [ 246.746420][T11118] ? __pfx____ratelimit+0x10/0x10 [ 246.746449][T11118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.746474][T11118] ? __pfx__printk+0x10/0x10 [ 246.746522][T11118] ? __pfx___might_resched+0x10/0x10 [ 246.746541][T11118] ? fs_reclaim_acquire+0x7d/0x100 [ 246.746564][T11118] should_fail_ex+0x414/0x560 [ 246.746599][T11118] should_failslab+0xa8/0x100 [ 246.746622][T11118] __kmalloc_noprof+0xcb/0x7f0 [ 246.746648][T11118] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 246.746683][T11118] ? rcu_is_watching+0x15/0xb0 [ 246.746712][T11118] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 246.746747][T11118] genl_family_rcv_msg_doit+0xb8/0x300 [ 246.746780][T11118] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 246.746810][T11118] ? __pfx_genl_get_cmd+0x10/0x10 [ 246.746833][T11118] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 246.746869][T11118] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 246.746898][T11118] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 246.746935][T11118] genl_rcv_msg+0x60e/0x790 [ 246.746970][T11118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.746994][T11118] ? __pfx_ctrl_getfamily+0x10/0x10 [ 246.747037][T11118] netlink_rcv_skb+0x208/0x470 [ 246.747055][T11118] ? __lock_acquire+0xab9/0xd20 [ 246.747075][T11118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.747102][T11118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.747147][T11118] ? down_read+0x1ad/0x2e0 [ 246.747173][T11118] genl_rcv+0x28/0x40 [ 246.747196][T11118] netlink_unicast+0x82f/0x9e0 [ 246.747236][T11118] ? __pfx_netlink_unicast+0x10/0x10 [ 246.747280][T11118] ? netlink_sendmsg+0x642/0xb30 [ 246.747299][T11118] ? skb_put+0x11b/0x210 [ 246.747325][T11118] netlink_sendmsg+0x805/0xb30 [ 246.747359][T11118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.747386][T11118] ? aa_sock_msg_perm+0xf1/0x1d0 [ 246.747416][T11118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.747436][T11118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.747459][T11118] __sock_sendmsg+0x21c/0x270 [ 246.747489][T11118] __sys_sendto+0x3bd/0x520 [ 246.747514][T11118] ? __pfx___sys_sendto+0x10/0x10 [ 246.747531][T11118] ? count_memcg_event_mm+0x21/0x260 [ 246.747586][T11118] ? exc_page_fault+0x82/0x100 [ 246.747611][T11118] ? do_user_addr_fault+0xc85/0x1380 [ 246.747638][T11118] __x64_sys_sendto+0xde/0x100 [ 246.747662][T11118] do_syscall_64+0xfa/0xfa0 [ 246.747689][T11118] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.747708][T11118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.747728][T11118] ? clear_bhb_loop+0x60/0xb0 [ 246.747752][T11118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.747770][T11118] RIP: 0033:0x7f536719155c [ 246.747790][T11118] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 246.747806][T11118] RSP: 002b:00007f536801bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 246.747828][T11118] RAX: ffffffffffffffda RBX: 00007f536801bfc0 RCX: 00007f536719155c [ 246.747841][T11118] RDX: 0000000000000020 RSI: 00007f536801c010 RDI: 0000000000000005 [ 246.747853][T11118] RBP: 0000000000000000 R08: 00007f536801bf14 R09: 000000000000000c [ 246.747865][T11118] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 246.747876][T11118] R13: 00007f536801bf68 R14: 00007f536801c010 R15: 0000000000000000 [ 246.747917][T11118] [ 247.464027][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1285'. [ 248.061190][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 248.093408][T11153] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1289'. [ 248.104682][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 248.229957][T11158] FAULT_INJECTION: forcing a failure. [ 248.229957][T11158] name failslab, interval 1, probability 0, space 0, times 0 [ 248.243138][T11158] CPU: 0 UID: 0 PID: 11158 Comm: syz.0.1291 Not tainted syzkaller #0 PREEMPT(full) [ 248.243166][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.243177][T11158] Call Trace: [ 248.243186][T11158] [ 248.243195][T11158] dump_stack_lvl+0x189/0x250 [ 248.243226][T11158] ? __pfx____ratelimit+0x10/0x10 [ 248.243256][T11158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.243282][T11158] ? __pfx__printk+0x10/0x10 [ 248.243309][T11158] ? __pfx___might_resched+0x10/0x10 [ 248.243330][T11158] ? fs_reclaim_acquire+0x7d/0x100 [ 248.243355][T11158] should_fail_ex+0x414/0x560 [ 248.243389][T11158] should_failslab+0xa8/0x100 [ 248.243410][T11158] kmem_cache_alloc_node_noprof+0x77/0x710 [ 248.243436][T11158] ? __alloc_skb+0x112/0x2d0 [ 248.243462][T11158] __alloc_skb+0x112/0x2d0 [ 248.243487][T11158] ctrl_getfamily+0x3a1/0x590 [ 248.243516][T11158] ? __pfx_ctrl_getfamily+0x10/0x10 [ 248.243540][T11158] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 248.243575][T11158] genl_family_rcv_msg_doit+0x215/0x300 [ 248.243609][T11158] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 248.243664][T11158] genl_rcv_msg+0x60e/0x790 [ 248.243700][T11158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.243724][T11158] ? __pfx_ctrl_getfamily+0x10/0x10 [ 248.243751][T11158] ? __asan_memcpy+0x40/0x70 [ 248.243776][T11158] ? __pfx_ref_tracker_free+0x10/0x10 [ 248.243805][T11158] netlink_rcv_skb+0x208/0x470 [ 248.243824][T11158] ? __lock_acquire+0xab9/0xd20 [ 248.243844][T11158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.243871][T11158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.243925][T11158] ? down_read+0x1ad/0x2e0 [ 248.243951][T11158] genl_rcv+0x28/0x40 [ 248.243973][T11158] netlink_unicast+0x82f/0x9e0 [ 248.244011][T11158] ? __pfx_netlink_unicast+0x10/0x10 [ 248.244040][T11158] ? netlink_sendmsg+0x642/0xb30 [ 248.244057][T11158] ? skb_put+0x11b/0x210 [ 248.244086][T11158] netlink_sendmsg+0x805/0xb30 [ 248.244120][T11158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.244146][T11158] ? aa_sock_msg_perm+0xf1/0x1d0 [ 248.244177][T11158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.244196][T11158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.244220][T11158] __sock_sendmsg+0x21c/0x270 [ 248.244250][T11158] __sys_sendto+0x3bd/0x520 [ 248.244274][T11158] ? __pfx___sys_sendto+0x10/0x10 [ 248.244290][T11158] ? count_memcg_event_mm+0x21/0x260 [ 248.244348][T11158] ? exc_page_fault+0x82/0x100 [ 248.244372][T11158] ? do_user_addr_fault+0xc85/0x1380 [ 248.244399][T11158] __x64_sys_sendto+0xde/0x100 [ 248.244424][T11158] do_syscall_64+0xfa/0xfa0 [ 248.244442][T11158] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.244462][T11158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.244481][T11158] ? clear_bhb_loop+0x60/0xb0 [ 248.244505][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.244524][T11158] RIP: 0033:0x7f8f32f9155c [ 248.244544][T11158] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 248.244560][T11158] RSP: 002b:00007f8f33dc5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 248.244582][T11158] RAX: ffffffffffffffda RBX: 00007f8f33dc5fc0 RCX: 00007f8f32f9155c [ 248.244597][T11158] RDX: 0000000000000020 RSI: 00007f8f33dc6010 RDI: 0000000000000005 [ 248.244609][T11158] RBP: 0000000000000000 R08: 00007f8f33dc5f14 R09: 000000000000000c [ 248.244621][T11158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 248.244633][T11158] R13: 00007f8f33dc5f68 R14: 00007f8f33dc6010 R15: 0000000000000000 [ 248.244668][T11158] [ 248.655670][T11162] netlink: 'syz.4.1292': attribute type 1 has an invalid length. [ 248.805025][T11169] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 248.881903][T11169] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 248.893813][T11169] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 248.913372][T11180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'. [ 248.988623][T11180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.037224][T11169] bond4: (slave bridge0): Enslaving as an active interface with a down link [ 249.130357][T11169] macvlan3: entered promiscuous mode [ 249.135896][T11169] macvlan3: entered allmulticast mode [ 249.146345][T11169] bond4: entered promiscuous mode [ 249.164274][T11169] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 249.191866][T11169] bond4: left promiscuous mode [ 249.221326][T11195] FAULT_INJECTION: forcing a failure. [ 249.221326][T11195] name failslab, interval 1, probability 0, space 0, times 0 [ 249.236000][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 249.241832][T11195] CPU: 0 UID: 0 PID: 11195 Comm: syz.1.1303 Not tainted syzkaller #0 PREEMPT(full) [ 249.241859][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.241877][T11195] Call Trace: [ 249.241884][T11195] [ 249.241892][T11195] dump_stack_lvl+0x189/0x250 [ 249.241920][T11195] ? __pfx____ratelimit+0x10/0x10 [ 249.241946][T11195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.241969][T11195] ? __pfx__printk+0x10/0x10 [ 249.241993][T11195] ? __pfx___might_resched+0x10/0x10 [ 249.242018][T11195] should_fail_ex+0x414/0x560 [ 249.242049][T11195] should_failslab+0xa8/0x100 [ 249.242069][T11195] kmem_cache_alloc_node_noprof+0x77/0x710 [ 249.242091][T11195] ? stack_trace_save+0x9c/0xe0 [ 249.242112][T11195] ? __alloc_skb+0x112/0x2d0 [ 249.242136][T11195] __alloc_skb+0x112/0x2d0 [ 249.242159][T11195] netlink_ack+0x146/0xa50 [ 249.242175][T11195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.242216][T11195] netlink_rcv_skb+0x28c/0x470 [ 249.242231][T11195] ? __lock_acquire+0xab9/0xd20 [ 249.242249][T11195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.242273][T11195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.242312][T11195] ? down_read+0x1ad/0x2e0 [ 249.242334][T11195] genl_rcv+0x28/0x40 [ 249.242355][T11195] netlink_unicast+0x82f/0x9e0 [ 249.242390][T11195] ? __pfx_netlink_unicast+0x10/0x10 [ 249.242417][T11195] ? netlink_sendmsg+0x642/0xb30 [ 249.242433][T11195] ? skb_put+0x11b/0x210 [ 249.242455][T11195] netlink_sendmsg+0x805/0xb30 [ 249.242484][T11195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.242507][T11195] ? aa_sock_msg_perm+0xf1/0x1d0 [ 249.242534][T11195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.242551][T11195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.242570][T11195] __sock_sendmsg+0x21c/0x270 [ 249.242598][T11195] __sys_sendto+0x3bd/0x520 [ 249.242618][T11195] ? __pfx___sys_sendto+0x10/0x10 [ 249.242634][T11195] ? count_memcg_event_mm+0x21/0x260 [ 249.242682][T11195] ? exc_page_fault+0x82/0x100 [ 249.242703][T11195] ? do_user_addr_fault+0xc85/0x1380 [ 249.242726][T11195] __x64_sys_sendto+0xde/0x100 [ 249.242748][T11195] do_syscall_64+0xfa/0xfa0 [ 249.242764][T11195] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.242780][T11195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.242797][T11195] ? clear_bhb_loop+0x60/0xb0 [ 249.242818][T11195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.242835][T11195] RIP: 0033:0x7f43ce19155c [ 249.242851][T11195] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 249.242865][T11195] RSP: 002b:00007f43cf051ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 249.242892][T11195] RAX: ffffffffffffffda RBX: 00007f43cf051fc0 RCX: 00007f43ce19155c [ 249.242904][T11195] RDX: 0000000000000020 RSI: 00007f43cf052010 RDI: 0000000000000005 [ 249.242915][T11195] RBP: 0000000000000000 R08: 00007f43cf051f14 R09: 000000000000000c [ 249.242926][T11195] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 249.242935][T11195] R13: 00007f43cf051f68 R14: 00007f43cf052010 R15: 0000000000000000 [ 249.242966][T11195] [ 249.618395][T11198] dvmrp12: entered allmulticast mode [ 249.639022][T11189] dvmrp12: left allmulticast mode [ 249.707417][T11192] wg1 speed is unknown, defaulting to 1000 [ 249.719805][T11192] wlan0 speed is unknown, defaulting to 1000 [ 249.991746][T11217] wg1 speed is unknown, defaulting to 1000 [ 249.994429][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 250.015406][T11216] tipc: Enabled bearer , priority 0 [ 250.031584][T11217] wlan0 speed is unknown, defaulting to 1000 [ 250.038932][T11216] syzkaller0: entered promiscuous mode [ 250.044441][T11216] syzkaller0: entered allmulticast mode [ 250.148553][T11222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1309'. [ 250.174827][T11216] tipc: Resetting bearer [ 250.184912][T11221] tipc: Enabling of bearer rejected, already enabled [ 250.202283][T11221] netlink: 'syz.0.1311': attribute type 13 has an invalid length. [ 250.222897][T11215] tipc: Resetting bearer [ 250.276251][T11215] tipc: Disabling bearer [ 250.504134][T11229] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 250.538573][T11229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.586508][T11231] FAULT_INJECTION: forcing a failure. [ 250.586508][T11231] name failslab, interval 1, probability 0, space 0, times 0 [ 250.639741][T11231] CPU: 1 UID: 0 PID: 11231 Comm: syz.1.1314 Not tainted syzkaller #0 PREEMPT(full) [ 250.639773][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.639785][T11231] Call Trace: [ 250.639793][T11231] [ 250.639802][T11231] dump_stack_lvl+0x189/0x250 [ 250.639834][T11231] ? __pfx____ratelimit+0x10/0x10 [ 250.639864][T11231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.639891][T11231] ? __pfx__printk+0x10/0x10 [ 250.639919][T11231] ? __pfx___might_resched+0x10/0x10 [ 250.639947][T11231] should_fail_ex+0x414/0x560 [ 250.639984][T11231] should_failslab+0xa8/0x100 [ 250.640007][T11231] kmem_cache_alloc_node_noprof+0x77/0x710 [ 250.640033][T11231] ? stack_trace_save+0x9c/0xe0 [ 250.640056][T11231] ? __alloc_skb+0x112/0x2d0 [ 250.640083][T11231] __alloc_skb+0x112/0x2d0 [ 250.640108][T11231] netlink_ack+0x146/0xa50 [ 250.640126][T11231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.640174][T11231] netlink_rcv_skb+0x28c/0x470 [ 250.640193][T11231] ? __lock_acquire+0xab9/0xd20 [ 250.640214][T11231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.640242][T11231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.640288][T11231] ? down_read+0x1ad/0x2e0 [ 250.640314][T11231] genl_rcv+0x28/0x40 [ 250.640338][T11231] netlink_unicast+0x82f/0x9e0 [ 250.640378][T11231] ? __pfx_netlink_unicast+0x10/0x10 [ 250.640411][T11231] ? netlink_sendmsg+0x642/0xb30 [ 250.640430][T11231] ? skb_put+0x11b/0x210 [ 250.640455][T11231] netlink_sendmsg+0x805/0xb30 [ 250.640488][T11231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.640515][T11231] ? aa_sock_msg_perm+0xf1/0x1d0 [ 250.640547][T11231] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.640567][T11231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.640599][T11231] __sock_sendmsg+0x21c/0x270 [ 250.640631][T11231] __sys_sendto+0x3bd/0x520 [ 250.640655][T11231] ? __pfx___sys_sendto+0x10/0x10 [ 250.640673][T11231] ? count_memcg_event_mm+0x21/0x260 [ 250.640728][T11231] ? exc_page_fault+0x82/0x100 [ 250.640753][T11231] ? do_user_addr_fault+0xc85/0x1380 [ 250.640781][T11231] __x64_sys_sendto+0xde/0x100 [ 250.640806][T11231] do_syscall_64+0xfa/0xfa0 [ 250.640824][T11231] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.640841][T11231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.640860][T11231] ? clear_bhb_loop+0x60/0xb0 [ 250.640885][T11231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.640904][T11231] RIP: 0033:0x7f43ce19155c [ 250.640922][T11231] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 250.640939][T11231] RSP: 002b:00007f43cf051ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 250.640961][T11231] RAX: ffffffffffffffda RBX: 00007f43cf051fc0 RCX: 00007f43ce19155c [ 250.640976][T11231] RDX: 0000000000000020 RSI: 00007f43cf052010 RDI: 0000000000000005 [ 250.640988][T11231] RBP: 0000000000000000 R08: 00007f43cf051f14 R09: 000000000000000c [ 250.641000][T11231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 250.641011][T11231] R13: 00007f43cf051f68 R14: 00007f43cf052010 R15: 0000000000000000 [ 250.641046][T11231] [ 250.649916][T11234] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1315'. [ 250.683010][T11224] wg1 speed is unknown, defaulting to 1000 [ 251.059526][T11224] wlan0 speed is unknown, defaulting to 1000 [ 251.265113][T11254] netlink: 'syz.2.1319': attribute type 4 has an invalid length. [ 251.350137][T11253] netlink: 'syz.2.1319': attribute type 4 has an invalid length. [ 251.699795][T11257] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1320'. [ 252.588908][T11288] vw: renamed from ip6_vti0 [ 253.129452][T11303] x_tables: duplicate underflow at hook 3 [ 253.398855][T11305] __nla_validate_parse: 2 callbacks suppressed [ 253.398879][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 253.426000][T11310] wg1 speed is unknown, defaulting to 1000 [ 253.456175][T11310] wlan0 speed is unknown, defaulting to 1000 [ 254.117834][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1336'. [ 254.179096][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1336'. [ 254.325226][T11332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.353932][T11355] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1337'. [ 254.371130][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 254.403315][T11351] ip6tnl0: Caught tx_queue_len zero misconfig [ 254.810146][T11375] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 254.842452][T11376] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 254.887124][T11375] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.911883][T11375] bond0: (slave team0): Enslaving as an active interface with an up link [ 255.009998][T11382] bond0: Device is already in use. [ 255.264152][T11405] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 255.295984][T11403] ipt_ECN: cannot use operation on non-tcp rule [ 255.311460][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 255.322599][T11405] syzkaller1: entered promiscuous mode [ 255.328313][T11405] syzkaller1: entered allmulticast mode [ 255.344852][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 255.363459][T11409] syzkaller0: entered promiscuous mode [ 255.369367][T11409] syzkaller0: entered allmulticast mode [ 255.524077][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 255.652210][T11421] FAULT_INJECTION: forcing a failure. [ 255.652210][T11421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.672007][T11421] CPU: 0 UID: 0 PID: 11421 Comm: syz.4.1355 Not tainted syzkaller #0 PREEMPT(full) [ 255.672037][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.672048][T11421] Call Trace: [ 255.672057][T11421] [ 255.672066][T11421] dump_stack_lvl+0x189/0x250 [ 255.672096][T11421] ? __pfx____ratelimit+0x10/0x10 [ 255.672125][T11421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.672150][T11421] ? __pfx__printk+0x10/0x10 [ 255.672172][T11421] ? __might_fault+0xb0/0x130 [ 255.672213][T11421] should_fail_ex+0x414/0x560 [ 255.672248][T11421] _copy_to_iter+0x1de/0x1790 [ 255.672275][T11421] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 255.672304][T11421] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.672329][T11421] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 255.672358][T11421] ? __pfx__copy_to_iter+0x10/0x10 [ 255.672378][T11421] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 255.672410][T11421] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 255.672442][T11421] __skb_datagram_iter+0xf8/0x990 [ 255.672469][T11421] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 255.672504][T11421] skb_copy_datagram_iter+0xc5/0x230 [ 255.672534][T11421] netlink_recvmsg+0x2ab/0xa30 [ 255.672568][T11421] ? __pfx_netlink_recvmsg+0x10/0x10 [ 255.672607][T11421] ? aa_sock_msg_perm+0xf1/0x1d0 [ 255.672638][T11421] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 255.672657][T11421] ? security_socket_recvmsg+0x7e/0x2e0 [ 255.672679][T11421] ? __pfx_netlink_recvmsg+0x10/0x10 [ 255.672701][T11421] sock_recvmsg+0x22c/0x270 [ 255.672735][T11421] __sys_recvfrom+0x1f6/0x340 [ 255.672759][T11421] ? __pfx___sys_recvfrom+0x10/0x10 [ 255.672776][T11421] ? count_memcg_event_mm+0x21/0x260 [ 255.672829][T11421] ? exc_page_fault+0x82/0x100 [ 255.672853][T11421] ? do_user_addr_fault+0xc85/0x1380 [ 255.672880][T11421] __x64_sys_recvfrom+0xde/0x100 [ 255.672904][T11421] do_syscall_64+0xfa/0xfa0 [ 255.672922][T11421] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.672941][T11421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.672960][T11421] ? clear_bhb_loop+0x60/0xb0 [ 255.672984][T11421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.673001][T11421] RIP: 0033:0x7f5367191494 [ 255.673020][T11421] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 255.673035][T11421] RSP: 002b:00007f536801bed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 255.673057][T11421] RAX: ffffffffffffffda RBX: 00007f536801bfc0 RCX: 00007f5367191494 [ 255.673072][T11421] RDX: 0000000000001000 RSI: 00007f536801c010 RDI: 0000000000000005 [ 255.673085][T11421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.673095][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 255.673106][T11421] R13: 00007f536801bf68 R14: 00007f536801c010 R15: 0000000000000000 [ 255.673136][T11421] [ 256.189709][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 256.543775][T11451] netlink: 'syz.1.1361': attribute type 2 has an invalid length. [ 256.737701][T11456] wg1 speed is unknown, defaulting to 1000 [ 256.754208][T11457] wg1 speed is unknown, defaulting to 1000 [ 256.764481][T11456] wlan0 speed is unknown, defaulting to 1000 [ 256.774208][T11457] wlan0 speed is unknown, defaulting to 1000 [ 257.134427][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 257.282132][T11479] wg1 speed is unknown, defaulting to 1000 [ 257.306330][T11479] wlan0 speed is unknown, defaulting to 1000 [ 257.311263][T11484] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 257.322308][T11484] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 257.373842][T11484] dvmrp1: tun_chr_ioctl cmd 3223385353 [ 257.626033][T11496] netlink: 'syz.4.1375': attribute type 5 has an invalid length. [ 258.229311][T11523] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 258.320554][T11523] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 258.601575][T11534] syzkaller0: entered promiscuous mode [ 258.631463][T11534] syzkaller0: entered allmulticast mode [ 258.681783][T11542] __nla_validate_parse: 7 callbacks suppressed [ 258.681805][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 258.700785][T11542] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 258.835381][T11542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 259.273317][T11554] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1391'. [ 261.474387][T11559] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 261.485943][T11559] bond3 (unregistering): Released all slaves [ 261.683012][T11571] netlink: 'syz.1.1395': attribute type 13 has an invalid length. [ 261.691291][T11571] netlink: 'syz.1.1395': attribute type 17 has an invalid length. [ 261.857245][T11571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.874993][T11571] 8021q: adding VLAN 0 to HW filter on device ` [ 261.924706][T11571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.213948][T11590] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1400'. [ 262.366301][T11599] xt_TCPMSS: Only works on TCP SYN packets [ 263.128427][T11631] tipc: Started in network mode [ 263.133573][T11631] tipc: Node identity 425e41705fa, cluster identity 4711 [ 263.143107][T11631] tipc: Enabled bearer , priority 0 [ 263.157781][T11631] syzkaller0: entered allmulticast mode [ 263.171946][T11631] tipc: Disabling bearer [ 263.340992][T11643] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1415'. [ 263.357028][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1413'. [ 263.410120][T11643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.659255][T11656] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 263.765937][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 263.900930][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1423'. [ 263.921190][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1423'. [ 264.348623][T11687] wlan0 speed is unknown, defaulting to 1000 [ 264.493153][T11693] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.633052][T11693] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.877361][T11702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1430'. [ 264.979105][T11693] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.001574][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 265.037171][ T9892] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.046155][ T9892] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.056066][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 265.078862][ T9892] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.087154][ T9892] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.107184][T11693] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.213095][T11718] tipc: Enabling of bearer rejected, already enabled [ 265.231136][T11718] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 265.283968][ T9885] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.337284][ T9885] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.394714][ T9885] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.438822][ T9892] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.889131][T11737] wlan0 speed is unknown, defaulting to 1000 [ 266.131376][T11743] team_slave_1: Caught tx_queue_len zero misconfig [ 266.166008][T11743] tipc: Enabling of bearer rejected, already enabled [ 266.443272][T11746] wlan0 speed is unknown, defaulting to 1000 [ 266.838900][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 267.310267][T11759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1447'. [ 267.316226][T11772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1450'. [ 267.341950][T11771] syzkaller1: entered promiscuous mode [ 267.347584][T11771] syzkaller1: entered allmulticast mode [ 267.575577][T11774] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 267.953023][T11792] wlan0 speed is unknown, defaulting to 1000 [ 268.109687][T11784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1457'. [ 268.122352][T11800] openvswitch: netlink: Key type 58 is out of range max 32 [ 269.139090][T11810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1462'. [ 269.218605][T11810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1462'. [ 269.459269][T11812] wlan0 speed is unknown, defaulting to 1000 [ 269.668905][T11823] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1463'. [ 270.426941][T11842] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1470'. [ 270.533300][T11851] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 270.721215][T11863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1475'. [ 270.757009][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 270.768504][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 270.777501][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 270.790300][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 270.799700][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 270.818843][T11865] openvswitch: netlink: Missing valid actions attribute. [ 270.826104][T11865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.870804][T11869] wlan0 speed is unknown, defaulting to 1000 [ 271.166959][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058bd4800: rx timeout, send abort [ 271.224681][T11896] netlink: 'syz.1.1482': attribute type 1 has an invalid length. [ 271.253349][T11896] netlink: 'syz.1.1482': attribute type 7 has an invalid length. [ 271.271521][T11896] netlink: 'syz.1.1482': attribute type 8 has an invalid length. [ 271.286812][T11898] netlink: 'syz.2.1487': attribute type 10 has an invalid length. [ 271.320250][T11898] team0: entered promiscuous mode [ 271.330136][T11898] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.531206][T11914] netlink: 'syz.0.1489': attribute type 4 has an invalid length. [ 271.635427][T11925] netlink: 'syz.3.1492': attribute type 11 has an invalid length. [ 271.676446][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058bd4800: abort rx timeout. Force session deactivation [ 271.703235][T11929] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 271.721857][T11930] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 271.754387][T11929] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 273.835539][T11999] validate_nla: 1 callbacks suppressed [ 273.835561][T11999] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 273.999179][T12007] pim6reg1: entered promiscuous mode [ 274.009307][T12007] pim6reg1: entered allmulticast mode [ 274.444628][T12020] netlink: 'syz.0.1518': attribute type 13 has an invalid length. [ 274.477739][T12020] netlink: 'syz.0.1518': attribute type 17 has an invalid length. [ 274.504103][T12024] __nla_validate_parse: 29 callbacks suppressed [ 274.504126][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'. [ 274.714962][T12020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.749003][T12020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.825217][T12031] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 274.918213][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1520'. [ 275.203191][T12047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1525'. [ 275.224057][T12047] nbd: must specify at least one socket [ 275.715717][T12065] netlink: 'syz.4.1530': attribute type 4 has an invalid length. [ 275.765862][T12065] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1530'. [ 275.804876][T12065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1530'. [ 276.101574][T12071] geneve0: entered promiscuous mode [ 276.119118][T12071] geneve0: entered allmulticast mode [ 276.146660][ T9883] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 40339 - 0 [ 276.179802][ T9883] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 40788 - 0 [ 276.213687][ T9883] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 40339 - 0 [ 276.236829][ T9883] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 40788 - 0 [ 276.286441][ T9883] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 40339 - 0 [ 276.318337][ T9883] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 40788 - 0 [ 276.346502][ T9883] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 40339 - 0 [ 276.359790][ T9883] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 40788 - 0 [ 276.428288][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 276.445798][T12096] syzkaller0 speed is unknown, defaulting to 1000 [ 276.466756][T12096] syzkaller0 speed is unknown, defaulting to 1000 [ 276.482976][T12096] syzkaller0 speed is unknown, defaulting to 1000 [ 276.612711][T12103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1540'. [ 276.696285][T12106] atomic_op ffff8880248ec998 conn xmit_atomic 0000000000000000 [ 276.735406][T12104] syzkaller0: entered promiscuous mode [ 276.748152][T12104] syzkaller0: entered allmulticast mode [ 276.887594][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 276.918961][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 277.075094][ T8059] syzkaller0 speed is unknown, defaulting to 1000 [ 277.085043][T12096] infiniband syz2: set down [ 277.096115][T12096] infiniband syz2: added syzkaller0 [ 277.118177][T12096] syz2: rxe_create_cq: returned err = -12 [ 277.125581][T12096] infiniband syz2: Couldn't create ib_mad CQ [ 277.137549][T12096] infiniband syz2: Couldn't open port 1 [ 277.202584][T12096] RDS/IB: syz2: added [ 277.212814][T12096] smc: adding ib device syz2 with port count 1 [ 277.229523][T12096] smc: ib device syz2 port 1 has no pnetid [ 277.230616][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 277.247647][ T8059] syzkaller0 speed is unknown, defaulting to 1000 [ 277.264470][T12096] syzkaller0 speed is unknown, defaulting to 1000 [ 277.976725][T12122] wlan0 speed is unknown, defaulting to 1000 [ 277.987794][T12096] syzkaller0 speed is unknown, defaulting to 1000 [ 279.624598][T12096] syzkaller0 speed is unknown, defaulting to 1000 [ 279.837411][T12146] syzkaller0: entered promiscuous mode [ 279.854537][T12146] syzkaller0: entered allmulticast mode [ 279.891875][T12146] xt_cluster: node mask cannot exceed total number of nodes [ 280.020433][T12154] __nla_validate_parse: 1 callbacks suppressed [ 280.020453][T12154] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1555'. [ 280.181015][T12122] syzkaller0 speed is unknown, defaulting to 1000 [ 280.539274][T12167] syzkaller0: entered promiscuous mode [ 280.544797][T12167] syzkaller0: entered allmulticast mode [ 280.558270][T12096] syzkaller0 speed is unknown, defaulting to 1000 [ 280.920011][T12171] syzkaller0: entered promiscuous mode [ 280.931344][T12171] syzkaller0: entered allmulticast mode [ 280.946751][T12096] syzkaller0 speed is unknown, defaulting to 1000 [ 281.322569][T12187] syzkaller0: entered promiscuous mode [ 281.340421][T12187] syzkaller0: entered allmulticast mode [ 281.682551][T12202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.720672][T12202] bridge0: port 1(bond4) entered blocking state [ 281.728599][T12202] bridge0: port 1(bond4) entered disabled state [ 281.735599][T12202] bond4: entered allmulticast mode [ 281.744438][T12202] bond4: entered promiscuous mode [ 281.785625][T12199] wlan0 speed is unknown, defaulting to 1000 [ 281.796288][T12205] tipc: Enabling of bearer rejected, already enabled [ 281.830596][T12199] syzkaller0 speed is unknown, defaulting to 1000 [ 281.951984][T12216] tipc: Enabled bearer , priority 0 [ 281.987180][T12216] syzkaller0: entered promiscuous mode [ 281.994012][T12216] syzkaller0: entered allmulticast mode [ 282.033045][T12220] netlink: 'syz.0.1572': attribute type 13 has an invalid length. [ 282.045158][T12220] netlink: 'syz.0.1572': attribute type 17 has an invalid length. [ 282.324284][T12220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.377479][T12225] tipc: Resetting bearer [ 282.410109][T12215] tipc: Resetting bearer [ 282.460023][T12215] tipc: Disabling bearer [ 282.591474][T12239] bond0: (slave rose0): Error: Device can not be enslaved while up [ 282.660453][T12242] bond0: (slave rose0): Error: Device can not be enslaved while up [ 283.863201][T12267] sctp: [Deprecated]: syz.0.1584 (pid 12267) Use of int in max_burst socket option deprecated. [ 283.863201][T12267] Use struct sctp_assoc_value instead [ 284.160423][T12279] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1588'. [ 284.715479][T12300] wlan0 speed is unknown, defaulting to 1000 [ 284.763070][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 284.770615][T12300] syzkaller0 speed is unknown, defaulting to 1000 [ 285.322339][T12325] tipc: Enabling of bearer rejected, failed to enable media [ 285.402068][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'. [ 285.762267][T12342] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1604'. [ 286.276995][T12342] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 286.324840][T12342] bond0 (unregistering): Released all slaves [ 286.513561][T12345] bond3: entered allmulticast mode [ 286.541899][T12345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.579205][T12355] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1600'. [ 286.620973][T12357] tipc: Enabled bearer , priority 0 [ 286.646509][T12361] syzkaller0: entered promiscuous mode [ 286.653398][T12361] syzkaller0: entered allmulticast mode [ 286.857507][T12361] tipc: Resetting bearer [ 286.918800][T12361] tipc: Disabling bearer [ 287.004804][T12382] netlink: 'syz.3.1613': attribute type 3 has an invalid length. [ 287.028776][T12382] netlink: 'syz.3.1613': attribute type 3 has an invalid length. [ 287.190089][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 287.518343][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 287.600410][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 287.812494][T12426] bond0: (slave rose0): Error: Device can not be enslaved while up [ 288.543008][T12454] syzkaller1: entered promiscuous mode [ 288.559183][T12454] syzkaller1: entered allmulticast mode [ 288.870395][T12467] bond3: (slave dummy0): Releasing active interface [ 288.942650][T12467] batman_adv: batadv0: Adding interface: dummy0 [ 289.012119][T12467] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.088975][T12467] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 289.125893][T12477] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 289.208203][T12477] bond0: entered promiscuous mode [ 289.214196][T12477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.230314][T12480] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 289.238438][T12480] netlink: 'syz.4.1637': attribute type 2 has an invalid length. [ 289.292068][T12477] bond0: (slave bridge2): making interface the new active one [ 289.299881][T12477] bridge2: entered promiscuous mode [ 289.308954][T12477] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 289.414063][T12493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1639'. [ 289.808190][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 289.831891][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 289.848235][T12501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1643'. [ 289.922239][T12514] v: renamed from lo (while UP) [ 290.059774][T12520] openvswitch: netlink: Message has 8 unknown bytes. [ 290.438464][ T8070] IPVS: starting estimator thread 0... [ 290.527987][T12543] IPVS: using max 24 ests per chain, 57600 per kthread [ 290.537171][T12548] __nla_validate_parse: 2 callbacks suppressed [ 290.537192][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 290.802468][T12562] tipc: Enabled bearer , priority 0 [ 290.879867][T12563] syzkaller0: entered promiscuous mode [ 290.885523][T12563] syzkaller0: entered allmulticast mode [ 291.002423][T12563] tipc: Resetting bearer [ 291.060587][T12563] tipc: Disabling bearer [ 291.158733][T12577] x_tables: duplicate underflow at hook 1 [ 291.254923][T12579] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1664'. [ 291.266244][T12579] netlink: 'syz.4.1664': attribute type 13 has an invalid length. [ 291.274293][T12579] netlink: 'syz.4.1664': attribute type 17 has an invalid length. [ 291.390204][T12579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.506747][T12586] wlan0 speed is unknown, defaulting to 1000 [ 291.531277][T12586] syzkaller0 speed is unknown, defaulting to 1000 [ 291.678396][T12568] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 292.043507][T12598] IPVS: Error connecting to the multicast addr [ 292.136766][T12606] : renamed from veth0_to_bond [ 292.319889][T12608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.504940][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 292.748458][T12625] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1676'. [ 293.013654][T12635] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 293.159649][T12640] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.187240][T12640] bond5: (slave bond6): making interface the new active one [ 293.224461][T12640] bond5: (slave bond6): Enslaving as an active interface with an up link [ 293.401510][T12650] rose2: entered allmulticast mode [ 293.493131][T12652] batadv2: entered promiscuous mode [ 293.548685][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 293.559284][T12656] batadv2: entered promiscuous mode [ 293.773782][T12669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1687'. [ 293.915568][T12678] delete_channel: no stack [ 293.956315][T12677] xt_TCPMSS: Only works on TCP SYN packets [ 294.046234][T12677] x_tables: ip_tables: osf match: only valid for protocol 6 [ 294.135592][T12683] wlan0 speed is unknown, defaulting to 1000 [ 294.164581][T12683] syzkaller0 speed is unknown, defaulting to 1000 [ 294.205617][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 295.451702][T12729] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1703'. [ 295.604115][T12729] wlan0 speed is unknown, defaulting to 1000 [ 295.658871][T12729] syzkaller0 speed is unknown, defaulting to 1000 [ 296.694870][T12759] macvlan2: entered promiscuous mode [ 296.721653][T12759] macvlan2: entered allmulticast mode [ 296.758117][T12759] veth1_vlan: entered allmulticast mode [ 296.788795][T12759] veth1_vlan: left allmulticast mode [ 297.006323][T12763] wlan0 speed is unknown, defaulting to 1000 [ 297.075712][T12763] syzkaller0 speed is unknown, defaulting to 1000 [ 297.762571][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 297.772758][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 298.396775][T12814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.431446][T12815] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1725'. [ 298.437447][T12814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.608842][T12823] wlan0 speed is unknown, defaulting to 1000 [ 298.617604][T12823] syzkaller0 speed is unknown, defaulting to 1000 [ 298.626308][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 298.933826][T12831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1731'. [ 299.015678][T12831] xt_CT: No such helper "snmp" [ 299.074678][T12834] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1731'. [ 299.405494][T12849] syzkaller0: entered promiscuous mode [ 299.419069][T12849] syzkaller0: entered allmulticast mode [ 299.539282][T12848] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1735'. [ 299.603926][T12853] block nbd1: server does not support multiple connections per device. [ 299.616190][T12853] block nbd1: shutting down sockets [ 299.857596][T12861] wlan0 speed is unknown, defaulting to 1000 [ 299.881920][T12861] syzkaller0 speed is unknown, defaulting to 1000 [ 299.982228][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'. [ 300.055994][T12870] wlan0 speed is unknown, defaulting to 1000 [ 300.075837][T12874] wlan0 speed is unknown, defaulting to 1000 [ 300.076051][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'. [ 300.209598][T12870] syzkaller0 speed is unknown, defaulting to 1000 [ 300.298585][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 300.423075][T12878] bond4: (slave bridge0): Releasing active interface [ 300.483919][T12874] syzkaller0 speed is unknown, defaulting to 1000 [ 300.783813][T12886] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 301.095706][T12893] wlan0 speed is unknown, defaulting to 1000 [ 301.156683][T12893] syzkaller0 speed is unknown, defaulting to 1000 [ 301.265542][T12900] macvlan0: entered allmulticast mode [ 301.281208][T12900] veth1_vlan: entered allmulticast mode [ 301.663635][T12904] netlink: 'syz.1.1751': attribute type 13 has an invalid length. [ 302.121871][T12912] wlan0 speed is unknown, defaulting to 1000 [ 302.188383][T12912] syzkaller0 speed is unknown, defaulting to 1000 [ 302.203817][T12916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.261918][T12915] v: Caught tx_queue_len zero misconfig [ 302.573467][T12925] delete_channel: no stack [ 302.663717][T12931] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 302.792158][T12932] wlan0 speed is unknown, defaulting to 1000 [ 302.840254][T12932] syzkaller0 speed is unknown, defaulting to 1000 [ 303.119845][T12944] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 303.196661][T12944] batman_adv: batadv0: Adding interface: gretap1 [ 303.208751][T12944] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.239278][T12944] batman_adv: batadv0: Interface activated: gretap1 [ 303.773325][T12958] Cannot find del_set index 4 as target [ 304.251383][T12964] bond0: (slave virt_wifi0): Error: Device is in use and cannot be enslaved [ 304.268922][T12963] bond0: (slave virt_wifi0): Error: Device is in use and cannot be enslaved [ 304.339158][T12966] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 304.414483][T12968] syzkaller1: entered promiscuous mode [ 304.414837][T12969] __nla_validate_parse: 4 callbacks suppressed [ 304.414851][T12969] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1768'. [ 304.420744][T12968] syzkaller1: entered allmulticast mode [ 304.445297][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 304.603112][T12969] bond0 (unregistering): Released all slaves [ 304.717562][T12980] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.793838][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 305.260282][T13005] veth1_vlan: left allmulticast mode [ 305.362779][T13017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1782'. [ 305.401066][T13005] batadv0: left promiscuous mode [ 305.474024][T13012] netlink: 'syz.2.1780': attribute type 3 has an invalid length. [ 305.675748][T13026] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1784'. [ 306.280685][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 307.626129][ T9885] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.635048][ T9885] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.644526][ T9885] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.665060][T13049] veth0_macvtap: entered allmulticast mode [ 307.688432][ T9885] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.845934][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 307.848599][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 307.902246][T13063] : entered promiscuous mode [ 307.950961][T13072] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 307.971290][T13066] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1792'. [ 308.086325][T13072] bond4: entered promiscuous mode [ 308.086854][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'. [ 308.155679][T13072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.436944][T13063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.453814][T13063] bond4: (slave gre2): The slave device specified does not support setting the MAC address [ 308.507598][T13063] bond4: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 308.532477][T13063] bond4: (slave gre2): Opening slave failed [ 308.753545][T13095] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 308.800843][T13095] bond6 (unregistering): Released all slaves [ 308.846231][T13061] wlan0 speed is unknown, defaulting to 1000 [ 308.853641][T13103] tipc: New replicast peer: 255.255.255.255 [ 308.890017][T13103] tipc: Enabled bearer , priority 10 [ 308.906259][T13061] syzkaller0 speed is unknown, defaulting to 1000 [ 308.992263][T13111] netlink: 'syz.2.1803': attribute type 21 has an invalid length. [ 309.165366][T13114] bond3: option lacp_rate: invalid value (255) [ 309.214867][T13114] bond3 (unregistering): Released all slaves [ 309.254828][T13123] netlink: zone id is out of range [ 309.261308][T13125] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 309.278132][T13123] netlink: zone id is out of range [ 309.284057][T13123] netlink: set zone limit has 8 unknown bytes [ 309.350036][T13126] netlink: 'syz.3.1807': attribute type 39 has an invalid length. [ 309.518068][T13128] __nla_validate_parse: 4 callbacks suppressed [ 309.518093][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'. [ 309.601233][T13130] wlan0 speed is unknown, defaulting to 1000 [ 309.702098][T13130] syzkaller0 speed is unknown, defaulting to 1000 [ 310.097686][ T8070] tipc: Node number set to 3317148934 [ 310.700457][T13178] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1824'. [ 311.167779][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 311.464461][T13210] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 311.489182][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'. [ 311.527746][T13207] wlan0 speed is unknown, defaulting to 1000 [ 311.536330][T13207] syzkaller0 speed is unknown, defaulting to 1000 [ 311.879114][T13226] netlink: 'syz.2.1838': attribute type 58 has an invalid length. [ 311.938516][T13226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1838'. [ 312.002064][T13230] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 312.259114][T13233] ip6tnl1: entered promiscuous mode [ 312.260616][T13240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1843'. [ 312.273815][T13233] ip6tnl1: entered allmulticast mode [ 312.284889][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 312.329488][T13239] wlan0 speed is unknown, defaulting to 1000 [ 312.363268][T13239] syzkaller0 speed is unknown, defaulting to 1000 [ 312.487501][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'. [ 312.785335][T13260] tipc: Enabled bearer , priority 0 [ 312.911547][T13260] tipc: Disabling bearer [ 313.061397][T13267] bridge: RTM_NEWNEIGH with invalid ether address [ 313.401363][T13283] tipc: Can't bind to reserved service type 2 [ 313.636909][T13291] tipc: Enabled bearer , priority 0 [ 313.656114][T13291] syzkaller0: entered promiscuous mode [ 313.670733][T13291] syzkaller0: entered allmulticast mode [ 314.119973][T13290] tipc: Resetting bearer [ 314.139470][T13303] netlink: 'syz.4.1860': attribute type 9 has an invalid length. [ 314.163249][T13290] tipc: Disabling bearer [ 314.246845][T13304] can: request_module (can-proto-0) failed. [ 314.663312][T13332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1867'. [ 314.865328][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 314.901531][T13343] netlink: 'syz.2.1870': attribute type 1 has an invalid length. [ 314.917104][T13347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1871'. [ 315.005152][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'. [ 315.025275][T13343] bond6: entered promiscuous mode [ 315.031569][T13343] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.042198][T13349] tipc: Enabling of bearer rejected, already enabled [ 315.043346][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'. [ 315.109504][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 315.146294][T13357] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1873'. [ 315.275307][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 315.368853][T13375] gretap2: entered promiscuous mode [ 315.529260][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 315.536932][T13382] netlink: 'syz.1.1879': attribute type 15 has an invalid length. [ 315.546629][T13377] wlan0 speed is unknown, defaulting to 1000 [ 315.563134][T13374] wlan0 speed is unknown, defaulting to 1000 [ 315.578234][T13377] syzkaller0 speed is unknown, defaulting to 1000 [ 315.590368][T13379] wlan0 speed is unknown, defaulting to 1000 [ 315.727496][T13389] veth0_macvtap: Caught tx_queue_len zero misconfig [ 315.748273][T13388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1881'. [ 315.775791][T13388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.944173][T13374] syzkaller0 speed is unknown, defaulting to 1000 [ 316.272684][T13402] batadv_slave_0: entered promiscuous mode [ 316.339791][T13397] batadv_slave_0: left promiscuous mode [ 316.429544][T13379] syzkaller0 speed is unknown, defaulting to 1000 [ 317.045441][T13420] tipc: Enabled bearer , priority 0 [ 317.058933][T13421] syzkaller0: entered promiscuous mode [ 317.064962][T13421] syzkaller0: entered allmulticast mode [ 317.278259][T13421] tipc: Resetting bearer [ 317.324327][T13421] tipc: Disabling bearer [ 317.962731][T13439] v: renamed from vlan0 [ 317.995003][T13449] wlan0 speed is unknown, defaulting to 1000 [ 318.002126][T13450] netlink: 'syz.3.1897': attribute type 13 has an invalid length. [ 318.012230][T13450] netlink: 'syz.3.1897': attribute type 17 has an invalid length. [ 318.023181][T13450] netlink: 'syz.3.1897': attribute type 27 has an invalid length. [ 318.077718][T13449] syzkaller0 speed is unknown, defaulting to 1000 [ 318.368842][ T5827] block nbd1: Receive control failed (result -32) [ 318.516199][T13466] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 319.921797][T13480] wlan0 speed is unknown, defaulting to 1000 [ 319.930696][T13480] syzkaller0 speed is unknown, defaulting to 1000 [ 319.961729][T13482] __nla_validate_parse: 1 callbacks suppressed [ 319.961749][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'. [ 320.165650][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1906'. [ 321.186472][T13494] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 321.194645][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 321.309413][T13496] tipc: Enabling of bearer rejected, failed to enable media [ 470.858825][ T31] INFO: task kworker/1:9:8060 blocked for more than 143 seconds. [ 470.866584][ T31] Not tainted syzkaller #0 [ 470.871658][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.880672][ T31] task:kworker/1:9 state:D stack:26472 pid:8060 tgid:8060 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 470.893209][ T31] Workqueue: events rfkill_sync_work [ 470.898840][ T31] Call Trace: [ 470.902113][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.905065][ T31] __schedule+0x1798/0x4cc0 [ 470.910047][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 470.915611][ T31] ? __pfx___schedule+0x10/0x10 [ 470.922188][ T31] ? schedule+0x91/0x360 [ 470.926486][ T31] schedule+0x165/0x360 [ 470.931461][ T31] schedule_preempt_disabled+0x13/0x30 [ 470.937312][ T31] __mutex_lock+0x7e6/0x1350 [ 470.942631][ T31] ? __mutex_lock+0x5bb/0x1350 [ 470.947433][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 470.952924][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 470.958288][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.963612][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 470.969627][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.975987][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 470.982388][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 470.987617][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 471.025702][ T31] rfkill_set_block+0x1d2/0x440 [ 471.038767][ T31] rfkill_sync_work+0x114/0x200 [ 471.043771][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 471.063586][ T31] process_scheduled_works+0xae1/0x17b0 [ 471.069324][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.075434][ T31] worker_thread+0x8a0/0xda0 [ 471.080270][ T31] kthread+0x711/0x8a0 [ 471.084472][ T31] ? __pfx_worker_thread+0x10/0x10 [ 471.089948][ T31] ? __pfx_kthread+0x10/0x10 [ 471.094541][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.100465][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.105715][ T31] ? __pfx_kthread+0x10/0x10 [ 471.110692][ T31] ret_from_fork+0x4bc/0x870 [ 471.115379][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 471.120937][ T31] ? __switch_to_asm+0x39/0x70 [ 471.125718][ T31] ? __switch_to_asm+0x33/0x70 [ 471.130728][ T31] ? __pfx_kthread+0x10/0x10 [ 471.135331][ T31] ret_from_fork_asm+0x1a/0x30 [ 471.140182][ T31] [ 471.143227][ T31] INFO: task kworker/1:10:8061 blocked for more than 143 seconds. [ 471.151313][ T31] Not tainted syzkaller #0 [ 471.156632][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.165445][ T31] task:kworker/1:10 state:D stack:26184 pid:8061 tgid:8061 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 471.177610][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 471.184635][ T31] Call Trace: [ 471.187992][ T31] [ 471.190943][ T31] __schedule+0x1798/0x4cc0 [ 471.195633][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.201047][ T31] ? __pfx___schedule+0x10/0x10 [ 471.205924][ T31] ? schedule+0x91/0x360 [ 471.210212][ T31] schedule+0x165/0x360 [ 471.214366][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.219879][ T31] __mutex_lock+0x7e6/0x1350 [ 471.224589][ T31] ? __mutex_lock+0x5bb/0x1350 [ 471.229426][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 471.235676][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.240822][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 471.246716][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 471.252470][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 471.258647][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 471.264365][ T31] process_scheduled_works+0xae1/0x17b0 [ 471.269995][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.276008][ T31] worker_thread+0x8a0/0xda0 [ 471.280637][ T31] ? __kthread_parkme+0x7b/0x200 [ 471.285590][ T31] kthread+0x711/0x8a0 [ 471.289709][ T31] ? __pfx_worker_thread+0x10/0x10 [ 471.294814][ T31] ? __pfx_kthread+0x10/0x10 [ 471.299559][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.304752][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.310035][ T31] ? __pfx_kthread+0x10/0x10 [ 471.314714][ T31] ret_from_fork+0x4bc/0x870 [ 471.319327][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 471.324625][ T31] ? __switch_to_asm+0x39/0x70 [ 471.329423][ T31] ? __switch_to_asm+0x33/0x70 [ 471.334206][ T31] ? __pfx_kthread+0x10/0x10 [ 471.339094][ T31] ret_from_fork_asm+0x1a/0x30 [ 471.343912][ T31] [ 471.346967][ T31] INFO: task syz.0.1874:13362 blocked for more than 143 seconds. [ 471.354904][ T31] Not tainted syzkaller #0 [ 471.359927][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.368817][ T31] task:syz.0.1874 state:D stack:26152 pid:13362 tgid:13361 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 471.380878][ T31] Call Trace: [ 471.384190][ T31] [ 471.387163][ T31] __schedule+0x1798/0x4cc0 [ 471.391756][ T31] ? validate_chain+0x897/0x2140 [ 471.396704][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.401629][ T31] ? __pfx___schedule+0x10/0x10 [ 471.406527][ T31] ? schedule+0x91/0x360 [ 471.410824][ T31] schedule+0x165/0x360 [ 471.414996][ T31] schedule_timeout+0x9a/0x270 [ 471.419807][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 471.425196][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.430425][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.435620][ T31] ? wait_for_completion+0x267/0x5d0 [ 471.440983][ T31] wait_for_completion+0x2bf/0x5d0 [ 471.446132][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 471.451810][ T31] ? __flush_work+0xd2/0xbc0 [ 471.456400][ T31] ? __flush_work+0xd2/0xbc0 [ 471.461034][ T31] __flush_work+0x9b9/0xbc0 [ 471.465537][ T31] ? __flush_work+0xd2/0xbc0 [ 471.470153][ T31] ? __pfx___flush_work+0x10/0x10 [ 471.475195][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 471.480553][ T31] ? __pfx___cancel_work+0x10/0x10 [ 471.485700][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 471.491577][ T31] __cancel_work_sync+0xbe/0x110 [ 471.496701][ T31] rfkill_unregister+0x92/0x220 [ 471.504937][ T31] nfc_unregister_device+0x96/0x2a0 [ 471.510196][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 471.516476][ T31] virtual_ncidev_close+0x56/0x90 [ 471.521563][ T31] __fput+0x44c/0xa70 [ 471.525592][ T31] fput_close_sync+0x119/0x200 [ 471.530415][ T31] ? dnotify_flush+0x1db/0x5e0 [ 471.535173][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 471.540494][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 471.545693][ T31] __x64_sys_close+0x7f/0x110 [ 471.550405][ T31] do_syscall_64+0xfa/0xfa0 [ 471.554987][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.560229][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.566308][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.571092][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.577090][ T31] RIP: 0033:0x7f8f32f8f6c9 [ 471.581592][ T31] RSP: 002b:00007f8f33dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 471.590065][ T31] RAX: ffffffffffffffda RBX: 00007f8f331e5fa0 RCX: 00007f8f32f8f6c9 [ 471.598133][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 471.606206][ T31] RBP: 00007f8f33011f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.614229][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.622325][ T31] R13: 00007f8f331e6038 R14: 00007f8f331e5fa0 R15: 00007fff4bf63718 [ 471.630718][ T31] [ 471.633774][ T31] INFO: task syz.1.1891:13424 blocked for more than 144 seconds. [ 471.645589][ T31] Not tainted syzkaller #0 [ 471.650584][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.659362][ T31] task:syz.1.1891 state:D stack:25888 pid:13424 tgid:13423 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 471.671336][ T31] Call Trace: [ 471.674614][ T31] [ 471.677542][ T31] __schedule+0x1798/0x4cc0 [ 471.682195][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.687045][ T31] ? __pfx___schedule+0x10/0x10 [ 471.691945][ T31] ? schedule+0x91/0x360 [ 471.696224][ T31] schedule+0x165/0x360 [ 471.700424][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.705878][ T31] __mutex_lock+0x7e6/0x1350 [ 471.710547][ T31] ? __mutex_lock+0x5bb/0x1350 [ 471.715309][ T31] ? rfkill_register+0x37/0x8e0 [ 471.720193][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.725239][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 471.730873][ T31] ? device_initialize+0x24b/0x440 [ 471.736076][ T31] rfkill_register+0x37/0x8e0 [ 471.740817][ T31] nfc_register_device+0x14a/0x320 [ 471.746218][ T31] nci_register_device+0x87f/0x9d0 [ 471.751751][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 471.757594][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 471.762989][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 471.768507][ T31] virtual_ncidev_open+0x129/0x1a0 [ 471.773632][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 471.779551][ T31] misc_open+0x2d5/0x350 [ 471.783884][ T31] chrdev_open+0x4cc/0x5e0 [ 471.788475][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.793687][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 471.800066][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.805100][ T31] do_dentry_open+0x953/0x13f0 [ 471.810008][ T31] vfs_open+0x3b/0x340 [ 471.814093][ T31] ? path_openat+0x2ecd/0x3830 [ 471.819161][ T31] path_openat+0x2ee5/0x3830 [ 471.824076][ T31] ? __pfx_path_openat+0x10/0x10 [ 471.829081][ T31] do_filp_open+0x1fa/0x410 [ 471.833601][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.838533][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 471.843586][ T31] ? _raw_spin_unlock+0x28/0x50 [ 471.848530][ T31] ? alloc_fd+0x64c/0x6c0 [ 471.852862][ T31] do_sys_openat2+0x121/0x1c0 [ 471.857653][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.862883][ T31] ? rcu_is_watching+0x15/0xb0 [ 471.867669][ T31] __x64_sys_openat+0x138/0x170 [ 471.872583][ T31] do_syscall_64+0xfa/0xfa0 [ 471.877390][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.882637][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.888731][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.893492][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.899420][ T31] RIP: 0033:0x7f43ce18f6c9 [ 471.903912][ T31] RSP: 002b:00007f43cf053038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.912381][ T31] RAX: ffffffffffffffda RBX: 00007f43ce3e5fa0 RCX: 00007f43ce18f6c9 [ 471.920483][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 471.928512][ T31] RBP: 00007f43ce211f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.936600][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.944592][ T31] R13: 00007f43ce3e6038 R14: 00007f43ce3e5fa0 R15: 00007ffff606e1f8 [ 471.952712][ T31] [ 471.955742][ T31] INFO: task syz.2.1898:13453 blocked for more than 144 seconds. [ 471.963595][ T31] Not tainted syzkaller #0 [ 471.968567][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.977237][ T31] task:syz.2.1898 state:D stack:28296 pid:13453 tgid:13451 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 471.989317][ T31] Call Trace: [ 471.992620][ T31] [ 471.995589][ T31] __schedule+0x1798/0x4cc0 [ 472.000215][ T31] ? security_file_open+0xb1/0x270 [ 472.005332][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.010223][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.015134][ T31] ? __pfx___schedule+0x10/0x10 [ 472.020018][ T31] ? schedule+0x91/0x360 [ 472.024264][ T31] schedule+0x165/0x360 [ 472.028499][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.033981][ T31] __mutex_lock+0x7e6/0x1350 [ 472.038604][ T31] ? __mutex_lock+0x5bb/0x1350 [ 472.043366][ T31] ? misc_open+0x51/0x350 [ 472.047720][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.052817][ T31] misc_open+0x51/0x350 [ 472.057029][ T31] chrdev_open+0x4cc/0x5e0 [ 472.061574][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.066542][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 472.073095][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.078237][ T31] do_dentry_open+0x953/0x13f0 [ 472.083102][ T31] vfs_open+0x3b/0x340 [ 472.087168][ T31] ? path_openat+0x2ecd/0x3830 [ 472.092058][ T31] path_openat+0x2ee5/0x3830 [ 472.096677][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.101742][ T31] do_filp_open+0x1fa/0x410 [ 472.106249][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.111143][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.116188][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.121091][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.125427][ T31] do_sys_openat2+0x121/0x1c0 [ 472.130124][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.135409][ T31] ? exc_page_fault+0x82/0x100 [ 472.140455][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 472.145951][ T31] __x64_sys_openat+0x138/0x170 [ 472.150887][ T31] do_syscall_64+0xfa/0xfa0 [ 472.155499][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.160811][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.166901][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.171772][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.177713][ T31] RIP: 0033:0x7f3e9a38f6c9 [ 472.182181][ T31] RSP: 002b:00007f3e9b1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.190630][ T31] RAX: ffffffffffffffda RBX: 00007f3e9a5e5fa0 RCX: 00007f3e9a38f6c9 [ 472.198637][ T31] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 472.206632][ T31] RBP: 00007f3e9a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.214642][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.222704][ T31] R13: 00007f3e9a5e6038 R14: 00007f3e9a5e5fa0 R15: 00007fff2614c9b8 [ 472.231185][ T31] [ 472.234221][ T31] INFO: task syz.2.1898:13455 blocked for more than 144 seconds. [ 472.242099][ T31] Not tainted syzkaller #0 [ 472.247044][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.255749][ T31] task:syz.2.1898 state:D stack:28296 pid:13455 tgid:13451 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 472.267685][ T31] Call Trace: [ 472.271113][ T31] [ 472.274062][ T31] __schedule+0x1798/0x4cc0 [ 472.278641][ T31] ? security_file_open+0xb1/0x270 [ 472.283753][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.288676][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.293544][ T31] ? __pfx___schedule+0x10/0x10 [ 472.298459][ T31] ? schedule+0x91/0x360 [ 472.302722][ T31] schedule+0x165/0x360 [ 472.306881][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.312375][ T31] __mutex_lock+0x7e6/0x1350 [ 472.316964][ T31] ? __mutex_lock+0x5bb/0x1350 [ 472.321905][ T31] ? misc_open+0x51/0x350 [ 472.326326][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.331462][ T31] misc_open+0x51/0x350 [ 472.335653][ T31] chrdev_open+0x4cc/0x5e0 [ 472.340114][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.345051][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 472.351709][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.356732][ T31] do_dentry_open+0x953/0x13f0 [ 472.361533][ T31] vfs_open+0x3b/0x340 [ 472.365619][ T31] ? path_openat+0x2ecd/0x3830 [ 472.370446][ T31] path_openat+0x2ee5/0x3830 [ 472.375090][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.380074][ T31] do_filp_open+0x1fa/0x410 [ 472.384573][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.389441][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.394475][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.399348][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.403781][ T31] do_sys_openat2+0x121/0x1c0 [ 472.408503][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.413719][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.418550][ T31] __x64_sys_openat+0x138/0x170 [ 472.423422][ T31] do_syscall_64+0xfa/0xfa0 [ 472.428032][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.433264][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.439382][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.444147][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.450207][ T31] RIP: 0033:0x7f3e9a38f6c9 [ 472.454648][ T31] RSP: 002b:00007f3e9b16d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.463111][ T31] RAX: ffffffffffffffda RBX: 00007f3e9a5e6180 RCX: 00007f3e9a38f6c9 [ 472.471132][ T31] RDX: 0000000000000002 RSI: 0000200000001340 RDI: ffffffffffffff9c [ 472.479578][ T31] RBP: 00007f3e9a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.487578][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.495571][ T31] R13: 00007f3e9a5e6218 R14: 00007f3e9a5e6180 R15: 00007fff2614c9b8 [ 472.503907][ T31] [ 472.506961][ T31] INFO: task syz.4.1903:13472 blocked for more than 144 seconds. [ 472.514752][ T31] Not tainted syzkaller #0 [ 472.519720][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.528418][ T31] task:syz.4.1903 state:D stack:28264 pid:13472 tgid:13471 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 472.543869][ T31] Call Trace: [ 472.547271][ T31] [ 472.550260][ T31] __schedule+0x1798/0x4cc0 [ 472.554789][ T31] ? security_file_open+0xb1/0x270 [ 472.559951][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.564894][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.569859][ T31] ? __pfx___schedule+0x10/0x10 [ 472.574725][ T31] ? schedule+0x91/0x360 [ 472.579079][ T31] schedule+0x165/0x360 [ 472.583240][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.588739][ T31] __mutex_lock+0x7e6/0x1350 [ 472.593337][ T31] ? __mutex_lock+0x5bb/0x1350 [ 472.598165][ T31] ? misc_open+0x51/0x350 [ 472.602720][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.607773][ T31] misc_open+0x51/0x350 [ 472.612037][ T31] chrdev_open+0x4cc/0x5e0 [ 472.616496][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.621492][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 472.627856][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.632910][ T31] do_dentry_open+0x953/0x13f0 [ 472.637722][ T31] vfs_open+0x3b/0x340 [ 472.641879][ T31] ? path_openat+0x2ecd/0x3830 [ 472.646644][ T31] path_openat+0x2ee5/0x3830 [ 472.651307][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.656263][ T31] do_filp_open+0x1fa/0x410 [ 472.660819][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.665841][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.670950][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.675814][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.680201][ T31] do_sys_openat2+0x121/0x1c0 [ 472.684965][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.690189][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.694987][ T31] __x64_sys_openat+0x138/0x170 [ 472.699942][ T31] do_syscall_64+0xfa/0xfa0 [ 472.704558][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.709805][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.715859][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.720550][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.726433][ T31] RIP: 0033:0x7f536718f6c9 [ 472.731018][ T31] RSP: 002b:00007f536801d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.739503][ T31] RAX: ffffffffffffffda RBX: 00007f53673e5fa0 RCX: 00007f536718f6c9 [ 472.747513][ T31] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 472.755673][ T31] RBP: 00007f5367211f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.763680][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.771693][ T31] R13: 00007f53673e6038 R14: 00007f53673e5fa0 R15: 00007ffcb81fff58 [ 472.779755][ T31] [ 472.782926][ T31] INFO: task syz.3.1908:13494 blocked for more than 145 seconds. [ 472.791036][ T31] Not tainted syzkaller #0 [ 472.795991][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.804807][ T31] task:syz.3.1908 state:D stack:23624 pid:13494 tgid:13493 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 472.816762][ T31] Call Trace: [ 472.820095][ T31] [ 472.823019][ T31] __schedule+0x1798/0x4cc0 [ 472.827547][ T31] ? security_file_open+0xb1/0x270 [ 472.832815][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.837742][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.842655][ T31] ? __pfx___schedule+0x10/0x10 [ 472.847516][ T31] ? schedule+0x91/0x360 [ 472.851843][ T31] schedule+0x165/0x360 [ 472.856031][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.861589][ T31] __mutex_lock+0x7e6/0x1350 [ 472.866191][ T31] ? __mutex_lock+0x5bb/0x1350 [ 472.871037][ T31] ? misc_open+0x51/0x350 [ 472.875552][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.880664][ T31] misc_open+0x51/0x350 [ 472.884861][ T31] chrdev_open+0x4cc/0x5e0 [ 472.889331][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.894366][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 472.900771][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.905728][ T31] do_dentry_open+0x953/0x13f0 [ 472.910535][ T31] vfs_open+0x3b/0x340 [ 472.914597][ T31] ? path_openat+0x2ecd/0x3830 [ 472.919428][ T31] path_openat+0x2ee5/0x3830 [ 472.924069][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.929230][ T31] do_filp_open+0x1fa/0x410 [ 472.933834][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.939001][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.944150][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.949115][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.953538][ T31] do_sys_openat2+0x121/0x1c0 [ 472.958472][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.963684][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.968486][ T31] __x64_sys_openat+0x138/0x170 [ 472.973351][ T31] do_syscall_64+0xfa/0xfa0 [ 472.977898][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.983110][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.989629][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.994476][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.000394][ T31] RIP: 0033:0x7f19a5f8f6c9 [ 473.004803][ T31] RSP: 002b:00007f19a6d94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.013261][ T31] RAX: ffffffffffffffda RBX: 00007f19a61e5fa0 RCX: 00007f19a5f8f6c9 [ 473.021441][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 473.029470][ T31] RBP: 00007f19a6011f91 R08: 0000000000000000 R09: 0000000000000000 [ 473.037472][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.045494][ T31] R13: 00007f19a61e6038 R14: 00007f19a61e5fa0 R15: 00007fff1dd72fb8 [ 473.053510][ T31] [ 473.056541][ T31] INFO: task syz.3.1908:13495 blocked for more than 145 seconds. [ 473.064388][ T31] Not tainted syzkaller #0 [ 473.069376][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.078366][ T31] task:syz.3.1908 state:D stack:28296 pid:13495 tgid:13493 ppid:5838 task_flags:0x400040 flags:0x00080002 [ 473.090333][ T31] Call Trace: [ 473.093693][ T31] [ 473.096622][ T31] __schedule+0x1798/0x4cc0 [ 473.101170][ T31] ? security_file_open+0xb1/0x270 [ 473.106396][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.111332][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.116533][ T31] ? __pfx___schedule+0x10/0x10 [ 473.121454][ T31] ? schedule+0x91/0x360 [ 473.125703][ T31] schedule+0x165/0x360 [ 473.129901][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.135478][ T31] __mutex_lock+0x7e6/0x1350 [ 473.140112][ T31] ? __mutex_lock+0x5bb/0x1350 [ 473.144985][ T31] ? misc_open+0x51/0x350 [ 473.149424][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.154476][ T31] misc_open+0x51/0x350 [ 473.158694][ T31] chrdev_open+0x4cc/0x5e0 [ 473.163118][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.168090][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 473.174424][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.179690][ T31] do_dentry_open+0x953/0x13f0 [ 473.184490][ T31] vfs_open+0x3b/0x340 [ 473.188638][ T31] ? path_openat+0x2ecd/0x3830 [ 473.193511][ T31] path_openat+0x2ee5/0x3830 [ 473.198198][ T31] ? __pfx_path_openat+0x10/0x10 [ 473.203259][ T31] do_filp_open+0x1fa/0x410 [ 473.207819][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.212780][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 473.217948][ T31] ? _raw_spin_unlock+0x28/0x50 [ 473.222833][ T31] ? alloc_fd+0x64c/0x6c0 [ 473.227217][ T31] do_sys_openat2+0x121/0x1c0 [ 473.231961][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.237162][ T31] ? __fget_files+0x3a0/0x420 [ 473.241867][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 473.247173][ T31] __x64_sys_openat+0x138/0x170 [ 473.252119][ T31] do_syscall_64+0xfa/0xfa0 [ 473.256709][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.261946][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.268044][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.272805][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.278830][ T31] RIP: 0033:0x7f19a5f8f6c9 [ 473.283247][ T31] RSP: 002b:00007f19a6d73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.291681][ T31] RAX: ffffffffffffffda RBX: 00007f19a61e6090 RCX: 00007f19a5f8f6c9 [ 473.299865][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 473.307955][ T31] RBP: 00007f19a6011f91 R08: 0000000000000000 R09: 0000000000000000 [ 473.315982][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.324394][ T31] R13: 00007f19a61e6128 R14: 00007f19a61e6090 R15: 00007fff1dd72fb8 [ 473.332541][ T31] [ 473.335606][ T31] [ 473.335606][ T31] Showing all locks held in the system: [ 473.343376][ T31] 1 lock held by khungtaskd/31: [ 473.348567][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 473.358594][ T31] 2 locks held by getty/5587: [ 473.363263][ T31] #0: ffff8880339c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 473.373140][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 473.383402][ T31] 4 locks held by kworker/1:9/8060: [ 473.388628][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 473.399719][ T31] #1: ffffc9001b637ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 473.412186][ T31] #2: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 473.422225][ T31] #3: ffff88805918f100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 473.432034][ T31] 3 locks held by kworker/1:10/8061: [ 473.437305][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 473.448317][ T31] #1: ffffc9001b647ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 473.461874][ T31] #2: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 473.473212][ T31] 1 lock held by syz.0.1874/13362: [ 473.478443][ T31] #0: ffff88805918f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 473.488305][ T31] 3 locks held by syz.1.1891/13424: [ 473.493527][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.502141][ T31] #1: ffff88807a726100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 473.511863][ T31] #2: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 473.521833][ T31] 1 lock held by syz.2.1898/13453: [ 473.527065][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.535552][ T31] 1 lock held by syz.2.1898/13455: [ 473.540804][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.549329][ T31] 1 lock held by syz.4.1903/13472: [ 473.554436][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.562954][ T31] 1 lock held by syz.3.1908/13494: [ 473.568170][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.576819][ T31] 1 lock held by syz.3.1908/13495: [ 473.585236][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.593747][ T31] 1 lock held by syz-executor/13502: [ 473.599157][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.607603][ T31] 1 lock held by syz-executor/13504: [ 473.613054][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.621690][ T31] 1 lock held by syz-executor/13507: [ 473.626970][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.635450][ T31] 1 lock held by syz-executor/13508: [ 473.640764][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.649329][ T31] 1 lock held by syz-executor/13510: [ 473.654603][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.663081][ T31] 1 lock held by syz-executor/13512: [ 473.668428][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.676964][ T31] 1 lock held by syz-executor/13514: [ 473.682416][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.690990][ T31] 1 lock held by syz-executor/13517: [ 473.696448][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.705136][ T31] 1 lock held by syz-executor/13518: [ 473.710619][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.719311][ T31] 1 lock held by syz-executor/13520: [ 473.724688][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.733202][ T31] 1 lock held by syz-executor/13522: [ 473.738536][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.746977][ T31] 1 lock held by syz-executor/13524: [ 473.752413][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.760901][ T31] 1 lock held by syz-executor/13527: [ 473.766193][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.774802][ T31] 1 lock held by syz-executor/13528: [ 473.780126][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.788689][ T31] 1 lock held by syz-executor/13530: [ 473.794012][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 473.802763][ T31] [ 473.805127][ T31] ============================================= [ 473.805127][ T31] [ 473.813752][ T31] NMI backtrace for cpu 0 [ 473.813769][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 473.813783][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.813790][ T31] Call Trace: [ 473.813795][ T31] [ 473.813801][ T31] dump_stack_lvl+0x189/0x250 [ 473.813822][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.813837][ T31] ? __pfx__printk+0x10/0x10 [ 473.813854][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 473.813871][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 473.813886][ T31] ? __pfx__printk+0x10/0x10 [ 473.813899][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 473.813912][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 473.813928][ T31] watchdog+0xf60/0xfa0 [ 473.813952][ T31] ? watchdog+0x1e2/0xfa0 [ 473.813967][ T31] kthread+0x711/0x8a0 [ 473.813983][ T31] ? __pfx_watchdog+0x10/0x10 [ 473.813993][ T31] ? __pfx_kthread+0x10/0x10 [ 473.814008][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.814025][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.814035][ T31] ? __pfx_kthread+0x10/0x10 [ 473.814049][ T31] ret_from_fork+0x4bc/0x870 [ 473.814062][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 473.814077][ T31] ? __switch_to_asm+0x39/0x70 [ 473.814086][ T31] ? __switch_to_asm+0x33/0x70 [ 473.814095][ T31] ? __pfx_kthread+0x10/0x10 [ 473.814109][ T31] ret_from_fork_asm+0x1a/0x30 [ 473.814127][ T31] [ 473.814132][ T31] Sending NMI from CPU 0 to CPUs 1: [ 473.960026][ C1] NMI backtrace for cpu 1 [ 473.960044][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 473.960062][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.960071][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 473.960092][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 10 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 473.960105][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 473.960120][ C1] RAX: 94fbbd6d88062200 RBX: ffffffff81967b47 RCX: 94fbbd6d88062200 [ 473.960132][ C1] RDX: 0000000000000001 RSI: ffffffff8d710347 RDI: ffffffff8bbf0760 [ 473.960143][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 473.960154][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cfe70 [ 473.960165][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a59b58 [ 473.960175][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 473.960196][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.960207][ C1] CR2: 00007fffbeebdf8c CR3: 000000000dd38000 CR4: 00000000003526f0 [ 473.960223][ C1] Call Trace: [ 473.960229][ C1] [ 473.960235][ C1] default_idle+0x13/0x20 [ 473.960260][ C1] default_idle_call+0x73/0xb0 [ 473.960277][ C1] do_idle+0x1e7/0x510 [ 473.960297][ C1] ? __pfx_do_idle+0x10/0x10 [ 473.960320][ C1] cpu_startup_entry+0x44/0x60 [ 473.960336][ C1] start_secondary+0x101/0x110 [ 473.960350][ C1] common_startup_64+0x13e/0x147 [ 473.960377][ C1]