last executing test programs: 7.821579827s ago: executing program 0 (id=2043): r0 = socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x89}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x1000, 0x0, 0x0, 0x11, 0x0, @empty, @loopback}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c73b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461deaa2f19935eaf1c9c0000006400", {"9a3bfbc1f39cb307b3472eb9cdb042d2"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES8=r2], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x2e, 0x0, @remote, @loopback, {[@routing={0x89, 0x0, 0x0, 0x1}]}}}}}, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb, 0x8, 0x6}}]}}}]}, 0x5c}}, 0x0) (async) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611094090000000295000b0000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xec, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xfffffffffffffe75}}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x114}}, 0x0) r11 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000700)={0x0, 0x88}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000540)={r12, 0x16}, &(0x7f00000005c0)=0x8) 7.341844406s ago: executing program 0 (id=2047): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004e80)=@newtfilter={0x70, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xc, 0xfff3}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8b8e}, {0x3, 0x9, 0x0, 0x2, 0xc, 0x1}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@can={{0x4, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "9f64aa01615ee266"}, 0x10}, 0x1, 0x0, 0x0, 0x44880}, 0x804) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r8, &(0x7f000000dd80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x121, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000001480)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x20040044}, 0x8081) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002102000000000000006c696d69749f6b30ecb1dc259f34bd2fa90000002c000280080004400000000108000340000000010c000140ffffffffffffffff0c0002400000000000000368140000001000010000000000008ef90340da59fd5b544a5d9d8cc1b40000000084000a"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto(r7, &(0x7f0000000200)="366a4ef67653b541f0b7af26fbbb77a18c939f7fe98293cbb9ea18d9e0", 0x1d, 0x4, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @multicast1}, 0x0, 0x1, 0x3}}, 0x80) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_timeval(r11, 0x1, 0x43, &(0x7f00000002c0)={r12, r13/1000+60000}, 0x10) 5.983628856s ago: executing program 0 (id=2058): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000019c0)="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", 0xb1}, {&(0x7f0000000600)="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", 0x92}, {&(0x7f0000001b00)="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", 0x1000}], 0x14) (async, rerun: 32) r4 = socket(0x2, 0x805, 0x0) (rerun: 32) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000003180)=""/4096, &(0x7f0000004180)=0x1000) (async, rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000180)={r5, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000540)={r5, 0x6, 0x0, 0x4, 0x200000}, 0x14) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r5, 0x9}, &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 5.539477677s ago: executing program 1 (id=2061): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001500010000000000000000000a78000004000000140001"], 0x44}}, 0x46000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) sendmsg(r0, &(0x7f0000002740)={&(0x7f0000000c80)=@l2={0x1f, 0x8, @any, 0x1}, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000001580)=[{0xa8, 0x102, 0x100, "75311bcf502aff59d6f4595924c6d8bdfcff58a28aa447461e1ce9d81f9b8410b7c3f361a9089c58ff62f26ffe2d3892076a5c91bd82e57c170ecc80b7e9094cd0f312f70a48bb7bf57e701646a88471776919ade276ddfd07c798725e15b0e422fccd8ee375349b6375b2bd81455f07d6987ac756db3aaac73534e77e5eff7f4c72e27ea0a68257a96f3b79c486fe1e1bec399b"}, {0x78, 0x108, 0x0, "52929096383812c44d24f66decbc85f695d8205c69d227615423c5ee42bbdb37f7feedce648b7497a7f9dc265a4c808740ad49cb69304397f1904f68e893cab63d7e6185de79384d7e0cba13250b6a8e9b05d2ac89e38b9a3c893bf6e5699e00f47d"}, {0x48, 0x88, 0x0, "8320c10721983850e5b83687cd1ba0d5db6f4ffd31343eb7412e78ea72dbd246fb4aa4315f82435af6a2c5a03c90683c7b76963c0e"}, {0x30, 0x117, 0x6cd2, "2a4806072a68ccc6f13a994ffe54da8db6d257db9a4010f4e1"}, {0x1010, 0x10d, 0x5, "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"}], 0x11a8}, 0x4000040) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000440)={r1, 0x0, 0xe0, 0x0, &(0x7f0000000240)="3098e8b18df2a47d2ebd3a3750ac51c65fb91dd8422863e1e539779d79604c27e120fed8a3b4b06665dbfce807d67947a0c3b27dd486e6c5e890b5593c8272fe1a437ca8418216e9a5d476416d3013e7c463183a981a8bdd6e525e72033546af0db5cd519b70c02029d63108d959a4c4e0bfc373bcd620309bb2b7bc7ce212a929e9fa6dff3484aa93529170e90074c4bed8d6884067e356d9940a29a6616ce81c3b98130cc9443addac9149fb43a88d65e62116346074da703172e31586504e5c614dd22dee80b3ad01473377f2e5df82367f89d7feff041596196e02f86703", 0x0, 0x8, 0x0, 0x4d, 0x0, &(0x7f0000000340)="1234280924d6308e43961b2c29c6f13cf05b59b171d37388ba1e7974b5bb074c5364816db134faf176da88be257ca9ad4e9ede8dd25a09f21ae23db0526d91814d8a873216faed306888d36310", 0x0, 0x2, 0x0, 0x10000}, 0x50) setsockopt(r2, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x1, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x85}], &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0xa6, &(0x7f00000004c0)=""/166, 0x41000, 0x7d, '\x00', r4, @cgroup_sockopt=0x16, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0xd, 0xe67b, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x3, &(0x7f0000000680)=[r1, r5, r1], &(0x7f00000006c0)=[{0x1, 0x2, 0x10}, {0x2, 0x2, 0xc}, {0x3, 0x2, 0xf, 0x71daf1f9711bd607}], 0x10, 0x2}, 0x94) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20008005, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r6, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) r7 = accept(r3, &(0x7f00000008c0)=@nl, &(0x7f0000000940)=0x80) recvmmsg(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/224}, {&(0x7f0000000a80)=""/86}]}, 0x7}, {{0x0, 0x32, 0x0}, 0x6782}], 0x3, 0x20, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x20040000) shutdown(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xee}, &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000104000000000808000000000000", @ANYRES32=r0, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000000) ioctl$NILFS_IOCTL_GET_SUSTAT(r8, 0x80306e85, &(0x7f0000000000)) 5.518742196s ago: executing program 0 (id=2062): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x69) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x40000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079b008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0xfffffffffffffde0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='hybla', 0xfd30) connect$unix(r7, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfc, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) 5.426526955s ago: executing program 4 (id=2064): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)='T', 0x1}], 0x1}}], 0x1, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) listen(r0, 0xc6) accept4(r0, &(0x7f0000000040)=@ax25={{0x3, @default}, [@rose, @netrom, @null, @netrom, @null, @null]}, &(0x7f00000001c0)=0x80, 0x80000) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)='T', 0x1}], 0x1}}], 0x1, 0x810) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) listen(r0, 0xc6) (async) accept4(r0, &(0x7f0000000040)=@ax25={{0x3, @default}, [@rose, @netrom, @null, @netrom, @null, @null]}, &(0x7f00000001c0)=0x80, 0x80000) (async) 5.148382056s ago: executing program 4 (id=2065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000908000b400000000028000480240001800b000100657874686472000014000280080006400000000008000740000000020900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x4004040}, 0x48814) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="df00007f0000e1ff000000ffffffff00e2ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000500"/28], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r1, 0x4, 0x1, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) syz_emit_ethernet(0x51, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "24a2e1", 0x6, 0x11, 0x1, @empty, @mcast2, {[], {0x0, 0xe22, 0x1b, 0x0, @opaque="2389c9816358f5fbe63966c2d8050f4bdb76cb"}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xfdec}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r5, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x6e, "1201752ac07abd538802422b7cf1afc38641d287c8452559044f407900f2fc5a12677b91e0e8ca032df33ec3e1a0d6b0b34bcbc8259d991ebe58f5cdb0406b70cfd7be0f1104d41f4b99efaf538b5e87023269ef72905a03c5d207c60b11b7c8b1a279abb00f50d51bf312e6b80c"}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0xc, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48267}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000040)) close(r8) close(0x4) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100f7ffffff0200000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x44) 4.487709664s ago: executing program 1 (id=2069): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) ioctl$int_out(r0, 0x2, &(0x7f0000000200)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x1) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) read(r4, &(0x7f0000000100)=""/2, 0x2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000019c3bd9b00000", @ANYRES32=0x0, @ANYBLOB="00000000000400002000128009000100626f6e64000000001000028008001f000000000004000880"], 0x40}}, 0x0) (async) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000700)=@deltfilter={0x6d0, 0x2d, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfffa}, {0xfff1, 0xb}, {0x1, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @filter_kind_options=@f_fw={{0x7}, {0x69c, 0x2, [@TCA_FW_ACT={0x66c, 0x4, [@m_skbmod={0xd0, 0x1f, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x96, 0x6, "d2a43ba87fd5c96d8b14655e975ad53d086f4a872250a5824365f0e2479198891bcbe22a12e2adb757580e1f7b83c663edab8b58c60f66b37771c3a104a8b88b0878b4d0a0d7817cf3edda4cacf1d90f80356aeeae44fe0b7e88521265ed215e5808b164cf4eac42d69794d8b1d3ee03d2ee331d7918fef59de5eebbc37c92bb63f4b4624f4d3992a84c9492e9a2a02758f2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xdc, 0x18, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x9}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x77, 0x6, "4f57608d97b01986d23305be907241cb4f8a96c0c676f827ba505c030f9dcbfef49794e78c2327b09c8011c6d6bb08a87b798fd97dd89f5937fbdfde375010396b529017d8c974c4c2f5ebad9fef139ceaa00cfd0d7532d3f1a716b2010e4ed2547436d515d17e17a0494e373d4cf208915107"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1b0, 0x18, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1fa8e000, 0x10000000, 0x5, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe72, 0x2, 0x4, 0x0, 0x5709}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x6, 0x4, 0x4c}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4, 0x1, 0x6, 0xa688ba8}, 0x2}}]}, {0x103, 0x6, "1e57898c3b17f54e3bc1a4a986f5287f45c20544df56cd28828ec7ba98b1e10c4a36023b2ea39052384dd0a5fbcfad6e8a6ea9645fc681a549fbd3f7b622ad7074fdd0a1616518b2b5c9c64503493d3ec0efb0ac7ea94dbb1a0284d260a809d7ee1d5086f640e3e12e006fe56577c479d74e9d0c39c15cf2cc556138eda08d14b4d501cb89cdfb7cf004cca2311f5d6dcd0dda355c1f659c0938570886d1eddaea23cf018fa64d055ae4f1d7136421875ef24ba8b143b57c37fa550e73fd24f86c17068b6125726d39987600ec3f37a4bee19a45277b0d94675953de4b7aa573e9426bcf56eaa564c26243e66f782fff7da4035eea2c6befc18dff0a7f523e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x9c, 0x19, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x8, 0x0, 0x9a}}, @TCA_DEF_DATA={0x9, 0x3, 'bond\x00'}]}, {0x4a, 0x6, "813e8df706b8b1383299432540c9e1627aafcf7c3429a86ea9f719ba411e13e07fa098746b684b394d2c00ce062e46daea1d37cfe81273e9b6129da3135ed5a38d8adb9091a0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x144, 0xe, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0xffff, 0x4, 0x5, 0x1}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xff, 0xfa, 0x7, 0x8}]}]}, {0xde, 0x6, "df25ccb8409d363bd8ef5a5bfe4a3749b8307f1f2148af47d55a584bde9de90ff1b72aad6419461136086daf1e36d788698b6fe0946b5f06c7a20b24ba2e558d4474bba0b13128fd139bbf29f8d12cdf0554e9815ce58192f3c92d80d504caea50d78bfaf492827909ff3cd27aa881fbb6c5c28cebcf76a797efc99f654e9eab29168858a7a5794d713a6b5c5b99760a15f851feffd8603201e59c10078965371602b597d22a3421fdbc25834c78c0476b0d9a667699f97f8ad1b3558a2408ce53bff3cc799da106d52f9a2a4faa42bf02b042dea5864fd3ad66"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x12c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_MASK={0x8}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x100}]}}]}, 0x6d0}}, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, 0x0, 0x4800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000180)={r8, 0x0, 0x2, 0xffffffffffffff1b, 0x2, 0xf, [0x0, 0x7, 0x7b59ef90, 0x5, 0x7, 0x7]}) (async) recvmmsg(r0, &(0x7f00000088c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/19, 0x13}, 0x9}], 0x1, 0x12140, 0x0) 4.37575004s ago: executing program 3 (id=2070): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(cbc-serpent-avx,tea,mcryptd(sha1-neon))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000500)=""/150, 0x96}], 0x2}, 0x8101) 4.330091489s ago: executing program 4 (id=2071): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x5, 0x2}, 0x20) (async) r1 = accept(r0, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) (async, rerun: 64) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000800) (async, rerun: 64) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 4.135669078s ago: executing program 1 (id=2072): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000600)={0xffff, 0x26c0, 0x800}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0, 0xbe, &(0x7f0000000780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xdc}, 0x2000) pwrite64(r5, 0x0, 0x0, 0x1fb) getsockname$packet(r2, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ff0f00000f00000003000000852000000300000018570000100000000000000000762fb88b7004002d01000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000e40)=""/4096, 0x21600, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001f00)={0x4, 0x9, 0x8001, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001f40)=[{0x3, 0x1, 0xa, 0xb}], 0x10, 0x1000}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002940)={'wpan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000280)={0x0, 0xbb11, 0x6, 0xa924, 0x1, 0x9}, &(0x7f0000000500)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000540)={r10, 0x4}, &(0x7f0000000580)=0x8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002980)={0x38, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7000}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0xc018}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'batadv0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.9647662s ago: executing program 3 (id=2073): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff0001}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r3) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) ioctl$sock_ifreq(r2, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='tunl0\x00'}) (async) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000002c000100000000000000000008000000", @ANYRES32=r7, @ANYBLOB="0b000280976b6408686030001600018088046fa3301e8c9439787c66a9a96b6904650000"], 0x3c}], 0x1}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c00028008000440000000000800054000000000080003400000000008000640009a0006080002"], 0x94}}, 0x0) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x3, 0x7fff, 0x2, @remote, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7, 0x80, 0x1, 0xcc}}) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4010000190000022cbd7000fddbdf456ebf25ff0200006fd589bb8a925f37110c7cd0b7a2000000000000000000000001000000000000000000000000000000000001eeb6594a2f6c5e4d5aec6d3d8200040000e3e5be5a35385dea3029e1a5cfd5702391dd40aea58fe1c41144e413f787bf5a00f8b76739282704a5669e7fa7644499f91fb2c68aa2e51eda6a6b3cefa71700"/162, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0500000000000000050000000000000008000000000000000c000000000000000300000000000000f8ffffffffffffff00080000000000000000000000000000070000000000000001000000000000000f00000000000000050000000000000000100000b16b6e00010100020000000010000a0025bd700028bd70000300000008000c0006000000e4000600fe8000000000000000000000000000aa000000000000000000000000000000004e2080014e22e6b90a00802094000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="fe800000000000000000000000000040000004d232000000ff0100000000000000000000000000010000000000000000ff00000000000000399e000000000000f9ffffffffffffff0700000000000000070000000000000001000000000000009a590000000000000b000000000000000900000000000000d500000000000000030000000000000002000000f5ffffff0300000027bd7000003500000a0001079c00000000000000"], 0x1b4}, 0x1, 0x0, 0x0, 0x40800}, 0x20000001) (async) r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3ffff, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0x20}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8020000180040012abd70e2ff2843d917300600000000000000000000000001ff0000010000000000000800"/64, @ANYRES32=r1, @ANYRES32=r12, @ANYBLOB="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"], 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.82866676s ago: executing program 2 (id=2074): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x40, 0xe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000240)={0x0, 0xea60}, 0x10) accept(r3, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000240)={0x7, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) 3.828428004s ago: executing program 4 (id=2075): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000480)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x6, 0x4) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0xdf00, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x70001}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) 3.59622016s ago: executing program 4 (id=2076): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0xffff) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xa20f0000) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'dvmrp1\x00', 0x0}) bind$packet(r6, &(0x7f0000001100)={0x11, 0x3, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004994}, 0x4004012) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r10, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xfdb89000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000000)={0x18, 0x0, {0x4005, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r11, &(0x7f00000004c0)={0x18, 0x0, {0x1, @random="507055ac9207", 'netpci0\x00'}}, 0x1e) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 3.439876864s ago: executing program 3 (id=2077): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f0000000200)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.338129032s ago: executing program 2 (id=2078): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000002000010026bd7000fbdbdf2502101000090000060f00010008000200ac14142a08000b0006000000050016008900000008"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x2, 0x4) 3.256563357s ago: executing program 3 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0xa8}}, 0x0) 3.091291415s ago: executing program 2 (id=2080): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x24, 0x140f, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1402, 0x4, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x68b8513259f48eff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004034}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=r5, @ANYRESOCT=r4, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 2.921394215s ago: executing program 1 (id=2081): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e25, @loopback}]}, &(0x7f0000000180)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) 2.665954796s ago: executing program 3 (id=2082): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x34) 2.592204416s ago: executing program 2 (id=2083): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="26000000040000000c000000050000002c010300", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000004", @ANYRES32=r0, @ANYBLOB], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=r1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0000000000000000000000000000000000000000000000003a9e091856197296dd09776804e591be1b915398c127384e28b03e9870c2e7acf757a6eaa0dd23f3aed5fee61bc376141813767c15ed7b8fb497e82adb509d6e8671f57dc8b979a5d8a9f891a9f670094264a1a15ee6f5f0b4a0"], 0x50) unshare(0x2c040480) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, r3, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x24, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a000ded00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200001304000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60164508002c06fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b002000090780000080a00000004001b0ed0b094008001fe0ef9890637301a90"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002b0009002dbd7000fedbdf2505", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001400010004000000000000002d"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) socket$nl_generic(0x10, 0x3, 0x10) 2.478158764s ago: executing program 0 (id=2084): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000000000000000000000ffff0002", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c000280060010"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendto$inet6(r0, &(0x7f0000001100)="8f2b8d0efe", 0x5, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x5, @loopback}, 0x1c) 2.167496303s ago: executing program 1 (id=2085): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x48, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="180a000003000000000000000000f900851000000600000083aa0000", @ANYRES16=r1, @ANYBLOB="00000000000000006608000000000000180000000100000000010000000000019500000000000000180100002020782500000000002000007b1af8ff00000001bfa100000000000007010000f8ffffffb702000008000000b50afdff000000007f00000071b5d5c4acbb060000009500000000000000a5f7a1b4ecb38703f19e72867bda6d5a76722f8caff4068df9ff0f282e1f27b0feb67e2916492998766294a0304b54d6c8963f885f0fbc9aa33e9dfe064efe3a59e4ef76ed35bba372915bac3a"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1.412503357s ago: executing program 1 (id=2086): sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20008810) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x2, 0x7, 0x5, 0x4, 0x351f, 0x9, 0x4, 0x1}}}}]}, 0x58}}, 0x20000000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a000000000000000000000000000000000000002ad64b3419e5f0be69b8000043f88335788ca8e8ac50ff5fce4e01b1e81c8ae56cae2e214b5db43763914ffb0b3e173edb269e8be766c4ad2da227d5954e4eb17bdcb7772e6e5fdd3e2973ba2291224b50aa3990a1c2a0e3200a9b90d81c9590c6edd8841a21781599b8be0c54e9079dca1c6993859a27c89e88142fec80ffa832675fb3a211bff09c1070a714bf3362111f8031df2e267996c78d1738931b5b131aa3fc8a7aa92b164483a25a307fce", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="00000000010000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1b, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r4}, @exit, @call={0x85, 0x0, 0x0, 0x9c}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x0, 0xd, 0x4, 0x2, 0x20, 0xffffffffffffffef}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029b970000004f9970000000008000300", @ANYRES32=r6, @ANYBLOB="0c0099004100000060000000080026006c09000008009f00000000000800a10001010000050019010e000000050018012d000000"], 0x50}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3168, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x313c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x9}, @TCA_U32_DIVISOR={0x8, 0x4, 0xd3}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_macvtap\x00'}, @TCA_U32_ACT={0x1a6c, 0x7, [@m_nat={0x22c, 0xd, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x3, 0x3, 0x8, 0x3}, @multicast2, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x3000, 0x0, 0xff, 0x2}, @rand_addr=0x64010101, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x0, 0x8}, @rand_addr=0x64010101, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x5, 0x5, 0x2}, @private=0xa010100, @rand_addr=0x64010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x47, 0x8, 0xbc, 0x2}, @broadcast, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x0, 0x6, 0x7f}, @broadcast, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x8, 0x4, 0x1, 0x7}, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xc991c31, 0x5, 0x80000001, 0xfb66}, @loopback, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0xfffffbff, 0x3, 0xfffff0ab, 0x8}, @rand_addr=0x64010101, @local, 0xffffffff, 0x1}}]}, {0x9a, 0x6, "7cf0da179d995e7441086d21dfed00f56cb6660bc94e40fc5ea6fb020deb034b569b3f56074de52c1f8d4ecde84d4cd8ccd6db9c71089c250755e30e0351e06a9a6e5ccf1897f9ba50f88fd2b866036786564abb7dd36638770ad6fe5f2d04e59cac9280c5899eb880288ce55a8e345387ac084e3de1c2d28fcb52061191dfa050f074360b0517f5891a0f0fa28ae5f051042933c027"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x128, 0xa, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffc}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe7b, 0x6, 0x5, 0x2, 0x1}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0xc3, 0x6, "838e14f99398b33284662c2e878556c86840d67064573c7b19a78000cd15587c73fc5499f2647e31124780ef9469eea36eb6d41df2ec80f7de3e8bd24806bf77c7ea2378d3ae11f1675997289b4280f8e6a148c4accb4bbfff793119ef9a88edaec60af902f11443227c6f14566f637f276cbc78f5cab837baa169840a20561432d8e78d99555ca6f526b4d55d8a18b6f16c2c91c53d19b1b784a7173d3771a65d76ec99f430efbc00f98fee7def825db84af81836befce2925371adcca567"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xb8, 0x6, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xffffffff, 0x20000000, 0xe, 0x6}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x16e00000, 0x9, 0x20000000, 0x2, 0x6}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x19, 0x6, "4e4184efbcb20d45598d549929c9544176fcb24d0f"}, {0xc}, {0xc}}}, @m_vlan={0x84, 0xf, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x309a, 0xa, 0xffffffffdffffffe, 0x0, 0x10001}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10, 0x1ff, 0x5, 0x5, 0x5}, 0x1}}]}, {0xd, 0x6, "e977945a4773426b27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}, @m_xt={0x188, 0x10, 0x0, 0x0, {{0x7}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x7c, 0x6, {0x1ff, 'filter\x00', 0x7, 0x0, "36337a7bf3a5b32ef137f3a1f6949b5a4bc994876ecab4814356a572c38a9f9b1a185ebe30196a68222dacf4d2b97fd25ffef20b69893c2446aefe7609252b120d3559f010a76a49d16e7ffc450b93dd9e4e"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffb}]}, {0x74, 0x6, "a9390d1a1081ed2cac7ddabdc2a3748d0ede93310d703f9a12d8816fb53ebdf4911c3dc47bfb40650e6f313c9882f5abe6c51e5c230dbbc3c0188f0e3ce046281e450fb918a2f53fb54f35de4b7e107edd1023801d7f6423ad1a7b069a4ab6babf1a100a70d7ac5b8671563c1627baed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x1060, 0x5, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x5, 0x9d38b913dafaefd9, 0x8, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x10, 0x4, 0x1, 0x4}}]}, {0x1004, 0x6, "9097b8c95150a0ff51ca1092dabcd397a17738dc78d5c220cbfc57c46942da3259af74ee2284bacd8f000a483131ff5d250e90ad041c41807f88c482d0cdbe88fb2f802d109942ef8dac52a5088045e8ded2136c7682aeaf14dc405dee70fb3cdfefc1a75bdb3b9f32f662a0551ddd2ed6bebe024e282d4d5c0b44e4bac1c69929b882746ebf1da2bb317e8ffd9c9d6740eb1fefafee8f45fb46d155d6cdd6b15508927930a2888c0b3fdb893bbb59575c070770814aca147dc4072aab0b7021bc817d945845e6ec118523ab33beabf9dbe7f590fa5285b8af1bc67c4dde975b7fd038476562807ec6ddef2db267ccbc1f2c1a5220253998d2609eded5046630be8b0f84894227bf4d690525ec7ce1fcb049178b294f43ac68da0734d988ba49a1c7a24be9ae2fb2307366a096d7c2d6776442518d71cb62a531f119f7e7d8e2f1fa0e8f59dff6de8afcc73f815d9bb5adf05426c866d896c6fe50e5b1a8eff868443d2a80089f275e509bb007277d164d60dced53d8b6f861d56aefae34b10f3b47fd581427a99d039bc83875d7fe8b1525f8e782def0593b3d272975c2bbf98b4ea6e3afc77e9e82db8dfa731cdd90caf8fdd12f7fd766d88a505a674cded974dc6b2b1d9cc5d0aec87ac1eac51c7b92932ed81ac99c2303393f1072f21b8c0fe21f4fc6f8da8a1fddb203cb66625024577ccd29d58a1004702c3703fad04b3ae8f5d90480c645646de7312f7cceae73f85f6ad3c88f903b400bdfda1dec95bbbec7c4ab80d86a5394bb9848de46085f96f6d151ec8166ee2f349679b1005a556f3a9ef69ed5614c02c29fdbb5e2d851da6937595afc467947c71774893b2b4d65baa57668652a61d6912aa18440916fa120b60042286a23b51505f3e15ad6c5c14fff720ea545f86c1d9c21ae92d61dccf4027555a72925c81d99053460f9ba95530981c5ce7d068de32faabaaa99cb9fbb1d655e76937ac2397b6a6f59bd7f8b9f58ad6a1f095c3a2ba577457bb59833deba534ae922dcf3ac3582b05f463315089d97386c585581c83cad0f595c782ed2ce3e553dd6d0f13289d0a117b759b6d1ac70b1619650dffa68f25c512c5241587723ce9544096c98923da09e8a2ff18cb8b0bab4a1155fec3e9e8516c87db14fc116313987861a110976df3ac6d997dd5c34d16b4744dd5ce7fd456e1f8770c15bc43036a8c1eae098a441e5a163615ef279811949b07e6db4935586ec7564f1e3f5ba14cd04680b6ab35ccee15811ec0a642ff558dd8956abdcb5b7d13a0712dc703e704b76ea851583f99083d02c5c4ee26b343226ed079ef6a1ea0dea0fbb1b6f5a5c947b567294d799b312de09ca3c260485d4e3167340a3e785a61d5c79f331636380dfc72adad92954b7fc968bf3e1fde7edbea42c220d813b746b2bfd8b7c8791a7967cab3efe6808e4aa1f118295bcf4c0b15eeba6a5ae31e2b05688002b47183a20a03a61b5d136c608bd6d7513e99f440c842d8257591b311d5ec9a7824cddb7da55705e31ba1225aa9c0015b9f1bb5964391ddc6fd82f5e1e56640732bfe26fb8701460e2ce90a8087c49c6dc8a759b16a81b101572f05999c3cb31bb09115589bb5e47d17fea41aa3c289c64cd256862c0005348fa652d774fe33ef6e696e3881220d05ddd100d4174a6097a469fbd4e398a61ca66d2e25e3a63b5a9deb1ad7aed047b2831cc3872a5b43284d484bd6b0c811419172a23b3febfca7f4e6fa98af81b6621fdbe4a676d5bec01d7a95cedfc634b886bff7283f198014989270db5db3d32576d7bf60abe347e504a05973479ab55f9a902d484663d77e00c4f6f82ebda5615fe6bb16e4faf356a4b5175744b46b1a73086cff9e777c0c0fd0b7b37b8b9b033b79f4f4625fb61e0eea43239a3921d6d8b168b547c6a3f6bf7c78c4a96c2ee7e87908915ef02d4b99455334fb3d907bc33fbe3ea60f36c9471ce7e07ae3a59b0b3fc1f4a267c7bec70aa27b575fafccde74868f2f9fe3fcd9e54ab8274ca763382c03fc555ab1810612ddac1e5fa1e15ccfc977d03d06a39b1ef60a72fd22ea2af073643bc2ddd37c327622ce8a298d1ae1e429c6389a9ed99a2892577773471e8f88234a00823fa74a74d33e1a4f81cd9cff8527a49cc2a722220467312e74418efd09edf407b6d7dbc4dfabd7a34d3417a6605c5daa3d9acdf81eea70e83eeacbbe0de4ea2637c65e13385f62b7d3e9ba5890de843e199cdcb303d9e251fdbfbe7836585da59bea8eaca1f63dbc7316f2b0b7a43b077e971953aafe4e190867670c1ab66fe00fb5fb779ea353c679cb06a40df9def2e1cd1ce76d389158fd9f3fa04a058d6075534b5db03353192b2cce41a7e14cefec8c927857c25d42bb6df0df204f30eb73189f7b9e59f513a4f63e0de95295cddd7f3d1e64bd645dceca6750514c6c9acf5af4d0608c33fe7a19208a1f90eeee8e64819b11d8a2f7318bcf0c87fc500ed761201054925cbbf2fd71670d118deff0a91582f6053b101d52de6116df984c413c92f7159d1d4dc4d16fb4e0b0195e9591f2b373bfe39a366a079ed0bbaf85e785d694b8e6fbc289b18cf6fde9d1821b2eb0f6b2ba15d4d7bfce50df669d445b8422ab92da1e9ae8bda6d6b75fe8623e3e5b5a0a55d953234ac6536c9afc201c2ee08cab45b39db39884bf427e9dddf0c4bce3a64c48c52660861d8908fd35a796e4742c2193bbcc060c2f3eb1819960461afed94bde56449521b2b407a75aeec6dfc60280e4341b6cd6b616f6f3279aff815414fa78dcfc1dfecf6ce97fe15722d26209925dd0210e889606508325e1dc42d55b5431cf09b9db253c7758adb589070ce261787fc5b6024e3c17d05ce8ccbbe8479149cfe41ef16dbc57d30ee61376b19145a72c7ced2c463143d63bd75032ad7a02b00768c544c3e0a38deccac8181571fdd960a5184e216519463e5f71ae68ec205a42d10949b040fe7c112955939424dcf9a7a264bf538874036feb7db62702c3f882ec67bab0b4ab579f3a19f33b05d20916973ae126bfba4539bada26ff671c2de2887f5682942c94d5945ed7e54309042caed0b916fc0d4706d28459e84e1e73916b7a8e42778c672d73fef2bcf516f8416d4755d966ef0f25f2081a8ac450a9fc9b8268e17c76e6f2ed8667200778c0f2a802b20cc94bdc61be740a3faaaaeb4b7f50aec2ab83c0f8892d39f308ae6d5cfbc80b83167967453a58015ecf3fb433edc685229d7d03536578384a324ca4eeb6122ceac05225b07e1321db7ef59365f6d43d7d929dee9596cc309339be013a10995f6464df920c514c5329ee24e51afc6424c62dc5182daf8f91f30b48dc4d30526046d1ceee6cba3ee899995ffd16fa70d5c62310c044ac7e74cbc42001cd645c1c9b60ddf9fd312ccd66eaf96c3f809ed9b1e25f402cbf916edfe662eeb7a41576447c65aebff455459aaf58edebec6d31888d9941928af52fecc25cb95c4f125135926feea55bdf48fd12ce7a1b8c339ab274530f2b44d284c5d077ee5d951031bb600a54d7b79a7a0d7c503df7632e104b05b67183f892f836514e56a7517b8fdd842d1d313e941c133ee6f4b1e22d8abf8abdd4560c0a2e13efb363cfa0b48cac1980a49e42f6dc4d44bb19a10cb4e199c440338cd350853b6dccd5c4747f7a33de15c3c071d9a18be76b8d0ae3ebce8bdbcd7d47955849459b6694bac0fea260edfe11f0ea5b67e9944518c06c21c02caea4ddd48020f079df308c6a0426b7071a095ca7a4df1bfede84276a82b9200d4efecac4c559324f54c46a1157cec04ecb388dafae6e0a5b0030a5bfb0edc5b742f886d81597e96a67a90080409bc0ca0c81093d10412c32a0caefa5c3f9d315d0f9ff28bf4f0a5edf1be501567d6a5a7cb98cc9f56bd1fbd20e6a66dceba2d5d804dff9269f8fbd16707cecd81c451c584ccd4408427b3644d4dfc221dfbe0769eb4a81202151012a372861f93806e1ae99d3c65e2694e26489a00f5219a5f92300738224aa16d3c605adc1a3ceb1aad5a0a1e200dd802fe659184525133215c79f0e4cedabdcba2a54b888d2ff7ed5054302b79f96b718854faa728156114fdde141877912a59a264933cee2991c807ec4655be7a20c6f6f72a6734e31a459a4f89ee363d57255bcdfce3803d21d84dcd0fb1c111873206449ef56757c84ee03e3563d2f405105a3dc8dd6122134a78621653116fe2182ca54cffaf12651e3dadcc5a5bb850cf052a28843f1e08543e3dae730558cb5f5483b4b65a0302f4ca9bce64c5b644bb85eb0b60e7c43302f4b76b4d44e6c2a3f15f45c595a09a4c2b599ef5849383f4d830e312ed4730550675880a660792e63dfa442a4a593ea7b44bdb528a8e2ec656a42d7451f93c515f377d83b2caeb79323f40d00efc409c7614724aa74f903e16e3d0069c0a4e0b642d4d04ce109cf1b912f06aaa65daef982d9a91ec1bdba96dbe91f4b370e023ac0728f948e456fea554fea3073c422d0d0b24138ac6ced7a3c35371ae2b875726f78c910cd155159b139eab223c26df9524a2890746a6e1e9708f4a04527ed62ec25e440988729f55abc9cea07d24dd35c53f5e562076800b346cec421b83d7bed37746a74d783eb747a1d1b0d11edc432be9fbc8987cc1ac9a24c9324707efa85375c84aa55bf4bf8f47066fc420a7317c25eca6c37d691d81674acf51ac3b143bed6ff99656ad00872a3f528b788e65a66713ff56ac7fd7fc4b5a9121fee5734d177aa948adece63c4b9b420c2699d1ad3710ecabc5bce13a0e0d52d24d052143e9b3cfcf02f58b63e0f22498ebc5aa19d65f07e421af942b9910fe2ad4f5d8366aff73556a01f107be87154ed07254b4404a43ea52935fff3019dff357f087182a452162c9cc3c3548a5c2e24de3d117dc5b6cc99df8bae79b2cda192a7734c6501c8372b72e36e317b86066667bb543dbd5d633e21503e9e7b8f831462cca7b1bfed877e76c77369ba0d05c601d2648c1ae83fe72d30bb32b220fd1aa6caa53ddaa0d50cb83054a8f8c21fb95e82eddb648bd50b6b632876da828820e990a47d0365b89dbaa0f6a81165d346feae8e19548284a665cd8290b695e5bdfb7cb14196c6ccab601038cb3a55e9416c88141b1dd30ed0433d8f19d3360750e1b513dfb7bf7ae4eb61c2600a3aeed1f785fbf386d4652c4db256e76ce3a54edf13a32233c6799cb5fa9d956e46a3dd28940b388f58da21bc0a61f7b1080519f30aad137f2152f6385d39fd03f151f8fcd05fa62d294b2a1dfb00c3ce4b011edb1111e1cab6b08ba560bab514692b508c2a4ce573c385e1b24ecc8d7cb29408a1383dd3c23ba2d328769018ceff43b5f5337ef8fa5c5a64e8b30cba74acc57b38714b3dace7fd9140de6aa5e4d5e36b140914ddce4f0b331b4f3959594de9fd2c3aa8c21c0d02fef0c61fb560d264d60435f4aa52757d209e7de7b56c331e00c2ebe60273c95a0881da37afbbb3b7d3822e3b50fe205e98b629b2855e6ec6583be1bf70afb838ce1c3c31ff80cf7801d3f987629a23f74186c388371cff45b2933b44c2e32049d00c5634faec859b3e25398a14622931418a25bf433e705682246d6582e323d3b8e02fcf1babe1ca7ea70dde1e2249ddaeb44c0e1ad22126325b010eead31a197a72d4390ff607d9bd698cbe77e238f8db74e82a4bc507166aae1f90fcdcb91a35f0d2cab4fec19f9b3dec7c328800d0dc09287991a6ce24b2be66b6134b0088e738bc179716a2c1a3b859f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xe4, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x1ea0, 0x0, 0x4, 0x8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x6, 0x9, 0x400}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5159a8de, 0xd7d, 0xffffffffffffffff, 0x6, 0xffff36ec}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x8, 0x4, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf47b, 0xfffffff9, 0x10000005, 0x101, 0x9}, 0x10}}]}, {0x27, 0x6, "98fd5e227c1acb4ca3bb9c7a4e5273dd7b47c969ee6f4b52b35e1da3bd72ccce306fd6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x168, 0x1c, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffd, 0x4, 0x7, 0x1, 0xa32}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xf8, 0x6, "87f7ffd94d9b9384b8eb01053386eba61c9b516a5bb2d77b9c4eeb58c98bdd9079b6396590d19f7c6191842bd61c4a81b8ed98be26b21011b6f9d5fd47555bc08e8eb08ac643c3b44197fcaf60f7e767d8772929073e922353179bb55274df7aeb94b1232a1f8fffd5600ad6b1b3985edbbd52b2973322df2b0705a1f68237973ad0995145618129ae461d7ff9797f5cef70e96320618dc3b729e5b8c2480fee1bf4b5852b124eff279d98798ce9be2ff003b959b803f497e5aa571f0add16698383ed232c5b9bb1fbf8b0cd1d6c7338b9d8313c4d7ea0b686c33c2e3bedc3ef7e5be81a09f4baab2e4496b61f77bf539c5dad43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x50, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x7ff}, 0x28}}]}, {0x6, 0x6, "9b03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x154, 0xa, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3ff, 0xe86, 0x7, 0x7, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0xdbf4, 0x7, 0x9, 0x7}}]}, {0xf7, 0x6, "cf40d78a793e6f6dc57efd8d42ea6f3e31cfa29028bddbacfeeb23bd266c791c1b99345814c9d01c0f0603e43ca9d27077c0295cd10e6d1147c5d88988ea35f6ffef6f22b314612c6b6a2f9c9b8b128a503df033b2eb530c38d125f1a23e7b256d30eb1e5464b4dcba6ab55c00f25ba57200beb66091edff5428b1046fc9e2004ca6aa9b6dd56076adc035b14b77e43c840defa6d2320ed5893ae98fa1399eed6e9617ae5c39b9e198732ffda373f1c481010732f0dc150766a9f3bdeccabfab0471168d960e0172833bbc24909aebd40986c8aa7ba874930b091b93090fc7c3d1a186a5426be30ddd0eedc9940cd42bb13705"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_POLICE={0x1474, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x5, 0x356, 0xe, 0x6, 0x10001, 0x1, 0x18, 0x7, 0xde5, 0x87, 0x80, 0x10, 0x3, 0x5, 0x5000000, 0x7fff, 0x116c, 0x0, 0xed, 0x8, 0x0, 0xfff00000, 0x8, 0x5, 0x4, 0x4, 0x40, 0x8, 0x3445f1b5, 0x9, 0x40, 0x9, 0xa, 0xffffff4e, 0x101, 0x77bededa, 0x4, 0x2, 0x4, 0x2, 0x800, 0x4, 0x0, 0x153b, 0x80000000, 0x25d6, 0x1ff, 0x7, 0x9f, 0x3f2, 0x9, 0x7fffffff, 0x7, 0x9, 0x200, 0x0, 0x0, 0x40, 0x7, 0x1, 0x958d, 0x10, 0x926, 0xc, 0x8001, 0x80000001, 0x334, 0xfff, 0x9, 0x8, 0x8000, 0x5, 0x6, 0x9, 0x4d, 0x2, 0x200, 0x7, 0x6, 0x7, 0xb443, 0x401, 0x7, 0x7, 0xe8d, 0x7fff, 0x4, 0x4, 0x200, 0x9403, 0x0, 0xb3, 0x5, 0x7, 0x7fffffff, 0x5, 0x101, 0x0, 0x9, 0xc4b0, 0x8000, 0x10000, 0x4, 0x0, 0x7ff, 0x1000, 0x7b, 0x7, 0x19, 0x5, 0x9, 0x6, 0x65, 0x1, 0x9, 0x1000, 0x401, 0xf75b, 0x10001, 0x3, 0x4, 0x1, 0x9c, 0x49e7, 0x5, 0x604d, 0x7, 0x6, 0x5, 0x7, 0x4, 0x1, 0x7, 0x9, 0x2, 0x0, 0x5ed9, 0xa6c2, 0x8, 0x8, 0x6, 0x6, 0x2, 0x7, 0x3, 0x8, 0x800, 0x200, 0x4e4b9b2a, 0x9, 0x0, 0x4, 0x80, 0x3, 0x8, 0x0, 0x101, 0x2, 0x9, 0xe, 0x4, 0x4, 0x2, 0x3, 0x1, 0x1, 0x7, 0x29, 0x5, 0x6, 0x8, 0x3, 0x5, 0x0, 0x80000001, 0x3, 0x9, 0x6, 0xffffffff, 0x6, 0x1, 0x8, 0x3, 0x8, 0x5, 0xffffd739, 0x34, 0x2, 0x1, 0xffffff81, 0x3, 0x800, 0x8, 0x0, 0xa6db, 0x2, 0x1, 0xce, 0x0, 0xbd, 0x0, 0x1, 0x1, 0xafa, 0x400, 0x4, 0x328000, 0x0, 0xe, 0x3, 0x3, 0x6, 0x8d, 0x2, 0x3, 0x1, 0xfff, 0x2b56, 0x3ff, 0xa3, 0x4, 0x6, 0x5, 0x6, 0x6cc, 0x8, 0x7, 0x1, 0x2, 0x2, 0x1, 0x14, 0x3, 0x0, 0x0, 0x0, 0x99, 0x278a, 0x6, 0x949, 0xe1, 0x5, 0xf, 0x2, 0x5, 0x5, 0x5, 0x0, 0x999, 0x72, 0xb, 0x2, 0x1000, 0xdf, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffffff9, 0xc000000, 0xfffffa3e, {0x7, 0x1, 0x4886, 0x2, 0xd, 0xd}, {0x4, 0x1, 0x4, 0x4, 0x7, 0xf}, 0x2, 0x5b9, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x25f, 0x6, 0x7, 0xfff, 0x7, 0xd3, 0xfffffffe, 0x8, 0x6, 0x199, 0x1, 0x2, 0x9, 0x3, 0x7fffffff, 0x7f, 0xffff, 0x2c, 0x2, 0x0, 0x1, 0xffff, 0x7, 0xfffffff8, 0xffff, 0xca, 0x0, 0x1, 0xffff, 0x9, 0xffffffff, 0x2bb, 0x2284, 0x8, 0x371f91ec, 0x10001, 0x3, 0xa, 0x3, 0x7, 0x1, 0x5, 0x3, 0x2, 0x5, 0xfffffff9, 0x8, 0xb9b, 0x684, 0x3, 0x5, 0x200, 0x2, 0xf9, 0x3, 0x7, 0x6, 0x1, 0x7, 0x2, 0x80000000, 0x4, 0x8001, 0x1, 0x5, 0x9, 0x2, 0x3, 0x200, 0x8, 0x6, 0x7fff, 0x80000000, 0x40, 0x10000, 0x0, 0x7ff, 0x2, 0x9, 0x7, 0x3, 0x6, 0x7, 0x1, 0xffff4890, 0x0, 0x3, 0x0, 0x80000000, 0x80, 0x5, 0x401, 0x6fc, 0x5, 0x157, 0x800, 0x3, 0x2, 0x5, 0x4, 0x8, 0x4, 0x80000001, 0x5, 0x6, 0x0, 0x2, 0x1d, 0x4, 0x1ff, 0x5, 0x101, 0xfffffffa, 0xc6, 0x8, 0xad, 0x3, 0x1, 0x6c7efbd4, 0xa8e5, 0x40, 0x7, 0x3, 0x8, 0x6, 0x9, 0x1000, 0x3, 0x40000000, 0x8, 0x6, 0x9, 0x6a9, 0x5, 0x8, 0x5, 0x7c78, 0x0, 0xa, 0x9, 0x8bb, 0x9, 0x5, 0x100, 0x5, 0x7, 0x8c, 0x8, 0x6, 0x80, 0x9f0, 0x0, 0x7ff, 0x8, 0x7, 0x7fffffff, 0x31, 0x4461, 0x9, 0x2, 0x6, 0x7, 0x5c, 0x0, 0xa, 0x4, 0x8, 0x1, 0x4, 0x2, 0x4, 0x0, 0x9, 0x3, 0x0, 0xfffffffd, 0x4, 0x3, 0x3, 0x9, 0xab49, 0x31f0, 0xe, 0x40, 0x1, 0x67a0, 0x5, 0x9, 0x8001, 0xa52, 0x1, 0xffffff81, 0x80, 0x6, 0xfffffff8, 0x2, 0x860, 0x6, 0x80000000, 0xffffff32, 0x2, 0xf, 0x6, 0x1, 0x2, 0x0, 0x3ff, 0x1, 0x1ff, 0x1ff, 0x4, 0x6, 0x6, 0xfffffffc, 0x9, 0x101, 0xfffffff7, 0x1, 0x29, 0x6, 0xc68, 0x6, 0x4, 0x7, 0x400, 0x8, 0xef6, 0x4, 0x6, 0x3, 0x8, 0x0, 0x5, 0x9, 0x6, 0x4, 0x8, 0x3, 0x7, 0x5820, 0x0, 0x9, 0x6, 0x4, 0x8, 0x0, 0x4f9, 0xd8, 0xf5, 0x3, 0x6, 0x1, 0x8, 0x0, 0x381f8151, 0x80000001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x99, 0xcb2, 0x0, 0x2, 0x1, 0x3, 0x3, 0xf28f, 0x8, 0x10, 0x7, 0xffffffff, 0x0, 0x800, 0x1, 0x4, 0x7fffffff, 0x3, 0x8, 0x6, 0xff, 0x8, 0x7, 0xc, 0x6, 0x0, 0x1, 0x6, 0x800, 0x0, 0x3, 0x69f6, 0x7, 0x5, 0x8, 0x9, 0x5, 0x24, 0x1, 0x9, 0x7ff, 0x7, 0x7, 0xb2b0, 0x1, 0x3, 0x0, 0xff, 0x9, 0xffff8001, 0x398e, 0x1000, 0x6, 0x4, 0x400, 0x100, 0x8, 0x7, 0xe99, 0x401, 0x6, 0xffff, 0x5, 0x81, 0x9, 0x10001, 0x7000000, 0x5, 0x3, 0xffffffff, 0x5, 0x3, 0x3, 0x1, 0xffffff75, 0xe97, 0x2, 0xfffffffb, 0x3, 0xa6d, 0x5, 0x8, 0x800, 0x4, 0x8, 0x5, 0xfa7, 0x2, 0x4, 0x7, 0x7, 0x80000001, 0x100, 0x8, 0x8, 0x8a81, 0x8, 0x0, 0xd, 0x7, 0x1, 0x101, 0x5, 0x9, 0x2, 0x1, 0x8, 0x3e4bb2e5, 0x78d2, 0x9, 0xd, 0x1fffc00, 0x3, 0x3b1e85c, 0x7, 0x93fc, 0x5, 0x6, 0x6, 0xffff, 0x8, 0x5, 0x200, 0x5, 0x7fff, 0x5, 0x0, 0x9, 0x3, 0x8, 0x2, 0x0, 0x7, 0x5, 0x0, 0x1, 0x54, 0x0, 0x1, 0x81, 0x1, 0xa, 0x6, 0x101, 0xa, 0x9, 0x9, 0x3, 0x2, 0x23, 0xc0000000, 0x9, 0x8, 0x84b, 0x100, 0xffffffff, 0xfffffff9, 0x4, 0x0, 0x1, 0x5, 0x11e, 0x7, 0x2, 0xe8b, 0x4, 0xfffffff0, 0xfffff5f4, 0xb, 0x3, 0x80, 0x3, 0x401, 0xf, 0x4, 0x3ff, 0xfffffffc, 0x8, 0x0, 0xfffffffc, 0x1a, 0x75, 0x8cf, 0x674, 0x2, 0x8, 0x3, 0x100, 0x6, 0x8001, 0x0, 0x81, 0x6, 0x2, 0x8, 0x800, 0x9, 0x5, 0x6, 0xa41, 0xffff, 0x8000, 0x9, 0x5, 0x4, 0x40, 0x9, 0x1, 0x10001, 0x9, 0x10, 0x6f022ad0, 0x7, 0x1ff, 0x4, 0x8001, 0x0, 0x9, 0xfffffffa, 0x7, 0x1, 0x8001, 0x7bdd8b95, 0x6, 0x7, 0xd, 0x1, 0xd94, 0x2, 0x9, 0x2, 0xcf23, 0x1, 0x3ff, 0x0, 0x5, 0x3a, 0x1, 0x200, 0x5, 0xfffff800, 0x1, 0x2, 0x5, 0x0, 0x2, 0x1, 0x2, 0xb933, 0xffff, 0xf, 0x75c2, 0x5, 0x8001, 0xcbec]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x6, 0x2, 0x6, 0x8, 0x6, 0x5df, 0x6, 0x3, 0x5, 0x8001, 0xda, 0xa5b, 0x1000, 0x8f41, 0x32a20, 0xff, 0x4, 0x8, 0x2, 0xfffffbff, 0x7, 0x101, 0x7, 0x8, 0x8, 0xfffffff1, 0x7, 0x0, 0x8001, 0x8de7, 0xfffffb3d, 0x0, 0xc1f, 0x7, 0x63de, 0x2, 0x8, 0xdb, 0x400, 0x3, 0x5, 0x3127, 0xa, 0x8, 0x5, 0x8, 0xb, 0xffff, 0x0, 0x3, 0x0, 0x81, 0x4, 0x512, 0x0, 0x400, 0x800, 0xfffff801, 0xa1, 0x7, 0x8, 0x4, 0x7df, 0x2, 0x8000, 0x0, 0x100, 0xfffffffc, 0x5, 0x5, 0x8001, 0x10, 0x4cd363e3, 0x9, 0x101, 0x7, 0x78, 0x42dd, 0x6, 0x2, 0x6, 0x55c, 0xbf24, 0x101, 0x10001, 0x80000000, 0xb9eb, 0x5, 0xa, 0x0, 0x7, 0x4, 0x8, 0x1, 0x8, 0x3, 0xffffffff, 0x104a2000, 0x9, 0x1, 0x0, 0x8ff2, 0xfff, 0xfffffffc, 0x81, 0x6, 0x2, 0xff, 0x8001, 0x1, 0x425, 0x34b, 0x0, 0x8, 0xd, 0xe9fc, 0x3, 0x57, 0x6b, 0x0, 0x8, 0x2800000, 0x1, 0x576, 0xc, 0x1, 0x9, 0x9cd, 0x2, 0xc, 0x6, 0x81, 0x7, 0x0, 0xd0, 0xb, 0x1, 0x80000000, 0x97, 0x10000, 0x2, 0x6, 0xd, 0x1, 0x29, 0x3b, 0x9, 0x2, 0x400000, 0x1187, 0x8, 0xffffff07, 0x5, 0xe, 0x5, 0x2, 0x4, 0x3, 0x7ec9d9b2, 0x6aab, 0x5, 0x2, 0x5, 0x824, 0x9b93, 0x0, 0x2, 0x7, 0xffffffff, 0x7, 0x1470, 0xff, 0x6c4f, 0x101, 0x1, 0x5, 0x1, 0x6, 0x1, 0xd, 0x3, 0x9, 0x7fff, 0x5, 0x3, 0x8, 0x200, 0x0, 0x8, 0x2, 0x1c72dd14, 0x3, 0x3, 0xf, 0x6, 0x5, 0x5, 0x5, 0x3, 0x80000001, 0xa2, 0x9, 0x3, 0x3ff, 0x4, 0x7, 0x3ff, 0x19, 0x6, 0x3, 0x4, 0x9, 0xf28, 0x4, 0x9, 0x20e, 0x480, 0x5, 0x3, 0x7, 0x40, 0x6, 0x1, 0x7fff, 0x2, 0x6, 0x6, 0x5, 0x2, 0xff, 0xf, 0x4, 0x8, 0x7, 0x0, 0x6, 0x5, 0x8, 0x7ff, 0x4, 0x7, 0x7, 0xdeba, 0x10001, 0x8, 0x2, 0x370, 0x6, 0x1, 0x1, 0x2, 0x8, 0x0, 0xb4, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xdd0}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x1ff, 0x34da, 0x7, 0x3, 0xfffffff9, 0x5beb, 0xffc, 0x0, 0x4, 0x0, 0x7, 0x7, 0x3, 0x9, 0x0, 0x400, 0x0, 0xe, 0x6, 0x3, 0x16f5c0c1, 0x4, 0x3, 0x797, 0x1, 0x7, 0x10, 0x4b2, 0x5, 0x4, 0x5, 0x600, 0x7, 0x7, 0x44, 0x5, 0xdc4, 0x8b, 0x4, 0x4, 0xefd, 0x3, 0xffff, 0x3, 0x6, 0x9, 0x6, 0xa78, 0x81, 0x1e7e, 0x401, 0x9, 0xcf59, 0xfffffff9, 0x7, 0x101, 0x81, 0x7, 0xfffffe01, 0xe, 0xa, 0x8, 0xa6a6, 0x80000000, 0x6, 0x3, 0x4, 0x8, 0x3, 0x81, 0x0, 0x40, 0x7, 0x5b46, 0xebc, 0x9, 0x8, 0x6, 0x9, 0xf58, 0x4, 0xfffffffb, 0x2, 0x2000007, 0x1ff, 0xb63e, 0xfffffffd, 0x3, 0x5, 0x8, 0x6, 0x0, 0xfffffff9, 0x14000000, 0xb98000, 0x7, 0xfffffff2, 0x5, 0x6, 0xfffffffe, 0x3, 0x7, 0x7ff, 0x6, 0x1, 0x1, 0x2, 0x5, 0x6, 0x2, 0x4, 0x5, 0x6, 0x5, 0x0, 0xbc1, 0x2, 0xb6b, 0x800, 0x800, 0x10, 0x4, 0x2, 0xd, 0x4, 0x7, 0xffff, 0x9, 0x80000000, 0x1, 0x2, 0xd4a, 0x5, 0xffffffff, 0xacdf, 0xbaf1, 0x6, 0xf3, 0x7, 0x5, 0xfffffffe, 0x100, 0x4, 0x7, 0x4, 0x7, 0xfffffffb, 0x2, 0x7, 0x0, 0x7, 0x0, 0xe0c, 0x2bd5c7f8, 0xb1, 0x0, 0x1, 0xa, 0x3, 0x4, 0x4, 0x40, 0xe6, 0x66, 0x7, 0x81, 0x1400000, 0x1, 0x7, 0xdae, 0x5d, 0xf, 0x8, 0x8, 0x31, 0x7, 0x4, 0xc6e, 0x8, 0x4, 0x2cea, 0x7, 0x0, 0x8, 0x0, 0xffffff7f, 0x4, 0x2, 0x6, 0x5, 0x5, 0x9, 0x7648, 0x0, 0x8, 0x80, 0x10000, 0x2f04, 0xe7e, 0x1, 0x1, 0xc458, 0x9, 0x75, 0x3, 0x0, 0xfffffff9, 0x7, 0x8, 0x9, 0xf, 0x8, 0x0, 0x6, 0x80000001, 0x18, 0x5, 0xfffff0a7, 0x81, 0xff, 0x10, 0xfffffbff, 0x7, 0x8, 0x5, 0xd, 0x0, 0x6, 0x6, 0x80000000, 0xd2, 0x9, 0x5, 0x0, 0x41, 0x7, 0x3, 0x1, 0xabc, 0x1ff, 0x8, 0x9, 0x5, 0x6, 0x2, 0x7, 0x5, 0x101, 0x7ff, 0x69f9, 0xd, 0x7, 0x599, 0x0, 0x7f]}]}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_SEL={0x224, 0x5, {0x2, 0x4, 0x4, 0x7f, 0x3, 0x7f4, 0x7, 0x9, [{0x9, 0x5000, 0xe, 0x1}, {0x7, 0x380, 0x0, 0x7}, {0x8, 0x9, 0x4, 0x9}, {0x3, 0xfffffffe, 0x5, 0x8}, {0x4, 0x3, 0x3, 0x9}, {0x9, 0x3f1b, 0x400}, {0x4, 0x3, 0xaa43}, {0x3, 0x800, 0x7e14, 0x10000}, {0x4, 0x3, 0x9, 0x4}, {0xa, 0x6, 0xfff, 0x7}, {0xfffff4b9, 0x8, 0x1, 0xac05}, {0x8, 0xfffffff7, 0xfffffff7, 0x8}, {0x4c, 0x7, 0x10000, 0x5}, {0x9, 0x9, 0x5, 0x1}, {0x6, 0x4, 0x40, 0x48}, {0x9de, 0x0, 0x40000, 0xfffffff9}, {0xffff4d09, 0x0, 0x0, 0x9}, {0x7, 0x4, 0x7599512e, 0x979}, {0x7, 0x8, 0x3c, 0x52d4}, {0x1, 0x0, 0x3, 0x9}, {0x4, 0x1, 0x80000000, 0x80000001}, {0x0, 0x8, 0xa2ba, 0x7}, {0x6, 0x6a5, 0x5, 0x7ff}, {0x4, 0xfffffff7, 0x5, 0x100}, {0x0, 0x1, 0x6, 0x676ea19f}, {0x10, 0x7, 0x7, 0x8}, {0x2, 0xc, 0x3, 0x3ff}, {0x2, 0x2, 0x5, 0xa2f2}, {0x8, 0xfff, 0x4, 0x4}, {0x9, 0x9, 0x400, 0x4}, {0xc6e, 0x9, 0x8, 0xfff}, {0x1, 0x3, 0x5, 0xfffffffb}, {0x7, 0x1, 0x40, 0x4}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xe7}]}}]}, 0x3168}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac00000001010108000000000000000003000008080003400000000624001880080002400000f0d608000240000000010800024000000002080003400000018008000c400000000420000680140004002001000000000000000000000000000008000200ac141423440001800c00028005000100010000001400018008000100ac14141d080002047f0000010c00028005000100000000001400018008000100ac1414aa0800020000000000"], 0xac}, 0x1, 0x0, 0x0, 0x24000810}, 0x48080) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c00028008000b00", @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) connect$netlink(r1, &(0x7f00000004c0)=@unspec, 0xc) r10 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000480)={r10, &(0x7f0000000240)='\x00', 0x200, &(0x7f0000000280)={@align=0x46, {0x9, 0x0, 0x0, 0x4}}, 0x0, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000440)=0x400}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0x1, 0x9, 0x95900000, 0x9c00, r11, 0x9fd, '\x00', r12, r10, 0x2, 0x3, 0x2, 0x0, @value=r13}, 0x50) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x8}, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x0, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0xffffffff, 0x7fff}, {0x804, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x3c}, 0xa, @in6=@loopback, 0xfffffffe, 0x0, 0x1, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) 1.270007688s ago: executing program 4 (id=2087): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@remote}, {@private=0xa010100}]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x6, 0x84) sendfile(r0, r3, 0x0, 0x20000000002) 883.362847ms ago: executing program 0 (id=2088): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x97ff, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0xd08e, @loopback, 0xac}, 0x1c) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r7, 0x2, {0x1, 0x0, 0x4}, 0xff}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100200000000000006bda4d52a67a4c2a55893499"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb8}}, 0x24040084) 874.787177ms ago: executing program 2 (id=2089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a01040000b773000000000a0000010900010073797a310000000050000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000bc08000240000000021800018008000100647570000c00028008000140000000100900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0x1f0, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000fc0000000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) unshare(0x22020400) (async) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000060900010073797a300000000020000000030a01010000000000000000010000000900010073797a30000000003c000000060a010400000000000000000100000008000b4000000000200004801c0001800b00010065787468647200000c001e80080001400000000c140000001100010000000000000000000000000a"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r4], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28f80100", @ANYRESOCT=r3, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) r7 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x43, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0xc, &(0x7f0000000180)=""/12, 0x41000, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x742a}, 0xfffffffffffffe43) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r2, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000001f0007060000f8ffffffb703000008000000b704000000000000850000000300000095e1000414aebb69525e060335f136c63d011b89"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe14) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) 614.015622ms ago: executing program 3 (id=2090): r0 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0xfffffffffffffffe, 0x1, 0xb) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x1000}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) r3 = accept$inet(r2, 0x0, &(0x7f0000000280)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x14010016) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800ba842d301312e155b7030000c276000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x0, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0xc8, 0x1, 0x5, 0x10, @remote, @empty, 0x1, 0x40, 0x9, 0x9d8}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x8000, 0x11, 0x2, 0x4, {{0x5, 0x4, 0x2, 0x18, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x20, 0x10, 0xff, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0xc, 0x29, 0x0, @broadcast, @rand_addr=0x64010101}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'ip6_vti0\x00'}) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xc000, @local, 0x1}, 0x1c, &(0x7f00000001c0)}}], 0x2, 0x42) 0s ago: executing program 2 (id=2091): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019078ac1e0001ac1414aa030490781206183f25009fe146e5ab71ae9b1c0300"/70], 0x0) (async, rerun: 32) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x2, &(0x7f0000000080)=[{0x26, 0x0, 0x3, 0xfffff033}, {0x36, 0x4, 0x2b, 0x7}]}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r2) (async) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x5, 0x3, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) (async, rerun: 32) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501f97305ef7f66845a009f", 0x24) (rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000005d63b27747a1ca45e66ee67c6ed0bb97d5d4c9a75c7076170a96e9626654864de756e303908fbab27b234ea6dec9aded2168c8e47ba0322293fb29b28769681a51b9f842819cb92375e334e93ec713771bfd3f9412d20ca0f287c63de923bdc56c312086bc3764", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f000074b000/0x1000)=nil, 0x1000, 0x1, 0x10, r8, 0x2000) (async) read$alg(r8, &(0x7f0000000280)=""/33, 0x21) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x1, 0x8, 0x2c, 0x68, 0x0, 0x5, 0x21, 0x0, @rand_addr=0x64010102, @multicast1, {[@rr={0x7, 0x3, 0x62}, @rr={0x7, 0x3, 0x65}]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6, ':S+', 0x2, "81b549"}}}}}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x0) getsockopt$IP6T_SO_GET_INFO(r10, 0x29, 0x40, &(0x7f00000001c0)={'raw\x00', 0x0, [0xfffffffd, 0xe04cbfd0, 0x2, 0x8, 0x6]}, &(0x7f0000000240)=0x54) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe63, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) kernel console output (not intermixed with test programs): 3][ T7443] __nla_validate_parse: 122 callbacks suppressed [ 141.012746][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.043858][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.057336][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.067952][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.129208][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.147725][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.162533][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.172418][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.188336][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.200039][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 141.297078][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.589269][ T5712] xfrm0 speed is unknown, defaulting to 1000 [ 141.600919][ T3346] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.612766][ T5712] syz0: Port: 1 Link DOWN [ 141.730554][ T3346] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.750173][ T3346] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.792361][ T5712] xfrm0 speed is unknown, defaulting to 1000 [ 141.862082][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.889494][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.933254][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.970542][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.082877][ T1112] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.092500][ T12] IPVS: starting estimator thread 0... [ 142.210477][ T7516] IPVS: using max 28 ests per chain, 67200 per kthread [ 142.345830][ T7528] tipc: Started in network mode [ 142.361313][ T7528] tipc: Node identity 000000002e0000000000000000000001, cluster identity 4711 [ 142.385606][ T7528] tipc: Enabling of bearer rejected, failed to enable media [ 142.846341][ T7541] bridge_slave_1: left allmulticast mode [ 142.859442][ T7541] bridge_slave_1: left promiscuous mode [ 142.871308][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.885858][ T7541] bridge_slave_0: left allmulticast mode [ 142.908944][ T7541] bridge_slave_0: left promiscuous mode [ 142.915445][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.261291][ T7561] xt_l2tp: invalid flags combination: 8 [ 143.318050][ T7565] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 143.370080][ T7566] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 143.401630][ T5622] block nbd0: Receive control failed (result -32) [ 143.670833][ T7584] pim6reg1: entered promiscuous mode [ 143.687755][ T7584] pim6reg1: entered allmulticast mode [ 144.387412][ T7611] bond3: option ad_actor_sys_prio: invalid value (0) [ 144.394665][ T7611] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 144.407764][ T7611] bond3 (unregistering): Released all slaves [ 144.477179][ T7620] v: renamed from dummy0 [ 144.759486][ T7632] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 144.829269][ T7632] Bluetooth: MGMT ver 1.23 [ 145.915372][ T7650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.022585][ T7688] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 146.039216][ T7688] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 146.827106][ T7729] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 146.939056][ T7729] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 147.050795][ T7729] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 147.172612][ T7742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.187159][ T7729] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.303834][ T7752] __nla_validate_parse: 133 callbacks suppressed [ 147.303854][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 147.341299][ T7729] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 147.372028][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 147.394730][ T7751] bridge_slave_1: left allmulticast mode [ 147.406952][ T7751] bridge_slave_1: left promiscuous mode [ 147.423785][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.492594][ T7751] bridge_slave_0: left allmulticast mode [ 147.511062][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.429'. [ 147.523091][ T7751] bridge_slave_0: left promiscuous mode [ 147.541789][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.982466][ T7774] bridge1: entered promiscuous mode [ 148.627010][ T7809] syzkaller0: entered promiscuous mode [ 148.659844][ T7809] syzkaller0: entered allmulticast mode [ 148.719836][ T7809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.439'. [ 148.776661][ T7809] unsupported nlmsg_type 40 [ 149.016627][ T7816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.060589][ T7818] syzkaller0: entered promiscuous mode [ 149.081201][ T7818] syzkaller0: entered allmulticast mode [ 149.626107][ T7847] ì: renamed from bond_slave_0 [ 149.896743][ T7868] Bluetooth: MGMT ver 1.23 [ 149.933111][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 150.220174][ T7880] netlink: 'syz.1.452': attribute type 10 has an invalid length. [ 150.268256][ T7874] macvtap0: left promiscuous mode [ 150.280096][ T7874] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 150.289755][ T7874] vxcan3: left promiscuous mode [ 150.302983][ T7874] ip6gre1: left promiscuous mode [ 150.307987][ T7874] ip6gre1: left allmulticast mode [ 150.316582][ T7874] bridge1: left promiscuous mode [ 150.332812][ T7880] team0 (unregistering): Port device team_slave_0 removed [ 150.352592][ T7880] team0 (unregistering): Port device team_slave_1 removed [ 150.377411][ T7883] netlink: 72 bytes leftover after parsing attributes in process `syz.1.452'. [ 150.397095][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'. [ 150.453345][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 150.491486][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 150.530431][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.558026][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.595905][ T6249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.685816][ T7902] netlink: 774 bytes leftover after parsing attributes in process `syz.1.456'. [ 150.707574][ T7899] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 150.716286][ T7902] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 150.744613][ T7903] virt_wifi0: entered promiscuous mode [ 150.770674][ T6249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.846898][ T7952] xt_CT: No such helper "netbios-ns" [ 152.053031][ T7972] block nbd1: Unsupported socket: should be TCP or UNIX. [ 152.165999][ T7979] netlink: 'syz.3.476': attribute type 12 has an invalid length. [ 152.353112][ T7985] __nla_validate_parse: 8 callbacks suppressed [ 152.353131][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.480'. [ 152.383282][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 152.439496][ T7985] nbd: device at index 64 is going down [ 152.555328][ T5720] udevd[5720]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 152.624216][ T5711] udevd[5711]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 152.792667][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 152.814063][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 152.967238][ T8004] netlink: 'syz.2.487': attribute type 12 has an invalid length. [ 153.024285][ T8008] netlink: 44 bytes leftover after parsing attributes in process `syz.4.489'. [ 153.045715][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.489'. [ 153.104746][ T8010] bond2 (unregistering): Released all slaves [ 153.166843][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.175015][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.181897][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.188713][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.195581][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.202569][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.209356][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.216157][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.222991][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.229783][ T8006] tc action pedit offset must be on 32 bit boundaries [ 153.236610][ T8006] TC_ACT_REPEAT abuse ? [ 153.288640][ T8013] syzkaller0: entered promiscuous mode [ 153.301980][ T8013] syzkaller0: entered allmulticast mode [ 153.618392][ T8033] bond0: (slave gretap0): Opening slave failed [ 153.648560][ T8040] tap0: tun_chr_ioctl cmd 21731 [ 153.658443][ T8035] netlink: 244 bytes leftover after parsing attributes in process `syz.2.498'. [ 153.686040][ T8035] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 153.743915][ T8035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.846252][ T8035] bond2: (slave dummy0): making interface the new active one [ 153.898432][ T8035] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 154.025558][ T8054] netlink: 'syz.1.500': attribute type 4 has an invalid length. [ 154.048648][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 154.333852][ T8064] netlink: Failed to add helper -22 [ 154.339390][ T8064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.431365][ T8082] tipc: Can't bind to reserved service type 0 [ 155.003849][ T8114] sch_fq: defrate 4294967293 ignored. [ 155.170354][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 155.179986][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 155.262755][ T8121] netlink: 'syz.0.518': attribute type 9 has an invalid length. [ 155.592277][ T8126] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 155.598484][ T8126] syzkaller1: linktype set to 823 [ 155.948335][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.664346][ T8164] bond2: Removing last arp target with arp_interval on [ 157.146467][ T8068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.375921][ T8168] __nla_validate_parse: 5 callbacks suppressed [ 157.375941][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 157.425630][ T8168] netlink: 52 bytes leftover after parsing attributes in process `syz.0.530'. [ 157.684429][ T8186] xt_nat: multiple ranges no longer supported [ 157.693527][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.533'. [ 157.744185][ T8182] ipip0: entered promiscuous mode [ 157.834485][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.538'. [ 157.867849][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 158.190362][ T8208] xt_hashlimit: size too large, truncated to 1048576 [ 158.406182][ T8217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.545'. [ 158.483261][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 158.541473][ T8217] bridge_slave_1: left allmulticast mode [ 158.560657][ T8217] bridge_slave_1: left promiscuous mode [ 158.587976][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.625076][ T8217] bridge_slave_0: left allmulticast mode [ 158.644152][ T8217] bridge_slave_0: left promiscuous mode [ 158.666126][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.004810][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 159.014095][ T8227] netlink: 72 bytes leftover after parsing attributes in process `syz.4.547'. [ 159.057040][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 160.102757][ T8269] smbdirect: ib_dev[syz1] removed [ 160.346657][ T8219] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 160.760517][ T6249] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.811099][ T1112] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.851187][ T1112] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.900301][ T1112] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.958507][ T8324] FAULT_INJECTION: forcing a failure. [ 160.958507][ T8324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.023794][ T8324] CPU: 1 UID: 0 PID: 8324 Comm: syz.2.562 Not tainted syzkaller #0 PREEMPT(full) [ 161.023823][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.023843][ T8324] Call Trace: [ 161.023851][ T8324] [ 161.023859][ T8324] dump_stack_lvl+0xe8/0x150 [ 161.023902][ T8324] should_fail_ex+0x40c/0x560 [ 161.023932][ T8324] _copy_from_user+0x2d/0xb0 [ 161.023962][ T8324] do_tcp_setsockopt+0x504/0x1f80 [ 161.023994][ T8324] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 161.024018][ T8324] ? __pfx___mutex_lock+0x10/0x10 [ 161.024060][ T8324] ? aa_sk_perm+0x6d5/0x900 [ 161.024090][ T8324] ? sock_common_setsockopt+0x36/0xc0 [ 161.024109][ T8324] ? tcp_setsockopt+0x3d/0xe0 [ 161.024131][ T8324] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 161.024153][ T8324] smc_setsockopt+0x232/0xb00 [ 161.024212][ T8324] ? __pfx_smc_setsockopt+0x10/0x10 [ 161.024240][ T8324] ? aa_sock_opt_perm+0xff/0x1a0 [ 161.024264][ T8324] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 161.024284][ T8324] ? __pfx_smc_setsockopt+0x10/0x10 [ 161.024315][ T8324] do_sock_setsockopt+0x17c/0x1b0 [ 161.024346][ T8324] __x64_sys_setsockopt+0x13d/0x1b0 [ 161.024374][ T8324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.024396][ T8324] do_syscall_64+0x174/0x580 [ 161.024425][ T8324] ? trace_irq_disable+0x3b/0x140 [ 161.024450][ T8324] ? clear_bhb_loop+0x70/0xc0 [ 161.024476][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.024496][ T8324] RIP: 0033:0x7ff58219e0d9 [ 161.024522][ T8324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.024538][ T8324] RSP: 002b:00007ff58307f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.024560][ T8324] RAX: ffffffffffffffda RBX: 00007ff582425fa0 RCX: 00007ff58219e0d9 [ 161.024574][ T8324] RDX: 0000000000000005 RSI: 0000000000000006 RDI: 0000000000000003 [ 161.024587][ T8324] RBP: 00007ff58307f090 R08: 000000000000005b R09: 0000000000000000 [ 161.024599][ T8324] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 161.024612][ T8324] R13: 00007ff582426038 R14: 00007ff582425fa0 R15: 00007fffbd306358 [ 161.024646][ T8324] [ 161.456962][ T8334] netlink: 'syz.0.564': attribute type 11 has an invalid length. [ 161.686726][ T8335] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 161.854247][ T8353] 0ªî{X¹¦: renamed from gretap0 [ 161.887892][ T8353] 0ªî{X¹¦: entered allmulticast mode [ 161.906511][ T8353] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 162.014537][ T8366] netlink: 'syz.1.572': attribute type 2 has an invalid length. [ 162.517784][ T8385] bond0 (unregistering): (slave 30ì): Releasing backup interface [ 162.552313][ T8385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.578843][ T8385] bond0 (unregistering): Released all slaves [ 162.688352][ T8404] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 162.749886][ T8405] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 162.767161][ T8405] bond3 (unregistering): Released all slaves [ 162.872656][ T8406] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 162.874034][ T8404] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 162.927300][ T8413] IPVS: Error connecting to the multicast addr [ 162.962283][ T8416] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 163.768561][ T8462] __nla_validate_parse: 6 callbacks suppressed [ 163.768584][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'. [ 163.925925][ T8465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'. [ 163.946643][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.596'. [ 164.170568][ T8475] bond3: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 164.195915][ T8475] bond3: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 164.224091][ T8475] bond3: entered allmulticast mode [ 164.235300][ T8475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.250499][ T8486] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 164.280590][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 164.350608][ T8491] netlink: 564 bytes leftover after parsing attributes in process `syz.3.600'. [ 164.428750][ T8491] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 164.687335][ T8478] hsr_slave_1 (unregistering): left promiscuous mode [ 164.723641][ T8500] xt_hashlimit: max too large, truncated to 1048576 [ 164.838575][ T8502] openvswitch: netlink: Flow key attr not present in new flow. [ 165.073876][ T8513] netlink: zone id is out of range [ 165.086363][ T8513] netlink: zone id is out of range [ 165.105609][ T8513] netlink: zone id is out of range [ 165.135475][ T8513] netlink: zone id is out of range [ 165.155167][ T8513] netlink: zone id is out of range [ 165.164231][ T8517] netlink: 80 bytes leftover after parsing attributes in process `syz.4.607'. [ 165.184943][ T8513] netlink: zone id is out of range [ 165.203956][ T8513] netlink: zone id is out of range [ 165.482967][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 165.761271][ T8536] netlink: 120 bytes leftover after parsing attributes in process `syz.0.612'. [ 166.009791][ T8553] Cannot find del_set index 17 as target [ 166.480110][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 166.592757][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 167.575630][ T8630] netlink: 'syz.3.638': attribute type 10 has an invalid length. [ 167.679908][ T8638] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.023304][ T8654] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 168.405120][ T8663] veth0_to_bond: entered allmulticast mode [ 168.641035][ T8672] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 168.667424][ T8674] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 168.918424][ T8686] __nla_validate_parse: 3 callbacks suppressed [ 168.918441][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 168.945702][ T8697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'. [ 168.988831][ T8697] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 169.003023][ T8697] bond3 (unregistering): Released all slaves [ 169.103244][ T8703] sctp: [Deprecated]: syz.2.658 (pid 8703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.103244][ T8703] Use struct sctp_sack_info instead [ 169.148925][ T8707] net_ratelimit: 37 callbacks suppressed [ 169.148943][ T8707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.209708][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 169.433645][ T5622] Bluetooth: hci4: link tx timeout [ 169.441195][ T5622] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.461629][ T8716] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 169.921471][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 170.067999][ T8746] xt_NFQUEUE: number of total queues is 0 [ 170.228464][ T8759] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 170.255277][ T8759] netlink: 224 bytes leftover after parsing attributes in process `syz.0.673'. [ 170.652649][ T8770] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.677'. [ 170.698448][ T8774] netlink: 'syz.3.678': attribute type 12 has an invalid length. [ 171.072080][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 171.138125][ T8798] openvswitch: netlink: IPv4 tun info is not correct [ 171.169352][ T3337] IPVS: starting estimator thread 0... [ 171.197663][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.684'. [ 171.220951][ T8796] vlan0: entered promiscuous mode [ 171.280868][ T8801] IPVS: using max 26 ests per chain, 62400 per kthread [ 171.518469][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 171.746624][ T8811] syzkaller0: entered promiscuous mode [ 171.763567][ T8811] syzkaller0: entered allmulticast mode [ 171.913576][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 172.213067][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 172.268808][ T8837] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 172.654589][ T8852] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 172.682415][ T8852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.691263][ T8852] IPv6: NLM_F_CREATE should be set when creating new route [ 172.698576][ T8852] IPv6: NLM_F_CREATE should be set when creating new route [ 172.705915][ T8852] IPv6: NLM_F_CREATE should be set when creating new route [ 172.775566][ T8852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.962971][ T8864] team0: Port device syz_tun added [ 173.272742][ T8878] IPVS: set_ctl: invalid protocol: 60 172.30.0.5:20010 [ 173.298289][ T8879] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 173.548036][ T8886] xfrm0 speed is unknown, defaulting to 1000 [ 173.979639][ T8904] bond5: option arp_validate: invalid value (8192) [ 174.033071][ T8904] bond5 (unregistering): Released all slaves [ 174.832815][ T8954] __nla_validate_parse: 5 callbacks suppressed [ 174.832835][ T8954] netlink: 164 bytes leftover after parsing attributes in process `syz.4.729'. [ 175.069641][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.732'. [ 175.542424][ T8975] tipc: Enabled bearer , priority 0 [ 175.816160][ T8971] tipc: Disabling bearer [ 176.141979][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 176.196774][ T8999] netlink: 'syz.1.746': attribute type 16 has an invalid length. [ 176.216691][ T8997] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.743'. [ 176.246907][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 176.281014][ T9003] can: request_module (can-proto-3) failed. [ 176.370397][ T8997] netlink: 'syz.2.743': attribute type 11 has an invalid length. [ 176.386613][ T8997] netlink: 140 bytes leftover after parsing attributes in process `syz.2.743'. [ 176.527131][ T9017] netlink: 2 bytes leftover after parsing attributes in process `syz.1.749'. [ 176.549927][ T9017] nbd: socks must be embedded in a SOCK_ITEM attr [ 176.561888][ T9017] block nbd1: shutting down sockets [ 176.679083][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 176.688708][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 177.188475][ T9041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.758'. [ 177.344502][ T9051] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 179.907700][ T9086] __nla_validate_parse: 1 callbacks suppressed [ 179.907720][ T9086] netlink: 279 bytes leftover after parsing attributes in process `syz.3.766'. [ 179.956417][ T9086] veth0_to_bond: default FDB implementation only supports local addresses [ 180.081549][ T9099] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 180.095272][ T9099] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.231654][ T9109] netlink: 'syz.4.773': attribute type 23 has an invalid length. [ 180.454573][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 180.491083][ T9124] syzkaller0: entered promiscuous mode [ 180.507754][ T9124] syzkaller0: entered allmulticast mode [ 180.535684][ T9121] tipc: Started in network mode [ 180.558421][ T9121] tipc: Node identity 86b53aff2e45, cluster identity 4711 [ 180.579847][ T9121] tipc: Enabled bearer , priority 0 [ 180.673156][ T9121] tipc: Resetting bearer [ 180.718218][ T9121] tipc: Disabling bearer [ 180.907626][ T9148] netlink: 52 bytes leftover after parsing attributes in process `syz.3.779'. [ 181.270016][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 181.758060][ T9193] netlink: 96 bytes leftover after parsing attributes in process `syz.4.788'. [ 181.861973][ T9195] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 182.135507][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.790'. [ 182.179613][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.790'. [ 182.191719][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.793'. [ 182.612504][ T9230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.795'. [ 182.775949][ T9234] netlink: 48 bytes leftover after parsing attributes in process `syz.4.800'. [ 182.884791][ T9232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.921473][ T9232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.960704][ T9232] bond0 (unregistering): Released all slaves [ 183.105082][ T9242] syzkaller1: entered promiscuous mode [ 183.114834][ T9242] syzkaller1: entered allmulticast mode [ 183.621372][ T9258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.628726][ T9258] IPv6: NLM_F_CREATE should be set when creating new route [ 183.977066][ T9277] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 184.042982][ T9275] tipc: Cannot configure node identity twice [ 184.146554][ T9284] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 184.358552][ T9284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.396553][ T9290] macvlan2: entered promiscuous mode [ 184.409236][ T9290] macvlan2: entered allmulticast mode [ 184.425766][ T9290] bond0: entered promiscuous mode [ 184.454281][ T9290] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.509010][ T9290] bond0: left promiscuous mode [ 184.792594][ T9316] macvtap1: entered allmulticast mode [ 184.809487][ T9316] veth0_to_bridge: entered allmulticast mode [ 184.835081][ T9316] veth0_to_bridge: left allmulticast mode [ 185.187498][ T9328] vti0: entered promiscuous mode [ 185.399528][ T9336] __nla_validate_parse: 9 callbacks suppressed [ 185.399547][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.832'. [ 185.695857][ T9350] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 185.708677][ T9349] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 185.992224][ T9368] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.842'. [ 186.056653][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'. [ 186.284647][ T9390] netlink: 'syz.1.848': attribute type 24 has an invalid length. [ 186.497012][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.852'. [ 186.911903][ T9420] netlink: 'syz.3.854': attribute type 32 has an invalid length. [ 186.931516][ T9425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.938865][ T9425] IPv6: NLM_F_CREATE should be set when creating new route [ 186.990779][ T9426] vlan2: entered promiscuous mode [ 186.999010][ T9426] hsr0: entered promiscuous mode [ 187.006264][ T9426] vlan2: entered allmulticast mode [ 187.012908][ T9426] hsr0: entered allmulticast mode [ 187.018576][ T9426] hsr_slave_0: entered allmulticast mode [ 187.024946][ T9426] hsr_slave_1: entered allmulticast mode [ 187.032143][ T9420] netlink: 'syz.3.854': attribute type 32 has an invalid length. [ 187.272704][ T9436] netlink: 'syz.1.859': attribute type 21 has an invalid length. [ 187.283347][ T9436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.859'. [ 187.294388][ T9436] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 187.379392][ T9440] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 187.540820][ T9450] netlink: 80 bytes leftover after parsing attributes in process `syz.4.862'. [ 187.991304][ T9474] netlink: 72 bytes leftover after parsing attributes in process `syz.4.872'. [ 188.029536][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 188.040788][ T9470] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 188.052925][ T9476] netlink: 96 bytes leftover after parsing attributes in process `syz.1.871'. [ 188.107735][ T9470] netlink: 'syz.3.870': attribute type 11 has an invalid length. [ 188.122602][ T9470] netlink: 224 bytes leftover after parsing attributes in process `syz.3.870'. [ 188.140407][ T9469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.164654][ T9479] bond0 (unregistering): Released all slaves [ 188.746766][ T9510] netlink: 'syz.0.883': attribute type 16 has an invalid length. [ 189.054348][ T9525] netlink: 'syz.2.890': attribute type 10 has an invalid length. [ 189.075033][ T9525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.094640][ T9525] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 189.388305][ T9507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.394999][ T9507] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 189.663950][ T9507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.686531][ T9507] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 189.776426][ T9507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.788381][ T9507] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 189.855043][ T9507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.869944][ T9507] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 189.904404][ T9507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.922468][ T9507] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 190.257704][ T9569] gretap0: entered promiscuous mode [ 190.300409][ T9569] vlan0: entered promiscuous mode [ 190.358608][ T9581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.393388][ T9572] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 190.547372][ T9580] bond3: option primary_reselect: invalid value (6) [ 190.577008][ T9580] bond3 (unregistering): Released all slaves [ 190.768486][ T9601] __nla_validate_parse: 16 callbacks suppressed [ 190.768505][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 190.864054][ T9602] ipvlan2: entered promiscuous mode [ 190.891926][ T9602] team0: Device ipvlan2 failed to register rx_handler [ 190.955825][ T9604] netlink: 'syz.1.906': attribute type 10 has an invalid length. [ 190.986920][ T9601] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 191.363750][ T9617] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 191.414744][ T9617] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.654634][ T9636] 0: reclassify loop, rule prio 0, protocol 03 [ 192.733437][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 192.770393][ T9688] raw_sendmsg: syz.3.922 forgot to set AF_INET. Fix it! [ 193.014209][ T9702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.744202][ T9713] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 193.792765][ T9713] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 193.963654][ T9728] xt_cluster: node mask cannot exceed total number of nodes [ 194.003230][ T9729] netlink: 188 bytes leftover after parsing attributes in process `syz.3.929'. [ 194.192501][ T9743] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 194.458654][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 194.738908][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.939'. [ 195.036962][ T9766] ip6gre2: entered promiscuous mode [ 195.062376][ T9777] netlink: 'syz.0.940': attribute type 30 has an invalid length. [ 195.082660][ T9766] ip6gre2: entered allmulticast mode [ 195.376361][ T9777] netlink: 'syz.0.940': attribute type 30 has an invalid length. [ 196.065140][ T9819] netlink: 'syz.1.954': attribute type 2 has an invalid length. [ 196.100147][ T9819] netlink: 'syz.1.954': attribute type 2 has an invalid length. [ 196.191263][ T9820] netlink: 32 bytes leftover after parsing attributes in process `syz.4.952'. [ 196.375466][ T9829] tc_dump_action: action bad kind [ 196.405249][ T9825] syzkaller0: entered promiscuous mode [ 196.432670][ T9825] syzkaller0: entered allmulticast mode [ 196.823909][ T9839] FAULT_INJECTION: forcing a failure. [ 196.823909][ T9839] name failslab, interval 1, probability 0, space 0, times 1 [ 196.836732][ T9839] CPU: 1 UID: 0 PID: 9839 Comm: syz.0.960 Not tainted syzkaller #0 PREEMPT(full) [ 196.836758][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.836770][ T9839] Call Trace: [ 196.836778][ T9839] [ 196.836786][ T9839] dump_stack_lvl+0xe8/0x150 [ 196.836821][ T9839] should_fail_ex+0x40c/0x560 [ 196.836851][ T9839] should_failslab+0xa8/0x100 [ 196.836883][ T9839] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 196.836914][ T9839] ? pfn_valid+0x125/0x4c0 [ 196.836943][ T9839] ? pfn_valid+0x125/0x4c0 [ 196.836971][ T9839] ? pfn_valid+0x125/0x4c0 [ 196.837004][ T9839] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 196.837046][ T9839] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 196.837111][ T9839] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 196.837141][ T9839] ? bpf_dispatcher_xdp+0x800/0x1000 [ 196.837212][ T9839] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 196.837251][ T9839] ? _copy_from_user+0x94/0xb0 [ 196.837282][ T9839] ? bpf_test_init+0x113/0x150 [ 196.837307][ T9839] ? xdp_convert_md_to_buff+0x5b/0x330 [ 196.837338][ T9839] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 196.837383][ T9839] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 196.837418][ T9839] ? __fget_files+0x2a/0x420 [ 196.837450][ T9839] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 196.837480][ T9839] bpf_prog_test_run+0x2c5/0x340 [ 196.837512][ T9839] __sys_bpf+0xa22/0xd90 [ 196.837547][ T9839] ? __pfx___sys_bpf+0x10/0x10 [ 196.837585][ T9839] ? __fget_files+0x2a/0x420 [ 196.837630][ T9839] ? ksys_write+0x242/0x270 [ 196.837664][ T9839] ? __pfx_ksys_write+0x10/0x10 [ 196.837700][ T9839] __x64_sys_bpf+0xba/0xd0 [ 196.837725][ T9839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.837747][ T9839] do_syscall_64+0x174/0x580 [ 196.837777][ T9839] ? trace_irq_disable+0x3b/0x140 [ 196.837802][ T9839] ? clear_bhb_loop+0x70/0xc0 [ 196.837828][ T9839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.837847][ T9839] RIP: 0033:0x7fa211f9e0d9 [ 196.837866][ T9839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.837889][ T9839] RSP: 002b:00007fa212eab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.837911][ T9839] RAX: ffffffffffffffda RBX: 00007fa212225fa0 RCX: 00007fa211f9e0d9 [ 196.837926][ T9839] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 196.837938][ T9839] RBP: 00007fa212eab090 R08: 0000000000000000 R09: 0000000000000000 [ 196.837951][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.837963][ T9839] R13: 00007fa212226038 R14: 00007fa212225fa0 R15: 00007ffe6e1765d8 [ 196.837997][ T9839] [ 196.839262][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'. [ 197.297824][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.957'. [ 197.590158][ T9861] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 197.647364][ T9864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.665170][ T9858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.711284][ T9871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.969'. [ 197.724937][ T9871] xt_hashlimit: size too large, truncated to 1048576 [ 197.984799][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 197.994441][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 198.004483][ T9878] netlink: 'syz.2.971': attribute type 18 has an invalid length. [ 198.039097][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 198.048260][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 198.058795][ T9878] netlink: 'syz.2.971': attribute type 18 has an invalid length. [ 198.059103][ T3346] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.077948][ T3346] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.093033][ T3346] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.104462][ T3346] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.284397][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 198.533360][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 199.088568][ T9939] sch_fq: defrate 8 ignored. [ 199.096039][ T9935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.134927][ T9939] netlink: 'syz.4.990': attribute type 2 has an invalid length. [ 199.159018][ T9935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.892607][ T9978] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.952876][ T9978] bond6 (unregistering): Released all slaves [ 200.052524][ T9990] xfrm0 speed is unknown, defaulting to 1000 [ 200.918706][T10026] netlink: 'syz.3.1012': attribute type 14 has an invalid length. [ 200.943065][T10028] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 201.178414][T10026] netlink: 'syz.3.1012': attribute type 14 has an invalid length. [ 201.213111][T10028] team0: Port device dummy0 added [ 201.220682][ T1112] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.286553][ T67] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.315703][ T67] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.343131][T10041] syzkaller0: entered promiscuous mode [ 201.378348][T10041] syzkaller0: entered allmulticast mode [ 201.391252][ T6249] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.452558][T10025] __nla_validate_parse: 21 callbacks suppressed [ 201.452585][T10025] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1011'. [ 201.744274][T10049] ovs-s: entered promiscuous mode [ 201.951619][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 202.640131][T10093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1028'. [ 202.751100][T10102] xt_hashlimit: size too large, truncated to 1048576 [ 202.957559][T10113] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1034'. [ 202.998737][T10113] netlink: 'syz.3.1034': attribute type 21 has an invalid length. [ 202.999759][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 203.143946][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 203.235280][T10127] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1038'. [ 203.261901][T10127] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1038'. [ 203.408218][T10135] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1039'. [ 203.491826][T10139] netlink: 'syz.4.1042': attribute type 15 has an invalid length. [ 203.932834][T10163] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 204.253143][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 204.464858][T10186] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 204.482204][T10186] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 204.673520][T10198] tipc: Enabled bearer , priority 10 [ 204.931729][T10212] sock: sock_set_timeout: `syz.0.1060' (pid 10212) tries to set negative timeout [ 205.161733][T10228] syzkaller0: entered promiscuous mode [ 205.176706][T10228] syzkaller0: entered allmulticast mode [ 205.868740][ T5728] tipc: Node number set to 1999717841 [ 206.571132][T10283] __nla_validate_parse: 8 callbacks suppressed [ 206.571151][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 206.654637][T10278] tipc: Started in network mode [ 206.680437][T10278] tipc: Node identity -, cluster identity 4711 [ 206.781400][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 206.815013][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 206.849066][T10283] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 207.052140][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 207.109506][T10309] xfrm0: entered allmulticast mode [ 207.126871][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 207.144337][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1084'. [ 207.164389][T10309] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 207.260032][T10319] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1085'. [ 207.278579][T10312] veth5: entered allmulticast mode [ 208.016791][T10350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1093'. [ 208.077737][ T3351] IPVS: starting estimator thread 0... [ 208.115758][ T30] audit: type=1107 audit(1787076641.414:8): pid=10351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 208.156447][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 208.188189][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'. [ 208.201620][T10353] IPVS: using max 25 ests per chain, 60000 per kthread [ 208.304590][T10361] vlan3: entered allmulticast mode [ 208.322842][T10361] bridge0: entered allmulticast mode [ 208.345597][T10359] bridge0: port 1(erspan0) entered blocking state [ 208.376209][T10359] bridge0: port 1(erspan0) entered disabled state [ 208.393193][T10359] erspan0: entered allmulticast mode [ 208.409374][T10359] erspan0: entered promiscuous mode [ 208.592127][T10376] xt_hashlimit: size too large, truncated to 1048576 [ 208.649278][T10383] –: renamed from vxcan1 (while UP) [ 208.836753][T10383] nbd4: detected capacity change from 0 to 63 [ 208.859316][T10392] block nbd4: NBD_DISCONNECT [ 208.896334][T10392] block nbd4: Disconnected due to user request. [ 208.922363][T10392] block nbd4: shutting down sockets [ 208.993725][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 209.003680][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 209.013325][T10404] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 209.040021][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 209.049695][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 209.057616][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 209.065503][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 209.084347][T10404] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 209.109075][ T4942] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 209.120990][ T4942] Buffer I/O error on dev nbd4, logical block 0, async page read [ 209.129640][ T4942] Buffer I/O error on dev nbd4, logical block 1, async page read [ 209.146842][ T4942] Buffer I/O error on dev nbd4, logical block 2, async page read [ 209.154997][ T4942] Buffer I/O error on dev nbd4, logical block 3, async page read [ 209.165785][ T4942] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 209.175897][ T4942] Buffer I/O error on dev nbd4, logical block 0, async page read [ 209.183935][ T4942] Buffer I/O error on dev nbd4, logical block 1, async page read [ 209.193560][ T4942] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 209.203767][ T4942] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 209.214110][ T4942] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 209.224620][ T4942] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 209.234941][ T4942] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 209.244953][ T5720] ldm_validate_partition_table(): Disk read failed. [ 209.252487][ T4942] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 209.264067][ T5720] Dev nbd4: unable to read RDB block 0 [ 209.274866][ T5720] nbd4: unable to read partition table [ 209.292834][ T5720] ldm_validate_partition_table(): Disk read failed. [ 209.301393][ T5720] Dev nbd4: unable to read RDB block 0 [ 209.308533][ T5720] nbd4: unable to read partition table [ 209.525851][T10411] netlink: 'syz.3.1110': attribute type 1 has an invalid length. [ 209.927004][T10433] tap0: tun_chr_ioctl cmd 1074025677 [ 209.943076][T10433] tap0: linktype set to 780 [ 210.528066][ T1112] IPVS: starting estimator thread 0... [ 210.651831][T10470] IPVS: using max 26 ests per chain, 62400 per kthread [ 211.084206][T10480] xfrm0 speed is unknown, defaulting to 1000 [ 211.253039][T10500] netlink: 'syz.3.1127': attribute type 6 has an invalid length. [ 211.345015][T10500] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 211.541503][T10514] xt_bpf: check failed: parse error [ 211.581662][T10500] bond4: entered promiscuous mode [ 211.602959][T10500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.674570][T10512] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.694856][T10512] bond4: (slave gre2): The slave device specified does not support setting the MAC address [ 211.721724][T10512] bond4: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 211.755679][T10512] bond4: (slave gre2): making interface the new active one [ 211.776249][T10512] gre2: entered promiscuous mode [ 211.796974][T10512] bond4: (slave gre2): Enslaving as an active interface with an up link [ 211.986868][T10530] __nla_validate_parse: 6 callbacks suppressed [ 211.986889][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 212.058567][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 212.077506][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1135'. [ 212.218165][T10530] bridge3: port 1(veth7) entered blocking state [ 212.247445][T10530] bridge3: port 1(veth7) entered disabled state [ 212.263352][T10530] veth7: entered allmulticast mode [ 212.271624][T10530] veth7: entered promiscuous mode [ 212.362979][T10536] bridge3: port 2(veth9) entered blocking state [ 212.377932][T10536] bridge3: port 2(veth9) entered disabled state [ 212.395566][T10536] veth9: entered allmulticast mode [ 212.414082][T10536] veth9: entered promiscuous mode [ 212.531749][T10542] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.587347][T10542] bond3: (slave lo): Enslaving as an active interface with an up link [ 212.604799][T10552] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 212.623163][T10542] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 212.729066][T10552] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 213.129802][T10581] netlink: 'syz.2.1145': attribute type 4 has an invalid length. [ 213.206425][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1146'. [ 213.211890][T10581] netlink: 'syz.2.1145': attribute type 4 has an invalid length. [ 213.242381][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1146'. [ 214.043165][T10613] ip6tnl2: entered allmulticast mode [ 214.074925][T10613] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 214.110291][T10613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1155'. [ 214.141602][T10614] xt_hashlimit: size too large, truncated to 1048576 [ 214.141602][T10613] xt_hashlimit: size too large, truncated to 1048576 [ 214.161056][T10620] netlink: 'syz.2.1158': attribute type 23 has an invalid length. [ 214.199205][T10621] nbd: socks must be embedded in a SOCK_ITEM attr [ 214.296214][T10631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1159'. [ 214.652936][T10649] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 216.756237][T10654] xfrm0 speed is unknown, defaulting to 1000 [ 216.847351][T10668] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 216.882374][T10670] tipc: Disabling bearer [ 217.165324][T10685] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1174'. [ 217.220947][T10674] batman_adv: batadv0: Adding interface: veth0 [ 217.259074][T10674] batman_adv: batadv0: Interface activated: veth0 [ 217.485637][T10692] netlink: 'syz.3.1176': attribute type 6 has an invalid length. [ 217.513552][T10681] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 217.563419][T10694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.570663][T10681] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 217.660625][T10681] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 217.672689][T10697] netlink: 'syz.0.1177': attribute type 7 has an invalid length. [ 217.745663][T10681] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 217.913925][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 218.011281][T10702] hsr_slave_1 (unregistering): left promiscuous mode [ 218.155615][T10707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1181'. [ 218.178586][T10707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1181'. [ 218.487097][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 218.920016][T10733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.992293][T10748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1191'. [ 219.217129][T10753] netlink: 'syz.3.1193': attribute type 34 has an invalid length. [ 219.235740][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 219.356622][T10759] netlink: 'syz.3.1193': attribute type 34 has an invalid length. [ 219.379842][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 219.426656][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 219.436827][T10759] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 219.605301][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1195'. [ 219.836164][T10781] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 220.275006][T10797] syzkaller0: entered promiscuous mode [ 220.294759][T10797] syzkaller0: entered allmulticast mode [ 222.515398][T10826] bond4: option arp_all_targets: invalid value (3) [ 222.544480][T10826] bond4 (unregistering): Released all slaves [ 222.708333][T10846] __nla_validate_parse: 1 callbacks suppressed [ 222.708355][T10846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1210'. [ 222.962151][T10849] netlink: 5076 bytes leftover after parsing attributes in process `syz.3.1209'. [ 223.430111][T10828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.494586][T10828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.950613][ T1112] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.987944][ T1112] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.026750][ T1112] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.066437][ T1112] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.098270][ T1112] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.135317][ T1112] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.179551][T10858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.281660][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.304957][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.434125][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 224.467536][T10868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1218'. [ 224.591767][T10881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1221'. [ 224.602575][T10875] syzkaller0: entered promiscuous mode [ 224.609796][T10875] syzkaller0: entered allmulticast mode [ 224.654854][T10875] netlink: 'syz.1.1220': attribute type 13 has an invalid length. [ 224.676528][T10875] netlink: 'syz.1.1220': attribute type 17 has an invalid length. [ 224.828953][T10875] ip6_vti0: left allmulticast mode [ 224.854244][T10893] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 224.992887][T10875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.026244][T10875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.279548][T10875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.301608][T10875] xfrm0: left allmulticast mode [ 225.332874][T10923] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1230'. [ 225.346724][T10875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.359258][T10875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.376562][T10875] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 225.416775][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.424051][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.468946][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.476198][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.551394][T10903] bridge0: port 1(veth0) entered blocking state [ 225.558803][T10903] bridge0: port 1(veth0) entered disabled state [ 225.566019][T10903] veth0: entered allmulticast mode [ 225.574128][T10903] veth0: entered promiscuous mode [ 225.583309][T10903] bridge0: port 1(veth0) entered blocking state [ 225.589752][T10903] bridge0: port 1(veth0) entered forwarding state [ 225.599196][T10921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 225.768936][T10925] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 225.824126][T10932] tipc: Enabling of bearer rejected, failed to enable media [ 225.936891][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 226.140586][T10957] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1237'. [ 226.216165][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 227.737283][T11033] xt_l2tp: v2 sid > 0xffff: 33554432 [ 227.748605][T11034] xt_l2tp: v2 sid > 0xffff: 33554432 [ 227.873396][T11043] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 227.990130][T11041] __nla_validate_parse: 5 callbacks suppressed [ 227.998699][T11043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.025832][T11041] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1258'. [ 228.044409][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 228.062153][T11041] team0: Port device dummy0 removed [ 228.098997][T11043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1261'. [ 228.390890][T11076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.486437][T11082] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 228.967681][T11100] netlink: 'syz.2.1275': attribute type 2 has an invalid length. [ 229.001351][T11100] netlink: 'syz.2.1275': attribute type 1 has an invalid length. [ 229.113914][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1276'. [ 229.175572][T11103] openvswitch: netlink: Flow key attr not present in new flow. [ 229.243039][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'. [ 229.275413][T11115] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 229.536619][T11121] 8021q: VLANs not supported on sit0 [ 231.209799][T11179] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1296'. [ 231.260061][T11179] syzkaller1: entered promiscuous mode [ 231.346105][T11179] syzkaller1: entered allmulticast mode [ 231.699863][ T3300] tipc: Subscription rejected, illegal request [ 232.057081][T11213] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 232.317533][T11203] syzkaller1: entered promiscuous mode [ 232.345506][T11203] syzkaller1: entered allmulticast mode [ 232.477298][T11223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1305'. [ 232.594574][T11223] IPVS: Error connecting to the multicast addr [ 233.059887][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1313'. [ 233.081890][T11253] team0: No ports can be present during mode change [ 233.119020][T11247] ipvlan2: entered allmulticast mode [ 233.134889][T11247] syz_tun: entered allmulticast mode [ 233.242496][T11256] 0ªî{X¹¦: left allmulticast mode [ 233.326496][T11256] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 233.357852][T11261] C: renamed from veth1_to_team (while UP) [ 233.386016][T11261] netlink: 'syz.4.1317': attribute type 2 has an invalid length. [ 233.407978][T11261] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1317'. [ 233.439692][T11261] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 233.468442][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'. [ 233.478834][T11269] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 233.506374][ T67] bond2: (slave dummy0): link status definitely down, disabling slave [ 233.630547][ T67] bond2: now running without any active interface! [ 233.690940][T11274] xt_socket: unknown flags 0x4 [ 234.484705][T11304] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 234.493190][T11304] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 234.575448][T11306] bond3: (slave lo): Releasing backup interface [ 234.650416][T11306] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 234.757806][T11306] bridge_slave_0: left allmulticast mode [ 234.768190][T11306] bridge_slave_0: left promiscuous mode [ 234.790476][ T5622] block nbd1: Receive control failed (result -32) [ 234.795644][ T5617] block nbd1: Receive control failed (result -32) [ 234.812838][T11306] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.826547][T11306] bridge_slave_1: left allmulticast mode [ 234.834747][T11306] bridge_slave_1: left promiscuous mode [ 234.841340][T11306] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.858444][T11306] bond0: (slave bond_slave_0): Releasing backup interface [ 234.888610][T11306] bond0: (slave bond_slave_1): Releasing backup interface [ 234.919275][T11306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.927200][T11306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.937841][T11306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.246738][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 235.262990][T11316] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 235.396515][T11329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1334'. [ 235.421834][T11329] bond0: ARP target 0.0.0.2 is already present [ 235.440262][T11329] bond0: option arp_ip_target: invalid value (33554432) [ 236.353652][T11355] netlink: 'syz.1.1340': attribute type 11 has an invalid length. [ 236.400486][T11355] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1340'. [ 236.857836][T11355] xfrm0 speed is unknown, defaulting to 1000 [ 236.931815][T11373] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1345'. [ 236.946195][T11350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.579666][T11395] syzkaller1: entered promiscuous mode [ 237.612246][T11395] syzkaller1: entered allmulticast mode [ 238.078361][T11410] can: request_module (can-proto-4) failed. [ 238.242479][T11412] netlink: 'syz.4.1353': attribute type 4 has an invalid length. [ 238.268630][T11412] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1353'. [ 238.587780][T11412] .`: renamed from bond0 (while UP) [ 239.026647][T11438] netlink: 'syz.4.1359': attribute type 13 has an invalid length. [ 239.066871][T11438] netlink: 'syz.4.1359': attribute type 17 has an invalid length. [ 239.301182][T11438] 8021q: adding VLAN 0 to HW filter on device .` [ 239.464014][T11438] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 239.472860][T11438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.523752][T11438] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 240.041535][T11455] C: renamed from veth1_to_team [ 240.064603][T11455] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1363'. [ 240.823228][T11495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1372'. [ 240.884890][T11495] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 242.085155][T11480] netlink: 'syz.4.1369': attribute type 4 has an invalid length. [ 242.124589][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 242.614091][T11530] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1378'. [ 242.771960][T11540] veth3: entered allmulticast mode [ 243.152204][T11555] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 243.243074][T11555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1384'. [ 245.141822][T11587] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 245.895677][T11599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1394'. [ 245.983091][T11599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1394'. [ 246.006747][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 246.272394][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 246.573296][T11637] tipc: Enabled bearer , priority 10 [ 246.738930][T11644] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 246.969457][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1408'. [ 247.057345][T11652] FAULT_INJECTION: forcing a failure. [ 247.057345][T11652] name failslab, interval 1, probability 0, space 0, times 0 [ 247.127223][T11652] CPU: 0 UID: 0 PID: 11652 Comm: syz.0.1409 Not tainted syzkaller #0 PREEMPT(full) [ 247.127256][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.127287][T11652] Call Trace: [ 247.127297][T11652] [ 247.127306][T11652] dump_stack_lvl+0xe8/0x150 [ 247.127354][T11652] should_fail_ex+0x40c/0x560 [ 247.127388][T11652] should_failslab+0xa8/0x100 [ 247.127422][T11652] __kmalloc_noprof+0xfe/0x720 [ 247.127452][T11652] ? sock_kmalloc+0xd6/0x160 [ 247.127481][T11652] ? sock_kmalloc+0xd6/0x160 [ 247.127516][T11652] sock_kmalloc+0xd6/0x160 [ 247.127548][T11652] ____sys_sendmsg+0x1be/0x850 [ 247.127583][T11652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.127621][T11652] ? import_iovec+0x73/0xa0 [ 247.127657][T11652] ___sys_sendmsg+0x2a5/0x360 [ 247.127683][T11652] ? __lock_acquire+0x683/0x2cf0 [ 247.127717][T11652] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.127751][T11652] ? kstrtouint+0x6e/0xe0 [ 247.127807][T11652] ? __fget_files+0x2a/0x420 [ 247.127834][T11652] ? __fget_files+0x3a2/0x420 [ 247.127872][T11652] __sys_sendmmsg+0x273/0x4d0 [ 247.127904][T11652] ? __pfx___sys_sendmmsg+0x10/0x10 [ 247.127941][T11652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.127991][T11652] ? ksys_write+0x242/0x270 [ 247.128027][T11652] ? __pfx_ksys_write+0x10/0x10 [ 247.128067][T11652] __x64_sys_sendmmsg+0xa0/0xc0 [ 247.128095][T11652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.128118][T11652] do_syscall_64+0x174/0x580 [ 247.128149][T11652] ? trace_irq_disable+0x3b/0x140 [ 247.128176][T11652] ? clear_bhb_loop+0x70/0xc0 [ 247.128204][T11652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.128225][T11652] RIP: 0033:0x7fa211f9e0d9 [ 247.128247][T11652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.128265][T11652] RSP: 002b:00007fa212eab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.128288][T11652] RAX: ffffffffffffffda RBX: 00007fa212225fa0 RCX: 00007fa211f9e0d9 [ 247.128303][T11652] RDX: 0000000000000001 RSI: 0000200000001700 RDI: 0000000000000000 [ 247.128316][T11652] RBP: 00007fa212eab090 R08: 0000000000000000 R09: 0000000000000000 [ 247.128335][T11652] R10: 000000000000c050 R11: 0000000000000246 R12: 0000000000000001 [ 247.128348][T11652] R13: 00007fa212226038 R14: 00007fa212225fa0 R15: 00007ffe6e1765d8 [ 247.128383][T11652] [ 247.411519][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1410'. [ 247.733595][T10853] tipc: Node number set to 757989376 [ 247.982803][T11674] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1414'. [ 248.548105][T11691] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 248.632085][T11695] netlink: 'syz.2.1420': attribute type 3 has an invalid length. [ 248.852066][T11701] FAULT_INJECTION: forcing a failure. [ 248.852066][T11701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.893345][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 248.917503][T11701] CPU: 0 UID: 0 PID: 11701 Comm: syz.4.1422 Not tainted syzkaller #0 PREEMPT(full) [ 248.917532][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.917544][T11701] Call Trace: [ 248.917552][T11701] [ 248.917560][T11701] dump_stack_lvl+0xe8/0x150 [ 248.917594][T11701] should_fail_ex+0x40c/0x560 [ 248.917624][T11701] _copy_from_user+0x2d/0xb0 [ 248.917657][T11701] ____sys_sendmsg+0x303/0x850 [ 248.917691][T11701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.917730][T11701] ? import_iovec+0x73/0xa0 [ 248.917773][T11701] ___sys_sendmsg+0x2a5/0x360 [ 248.917800][T11701] ? __lock_acquire+0x683/0x2cf0 [ 248.917832][T11701] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.917866][T11701] ? kstrtouint+0x6e/0xe0 [ 248.917920][T11701] ? __fget_files+0x2a/0x420 [ 248.917946][T11701] ? __fget_files+0x3a2/0x420 [ 248.917985][T11701] __sys_sendmmsg+0x273/0x4d0 [ 248.918019][T11701] ? __pfx___sys_sendmmsg+0x10/0x10 [ 248.918056][T11701] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 248.918104][T11701] ? ksys_write+0x242/0x270 [ 248.918138][T11701] ? __pfx_ksys_write+0x10/0x10 [ 248.918180][T11701] __x64_sys_sendmmsg+0xa0/0xc0 [ 248.918209][T11701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.918231][T11701] do_syscall_64+0x174/0x580 [ 248.918262][T11701] ? trace_irq_disable+0x3b/0x140 [ 248.918287][T11701] ? clear_bhb_loop+0x70/0xc0 [ 248.918314][T11701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.918336][T11701] RIP: 0033:0x7fdb3159e0d9 [ 248.918357][T11701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.918375][T11701] RSP: 002b:00007fdb324f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 248.918398][T11701] RAX: ffffffffffffffda RBX: 00007fdb31825fa0 RCX: 00007fdb3159e0d9 [ 248.918414][T11701] RDX: 0000000000000001 RSI: 0000200000001700 RDI: 0000000000000000 [ 248.918428][T11701] RBP: 00007fdb324f4090 R08: 0000000000000000 R09: 0000000000000000 [ 248.918441][T11701] R10: 000000000000c050 R11: 0000000000000246 R12: 0000000000000001 [ 248.918454][T11701] R13: 00007fdb31826038 R14: 00007fdb31825fa0 R15: 00007ffc50984be8 [ 248.918487][T11701] [ 249.212335][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 249.254928][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 249.423404][ T3346] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.435579][ T3346] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.487874][ T3346] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.519045][ T3346] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.092435][T11747] bond6 (unregistering): Released all slaves [ 250.369746][T11765] FAULT_INJECTION: forcing a failure. [ 250.369746][T11765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.415904][T11765] CPU: 0 UID: 0 PID: 11765 Comm: syz.3.1437 Not tainted syzkaller #0 PREEMPT(full) [ 250.415935][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.415947][T11765] Call Trace: [ 250.415955][T11765] [ 250.415968][T11765] dump_stack_lvl+0xe8/0x150 [ 250.416004][T11765] should_fail_ex+0x40c/0x560 [ 250.416036][T11765] _copy_to_user+0x31/0xb0 [ 250.416071][T11765] simple_read_from_buffer+0xe1/0x170 [ 250.416105][T11765] proc_fail_nth_read+0x1bb/0x230 [ 250.416139][T11765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.416173][T11765] ? rw_verify_area+0x24a/0x4c0 [ 250.416208][T11765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.416237][T11765] vfs_read+0x213/0xa80 [ 250.416274][T11765] ? __pfx___mutex_lock+0x10/0x10 [ 250.416307][T11765] ? __pfx_vfs_read+0x10/0x10 [ 250.416341][T11765] ? __fget_files+0x2a/0x420 [ 250.416373][T11765] ? __fget_files+0x3a2/0x420 [ 250.416399][T11765] ? __fget_files+0x2a/0x420 [ 250.416437][T11765] ksys_read+0x150/0x270 [ 250.416471][T11765] ? __pfx_ksys_read+0x10/0x10 [ 250.416522][T11765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.416547][T11765] do_syscall_64+0x174/0x580 [ 250.416578][T11765] ? trace_irq_disable+0x3b/0x140 [ 250.416604][T11765] ? clear_bhb_loop+0x70/0xc0 [ 250.416631][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.416652][T11765] RIP: 0033:0x7fc3c615e90e [ 250.416673][T11765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 250.416691][T11765] RSP: 002b:00007fc3c7074fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.416714][T11765] RAX: ffffffffffffffda RBX: 00007fc3c70756c0 RCX: 00007fc3c615e90e [ 250.416730][T11765] RDX: 000000000000000f RSI: 00007fc3c70750a0 RDI: 0000000000000004 [ 250.416742][T11765] RBP: 00007fc3c7075090 R08: 0000000000000000 R09: 0000000000000000 [ 250.416755][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.416767][T11765] R13: 00007fc3c6426038 R14: 00007fc3c6425fa0 R15: 00007ffcb453b5d8 [ 250.416803][T11765] [ 250.962266][T11774] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 251.055161][T11777] xt_bpf: check failed: parse error [ 251.063726][T11775] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 251.123190][T11777] __nla_validate_parse: 10 callbacks suppressed [ 251.123215][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1439'. [ 251.291909][T11777] veth5: entered allmulticast mode [ 251.453813][T11791] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1442'. [ 251.754500][T11804] netlink: 'syz.3.1449': attribute type 4 has an invalid length. [ 252.097672][T11822] xt_hashlimit: overflow, try lower: 0/0 [ 252.157333][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 252.182639][T11827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1455'. [ 252.193146][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 252.224169][T11832] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1453'. [ 252.387010][T11830] vlan0: left promiscuous mode [ 252.405389][T11833] xt_CT: No such helper "netbios-ns" [ 252.437913][T11830] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 252.459587][T11830] vlan3: left allmulticast mode [ 252.486410][T11830] bridge0: left allmulticast mode [ 252.504114][T11830] bond4: left promiscuous mode [ 252.536274][T11830] gre2: left promiscuous mode [ 252.541610][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 253.285403][T11865] syzkaller0: entered promiscuous mode [ 253.301276][T11865] syzkaller0: entered allmulticast mode [ 253.353220][T11865] netlink: 'syz.1.1465': attribute type 13 has an invalid length. [ 253.363318][T11871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1468'. [ 253.392381][T11865] netlink: 'syz.1.1465': attribute type 17 has an invalid length. [ 253.603238][T11865] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 253.827893][T11886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1472'. [ 254.097035][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 254.244448][T11894] syzkaller0: entered promiscuous mode [ 254.264465][T11894] syzkaller0: entered allmulticast mode [ 254.289022][T11894] tipc: Enabled bearer , priority 0 [ 254.325791][T11900] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 254.327947][T11896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.328039][T11892] tipc: Resetting bearer [ 254.413982][T11892] tipc: Disabling bearer [ 254.479282][T11895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.719924][T11944] netlink: 'syz.1.1482': attribute type 10 has an invalid length. [ 255.795336][T11947] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 257.831316][T11944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.864122][T11944] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 257.891125][T11947] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 258.286436][T11991] hsr0: entered allmulticast mode [ 258.335657][T11991] hsr_slave_0: entered allmulticast mode [ 258.354180][T11991] hsr_slave_1: entered allmulticast mode [ 258.745668][T12015] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 258.758844][T12019] __nla_validate_parse: 5 callbacks suppressed [ 258.758866][T12019] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1501'. [ 258.787487][T12015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.925312][T12028] netlink: Setting conntrack mark requires 'commit' flag. [ 258.953804][T12029] netlink: Setting conntrack mark requires 'commit' flag. [ 259.002278][T12028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.056881][T12029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.309857][T12038] geneve2: entered promiscuous mode [ 259.490546][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.505431][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.562774][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.619530][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.951149][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 260.777794][T12108] netlink: 'syz.4.1518': attribute type 10 has an invalid length. [ 260.849338][T12108] tipc: Resetting bearer [ 260.919926][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 261.001293][T12108] batadv0: MTU too low for tipc bearer [ 261.059451][T12108] tipc: Disabling bearer [ 261.191898][T12108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.225002][T12124] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 261.248179][T12108] .`: (slave batadv0): Enslaving as an active interface with an up link [ 261.637284][T12117] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.673808][T12124] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 262.052979][T12136] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 262.078962][T12136] bond6 (unregistering): Released all slaves [ 262.220984][T12150] ip6gretap1: entered allmulticast mode [ 262.280539][T12150] batman_adv: batadv0: Adding interface: ip6gretap1 [ 262.313817][T12150] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 262.362691][T12158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1523'. [ 262.391156][T12150] batman_adv: batadv0: Interface activated: ip6gretap1 [ 262.589902][T12163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1525'. [ 262.729647][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1526'. [ 262.843023][T12178] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1530'. [ 263.454773][T12204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1537'. [ 264.735749][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 264.834202][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 265.013046][T12268] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 265.056229][T12268] bond6 (unregistering): Released all slaves [ 265.178725][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1551'. [ 265.418857][T12296] netlink: 'syz.1.1552': attribute type 1 has an invalid length. [ 265.710960][T12301] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 265.852812][T12301] bond6 (unregistering): Released all slaves [ 266.304012][T12321] bridge1: entered promiscuous mode [ 266.368765][T12321] bond5: (slave bridge1): making interface the new active one [ 266.405329][T12321] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 266.456475][T12344] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 266.471311][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'. [ 266.492845][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'. [ 266.518764][T12342] netlink: 580 bytes leftover after parsing attributes in process `syz.4.1559'. [ 266.576121][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1559'. [ 266.659941][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'. [ 267.214350][T12365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1563'. [ 267.525330][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1565'. [ 267.625157][T12375] sctp: [Deprecated]: syz.2.1565 (pid 12375) Use of int in max_burst socket option deprecated. [ 267.625157][T12375] Use struct sctp_assoc_value instead [ 268.458679][T12403] macvlan0: entered promiscuous mode [ 268.490644][T12403] netlink: 'syz.1.1571': attribute type 1 has an invalid length. [ 268.526677][T12403] netlink: 'syz.1.1571': attribute type 2 has an invalid length. [ 269.725916][T12454] syzkaller0: entered promiscuous mode [ 269.740046][T12454] syzkaller0: entered allmulticast mode [ 270.536494][T12462] __nla_validate_parse: 3 callbacks suppressed [ 270.536513][T12462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1585'. [ 271.226480][T12520] macvlan0: left promiscuous mode [ 271.243251][T12520] netlink: 'syz.1.1595': attribute type 1 has an invalid length. [ 271.270249][T12520] netlink: 'syz.1.1595': attribute type 2 has an invalid length. [ 271.783800][T12538] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 272.539412][T12552] syzkaller0: entered promiscuous mode [ 272.573828][T12552] syzkaller0: entered allmulticast mode [ 273.318017][T12576] syzkaller0: entered promiscuous mode [ 273.338735][T12580] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1609'. [ 273.362276][T12576] syzkaller0: entered allmulticast mode [ 274.232111][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 274.445153][T12610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1619'. [ 274.873879][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1617'. [ 277.060581][T12626] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1625'. [ 277.101895][T12628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1623'. [ 277.198710][T12629] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1624'. [ 280.711714][T12652] IPVS: stopping backup sync thread 6418 ... [ 280.892599][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'. [ 280.934015][T12661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.997609][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 281.135322][T12672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1632'. [ 281.351268][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1636'. [ 281.430385][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1636'. [ 281.571117][T12683] sctp: [Deprecated]: syz.0.1638 (pid 12683) Use of int in max_burst socket option. [ 281.571117][T12683] Use struct sctp_assoc_value instead [ 281.643555][ T5622] block nbd2: Receive control failed (result -32) [ 281.701338][T12666] nbd2: detected capacity change from 0 to 127 [ 281.738495][ T1562] block nbd2: Dead connection, failed to find a fallback [ 281.751682][ T1562] block nbd2: shutting down sockets [ 281.757408][ T1562] blk_print_req_error: 103 callbacks suppressed [ 281.757427][ T1562] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.774314][ T1562] buffer_io_error: 138 callbacks suppressed [ 281.774334][ T1562] Buffer I/O error on dev nbd2, logical block 0, async page read [ 281.788951][ T1562] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.798852][ T1562] Buffer I/O error on dev nbd2, logical block 1, async page read [ 281.807470][ T1562] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 281.817443][ T1562] Buffer I/O error on dev nbd2, logical block 2, async page read [ 281.826189][ T1562] Buffer I/O error on dev nbd2, logical block 3, async page read [ 281.839638][ T1562] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 281.849882][ T1562] Buffer I/O error on dev nbd2, logical block 0, async page read [ 281.858109][ T1562] Buffer I/O error on dev nbd2, logical block 1, async page read [ 281.866062][ T1562] Buffer I/O error on dev nbd2, logical block 2, async page read [ 281.873919][ T1562] Buffer I/O error on dev nbd2, logical block 3, async page read [ 281.882764][ T1562] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 281.892580][ T1562] Buffer I/O error on dev nbd2, logical block 0, async page read [ 281.900920][ T1562] Buffer I/O error on dev nbd2, logical block 1, async page read [ 281.909302][ T1562] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 281.919478][ T1562] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.929846][ T1562] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 281.939693][ T1562] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.949777][ T1562] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 281.960382][T12641] ldm_validate_partition_table(): Disk read failed. [ 281.968514][T12641] Dev nbd2: unable to read RDB block 0 [ 281.976025][T12641] nbd2: unable to read partition table [ 281.991737][T12641] ldm_validate_partition_table(): Disk read failed. [ 281.999770][T12641] Dev nbd2: unable to read RDB block 0 [ 282.008693][T12641] nbd2: unable to read partition table [ 282.417315][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'. [ 282.447745][T12703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1641'. [ 282.583455][T12707] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 282.731564][T12713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.091707][T12723] pimreg9: entered allmulticast mode [ 283.121427][T12727] xt_l2tp: v2 sid > 0xffff: 33554432 [ 283.495960][T12739] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 283.613543][T12741] xt_bpf: check failed: parse error [ 283.639828][T12741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1652'. [ 283.828599][T12741] veth13: entered allmulticast mode [ 284.588202][T12750] xfrm0 speed is unknown, defaulting to 1000 [ 284.898574][T12759] syzkaller0: entered promiscuous mode [ 284.919494][T12759] syzkaller0: entered allmulticast mode [ 284.942597][T12763] tipc: Enabled bearer , priority 10 [ 285.209845][T12768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1659'. [ 285.676451][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 286.613923][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 289.062229][T12803] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 289.162693][T12799] pim6reg: entered allmulticast mode [ 289.525648][T12822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.594137][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 290.522312][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 290.608262][T12844] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 291.137366][T12857] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1678'. [ 291.734693][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 291.759454][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 291.876006][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 291.902512][T12227] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.924780][T12227] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.933739][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 291.958898][T12227] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.991169][T12227] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.443803][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 292.521824][T12885] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 292.737527][T12885] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 293.515627][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 293.693436][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 293.705564][T12920] syzkaller0: entered promiscuous mode [ 293.725506][T12920] syzkaller0: entered allmulticast mode [ 294.068468][T12926] nbd: socks must be embedded in a SOCK_ITEM attr [ 294.373420][T12938] macvlan3: entered promiscuous mode [ 294.959881][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 295.098569][T12959] netlink: 'syz.2.1701': attribute type 16 has an invalid length. [ 295.202000][T12959] netlink: 'syz.2.1701': attribute type 17 has an invalid length. [ 295.313657][T12963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'. [ 295.337970][T12963] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1702'. [ 295.367254][T12963] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1702'. [ 295.383932][T12963] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1702'. [ 295.555360][T12959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.668969][T12959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.733705][T12992] netlink: 'syz.1.1707': attribute type 4 has an invalid length. [ 295.747628][T12990] netlink: 'syz.1.1707': attribute type 4 has an invalid length. [ 295.774128][T12986] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 295.939295][T12959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.000011][T12959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.034896][T12959] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 296.173453][T12221] bond2: (slave dummy0): failed to get link speed/duplex [ 296.290672][T12223] bond2: (slave dummy0): failed to get link speed/duplex [ 296.304586][ T7463] xfrm0 speed is unknown, defaulting to 1000 [ 296.350580][ T7463] syz0: Port: 1 Link ACTIVE [ 296.476284][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1712'. [ 297.082624][T13033] netlink: 'syz.1.1713': attribute type 2 has an invalid length. [ 297.235595][T13037] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1715'. [ 297.304534][T13037] netlink: 'syz.0.1715': attribute type 9 has an invalid length. [ 297.369048][T13037] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1715'. [ 297.475019][T13037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1715'. [ 297.558797][T12982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.592499][T12223] bond2: (slave dummy0): failed to get link speed/duplex [ 297.628686][ T7464] xfrm0 speed is unknown, defaulting to 1000 [ 297.684983][T13026] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1713'. [ 297.797376][T12229] bond2: (slave dummy0): failed to get link speed/duplex [ 298.152467][T12982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.312710][T13062] netlink: 'syz.3.1717': attribute type 23 has an invalid length. [ 298.340361][ T48] bond2: (slave dummy0): failed to get link speed/duplex [ 298.679868][T12982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.781539][ T48] bond2: (slave dummy0): failed to get link speed/duplex [ 298.990635][T12227] bond2: (slave dummy0): failed to get link speed/duplex [ 299.304027][T13076] bond6: option primary_reselect: invalid value (6) [ 299.421169][T13076] bond6 (unregistering): Released all slaves [ 299.499318][T13095] openvswitch: netlink: Missing valid actions attribute. [ 299.520304][T13095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.532157][T13091] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 299.559717][T13091] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 299.728580][T12982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.146735][T13099] xfrm0 speed is unknown, defaulting to 1000 [ 300.335691][T13113] syzkaller0: entered promiscuous mode [ 300.342719][T13113] syzkaller0: entered allmulticast mode [ 300.429331][T13113] __nla_validate_parse: 32 callbacks suppressed [ 300.429352][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1734'. [ 300.448188][T12223] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.510596][T12223] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.591799][T12229] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.655114][T13123] netlink: 'syz.0.1737': attribute type 4 has an invalid length. [ 300.772176][T12221] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.029323][T13127] vxcan4: entered promiscuous mode [ 301.347039][T13129] ip6erspan1: entered allmulticast mode [ 301.471125][T13136] xt_hashlimit: size too large, truncated to 1048576 [ 302.060378][T12223] net_ratelimit: 5 callbacks suppressed [ 302.060401][T12223] bond2: (slave dummy0): failed to get link speed/duplex [ 302.200604][T12223] bond2: (slave dummy0): failed to get link speed/duplex [ 302.330658][T12221] bond2: (slave dummy0): failed to get link speed/duplex [ 302.570483][T12229] bond2: (slave dummy0): failed to get link speed/duplex [ 302.940671][T12229] bond2: (slave dummy0): failed to get link speed/duplex [ 302.999254][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1747'. [ 303.058201][T13151] ksmbd: Unknown IPC event: 1, ignore. [ 303.070869][T12227] bond2: (slave dummy0): failed to get link speed/duplex [ 303.193672][T12223] bond2: (slave dummy0): failed to get link speed/duplex [ 303.320592][T12223] bond2: (slave dummy0): failed to get link speed/duplex [ 303.461709][T12229] bond2: (slave dummy0): failed to get link speed/duplex [ 303.580608][T12227] bond2: (slave dummy0): failed to get link speed/duplex [ 303.594448][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 303.788237][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 303.829407][T13177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.887704][T13180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1755'. [ 304.504153][T13189] ip6gretap0: entered promiscuous mode [ 304.576518][T13189] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.676876][T13189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.824870][T13216] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 305.719060][T13189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.764943][T13189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.809343][T13189] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.843808][T13189] virt_wifi0: left promiscuous mode [ 305.999294][T13216] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 306.116692][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1764'. [ 306.355438][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'. [ 306.392132][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'. [ 306.529868][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 306.589387][T13236] netlink: 'syz.2.1768': attribute type 21 has an invalid length. [ 306.677666][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1768'. [ 306.731450][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 306.755191][T13241] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 306.959351][T13241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.184950][T13262] net_ratelimit: 14 callbacks suppressed [ 307.184976][T13262] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.207451][T12221] bond2: (slave dummy0): failed to get link speed/duplex [ 307.340635][T12227] bond2: (slave dummy0): failed to get link speed/duplex [ 307.463458][T13269] xt_hashlimit: size too large, truncated to 1048576 [ 307.480648][T12227] bond2: (slave dummy0): failed to get link speed/duplex [ 308.036045][T12229] bond2: (slave dummy0): failed to get link speed/duplex [ 308.096010][T13282] 8021q: VLANs not supported on ip_vti0 [ 308.202002][T12227] bond2: (slave dummy0): failed to get link speed/duplex [ 308.332725][T12227] bond2: (slave dummy0): failed to get link speed/duplex [ 308.493796][T12227] bond2: (slave dummy0): failed to get link speed/duplex [ 308.584717][T13294] dvmrp0: entered allmulticast mode [ 308.644443][T13300] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 308.684284][T13295] dvmrp1: entered allmulticast mode [ 308.897216][T13313] netlink: 'syz.4.1783': attribute type 10 has an invalid length. [ 308.935906][T13313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1783'. [ 309.039233][T13300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.069894][T13269] openvswitch: netlink: Message has -2 unknown bytes. [ 309.171564][ T3351] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 309.184658][T13302] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 309.397109][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 309.455009][T13320] veth5: entered promiscuous mode [ 309.475381][T13320] veth5: entered allmulticast mode [ 309.496593][T13320] team0: Device veth5 is up. Set it down before adding it as a team port [ 309.567357][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 309.620818][T13329] netlink: 'syz.2.1790': attribute type 11 has an invalid length. [ 309.636415][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064161800: rx timeout, send abort [ 311.606446][T13399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1800'. [ 311.835091][T13416] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1803'. [ 311.929727][T13416] veth5: entered allmulticast mode [ 312.210733][ T12] net_ratelimit: 18 callbacks suppressed [ 312.210774][ T12] bond2: (slave dummy0): failed to get link speed/duplex [ 312.350557][ T12] bond2: (slave dummy0): failed to get link speed/duplex [ 312.474012][ T3361] bond2: (slave dummy0): failed to get link speed/duplex [ 312.502659][T13423] netlink: 'syz.1.1805': attribute type 23 has an invalid length. [ 312.590308][ T6561] bond2: (slave dummy0): failed to get link speed/duplex [ 312.731243][ T3361] bond2: (slave dummy0): failed to get link speed/duplex [ 312.864175][ T6561] bond2: (slave dummy0): failed to get link speed/duplex [ 313.000961][ T6561] bond2: (slave dummy0): failed to get link speed/duplex [ 313.131069][ T6561] bond2: (slave dummy0): failed to get link speed/duplex [ 313.290280][ T12] bond2: (slave dummy0): failed to get link speed/duplex [ 313.384312][T13460] netlink: 'syz.2.1812': attribute type 2 has an invalid length. [ 313.421007][ T12] bond2: (slave dummy0): failed to get link speed/duplex [ 313.489361][T13460] : entered promiscuous mode [ 313.605975][T13386] infiniband snz0: set down [ 313.616789][T13386] infiniband snz0: added ipvlan1 [ 313.633521][T13386] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 313.642254][T13386] infiniband snz0: Couldn't open port 1 [ 313.672342][T13386] smbdirect: ib_dev[snz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 313.688294][T13386] smbdirect: ib_dev[snz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 313.707346][T13386] smbdirect: ib_dev[snz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 313.766587][T13386] RDS/IB: snz0: added [ 313.791897][T13386] smc: adding ib device snz0 with port count 1 [ 313.798440][T13386] smc: ib device snz0 port 1 has no pnetid [ 314.366987][T13474] netlink: 'syz.3.1816': attribute type 10 has an invalid length. [ 314.376713][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'. [ 314.411767][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'. [ 314.435930][T13474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1816'. [ 314.490908][T13474] v: entered promiscuous mode [ 314.600068][T13484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1818'. [ 314.652839][T13484] syzkaller0: entered promiscuous mode [ 314.671580][T13484] syzkaller0: entered allmulticast mode [ 314.725134][T13489] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 314.733993][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 314.775625][T13489] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 315.460068][T13504] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1823'. [ 316.141406][T13534] netlink: 'syz.2.1831': attribute type 1 has an invalid length. [ 316.313618][T13534] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.548307][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'. [ 316.581354][T13542] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1833'. [ 316.621912][T13545] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1834'. [ 316.748256][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'. [ 319.159937][T13539] veth7: entered allmulticast mode [ 319.209238][T13539] bond6: (slave veth7): Enslaving as an active interface with an up link [ 319.311958][T12229] net_ratelimit: 24 callbacks suppressed [ 319.311983][T12229] bond2: (slave dummy0): failed to get link speed/duplex [ 319.463896][ T12] bond2: (slave dummy0): failed to get link speed/duplex [ 319.640647][ T12] bond2: (slave dummy0): failed to get link speed/duplex [ 319.760596][T12223] bond2: (slave dummy0): failed to get link speed/duplex [ 320.308857][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1843'. [ 320.343345][T13582] batman_adv: batadv0: Interface deactivated: veth0 [ 320.558163][T13582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.753359][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.821217][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.847261][ T7459] xfrm0 speed is unknown, defaulting to 1000 [ 320.860840][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.882495][ T7459] syz0: Port: 1 Link DOWN [ 320.918491][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.944690][T13602] x_tables: duplicate underflow at hook 1 [ 320.989409][ T7459] xfrm0 speed is unknown, defaulting to 1000 [ 321.611864][T13556] infiniband syz2: set down [ 321.625240][T13556] infiniband syz2: added veth1_vlan [ 321.642240][T13556] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 321.647135][T13556] infiniband syz2: Couldn't open port 1 [ 321.665369][T13556] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 321.726878][T13556] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 321.764930][T13556] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 321.879820][T13622] v: left promiscuous mode [ 321.956282][T13622] hsr0: left allmulticast mode [ 321.973800][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1851'. [ 321.992732][T13556] RDS/IB: syz2: added [ 322.000177][T13622] hsr_slave_0: left allmulticast mode [ 322.009203][T13622] hsr_slave_1: left allmulticast mode [ 322.021999][T13556] smc: adding ib device syz2 with port count 1 [ 322.053350][T13556] smc: ib device syz2 port 1 has no pnetid [ 322.164890][T13622] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 322.189291][T13622] ip6gretap1: left allmulticast mode [ 322.296181][T13637] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1854'. [ 322.329638][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1854'. [ 322.361595][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1854'. [ 322.391677][T13637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1854'. [ 322.596846][T13647] netlink: 'syz.2.1855': attribute type 1 has an invalid length. [ 322.643161][T13650] FAULT_INJECTION: forcing a failure. [ 322.643161][T13650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.733847][T13650] CPU: 0 UID: 0 PID: 13650 Comm: syz.4.1857 Not tainted syzkaller #0 PREEMPT(full) [ 322.733878][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.733893][T13650] Call Trace: [ 322.733902][T13650] [ 322.733911][T13650] dump_stack_lvl+0xe8/0x150 [ 322.733946][T13650] should_fail_ex+0x40c/0x560 [ 322.733978][T13650] _copy_from_user+0x2d/0xb0 [ 322.734011][T13650] ___sys_sendmsg+0x1c6/0x360 [ 322.734039][T13650] ? __lock_acquire+0x683/0x2cf0 [ 322.734073][T13650] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.734140][T13650] ? __fget_files+0x2a/0x420 [ 322.734167][T13650] ? __fget_files+0x3a2/0x420 [ 322.734206][T13650] __x64_sys_sendmsg+0x1b1/0x290 [ 322.734238][T13650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.734285][T13650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.734310][T13650] do_syscall_64+0x174/0x580 [ 322.734340][T13650] ? trace_irq_disable+0x3b/0x140 [ 322.734367][T13650] ? clear_bhb_loop+0x70/0xc0 [ 322.734394][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.734426][T13650] RIP: 0033:0x7fdb3159e0d9 [ 322.734448][T13650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.734467][T13650] RSP: 002b:00007fdb324f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.734489][T13650] RAX: ffffffffffffffda RBX: 00007fdb31825fa0 RCX: 00007fdb3159e0d9 [ 322.734505][T13650] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 322.734519][T13650] RBP: 00007fdb324f4090 R08: 0000000000000000 R09: 0000000000000000 [ 322.734533][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.734546][T13650] R13: 00007fdb31826038 R14: 00007fdb31825fa0 R15: 00007ffc50984be8 [ 322.734580][T13650] [ 322.984536][T13651] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 323.144367][T13653] bond7: (slave geneve3): making interface the new active one [ 323.205284][T13653] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 323.280842][T12221] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 323.290786][T12221] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 323.332484][T12221] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 323.483015][T13664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1859'. [ 323.521916][T12221] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 324.109694][T13676] xfrm0 speed is unknown, defaulting to 1000 [ 324.399877][T13691] x_tables: duplicate underflow at hook 3 [ 325.054400][T13711] nbd: must specify a device to reconfigure [ 325.391325][T13677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1862'. [ 325.422487][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'. [ 325.443327][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'. [ 326.083259][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 327.120310][T13763] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 327.273751][T13763] bond7: entered promiscuous mode [ 327.279595][T13763] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.319078][T13767] bond8: entered allmulticast mode [ 327.325388][T13767] 8021q: adding VLAN 0 to HW filter on device bond8 [ 327.366231][T13764] bond9: entered allmulticast mode [ 327.372915][T13764] 8021q: adding VLAN 0 to HW filter on device bond9 [ 327.401514][T13766] batman_adv: batadv0: Adding interface: gretap2 [ 327.416182][T13766] batman_adv: batadv0: The MTU of interface gretap2 is too small (1412) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.446781][T13766] batman_adv: batadv0: Interface activated: gretap2 [ 327.712592][T13778] netlink: 'syz.0.1891': attribute type 2 has an invalid length. [ 327.980728][T13787] __nla_validate_parse: 1 callbacks suppressed [ 327.980749][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 327.998442][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 328.021830][T13789] netlink: 'syz.2.1895': attribute type 21 has an invalid length. [ 328.038881][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 328.043184][T13789] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1895'. [ 328.077406][T13789] netlink: 'syz.2.1895': attribute type 5 has an invalid length. [ 328.090417][T13789] netlink: 'syz.2.1895': attribute type 6 has an invalid length. [ 328.109215][T13789] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1895'. [ 329.354332][T13826] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1905'. [ 329.660790][T13837] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 329.809987][T13847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1908'. [ 330.207241][T13844] veth15: entered allmulticast mode [ 330.852099][T13865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1915'. [ 330.931433][T13865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1915'. [ 331.363484][T13858] netlink: 'syz.0.1914': attribute type 4 has an invalid length. [ 331.627748][T13892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1920'. [ 331.903311][T13896] netlink: 'syz.3.1922': attribute type 2 has an invalid length. [ 332.270739][T13914] netlink: 'syz.1.1928': attribute type 1 has an invalid length. [ 332.297926][T13917] netlink: 'syz.2.1929': attribute type 10 has an invalid length. [ 332.407138][T13914] 8021q: adding VLAN 0 to HW filter on device bond6 [ 332.907763][T13937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.949967][T13943] netlink: 'syz.4.1933': attribute type 20 has an invalid length. [ 333.102683][T13933] xfrm0 speed is unknown, defaulting to 1000 [ 334.162459][T13964] syzkaller0: entered promiscuous mode [ 334.176288][T13964] syzkaller0: entered allmulticast mode [ 337.637268][T13969] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 337.642937][T13979] syzkaller0: entered promiscuous mode [ 337.675373][T13979] syzkaller0: entered allmulticast mode [ 337.757238][T13983] tipc: Enabled bearer , priority 0 [ 337.775910][T13987] batadv_slave_1: entered promiscuous mode [ 337.782758][T13986] __nla_validate_parse: 6 callbacks suppressed [ 337.782775][T13986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1932'. [ 337.820384][T13986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1932'. [ 337.847813][T13984] batadv_slave_1: left promiscuous mode [ 337.856365][T13932] tipc: Resetting bearer [ 337.931770][T13932] tipc: Disabling bearer [ 337.942604][T13997] netlink: 'syz.1.1943': attribute type 27 has an invalid length. [ 338.018419][T14001] tun0: tun_chr_ioctl cmd 1074025675 [ 338.024685][T14001] tun0: persist enabled [ 338.034041][T13997] netlink: 'syz.1.1943': attribute type 1 has an invalid length. [ 338.259440][T14007] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 338.304808][T14012] syzkaller0: entered promiscuous mode [ 338.326000][T14012] syzkaller0: entered allmulticast mode [ 338.585271][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'. [ 338.616377][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'. [ 339.514765][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1959'. [ 339.634110][T14058] batadv0: Device is already in use. [ 339.807944][T14068] netlink: 'syz.1.1962': attribute type 40 has an invalid length. [ 339.870929][T14068] netlink: 'syz.1.1962': attribute type 4 has an invalid length. [ 339.895601][T14068] netlink: 'syz.1.1962': attribute type 3 has an invalid length. [ 340.146077][T14072] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 340.393779][T14079] xfrm0 speed is unknown, defaulting to 1000 [ 341.678947][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 341.719937][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 342.282533][T14104] openvswitch: netlink: IP tunnel dst address not specified [ 342.345593][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 342.518734][T14110] tipc: Enabling of bearer rejected, failed to enable media [ 343.121992][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 343.160211][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 343.169146][ T30] audit: type=1800 audit(1787076776.464:9): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1972" name="memory.events" dev="tmpfs" ino=1837 res=0 errno=0 [ 343.215527][T14123] netlink: 'syz.2.1976': attribute type 13 has an invalid length. [ 343.453132][T14127] netlink: NAT attribute has 5 unknown bytes [ 343.498377][T14127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.937900][T14135] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 344.248479][T14139] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 344.671332][T14141] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.936929][T14177] wg1: entered promiscuous mode [ 345.960368][T14177] wg1: entered allmulticast mode [ 346.266249][T14190] netlink: 'syz.4.1996': attribute type 23 has an invalid length. [ 346.292373][T14187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1995'. [ 346.384745][T14189] bridge2: entered promiscuous mode [ 346.400273][T14189] bridge2: entered allmulticast mode [ 346.443673][T14189] team0: Port device bridge2 added [ 346.505960][T14185] xfrm0 speed is unknown, defaulting to 1000 [ 346.521597][T14198] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 346.695508][T14198] bond3: entered promiscuous mode [ 346.701879][T14198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.714157][T14189] dvmrp1: left allmulticast mode [ 346.977345][T14217] bridge0: port 1(veth0) entered disabled state [ 346.996130][T14217] bridge0: entered allmulticast mode [ 347.096355][T14221] gretap0: entered promiscuous mode [ 347.113577][T14221] vlan2: entered promiscuous mode [ 348.208527][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 348.439486][T14248] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 348.606141][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2015'. [ 348.654243][T14262] netlink: 'syz.4.2015': attribute type 4 has an invalid length. [ 348.724147][T14261] netlink: 'syz.4.2015': attribute type 4 has an invalid length. [ 349.035908][T14275] veth0: entered promiscuous mode [ 349.099076][T14276] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 349.133593][T14276] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 349.336584][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 349.354920][T14272] veth0: left promiscuous mode [ 349.374774][T14285] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2022'. [ 349.832112][T14293] syzkaller1: entered promiscuous mode [ 349.855223][T14293] syzkaller1: entered allmulticast mode [ 350.098642][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'. [ 350.166630][T14308] bond0: entered promiscuous mode [ 350.182608][T14308] bond_slave_0: entered promiscuous mode [ 350.196436][T14308] bond_slave_1: entered promiscuous mode [ 350.209140][T14308] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 350.236721][T14308] batadv0: entered promiscuous mode [ 350.275717][T14308] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 350.303282][T14308] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 350.346641][T14308] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 350.389086][T14308] bond0: left promiscuous mode [ 350.401907][T14308] bond_slave_0: left promiscuous mode [ 350.417853][T14308] bond_slave_1: left promiscuous mode [ 350.423849][T14308] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 350.433996][T14308] batadv0: left promiscuous mode [ 351.095703][T14343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2036'. [ 351.187439][T14337] syzkaller1: entered promiscuous mode [ 351.206536][T14345] Can't find ip_set type [ 351.212136][T14348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2034'. [ 351.232316][T14337] syzkaller1: entered allmulticast mode [ 351.242132][T14343] Can't find ip_set type [ 351.681832][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 351.730350][T14361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2038'. [ 351.887048][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 352.010642][T14355] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 352.417172][T14358] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 352.456407][T14358] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 352.474143][T14358] bond0 (unregistering): Released all slaves [ 352.855116][T14384] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 353.186893][T14391] netlink: 'syz.3.2046': attribute type 28 has an invalid length. [ 353.243015][T14392] __nla_validate_parse: 2 callbacks suppressed [ 353.243063][T14392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2046'. [ 353.448582][T14400] netlink: 'syz.0.2047': attribute type 13 has an invalid length. [ 353.607554][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 353.654070][T14402] bond4: Unable to set up delay as MII monitoring is disabled [ 353.686373][T14410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2047'. [ 353.696172][T14402] bond4 (unregistering): Released all slaves [ 353.999626][T14422] netlink: 'syz.1.2051': attribute type 11 has an invalid length. [ 354.479623][T14435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2055'. [ 354.527345][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'. [ 354.565439][T14435] x_tables: duplicate entry at hook 1 [ 354.589419][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 354.768589][T14439] bond0: (slave bond_slave_1): Releasing backup interface [ 354.821981][T14444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2058'. [ 355.263435][T14462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2061'. [ 355.912178][T14469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.378555][T14469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.391844][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 356.453519][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 356.498463][T14511] erspan0: entered promiscuous mode [ 356.524672][T14495] erspan0: left promiscuous mode [ 356.726338][T14469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.825834][ T5274] veth0_vlan: left promiscuous mode [ 356.880814][ T7459] veth0_vlan: entered promiscuous mode [ 356.999604][T14469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.373241][ T30] audit: type=1804 audit(1787076790.674:10): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2076" name="/newroot/411/cgroup.controllers" dev="tmpfs" ino=2136 res=1 errno=0 [ 357.518848][ T30] audit: type=1800 audit(1787076790.674:11): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2076" name="cgroup.controllers" dev="tmpfs" ino=2136 res=0 errno=0 [ 357.763369][T12229] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.880745][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.959139][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.058746][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.455532][T14566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.528890][T14567] __nla_validate_parse: 65 callbacks suppressed [ 358.528911][T14567] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2084'. [ 358.742167][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'. [ 360.019831][T14577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'. [ 360.494500][T14574] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 360.756079][T14574] bond0 (unregistering): Released all slaves [ 360.923823][ T5622] block nbd3: Receive control failed (result -1) [ 360.935517][ T5622] [ 360.937888][ T5622] ====================================================== [ 360.944949][ T5622] WARNING: possible circular locking dependency detected [ 360.952116][ T5622] syzkaller #0 Not tainted [ 360.956554][ T5622] ------------------------------------------------------ [ 360.963642][ T5622] kworker/u9:5/5622 is trying to acquire lock: [ 360.969825][ T5622] ffff88805388b860 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 360.979467][ T5622] [ 360.979467][ T5622] but task is already holding lock: [ 360.986860][ T5622] ffff888035918e68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 360.995916][ T5622] [ 360.995916][ T5622] which lock already depends on the new lock. [ 360.995916][ T5622] [ 361.006357][ T5622] [ 361.006357][ T5622] the existing dependency chain (in reverse order) is: [ 361.015407][ T5622] [ 361.015407][ T5622] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 361.023216][ T5622] __mutex_lock+0x19d/0x1550 [ 361.028477][ T5622] nbd_queue_rq+0x373/0x1150 [ 361.033626][ T5622] blk_mq_dispatch_rq_list+0x499/0x1990 [ 361.039817][ T5622] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 361.046743][ T5622] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 361.053328][ T5622] blk_mq_run_work_fn+0x16c/0x300 [ 361.058909][ T5622] process_scheduled_works+0xa8e/0x14e0 [ 361.065036][ T5622] worker_thread+0xa47/0xfb0 [ 361.070171][ T5622] kthread+0x388/0x470 [ 361.074788][ T5622] ret_from_fork+0x514/0xb70 [ 361.079954][ T5622] ret_from_fork_asm+0x1a/0x30 [ 361.085306][ T5622] [ 361.085306][ T5622] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 361.092537][ T5622] __mutex_lock+0x19d/0x1550 [ 361.097704][ T5622] nbd_queue_rq+0xc1/0x1150 [ 361.102744][ T5622] blk_mq_dispatch_rq_list+0x499/0x1990 [ 361.108836][ T5622] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 361.115726][ T5622] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 361.122252][ T5622] blk_mq_run_work_fn+0x16c/0x300 [ 361.127831][ T5622] process_scheduled_works+0xa8e/0x14e0 [ 361.133916][ T5622] worker_thread+0xa47/0xfb0 [ 361.139045][ T5622] kthread+0x388/0x470 [ 361.143659][ T5622] ret_from_fork+0x514/0xb70 [ 361.148795][ T5622] ret_from_fork_asm+0x1a/0x30 [ 361.154103][ T5622] [ 361.154103][ T5622] -> #4 (set->srcu){.+.+}-{0:0}: [ 361.161246][ T5622] __synchronize_srcu+0xc9/0x2f0 [ 361.166755][ T5622] elevator_switch+0x1e8/0x7b0 [ 361.172126][ T5622] elevator_change+0x2fa/0x480 [ 361.177454][ T5622] elevator_set_default+0x375/0x440 [ 361.183204][ T5622] blk_register_queue+0x3f3/0x4e0 [ 361.188827][ T5622] __add_disk+0x6cb/0xe30 [ 361.193730][ T5622] add_disk_fwnode+0x100/0x3a0 [ 361.199039][ T5622] nbd_dev_add+0x733/0xb60 [ 361.204170][ T5622] nbd_init+0x15f/0x1e0 [ 361.208970][ T5622] do_one_initcall+0x250/0x870 [ 361.214461][ T5622] do_initcall_level+0x10a/0x1a0 [ 361.219993][ T5622] do_initcalls+0x59/0xa0 [ 361.224859][ T5622] kernel_init_freeable+0x29d/0x3e0 [ 361.230595][ T5622] kernel_init+0x1d/0x1d0 [ 361.235483][ T5622] ret_from_fork+0x514/0xb70 [ 361.240617][ T5622] ret_from_fork_asm+0x1a/0x30 [ 361.245927][ T5622] [ 361.245927][ T5622] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 361.253758][ T5622] __mutex_lock+0x19d/0x1550 [ 361.258906][ T5622] elevator_change+0x1af/0x480 [ 361.264217][ T5622] elevator_set_none+0xb5/0x140 [ 361.269608][ T5622] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 361.275956][ T5622] nbd_start_device+0x189/0xb30 [ 361.281345][ T5622] nbd_genl_connect+0x1597/0x1c10 [ 361.286902][ T5622] genl_family_rcv_msg_doit+0x233/0x340 [ 361.293061][ T5622] genl_rcv_msg+0x614/0x7a0 [ 361.298101][ T5622] netlink_rcv_skb+0x226/0x4a0 [ 361.303415][ T5622] genl_rcv+0x28/0x40 [ 361.307954][ T5622] netlink_unicast+0x7bb/0x940 [ 361.313274][ T5622] netlink_sendmsg+0x813/0xb40 [ 361.318584][ T5622] sock_sendmsg_nosec+0x13a/0x180 [ 361.324264][ T5622] ____sys_sendmsg+0x54e/0x850 [ 361.329570][ T5622] ___sys_sendmsg+0x2a5/0x360 [ 361.334811][ T5622] __x64_sys_sendmsg+0x1b1/0x290 [ 361.340317][ T5622] do_syscall_64+0x174/0x580 [ 361.345538][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.352017][ T5622] [ 361.352017][ T5622] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 361.360681][ T5622] blk_alloc_queue+0x544/0x690 [ 361.365986][ T5622] __blk_mq_alloc_disk+0x194/0x390 [ 361.371651][ T5622] nbd_dev_add+0x494/0xb60 [ 361.376602][ T5622] nbd_init+0x15f/0x1e0 [ 361.381304][ T5622] do_one_initcall+0x250/0x870 [ 361.386613][ T5622] do_initcall_level+0x10a/0x1a0 [ 361.392089][ T5622] do_initcalls+0x59/0xa0 [ 361.396958][ T5622] kernel_init_freeable+0x29d/0x3e0 [ 361.402696][ T5622] kernel_init+0x1d/0x1d0 [ 361.407571][ T5622] ret_from_fork+0x514/0xb70 [ 361.412702][ T5622] ret_from_fork_asm+0x1a/0x30 [ 361.418033][ T5622] [ 361.418033][ T5622] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 361.425266][ T5622] fs_reclaim_acquire+0x71/0x100 [ 361.430800][ T5622] __kmalloc_noprof+0xbc/0x720 [ 361.436169][ T5622] tls_sw_sendmsg+0x59b/0x2b50 [ 361.441549][ T5622] sock_sendmsg_nosec+0x90/0x180 [ 361.447040][ T5622] sock_sendmsg+0x1ca/0x2d0 [ 361.452101][ T5622] splice_to_socket+0xb5e/0x12a0 [ 361.457614][ T5622] direct_splice_actor+0x101/0x160 [ 361.463268][ T5622] splice_direct_to_actor+0x57b/0xcb0 [ 361.469180][ T5622] do_splice_direct+0x195/0x290 [ 361.474605][ T5622] do_sendfile+0x52e/0x7c0 [ 361.479580][ T5622] __se_sys_sendfile64+0x144/0x1a0 [ 361.485235][ T5622] do_syscall_64+0x174/0x580 [ 361.490379][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.496828][ T5622] [ 361.496828][ T5622] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 361.504946][ T5622] __lock_acquire+0x1520/0x2cf0 [ 361.510391][ T5622] lock_acquire+0x106/0x350 [ 361.515442][ T5622] lock_sock_nested+0x41/0x100 [ 361.520807][ T5622] inet_shutdown+0x6a/0x390 [ 361.525880][ T5622] nbd_mark_nsock_dead+0x2cb/0x550 [ 361.531627][ T5622] recv_work+0x1cee/0x1e10 [ 361.536581][ T5622] process_scheduled_works+0xa8e/0x14e0 [ 361.542667][ T5622] worker_thread+0xa47/0xfb0 [ 361.547801][ T5622] kthread+0x388/0x470 [ 361.552411][ T5622] ret_from_fork+0x514/0xb70 [ 361.557545][ T5622] ret_from_fork_asm+0x1a/0x30 [ 361.562853][ T5622] [ 361.562853][ T5622] other info that might help us debug this: [ 361.562853][ T5622] [ 361.573101][ T5622] Chain exists of: [ 361.573101][ T5622] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 361.573101][ T5622] [ 361.586161][ T5622] Possible unsafe locking scenario: [ 361.586161][ T5622] [ 361.593683][ T5622] CPU0 CPU1 [ 361.599111][ T5622] ---- ---- [ 361.604490][ T5622] lock(&nsock->tx_lock); [ 361.608927][ T5622] lock(&cmd->lock); [ 361.615453][ T5622] lock(&nsock->tx_lock); [ 361.622410][ T5622] lock(sk_lock-AF_INET6-NBD); [ 361.627298][ T5622] [ 361.627298][ T5622] *** DEADLOCK *** [ 361.627298][ T5622] [ 361.635533][ T5622] 3 locks held by kworker/u9:5/5622: [ 361.640842][ T5622] #0: ffff8880278fc140 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 361.652124][ T5622] #1: ffffc90003c17c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 361.663889][ T5622] #2: ffff888035918e68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 361.673227][ T5622] [ 361.673227][ T5622] stack backtrace: [ 361.679168][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 361.679193][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.679204][ T5622] Workqueue: nbd3-recv recv_work [ 361.679227][ T5622] Call Trace: [ 361.679291][ T5622] [ 361.679305][ T5622] dump_stack_lvl+0xe8/0x150 [ 361.679357][ T5622] print_circular_bug+0x2e1/0x300 [ 361.679385][ T5622] check_noncircular+0x12e/0x150 [ 361.679413][ T5622] __lock_acquire+0x1520/0x2cf0 [ 361.679442][ T5622] ? irqentry_exit+0x218/0x8f0 [ 361.679501][ T5622] ? lockdep_hardirqs_on+0x7a/0x110 [ 361.679525][ T5622] ? inet_shutdown+0x6a/0x390 [ 361.679546][ T5622] lock_acquire+0x106/0x350 [ 361.679567][ T5622] ? inet_shutdown+0x6a/0x390 [ 361.679594][ T5622] lock_sock_nested+0x41/0x100 [ 361.679609][ T5622] ? inet_shutdown+0x6a/0x390 [ 361.679632][ T5622] inet_shutdown+0x6a/0x390 [ 361.679655][ T5622] nbd_mark_nsock_dead+0x2cb/0x550 [ 361.679673][ T5622] recv_work+0x1cee/0x1e10 [ 361.679697][ T5622] ? lockdep_unlock+0x5d/0xd0 [ 361.679714][ T5622] ? __lock_acquire+0x13e8/0x2cf0 [ 361.679739][ T5622] ? __pfx_recv_work+0x10/0x10 [ 361.679758][ T5622] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.679775][ T5622] ? process_scheduled_works+0xa20/0x14e0 [ 361.679797][ T5622] ? rcu_is_watching+0x15/0xb0 [ 361.679822][ T5622] ? process_scheduled_works+0xa20/0x14e0 [ 361.679844][ T5622] process_scheduled_works+0xa8e/0x14e0 [ 361.679873][ T5622] ? __pfx_process_scheduled_works+0x10/0x10 [ 361.679893][ T5622] ? assign_work+0x3cf/0x5d0 [ 361.679911][ T5622] worker_thread+0xa47/0xfb0 [ 361.679947][ T5622] kthread+0x388/0x470 [ 361.679969][ T5622] ? __pfx_worker_thread+0x10/0x10 [ 361.679985][ T5622] ? __pfx_kthread+0x10/0x10 [ 361.680007][ T5622] ret_from_fork+0x514/0xb70 [ 361.680030][ T5622] ? __pfx_ret_from_fork+0x10/0x10 [ 361.680051][ T5622] ? __switch_to+0xc89/0x1420 [ 361.680071][ T5622] ? __pfx_kthread+0x10/0x10 [ 361.680093][ T5622] ret_from_fork_asm+0x1a/0x30 [ 361.680130][ T5622]