last executing test programs: 4.007223666s ago: executing program 4 (id=2320): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e25, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0xffff, 0x4, @loopback, 0x1000000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000400)={0x6a, {{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x52800, 0x4400}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000001000500000000000003000007000000", @ANYRES32=r9, @ANYBLOB="010000000000000004001680"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3.604519001s ago: executing program 4 (id=2327): unshare(0xa020480) r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000002) close(r1) 3.311494715s ago: executing program 4 (id=2330): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) unshare(0x20040600) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) 2.707139866s ago: executing program 0 (id=2338): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x7, 0xff, 0x8, 0x8, 0x2, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0xfc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={r1}, &(0x7f00000000c0)=0x8) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socketpair(0x21, 0x5, 0x6, &(0x7f0000000140)={0xffffffffffffffff}) bind$pptp(r2, &(0x7f0000000300)={0x18, 0x2, {0x2, @empty}}, 0x1e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = socket(0x10, 0x803, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000001bc0)=[{0x2, 0x2, {0x0, 0x1, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xfd}, {0x1, 0x1, {0x1, 0xf0}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x2, 0x2, {0x0, 0xf0, 0x3}, {0x2, 0x1, 0x7}, 0xff, 0xfd}, {0x3, 0x1, {0x1, 0xf0, 0x2}, {0x1, 0xff, 0x2}, 0xfe, 0x1}, {0x0, 0x2, {0x0, 0x0, 0x5}, {0x0, 0x1, 0x1}, 0xff, 0x1}], 0xa0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900000000000000000000000073797a3100000000140000001100010000000000000000000e00000aa4227145f25a40"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0xb}, {}, 0x0, 0x20}, {{@in=@private=0xa010101, 0x404d3, 0x2b}, 0xa, @in=@empty}}, 0xe8) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c00048006"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002", @ANYRES64=0x0], 0x10}}, 0x4000800) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100003052dbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000140012800800010067726500080002800400120008000a00", @ANYRES32=r5, @ANYBLOB="a3ec4267bf03bf9cfe713449f8191029b1938ec44bee90e71944c071aa5d4bd0d7f4e8df58de45ba3931fefe9719aced58adc1d1ee8e54f50bf7bccc6fb84f4fc2127d9c825cae4c4c1a88b6a2cca726667ec0894675c9aa8966e3cdf66a534384c8b6b93db79e2512df5f21bd675c082c6670bfee33f756fa393ceffe4ccca9935f8d84b7bf3bf00268e05b9c54e12a37dcede5a854b1d2e924b01d65d962496168e28a8657f19af25748e3f2d5690f04c986fc2791d2281393868f14547b9e0000bb111da12f14a6a760362e588b3ea80af9aa8c1d638293093e0cd5700366a64f1e26faf8a48b192bd74d98805ece0ee23ca6037abb899bfc0c6776060b00378cfcceb2107b3ceec3646a0126741789f85cdff34205a94ed3ac6c24dfbfca615d83dd760ef3b9e1c0213214ccaa7c275115c5634a482c725fc937386a25cafd5e80792cab47190822dcb6365ed483841103f49cec78d1146efafba75f01f0da4c459d2edc1dcdd81edad01d39f7da8ef935aac6991dde7bfefcb6a986c95863278bdda09e940e0b3e57f2cf4b11095ed1226828dd9a0bb1aae6eeb16ef2"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 2.306650712s ago: executing program 4 (id=2342): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000000)=0x51) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r6) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8, 0x0, 0x11000000}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES8, @ANYBLOB="000229bd7000fcdbdf250a0000000c000600010000000100000008000300", @ANYBLOB="0ecaa4c10298ea4429cc27f42571f31de66da652bc8176a52cc956f9aa960c4e4d7baac070c832d8463df6185c959108e5467b9d8efbe812e459f79a744b4a4cc25e4bcef1a5d79ddc343925a48eeeb23134494a68fe6dcb761e45b39943730869216928323e77dfa2f12db2ded8ee8bde6f766ea302", @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800030495892aca0fe5277e01e4734f85ca3a407fb61cf2ec71df2570cb222bec573707f25a00e4236ea653475d770c01ce3f2529d5129f0380d8d75ad61ade1ded34098170885cd426b186c9bc69d572e1aa10768253de73", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="06000900ffff00000c00060001000000010000000600090001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010226bd7000feffffff030026001400070000000000000000000000ffff7f0000016919970e6b6ea7f7900703303c64431930c5b4dcd2ce72e1082f05d705c633476349944e25469e032de7be6f91dda86ac45fced9cff4fa4173297b2889"], 0x28}, 0x8, 0x3000000000002}, 0x844) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) r11 = socket$phonet(0x23, 0x2, 0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020605000a0000000000000000000000100003006269746d61703a70b722effbe3770ef5000000000900020073797a3000000000050005000000000005000100060000000c0007800600044000000000"], 0x54}}, 0x0) ioctl$SIOCPNDELRESOURCE(r11, 0x89ef, &(0x7f0000000400)=0x3) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2.211083695s ago: executing program 0 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd27}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = socket(0x2a, 0x2, 0x2000000) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) write$nci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="500238", @ANYRES64=r7], 0x3b) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x5) r9 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r5, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x24}}, 0xc0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x200, 0x70bd2d, 0x255fdbf8, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x4804) 1.953035723s ago: executing program 0 (id=2348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='p\x00', @ANYBLOB="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", @ANYRES16=r0], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) (async, rerun: 64) bind$tipc(r1, 0x0, 0x0) (async, rerun: 64) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xd, 0xffff}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0x3, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x24000850) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r10 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) socket(0x18, 0xa, 0x3) 1.230076586s ago: executing program 0 (id=2353): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x9) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10100, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.076825105s ago: executing program 4 (id=2354): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @nfc={0x27, r0, 0x0, 0x2}, @nfc={0x27, r1, 0x0, 0x3}, @nfc={0x27, r2, 0x0, 0x7}, 0x3a, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)='vlan0\x00', 0x0, 0x6}) r3 = epoll_create1(0x80000) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008440) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRES16=r4], 0x50) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa0028000}) 1.072760858s ago: executing program 3 (id=2355): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c0007000000000000000000080009007100000007"], 0x54}}, 0x0) 694.274062ms ago: executing program 1 (id=2357): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c040000100001040000000000000a0000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) 693.804238ms ago: executing program 0 (id=2358): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000200)=""/140, 0x8c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x20) sendmmsg$inet6(r1, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="04f4", 0x2}], 0x1}}], 0x1, 0x4000040) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r5, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000013000000060002"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]}) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000140)=0x5) write$ppp(r7, &(0x7f0000000300)="5af9", 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffe9, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) accept4$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710}, 0x10, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x69}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 693.451393ms ago: executing program 3 (id=2359): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8, 0x1, 0x0, 0x0, 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x1}}], 0x70, 0x20000000}, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000600)={0x4, 0x8}) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x6, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xfc, 0x0, 0xfe, 0x9, 0x200}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_SRC={0x8, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d7fe) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8, 0x7ff, @vifc_lcl_addr=@loopback, @empty}, 0x10) sendmsg$rds(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f00000004c0)=""/25, 0x19}, {&(0x7f0000000500)=""/47, 0x2f}], 0x6, 0x0, 0x0, 0x40800}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) close(0x3) 692.948517ms ago: executing program 1 (id=2361): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000005802000b00020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000019500000000000000bd0a060000000000a500f4fffcfffcff180000000600000000000000090007004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1019, &(0x7f0000000840)=""/4121, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 692.750963ms ago: executing program 3 (id=2362): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009002700feff060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10100, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0xc0) 676.725252ms ago: executing program 1 (id=2363): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0xc, 0x4e21, 0x2d, 0x2, 0x20, 0x80, 0x2b, 0x0, r2}, {0x1296, 0x80000001, 0x2, 0x8000000000000001, 0x100, 0x6, 0x2, 0x8}, {0x1, 0x7, 0x26}, 0x7, 0x6e6bc0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x3501, 0x0, 0x0, 0x2, 0x9, 0x5e52}}, 0xe8) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x20000804}, 0x48011) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x34, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x20, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @NFTA_CT_HELPER_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x1}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (rerun: 64) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000500)={'HL\x00'}, &(0x7f0000000540)=0x1e) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6(0xa, 0x2, 0x5) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000580), &(0x7f00000005c0)=0xe) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000600)={0x0, 0x8, [0x3, 0x1, 0x80000001, 0xff00, 0x8001, 0x5]}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0xc014) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffff2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d00)={'syztnl2\x00', &(0x7f0000000c80)={'ip6_vti0\x00', r1, 0x1604b22e618ca666, 0x5, 0x5, 0x2, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x80, 0x3, 0x63c00000}}) (async) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001dc0)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@func={0x3, 0x0, 0x0, 0xc, 0x3}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x1}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0xc, 0x80000000}, {0xb, 0x2}, {0xa, 0x101}, {0x4, 0x3}, {0xe, 0x6}]}]}, {0x0, [0x5f, 0x71, 0x30, 0x5f]}}, &(0x7f0000000dc0)=""/4096, 0x6a, 0x1000, 0x1, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3e, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb40d, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x3, 0xf8c5db15ae0b9ca2, 0x6, 0x1, 0x4, 0x4}, @ldst={0x2, 0x1, 0x3, 0x8, 0x6, 0x6}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @exit, @map_val={0x18, 0xe, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x8a}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='syzkaller\x00', 0xfff, 0x43, &(0x7f0000000c00)=""/67, 0x41000, 0x22, '\x00', r12, 0x0, r13, 0x8, &(0x7f0000001e00)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001e40)=[{0x4, 0x3, 0xc}, {0x4, 0x4, 0x1, 0x5}, {0x1, 0x5, 0x5, 0x3}], 0x10, 0x1}, 0x94) (async) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f0000001f40)={0x3eb, 0x2}) (async) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe0d2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x78}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42844}, 0x0) (async) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000002080)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x81, 0x6, 0x7, 0x8, 0x40, 0xe, 0x2}, &(0x7f0000002140)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000002180)={r15, 0x71a}, &(0x7f00000021c0)=0x8) (async, rerun: 64) connect$pppoe(r6, &(0x7f0000002200)={0x18, 0x0, {0x3, @broadcast, 'macvtap0\x00'}}, 0x1e) (async, rerun: 64) splice(r3, &(0x7f0000002240)=0x5, r14, &(0x7f0000002280)=0x4, 0x40, 0xc) 676.529755ms ago: executing program 2 (id=2364): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x40000, 0x40, 0xcc84, 0x100, 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x8000000000000000, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x18, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x46, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 674.933407ms ago: executing program 3 (id=2365): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x1, 0x0, 0x0, 0x3, 0x9, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0xfffffff8, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'team_slave_1\x00', 0x8000}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'macvlan1\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40040) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x63, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000002400000008001b00000000000800040000050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x3000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) 620.437974ms ago: executing program 1 (id=2366): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb8c}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}}, 0x24000840) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7f}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9f223785b5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000400)={0x7, 'wlan1\x00', {0x9}, 0x5}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40084) listen(0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) accept4$alg(r7, 0x0, 0x0, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e", @ANYBLOB="f616675411cebfad0f2315d3c7447fc15eff4fa73074741b5f8061729e84ae5035aa7675c1b16aae10d1c9b1ec0ae523d54febdafaf702e1761e65c4e3d9034b228f30486ec7f270f941e378cf1d2d2be5005a0e4570265d5fb92e5599994a551517858b4c6f31ba87bcf225eeeb7a0c7c7ba27b445b8b80476c09c9adc06c42c78b024a890b32495689eba888678a963b554cd529947b28454e51232397c5ad46d2bca05a41dcfd1dada57523af3cd32d2bdb119b88b5f7e92d9ed78af44ba29b84b8c84e639b6212ba2b66674c8cd4c3907f8644203bc728147f8b", @ANYRESDEC=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 603.264838ms ago: executing program 2 (id=2367): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000000)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x3, 0xa, 0x60, 0x20, 0x1}, {0x8000, 0x100000001, 0x0, 0x8, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff8, 0x5}, {0x6, 0x885, 0x27, 0x1}, 0x3, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3506, 0x1, 0x0, 0x8, 0x5, 0xc2b5, 0x7}}, 0xe8) close(0x3) 462.474243ms ago: executing program 2 (id=2368): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x9) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x10100, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 332.193596ms ago: executing program 2 (id=2369): r0 = socket(0x2b, 0x1, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r1, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000400)={0x1f, @none}, 0x8) listen(r2, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/183, 0xb7}], 0x2}, 0x2000) (async) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/183, 0xb7}], 0x2}, 0x2000) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x52, &(0x7f0000000440)={&(0x7f0000000200)={0x64, r4, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xffffffff}}}]}, 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000080)="377a5ec8", 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaac90fe8ea87986dd667e0010004a2ffffc020000000000000000000000000001ff0200000000000000000000000000010c206558000000030cff0700000703ff08"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000), 0x4) 293.997632ms ago: executing program 3 (id=2370): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c0007000000000000000000080009007100000007"], 0x54}}, 0x0) 282.13888ms ago: executing program 2 (id=2371): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000300)=0xb000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 174.94261ms ago: executing program 0 (id=2372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b8008"], 0x184}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b8008"], 0x184}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200), 0xc, &(0x7f0000000540)={&(0x7f0000000c00)={0xa30, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xe8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x6}, {0x6, 0xa}, {0x4, 0x9}, {0x1}, {0x6, 0x3}, {}, {0x0, 0x7}, {0x6, 0x2}, {0x4, 0x2}, {0x6}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x7}, {0x4, 0xa}, {0x4, 0x1}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x7}, {0x5, 0x5}, {0x3}, {0x1, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x4}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xfff3, 0x6, 0xfff9, 0x9, 0x0, 0x2, 0x81]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x1b, 0x4, 0x12, 0x2, 0x36, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x54, 0x2, 0xd3, 0xb6a, 0x1, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0x9, 0x1, 0x6, 0xe, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa9f, 0x5, 0x401, 0xa608, 0x70, 0x5, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xf, 0x5, 0xf4, 0x7ff, 0x8000, 0xff, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x330, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x826b, 0x7ff, 0x40, 0x8, 0x6, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x9, 0x5, 0x4, 0x36, 0x4, 0xc, 0x30, 0x36, 0x3, 0x4, 0xc, 0xc, 0x4, 0x12, 0xb, 0x12, 0x49, 0x6f, 0x3, 0xc, 0x1b, 0x1, 0x3, 0x5, 0x6c, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x1}, {0x2, 0x9}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x5, 0x5}, {0x6, 0x8}, {0x4, 0x5}, {0x4, 0x1b}, {0x5, 0x3}, {0x7, 0x7}, {0x1, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x3, 0x48, 0x6, 0x9, 0x30, 0x9, 0x18, 0x1, 0x6c, 0x1b, 0x0, 0x2, 0x48, 0x43, 0x60, 0x36, 0xc, 0x48, 0x24, 0x16, 0x1c, 0x12, 0x0, 0x16, 0x0, 0x48, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2d322d8f6198da5c, 0xac741e41135b1897, 0x60, 0x48, 0x1b, 0x60, 0x1b, 0x18, 0x36, 0x1b, 0x16, 0x1b, 0xc, 0x30, 0x2a, 0x24, 0x30, 0x6c, 0x12, 0x60, 0x1, 0x3d, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1000, 0x3, 0xa5, 0xc212, 0x6, 0xfff, 0xe]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7f, 0x101, 0xf1fb, 0x1, 0x4, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x3, 0x8, 0xd94, 0x6, 0x9, 0x4]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0xa}, {0x4, 0x4}, {0x5, 0x6}, {0x4, 0x5}, {0x7, 0xa}, {0x4, 0x3}, {0x2}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x3, 0x9}, {0x6, 0x9}, {0x4, 0x12}, {0x6, 0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x7, 0x3}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x5, 0x1}, {0x4, 0x5}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x1}, {0x7, 0x3}, {0x4, 0x6}, {0x2, 0x5}, {0x3}, {0x0, 0xa}, {0x4, 0x8}, {0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x4, 0x401, 0x7, 0xa, 0x4, 0x5e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x3, 0x101, 0xb, 0x8, 0x7, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x8, 0xd, 0x81, 0x6, 0x4c6, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x6, 0x401, 0x1000, 0xe, 0xfd7d, 0xae]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x6}, {0x4}, {0x4, 0x5}, {0x6, 0x9}, {0x1}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x7, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x3, 0x3}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0x3}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x5, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x3, 0x4}, {0x1}, {0x2, 0x5}, {0x3, 0x9}, {0x4}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x6, 0xa}, {0x1}, {0x3, 0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x2, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x0, 0x1}, {0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0xa}, {0x2, 0x1}, {0x0, 0xa}, {}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x5, 0x7}, {0x4, 0x5}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x5, 0xa}, {0x1, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x3, 0x4}, {0x4, 0x8}, {0x4, 0x9}, {0x3, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x6, 0x5}, {0x6, 0x7}, {0x0, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8001, 0x7, 0x4, 0x8, 0x3, 0x401, 0x1]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x4, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x4, 0xa}, {0x2, 0xa}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {0x5, 0x4}, {0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x4}, {0x7, 0x2}, {0x6, 0x6}, {0x7, 0x5}, {0x4}, {0x7, 0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x101, 0x1, 0xfec8, 0x1, 0xfff]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x3}, {0x2}, {0x5, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x8}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x101, 0x7, 0x4000, 0x0, 0xe, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x5, 0x0, 0x6, 0x8, 0x70, 0xa, 0x6]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x4}, {0x7}, {0x3}, {0x2, 0x7}, {0x5, 0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x6, 0x3}, {0x6, 0x7}, {0x4, 0x7}, {0x2, 0x2}, {0x1, 0x1}, {0x3, 0x2}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xe69eb7dab6447e48, 0x5, 0x1, 0x30, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0xc, 0xc, 0x5, 0x16, 0x60, 0x12, 0x4, 0xb, 0x46, 0x6c, 0x9, 0x60, 0x5, 0x36, 0x24, 0x6c, 0x12, 0x6c, 0x6c, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x200, 0x0, 0x0, 0x4, 0xd, 0x5, 0x5ba]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x12, 0x24, 0x48, 0x16, 0x9, 0x16, 0x30, 0x16, 0x1, 0x4, 0xc, 0x24, 0x30, 0x2, 0x5, 0x6c, 0x2, 0x36, 0xc, 0x3, 0x18, 0x6c, 0x6, 0x36, 0x9, 0x3, 0x48, 0x2, 0x8d2d11ad2106ad48, 0x6]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x6}, {0x3, 0x1}, {0x1, 0x7}, {0x5}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x1}, {0x6, 0x8}, {0x2, 0x1}, {0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x6}, {0x2, 0x1}, {0x4, 0x6}, {0x2, 0x2}, {0x7, 0x8}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x2}, {0x5, 0x5}, {0x5, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {0x2, 0x8}, {0x3, 0x2}, {0x7, 0x7}, {0x2, 0x4}, {0x2}, {0x6, 0x2}, {0x7}, {0x3, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x3, 0x8}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x3}, {0x7, 0x9}, {0x4, 0x8}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x45f, 0x9, 0x209, 0x254f, 0x1]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x36, 0x3, 0x36, 0xb, 0x5, 0x6c, 0x12, 0x6c, 0x2, 0x5, 0x2, 0xb, 0x9, 0x30, 0x6, 0x6, 0x60]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x9}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x5}, {0x7}, {0x3, 0x1}, {0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x5}, {0x5, 0x6}, {0x2, 0x5}, {0x1}, {0x0, 0x1}, {0x7, 0xa}, {0x6, 0x2}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0xa}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x7}, {0x6, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1181, 0x9, 0x2, 0x379c, 0x5, 0x616, 0xa, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x0, 0x48, 0x36, 0x48, 0x9, 0x16, 0x12, 0x9, 0x9, 0xb, 0x1a, 0xd, 0x16, 0x58]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x1}, {0x2, 0x2}, {0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x6, 0x8001, 0x8, 0x3, 0xd, 0x9a, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x1, 0x80, 0xfc00, 0x7, 0xff70, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x9}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x4}, {0x4}, {0x7}, {0x4, 0x2}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x7}, {0x5, 0x3}, {0x5, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x3, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x4, 0x5}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0x2}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xe012, 0x5, 0x1, 0xfffd, 0x10, 0x4, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xffff, 0xf, 0x4, 0x8, 0x8, 0xd, 0x33]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x12, 0x5, 0x18, 0x24, 0x9, 0x24, 0x3, 0x60, 0xc, 0x48, 0x12, 0xc, 0xc, 0x2, 0x1b, 0x6, 0x1b, 0x0, 0x4, 0x16, 0x2, 0x30, 0xc]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x3}, {0x4, 0x3}, {0x3, 0x4}, {0x7, 0x2}, {0x6}, {0x3, 0x6}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0xa}, {0x3, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x6}, {0x3}, {}, {0x1, 0x5}, {0x5, 0x3}, {0x6, 0xa}, {0x4, 0xa}, {0x7, 0x9}, {0x6, 0xa}, {0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x2}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x5}, {0x3, 0x6}, {0x7}, {0x4, 0x7}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xda6, 0x7, 0x5, 0x8, 0xfffc, 0x8376, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x4}, {0x3, 0x8}, {0x6, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x5}, {0x6, 0x6}, {0x6, 0xa}, {0x2, 0x4}, {0x4}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0xa}, {0x6, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x3}, {0x6, 0x7}, {0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x1d}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x3}, {0x7}, {0x1, 0x9}, {0x6}, {0x1}, {0x2, 0x9}, {0x4, 0x8}, {}, {0x5, 0x1}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x30c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x1}, {0x2, 0x1}, {0x1, 0x6}, {0x4, 0x5}, {0x3, 0x9}, {0x1, 0x8}, {}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0x8}, {0x4, 0x4}, {0x7, 0x4}, {0x7, 0x2}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x1}, {0x2, 0x2}, {0x3}, {0x7, 0x7}, {0x3, 0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x4, 0x6}, {0x6}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x7, 0x9}, {0x7, 0x8}, {0x5, 0x8}, {0x7, 0x8}, {0x2, 0x8}, {0x3, 0x1}, {0x7}, {0x0, 0x8}, {0x5}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0xc}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x36, 0xc, 0x36, 0x1b, 0xc, 0x1, 0x1, 0xc, 0x36, 0x1b, 0x3, 0x30, 0xb, 0x2, 0x1b, 0xb, 0x36, 0x0, 0x3, 0x6, 0x5, 0x78, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2}, {0x7, 0x3}, {0x3}, {}, {0x0, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {}, {0x7, 0x8}, {0x7, 0x3}, {0x5}, {0x4}, {0x0, 0xa}, {}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x7}, {0x4, 0x2}, {0x7, 0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x7, 0xa}, {0x4, 0xa}, {0x6, 0x6}, {0x6, 0x9}, {0x4, 0x9}, {0x5, 0x9}, {0x5, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x7, 0x4}, {0x7}, {0x1, 0x1}, {0x4}, {0x7}, {0x5, 0x9}, {0x3, 0x9}, {0x2}, {0x4, 0x9}, {0x1}, {0x0, 0x5}, {0x3, 0x6}, {0x6, 0xa}, {0x3, 0x9}, {0x1, 0x4}, {0x4, 0x8}, {0x6, 0x3}, {0x3}, {0x7, 0x6}, {0x0, 0x3}, {0x3, 0x4}, {0x2, 0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x5}, {}, {0x7, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {0x5, 0x5}, {0x4, 0x3}, {0x5, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x2, 0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x2, 0xa}, {0x3, 0x6}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x3, 0x9}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x7, 0xd405, 0x40, 0x3, 0x6e, 0x8000]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0xe9db, 0x9, 0x3, 0x400, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1000, 0xb8ec, 0xffff, 0x1, 0x10, 0x0, 0xf801]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x18, 0x5, 0xb, 0x9, 0x6c, 0xc, 0x9, 0x36, 0x24, 0x5, 0x48, 0x7e, 0x18, 0x36, 0x16, 0x2, 0x18, 0xb, 0xb, 0x2, 0x6c, 0x0, 0x1e, 0x1, 0x1, 0x9, 0x30, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x4}, {0x2}, {0x3, 0x8}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x3}, {0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x731, 0x10, 0x2, 0xfff9, 0x9, 0x7, 0xc, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x6, 0x60, 0x2, 0x30, 0x24, 0x30, 0x6, 0x56, 0x24, 0x16, 0x12, 0x0, 0x0, 0x6c, 0x1, 0x4, 0x30, 0x1b, 0xc, 0x6c, 0x24, 0x48, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x2, 0x8, 0x3, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0xc, 0xb, 0x5, 0xc, 0x24, 0x9, 0x36, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0xf52f, 0x0, 0x2, 0x1ff, 0x88, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x20, 0x4, 0xffff, 0x5, 0x4, 0x1, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x3}, {0x1, 0x2}, {}, {0x3, 0x2}, {0x0, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x9}, {0x5, 0x9}, {0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x1}, {0x7, 0x5}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x4, 0x6}, {0x2, 0x6}, {0x7, 0x8}, {}, {0x4, 0x6}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x9}, {0x7, 0xa}, {0x3, 0x3}, {0x7, 0x4}, {0x0, 0x6}, {0x5}, {0x7, 0x7}, {0x6, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x5, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x3}, {0x5}, {0x3, 0x9}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x5}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x2, 0x4}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x3, 0x7}, {0x3, 0x9}]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0x4}, {0x3, 0x8}, {0x4, 0x8}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x7, 0x2}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xd62, 0x0, 0x7fff, 0x7, 0x4, 0x3, 0xa]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0xc, 0x60, 0x9, 0x9, 0x3, 0x2a, 0x5, 0x3, 0x48, 0x60, 0x48, 0x2, 0x24, 0x18, 0x4, 0x3, 0xb, 0x9, 0x16, 0x1]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x1d, 0x0, 0x3, 0x400, 0xfffd, 0x1, 0xc8f]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x9, 0x7fff, 0x600, 0x3, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0xa30}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000480)=[{&(0x7f0000000600)="3b010400000000420000000000000000b66a443625ffd5b6", 0x18}], 0x1, 0x4) (async) vmsplice(r7, &(0x7f0000000480)=[{&(0x7f0000000600)="3b010400000000420000000000000000b66a443625ffd5b6", 0x18}], 0x1, 0x4) r8 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0xfffffffc, 0xfffffffd, 0x7, 0x7}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0xfffffffc, 0xfffffffd, 0x7, 0x7}, 0x3c) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0xfffffffb}, 0x50) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 174.354281ms ago: executing program 1 (id=2373): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000006000b00020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000019500000000000000bd0a060000000000a500f4fffcfffcff180000000600000000000000090007004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1019, &(0x7f0000000840)=""/4121, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 103.291225ms ago: executing program 4 (id=2374): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x3, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r4, 0x1}, {0xffffffffffffffff, 0x502}, {r1, 0x4}], 0x3, 0x0, 0x0, 0x0) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e", 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x200005, 0xce, &(0x7f0000000740)=""/206, 0x0, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x4, 0x1, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffdffff, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x4}) accept(r0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x4, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) sendmsg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) socket$nl_netfilter(0x10, 0x3, 0xc) 88.517716ms ago: executing program 3 (id=2375): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) recvmsg$unix(r2, 0x0, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000100000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce98000000000000c6080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (rerun: 32) 828.143µs ago: executing program 1 (id=2376): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r0, 0x1, 0x4a, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x6, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYBLOB="b478e5160b3f51987da59c4667d9907faee8125b3ac43bd9441c9c21b6e64e89d7ed565440b7fc0a353653f8d5e94bb03b9062c2ae3d03277bff0b134bd8d545eb996f719abb721326d4c9f53962885f54a321ec8d"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) 0s ago: executing program 2 (id=2377): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0xfffffffffffffde1, 0x24000045) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ffff2ae3d84a31dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f0000002340)=ANY=[@ANYRESOCT=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) accept$inet6(r8, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r3, 0x111, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ': attribute type 7 has an invalid length. [ 148.105807][ T7992] netlink: 'syz.0.522': attribute type 8 has an invalid length. [ 148.114363][ T7992] netlink: 'syz.0.522': attribute type 6 has an invalid length. [ 148.114377][ T7976] syzkaller0: entered promiscuous mode [ 148.135567][ T7976] syzkaller0: entered allmulticast mode [ 148.220828][ T7997] xt_nat: multiple ranges no longer supported [ 148.591387][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'. [ 148.628581][ T8005] openvswitch: netlink: Invalid VLAN frame [ 149.807664][ T8013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.527'. [ 150.197042][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 150.229236][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 150.553578][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 150.625494][ T8061] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 150.987732][ T8066] netlink: 216 bytes leftover after parsing attributes in process `syz.3.540'. [ 151.331933][ T8038] IPVS: length: 132 != 8 [ 152.058032][ T8131] rdma_op ffff888029a559f0 conn xmit_rdma 0000000000000000 [ 152.174973][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 152.261752][ T8135] gre0: entered promiscuous mode [ 152.715603][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.558'. [ 152.727346][ T1846] block nbd3: Possible stuck request ffff888026948000: control (read@0,1024B). Runtime 30 seconds [ 152.741117][ T1846] block nbd3: Possible stuck request ffff888026948200: control (read@1024,1024B). Runtime 30 seconds [ 152.752959][ T1846] block nbd3: Possible stuck request ffff888026948400: control (read@2048,1024B). Runtime 30 seconds [ 152.763997][ T1846] block nbd3: Possible stuck request ffff888026948600: control (read@3072,1024B). Runtime 30 seconds [ 152.824022][ T8158] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.558'. [ 152.929644][ T8161] nbd9: detected capacity change from 0 to 63 [ 152.940726][ T5833] block nbd9: Receive control failed (result -104) [ 152.995045][ T8164] x_tables: duplicate underflow at hook 1 [ 153.063760][ T8172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'. [ 153.358467][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 153.367167][ C1] lec:lec_tx_timeout: lec0 [ 153.372219][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 153.482312][ T8192] validate_nla: 91 callbacks suppressed [ 153.482334][ T8192] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 153.507252][ T8192] !: entered promiscuous mode [ 153.510754][ T8198] netlink: 320 bytes leftover after parsing attributes in process `syz.4.573'. [ 153.708969][ T8202] nbd10: detected capacity change from 0 to 63 [ 153.721056][ T5833] block nbd10: Receive control failed (result -32) [ 153.740514][ T5837] block nbd10: Dead connection, failed to find a fallback [ 153.751421][ T5837] block nbd10: shutting down sockets [ 153.757034][ T5837] blk_print_req_error: 138 callbacks suppressed [ 153.757051][ T5837] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.775302][ T5837] buffer_io_error: 138 callbacks suppressed [ 153.775318][ T5837] Buffer I/O error on dev nbd10, logical block 0, async page read [ 153.810678][ T5837] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.828506][ T5837] Buffer I/O error on dev nbd10, logical block 1, async page read [ 153.836477][ T5837] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.850785][ T5837] Buffer I/O error on dev nbd10, logical block 2, async page read [ 153.858823][ T5837] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.868533][ T5837] Buffer I/O error on dev nbd10, logical block 3, async page read [ 153.876462][ T5837] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.886217][ T5837] Buffer I/O error on dev nbd10, logical block 0, async page read [ 153.894244][ T5837] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.900338][ T8210] nbd11: detected capacity change from 0 to 63 [ 153.905065][ T5837] Buffer I/O error on dev nbd10, logical block 1, async page read [ 153.918162][ T5837] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.928391][ T5837] Buffer I/O error on dev nbd10, logical block 2, async page read [ 153.936386][ T5837] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.946747][ T5837] Buffer I/O error on dev nbd10, logical block 3, async page read [ 153.971194][ T5837] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.002484][ T1755] block nbd4: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 30 seconds [ 154.013258][ T5837] Buffer I/O error on dev nbd10, logical block 0, async page read [ 154.013344][ T5837] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.013379][ T5837] Buffer I/O error on dev nbd10, logical block 1, async page read [ 154.014880][ T5837] ldm_validate_partition_table(): Disk read failed. [ 154.025642][ T1755] block nbd4: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 30 seconds [ 154.059441][ T1755] block nbd4: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 30 seconds [ 154.070916][ T1755] block nbd4: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 30 seconds [ 154.074889][ T5837] Dev nbd10: unable to read RDB block 0 [ 154.107805][ T5837] nbd10: unable to read partition table [ 154.117755][ T5837] ldm_validate_partition_table(): Disk read failed. [ 154.125052][ T5837] Dev nbd10: unable to read RDB block 0 [ 154.131675][ T5837] nbd10: unable to read partition table [ 154.139085][ T5833] block nbd11: Receive control failed (result -104) [ 154.258153][ T8220] syzkaller0: entered promiscuous mode [ 154.263960][ T8220] syzkaller0: entered allmulticast mode [ 154.273360][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'. [ 154.298858][ T8223] vlan2: entered allmulticast mode [ 154.304040][ T8223] team0: entered allmulticast mode [ 154.309876][ T8223] team_slave_0: entered allmulticast mode [ 154.315936][ T8223] team_slave_1: entered allmulticast mode [ 154.548943][ T8227] veth0_virt_wifi: entered promiscuous mode [ 154.557929][ T8227] veth0_virt_wifi: left promiscuous mode [ 154.600340][ T8234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.583'. [ 154.764621][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 154.888961][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 154.971209][ T8245] bond4: Unable to set down delay as MII monitoring is disabled [ 155.005721][ T8245] bond4 (unregistering): Released all slaves [ 155.013795][ T8250] netlink: 56 bytes leftover after parsing attributes in process `syz.3.588'. [ 155.059082][ T8255] nbd12: detected capacity change from 0 to 63 [ 155.071834][ T5833] block nbd12: Receive control failed (result -32) [ 155.087220][ T5837] block nbd12: Dead connection, failed to find a fallback [ 155.097327][ T8249] bond2: entered promiscuous mode [ 155.102933][ T8249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.139901][ T5837] block nbd12: shutting down sockets [ 155.146328][ T5837] ldm_validate_partition_table(): Disk read failed. [ 155.154635][ T5837] Dev nbd12: unable to read RDB block 0 [ 155.161485][ T5837] nbd12: unable to read partition table [ 155.171934][ T5837] ldm_validate_partition_table(): Disk read failed. [ 155.179307][ T5837] Dev nbd12: unable to read RDB block 0 [ 155.185568][ T5837] nbd12: unable to read partition table [ 155.489256][ T8269] nbd: socks must be embedded in a SOCK_ITEM attr [ 155.568260][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.575836][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.673179][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.832122][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.961792][ T8293] netlink: 'syz.4.599': attribute type 13 has an invalid length. [ 155.969855][ T8293] netlink: 'syz.4.599': attribute type 12 has an invalid length. [ 155.982801][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.037000][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.069464][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.128565][ T8299] netlink: 'syz.1.601': attribute type 29 has an invalid length. [ 156.313318][ T8300] netlink: 'syz.1.601': attribute type 29 has an invalid length. [ 156.340830][ T8306] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 156.679104][ T8324] gretap0: entered promiscuous mode [ 156.710916][ T8324] gretap0: left promiscuous mode [ 156.726448][ T8332] netlink: 'syz.0.609': attribute type 1 has an invalid length. [ 156.859668][ T8343] netlink: 'syz.2.612': attribute type 2 has an invalid length. [ 156.867374][ T8343] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 156.891079][ T8338] netlink: 'syz.2.612': attribute type 2 has an invalid length. [ 156.936965][ T8338] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 157.322404][ T8360] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 157.353541][ T8360] ip6erspan0: entered promiscuous mode [ 157.498006][ T8363] __nla_validate_parse: 186 callbacks suppressed [ 157.498027][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.618'. [ 157.718377][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 158.214737][ T8400] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 158.301890][ T8405] netlink: 56 bytes leftover after parsing attributes in process `syz.1.632'. [ 158.803180][ T8421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.635'. [ 158.815878][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 158.825948][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 158.945827][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 159.022241][ T8430] netlink: 5 bytes leftover after parsing attributes in process `syz.2.637'. [ 159.033995][ T8430] 0ªî{X¹¦: renamed from gretap0 [ 159.069121][ T8430] 0ªî{X¹¦: entered allmulticast mode [ 159.105099][ T8430] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 159.128452][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 159.136535][ C1] lec:lec_tx_timeout: lec0 [ 159.142596][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 159.259449][ T8438] nbd13: detected capacity change from 0 to 63 [ 159.276123][ T5833] block nbd13: Receive control failed (result -32) [ 159.291956][ T5837] block nbd13: Dead connection, failed to find a fallback [ 159.636963][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.647'. [ 159.716497][ T8463] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 159.726866][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 159.856127][ T8468] tipc: Can't bind to reserved service type 1 [ 159.865163][ T8468] netlink: 'syz.4.649': attribute type 39 has an invalid length. [ 159.918078][ T8471] netlink: 'syz.4.649': attribute type 5 has an invalid length. [ 160.608233][ T8489] syzkaller0: entered promiscuous mode [ 160.634339][ T8489] syzkaller0: entered allmulticast mode [ 160.659007][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.670295][ T8491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.689796][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.705325][ T8491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.777626][ T58] syzkaller0: tun_net_xmit 48 [ 162.847112][ T8522] __nla_validate_parse: 9 callbacks suppressed [ 162.847134][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 163.379331][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.668'. [ 163.393401][ T8551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.669'. [ 163.423552][ T8552] x_tables: duplicate underflow at hook 1 [ 163.441318][ T8552] Timeout policy `syz1' can only be used by L3 protocol number 8 [ 163.598652][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.846305][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.672'. [ 163.970369][ T8577] netlink: 'syz.2.675': attribute type 15 has an invalid length. [ 164.042618][ T8577] netlink: 'syz.2.675': attribute type 15 has an invalid length. [ 164.096125][ T8577] netlink: 'syz.2.675': attribute type 15 has an invalid length. [ 164.120237][ T8577] netlink: 'syz.2.675': attribute type 15 has an invalid length. [ 164.148951][ T8577] netlink: 'syz.2.675': attribute type 15 has an invalid length. [ 164.164804][ T8577] netlink: 'syz.2.675': attribute type 15 has an invalid length. [ 164.192914][ T8577] netlink: 'syz.2.675': attribute type 15 has an invalid length. [ 164.537306][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.680'. [ 164.677271][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.680'. [ 164.699251][ T8602] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.831029][ T8594] bond4: entered allmulticast mode [ 164.854133][ T8610] bond4: (slave dummy0): making interface the new active one [ 164.873552][ T8610] dummy0: entered allmulticast mode [ 164.879474][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 164.879523][ C1] lec:lec_tx_timeout: lec0 [ 164.888214][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 164.900324][ T8610] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 165.154950][ T8635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.686'. [ 165.563600][ T8669] validate_nla: 27 callbacks suppressed [ 165.563620][ T8669] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 165.586836][ T8669] netlink: 216 bytes leftover after parsing attributes in process `syz.1.695'. [ 165.609358][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.695'. [ 165.645859][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 165.843827][ T8678] xt_policy: neither incoming nor outgoing policy selected [ 166.613350][ T8707] syzkaller0: entered promiscuous mode [ 166.619551][ T8707] syzkaller0: entered allmulticast mode [ 166.641152][ T8710] nbd14: detected capacity change from 0 to 63 [ 166.662053][ T5833] block nbd14: Receive control failed (result -104) [ 166.918384][ T8733] netlink: 'syz.3.714': attribute type 9 has an invalid length. [ 167.032701][ T8737] syzkaller0: entered promiscuous mode [ 167.038270][ T8737] syzkaller0: entered allmulticast mode [ 167.413957][ T8748] vlan3: entered promiscuous mode [ 167.422108][ T8748] vlan3: entered allmulticast mode [ 167.427296][ T8748] geneve1: entered allmulticast mode [ 167.482419][ T8755] tipc: Started in network mode [ 167.487827][ T8755] tipc: Node identity 9e292a26037c, cluster identity 4711 [ 167.497405][ T8755] tipc: Enabled bearer , priority 0 [ 167.536591][ T8753] syzkaller0: entered promiscuous mode [ 167.548376][ T8753] syzkaller0: entered allmulticast mode [ 167.622896][ T8753] tipc: Resetting bearer [ 167.782524][ T8770] netlink: 'syz.2.723': attribute type 4 has an invalid length. [ 167.793906][ T8752] tipc: Resetting bearer [ 167.817980][ T8752] tipc: Disabling bearer [ 167.845630][ T8770] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 167.879359][ T8773] __nla_validate_parse: 11 callbacks suppressed [ 167.879382][ T8773] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.725'. [ 167.996676][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 168.009275][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 168.059808][ T8779] netlink: 64 bytes leftover after parsing attributes in process `syz.0.728'. [ 168.429354][ T8793] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.481704][ T8793] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 168.494932][ T8793] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 168.555596][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.730'. [ 168.793460][ T8807] atomic_op ffff8880538e7998 conn xmit_atomic 0000000000000000 [ 168.950036][ T8809] netlink: 52 bytes leftover after parsing attributes in process `syz.4.736'. [ 168.971108][ T8815] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 169.103546][ T8815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.219897][ T8818] bond1: (slave veth3): Enslaving as an active interface with a down link [ 169.614746][ T8839] syzkaller0: entered promiscuous mode [ 169.622627][ T8839] syzkaller0: entered allmulticast mode [ 169.639238][ T8837] netlink: 64 bytes leftover after parsing attributes in process `syz.3.743'. [ 169.875434][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 169.918472][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 169.926551][ C1] lec:lec_tx_timeout: lec0 [ 169.931567][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 169.982227][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 169.993515][ T8850] xt_hashlimit: max too large, truncated to 1048576 [ 170.300151][ T8867] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 170.376382][ T5833] Bluetooth: hci4: link tx timeout [ 170.382761][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.412325][ T8871] netlink: 56 bytes leftover after parsing attributes in process `syz.2.755'. [ 170.447339][ T8872] bridge_slave_0: left allmulticast mode [ 170.482979][ T8872] bridge_slave_0: left promiscuous mode [ 170.507615][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.527038][ T8872] bridge_slave_1: left allmulticast mode [ 170.536769][ T8872] bridge_slave_1: left promiscuous mode [ 170.543792][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.565381][ T8872] bond0: (slave bond_slave_0): Releasing backup interface [ 170.588229][ T8872] bond0: (slave bond_slave_1): Releasing backup interface [ 170.601974][ T8872] team_slave_0: left allmulticast mode [ 170.617943][ T8872] team0: Port device team_slave_0 removed [ 170.626619][ T8872] team_slave_1: left allmulticast mode [ 170.643318][ T8872] team0: Port device team_slave_1 removed [ 170.654478][ T8872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.261489][ T8919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.434466][ T8927] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 171.915749][ T8946] netlink: 'syz.0.776': attribute type 27 has an invalid length. [ 172.400952][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 173.722102][ T9012] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 173.772837][ T9012] bond1 (unregistering): Released all slaves [ 173.782125][ T9017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.850065][ T9018] __nla_validate_parse: 17 callbacks suppressed [ 173.850086][ T9018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'. [ 174.040987][ T9030] openvswitch: netlink: Missing valid actions attribute. [ 174.076046][ T9030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.258274][ T9049] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 174.757694][ T9063] Cannot find set identified by id 0 to match [ 174.938432][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 174.946581][ C1] lec:lec_tx_timeout: lec0 [ 174.951666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 175.443415][ T9050] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 175.461183][ T9052] netlink: 'syz.0.804': attribute type 14 has an invalid length. [ 175.486163][ T9053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 175.512592][ T9053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 175.557547][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 175.578606][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 175.589803][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 175.599310][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 175.653789][ T58] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.714036][ T9073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.810'. [ 175.822982][ T58] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.837274][ T58] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.847357][ T58] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.968319][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 176.132998][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 176.453125][ T9099] vlan4: entered allmulticast mode [ 176.472713][ T9099] bridge1: entered allmulticast mode [ 176.835162][ T9126] wg1: entered promiscuous mode [ 176.842295][ T9126] wg1: entered allmulticast mode [ 177.767611][ T9175] bond0: Error: Cannot enslave bond to itself. [ 179.958467][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 179.966588][ C1] lec:lec_tx_timeout: lec0 [ 179.971471][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 180.507475][ T9155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.676358][ T9217] netlink: 'syz.4.844': attribute type 10 has an invalid length. [ 180.720696][ T9217] team0: Device vxcan1 is of different type [ 180.768934][ T9220] __nla_validate_parse: 41 callbacks suppressed [ 180.768953][ T9220] netlink: 56 bytes leftover after parsing attributes in process `syz.2.846'. [ 180.849030][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 180.889188][ T9229] tipc: Started in network mode [ 180.894144][ T9229] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 180.951835][ T9229] tipc: Enabled bearer , priority 0 [ 181.063005][ T9229] batadv_slave_0: entered promiscuous mode [ 181.101916][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 181.132883][ T9225] batadv_slave_0: left promiscuous mode [ 181.518806][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 181.685690][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.856'. [ 181.991686][ T9290] netlink: 56 bytes leftover after parsing attributes in process `syz.4.862'. [ 182.016233][ T9] tipc: Node number set to 10005162 [ 182.196906][ T9303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 182.233672][ T9288] can: request_module (can-proto-4) failed. [ 182.450611][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 182.703680][ T9320] netlink: 'syz.3.866': attribute type 10 has an invalid length. [ 182.818641][ T1846] block nbd3: Possible stuck request ffff888026948000: control (read@0,1024B). Runtime 60 seconds [ 182.839126][ T1846] block nbd3: Possible stuck request ffff888026948200: control (read@1024,1024B). Runtime 60 seconds [ 182.850634][ T1846] block nbd3: Possible stuck request ffff888026948400: control (read@2048,1024B). Runtime 60 seconds [ 182.855570][ T9326] netlink: 152 bytes leftover after parsing attributes in process `syz.0.868'. [ 182.861779][ T1846] block nbd3: Possible stuck request ffff888026948600: control (read@3072,1024B). Runtime 60 seconds [ 182.954125][ T9325] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 183.090822][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.869'. [ 183.292651][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.873'. [ 183.334311][ T9344] netlink: 56 bytes leftover after parsing attributes in process `syz.3.874'. [ 183.408640][ T9346] tap0: tun_chr_ioctl cmd 1074025681 [ 183.441207][ T1846] block nbd9: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 30 seconds [ 183.452022][ T1846] block nbd9: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 30 seconds [ 183.463306][ T1846] block nbd9: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 30 seconds [ 183.474301][ T1846] block nbd9: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 30 seconds [ 183.747659][ T9362] IPv6: Can't replace route, no match found [ 183.941687][ T9374] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 184.080178][ T1755] block nbd11: Possible stuck request ffff888026ca8000: control (read@0,1024B). Runtime 30 seconds [ 184.091472][ T1755] block nbd11: Possible stuck request ffff888026ca8200: control (read@1024,1024B). Runtime 30 seconds [ 184.102702][ T1755] block nbd11: Possible stuck request ffff888026ca8400: control (read@2048,1024B). Runtime 30 seconds [ 184.115372][ T11] block nbd4: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 60 seconds [ 184.126176][ T1755] block nbd11: Possible stuck request ffff888026ca8600: control (read@3072,1024B). Runtime 30 seconds [ 184.137783][ T11] block nbd4: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 60 seconds [ 184.149388][ T11] block nbd4: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 60 seconds [ 184.160520][ T11] block nbd4: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 60 seconds [ 184.275797][ T1357] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 184.299951][ T796] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 184.307936][ T1357] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 184.386163][ T9384] syzkaller1: entered promiscuous mode [ 184.398346][ T9384] syzkaller1: entered allmulticast mode [ 184.408053][ T6250] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 184.565540][ T5833] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 184.954002][ T9413] netlink: 'syz.1.894': attribute type 6 has an invalid length. [ 184.978465][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 184.986518][ C1] lec:lec_tx_timeout: lec0 [ 184.991270][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 185.119706][ T796] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 185.639534][ T9442] netlink: 'syz.4.903': attribute type 8 has an invalid length. [ 185.830819][ T9456] __nla_validate_parse: 12 callbacks suppressed [ 185.830839][ T9456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.907'. [ 185.891380][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 185.951898][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 186.130610][ T9459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.372432][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 186.450415][ T9482] netlink: 56 bytes leftover after parsing attributes in process `syz.3.917'. [ 186.678078][ T9494] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 186.764255][ T9507] netlink: 'syz.1.922': attribute type 3 has an invalid length. [ 186.772232][ T9500] netlink: 'syz.0.921': attribute type 13 has an invalid length. [ 186.780197][ T9507] netlink: 'syz.1.922': attribute type 2 has an invalid length. [ 186.787873][ T9507] netlink: 'syz.1.922': attribute type 2 has an invalid length. [ 186.830022][ T9505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.919'. [ 186.969000][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.919'. [ 187.002382][ T9494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.069152][ T9487] bond2: entered allmulticast mode [ 187.094489][ T9494] bond2: (slave dummy0): making interface the new active one [ 187.108813][ T9522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.120595][ T9494] dummy0: entered allmulticast mode [ 187.127861][ T9494] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 187.246350][ T9534] netlink: 76 bytes leftover after parsing attributes in process `syz.0.927'. [ 187.446378][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 187.531249][ T9548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.931'. [ 187.636860][ T9548] team0: Device gtp0 is of different type [ 187.930328][ T9564] netlink: 'syz.0.935': attribute type 12 has an invalid length. [ 187.998639][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.054061][ T9566] openvswitch: netlink: Flow key attr not present in new flow. [ 188.216678][ T9570] batadv_slave_0: entered promiscuous mode [ 188.243492][ T9570] batman_adv: batadv0: Adding interface: macsec1 [ 188.257937][ T9570] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.283742][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.295616][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.313404][ T9570] batman_adv: batadv0: Interface activated: macsec1 [ 188.642431][ T9579] syzkaller0: entered promiscuous mode [ 188.664260][ T9579] syzkaller0: entered allmulticast mode [ 189.998436][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 190.006528][ C1] lec:lec_tx_timeout: lec0 [ 190.011403][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 190.534688][ T9621] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 190.983843][ T6239] hid-generic 0005:0006:5508.0001: item fetching failed at offset 0/1 [ 191.000836][ T6239] hid-generic 0005:0006:5508.0001: probe with driver hid-generic failed with error -22 [ 191.175604][ T9644] vlan2: entered promiscuous mode [ 191.221676][ T9649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.231862][ T9644] geneve1: entered promiscuous mode [ 191.237310][ T9644] vlan2: entered allmulticast mode [ 191.259595][ T9644] geneve1: entered allmulticast mode [ 191.357819][ T9656] __nla_validate_parse: 5 callbacks suppressed [ 191.357839][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.960'. [ 191.740649][ T9666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 191.931933][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.969'. [ 192.479428][ T9703] netlink: 3 bytes leftover after parsing attributes in process `syz.1.977'. [ 192.489510][ T9705] netlink: 'syz.0.978': attribute type 10 has an invalid length. [ 192.508788][ T9703] 0ªX¹¦À: renamed from caif0 [ 192.532131][ T9703] 0ªX¹¦À: entered allmulticast mode [ 192.542489][ T9703] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 192.558590][ T5833] Bluetooth: hci1: command 0x0401 tx timeout [ 192.566154][ T9709] netlink: 'syz.0.978': attribute type 10 has an invalid length. [ 192.583908][ T9705] bond4: (slave dummy0): Releasing active interface [ 192.594769][ T9705] dummy0: left allmulticast mode [ 192.624776][ T9705] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 192.653865][ T9705] team0: Failed to send options change via netlink (err -105) [ 192.675161][ T9705] team0: Port device dummy0 added [ 192.682795][ T9709] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 192.722026][ T9709] team0: Failed to send options change via netlink (err -105) [ 192.743678][ T9709] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 192.754222][ T9709] team0: Port device dummy0 removed [ 192.765506][ T9709] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 192.895175][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 192.919616][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 192.939213][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 192.967832][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 192.989079][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 193.008265][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 193.029098][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 193.657346][ T9767] gre0: left promiscuous mode [ 193.671405][ T9767] 0ªî{X¹¦: left allmulticast mode [ 193.778851][ T9767] ipvlan2: left promiscuous mode [ 193.805727][ T9767] xfrm1: left allmulticast mode [ 193.845680][ T9767] geneve2: left promiscuous mode [ 193.851421][ T9767] geneve2: left allmulticast mode [ 193.877165][ T9767] ip6gre1: left promiscuous mode [ 193.927606][ T9767] ip6gre1: left allmulticast mode [ 193.988955][ T9767] bond1: left promiscuous mode [ 194.005441][ T9767] bridge1: left promiscuous mode [ 194.145802][ T9767] bond2: left allmulticast mode [ 194.152852][ T9780] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 194.168557][ T9767] dummy0: left allmulticast mode [ 194.173889][ T9767] vlan2: left promiscuous mode [ 194.204084][ T9767] geneve1: left promiscuous mode [ 194.289551][ T9767] vlan2: left allmulticast mode [ 194.299891][ T9767] geneve1: left allmulticast mode [ 194.337801][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.344280][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.383538][ T9770] hsr_slave_0: left promiscuous mode [ 194.397251][ T9770] hsr_slave_1: left promiscuous mode [ 194.425207][ T1357] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.444181][ T1357] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 194.498004][ T9780] syz_tun: entered promiscuous mode [ 194.632598][ T9792] netlink: 'syz.1.999': attribute type 4 has an invalid length. [ 194.675283][ T9798] sctp: [Deprecated]: syz.4.1000 (pid 9798) Use of int in max_burst socket option. [ 194.675283][ T9798] Use struct sctp_assoc_value instead [ 194.691415][ T9786] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.699161][ T9786] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.933409][ T9786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.018472][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 195.025741][ T9786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.026516][ C1] lec:lec_tx_timeout: lec0 [ 195.038828][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 195.133003][ T9786] batman_adv: batadv0: Interface deactivated: macsec1 [ 195.153420][ T1357] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.162956][ T1357] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 195.173859][ T1357] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.182888][ T1357] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 195.259779][ T1357] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.269637][ T1357] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 195.281430][ T1357] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.290589][ T1357] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.301859][ T1357] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.310431][ T1357] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.441536][ T1357] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.451914][ T9819] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 195.463270][ T1357] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.485485][ T1357] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.508658][ T1357] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.583809][ T9826] xt_socket: unknown flags 0x50 [ 195.608641][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.658882][ T9828] FAULT_INJECTION: forcing a failure. [ 195.658882][ T9828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.672483][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.1.1007 Not tainted syzkaller #0 PREEMPT(full) [ 195.672512][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.672524][ T9828] Call Trace: [ 195.672533][ T9828] [ 195.672541][ T9828] dump_stack_lvl+0xe8/0x150 [ 195.672576][ T9828] should_fail_ex+0x412/0x560 [ 195.672605][ T9828] _copy_from_user+0x2d/0xb0 [ 195.672637][ T9828] __sys_bpf+0x229/0x950 [ 195.672671][ T9828] ? __pfx___sys_bpf+0x10/0x10 [ 195.672733][ T9828] ? ksys_write+0x242/0x270 [ 195.672757][ T9828] ? __pfx_ksys_write+0x10/0x10 [ 195.672786][ T9828] __x64_sys_bpf+0x7c/0x90 [ 195.672815][ T9828] do_syscall_64+0x14d/0xf80 [ 195.672845][ T9828] ? trace_irq_disable+0x3b/0x150 [ 195.672875][ T9828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.672896][ T9828] ? clear_bhb_loop+0x40/0x90 [ 195.672922][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.672941][ T9828] RIP: 0033:0x7ff39ed9c629 [ 195.672961][ T9828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.672979][ T9828] RSP: 002b:00007ff39cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.673001][ T9828] RAX: ffffffffffffffda RBX: 00007ff39f015fa0 RCX: 00007ff39ed9c629 [ 195.673016][ T9828] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 195.673029][ T9828] RBP: 00007ff39cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.673042][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.673054][ T9828] R13: 00007ff39f016038 R14: 00007ff39f015fa0 R15: 00007ffc50ea4218 [ 195.673086][ T9828] [ 196.649428][ T9844] __nla_validate_parse: 130 callbacks suppressed [ 196.649451][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 196.891658][ T1846] block nbd14: Possible stuck request ffff888026e28000: control (read@0,1024B). Runtime 30 seconds [ 196.906166][ T1846] block nbd14: Possible stuck request ffff888026e28200: control (read@1024,1024B). Runtime 30 seconds [ 196.917586][ T1846] block nbd14: Possible stuck request ffff888026e28400: control (read@2048,1024B). Runtime 30 seconds [ 196.929192][ T1846] block nbd14: Possible stuck request ffff888026e28600: control (read@3072,1024B). Runtime 30 seconds [ 196.968140][ T9854] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 197.079660][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1017'. [ 197.089999][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1017'. [ 197.924279][ T9809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.128734][ T9878] netlink: 'syz.2.1022': attribute type 10 has an invalid length. [ 198.184305][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 198.220741][ T9888] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1021'. [ 198.759408][ T9911] netlink: 'syz.0.1028': attribute type 8 has an invalid length. [ 198.804424][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1030'. [ 198.810851][ T9911] nbd: nbd0 already in use [ 198.823773][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1030'. [ 198.980704][ T9919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1032'. [ 199.219046][ T9928] : entered promiscuous mode [ 199.387324][ T9936] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 199.636852][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 199.733949][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1042'. [ 199.860473][ T9948] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 199.925317][ T9948] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.067749][ T9944] bond6: (slave veth7): Enslaving as an active interface with a down link [ 200.120505][ T9962] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 200.154537][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 200.205468][ T9948] bond6: (slave batadv1): making interface the new active one [ 200.230129][ T9948] batadv1: entered promiscuous mode [ 200.235870][ T9948] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 200.533491][ T9981] netlink: 'syz.1.1048': attribute type 11 has an invalid length. [ 200.616580][ T9951] lec:lec_atm_close: lec0: Shut down! [ 200.647404][ T9987] netlink: 'syz.0.1049': attribute type 8 has an invalid length. [ 200.682549][ T9987] nbd: nbd0 already in use [ 201.192222][T10007] xfrm2: entered promiscuous mode [ 201.197344][T10007] xfrm2: entered allmulticast mode [ 201.257580][T10008] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 201.440864][T10012] netlink: 'syz.1.1059': attribute type 15 has an invalid length. [ 201.450253][T10012] bond0: option resend_igmp: invalid value (196616) [ 201.457316][T10012] bond0: option resend_igmp: allowed values 0 - 255 [ 202.201135][T10049] netlink: 'syz.3.1072': attribute type 8 has an invalid length. [ 202.233851][T10049] block nbd3: NBD_DISCONNECT [ 202.239285][T10049] block nbd3: Send disconnect failed -32 [ 202.253993][T10049] block nbd3: shutting down sockets [ 202.289922][ C1] blk_print_req_error: 286 callbacks suppressed [ 202.289954][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.305847][ C1] buffer_io_error: 286 callbacks suppressed [ 202.305867][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 202.319641][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.329182][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 202.337022][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.346574][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 202.354470][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.364008][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 202.388601][ T6485] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.406393][ T6485] Buffer I/O error on dev nbd3, logical block 0, async page read [ 202.415096][ T6485] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.426406][ T6485] Buffer I/O error on dev nbd3, logical block 1, async page read [ 202.453828][T10053] __nla_validate_parse: 12 callbacks suppressed [ 202.453850][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 202.459075][ T6485] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.502556][ T6485] Buffer I/O error on dev nbd3, logical block 2, async page read [ 202.520402][ T6485] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.540682][ T6485] Buffer I/O error on dev nbd3, logical block 3, async page read [ 202.557459][ T6485] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.599144][ T6485] Buffer I/O error on dev nbd3, logical block 0, async page read [ 202.607008][ T6485] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.658469][ T6485] Buffer I/O error on dev nbd3, logical block 1, async page read [ 202.693351][ T6485] ldm_validate_partition_table(): Disk read failed. [ 202.711386][ T6485] Dev nbd3: unable to read RDB block 0 [ 202.727437][T10059] netlink: 'syz.4.1076': attribute type 3 has an invalid length. [ 202.731093][ T6485] nbd3: unable to read partition table [ 202.742135][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1078'. [ 202.753176][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 202.774558][ T6485] ldm_validate_partition_table(): Disk read failed. [ 202.786972][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'. [ 202.804748][ T6485] Dev nbd3: unable to read RDB block 0 [ 202.820500][ T6485] nbd3: unable to read partition table [ 202.872865][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 202.900402][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 202.935506][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 202.980736][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 203.008608][T10059] netlink: 'syz.4.1076': attribute type 6 has an invalid length. [ 203.252617][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 203.402600][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 203.432014][T10096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.723241][T10116] netlink: 'syz.1.1094': attribute type 8 has an invalid length. [ 203.788995][T10116] block nbd1: NBD_DISCONNECT [ 203.808602][T10116] block nbd1: Send disconnect failed -32 [ 203.879976][T10123] ip6gretap0: entered promiscuous mode [ 203.902338][T10123] ip6gretap0: entered allmulticast mode [ 204.521869][T10159] netlink: 'syz.3.1107': attribute type 8 has an invalid length. [ 204.833564][T10167] syzkaller0: entered promiscuous mode [ 204.843501][T10167] syzkaller0: entered allmulticast mode [ 205.072501][T10179] caif0: entered allmulticast mode [ 205.081230][T10179] tipc: Started in network mode [ 205.086176][T10179] tipc: Node identity 4a4d9ce5c6da, cluster identity 4711 [ 205.093840][T10179] tipc: Enabled bearer , priority 0 [ 205.103976][T10180] netlink: 'syz.2.1113': attribute type 8 has an invalid length. [ 205.113252][T10176] netlink: 'syz.2.1113': attribute type 8 has an invalid length. [ 205.158478][T10178] tipc: Disabling bearer [ 205.336895][T10186] netlink: 'syz.2.1115': attribute type 12 has an invalid length. [ 205.377369][T10186] bond0: option primary_reselect: invalid value (8) [ 205.500576][T10193] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 205.550345][T10193] bond4 (unregistering): Released all slaves [ 205.736485][T10213] netlink: 'syz.1.1122': attribute type 49 has an invalid length. [ 206.029224][T10231] netlink: 'syz.0.1129': attribute type 2 has an invalid length. [ 206.073488][T10235] netlink: 'syz.3.1128': attribute type 8 has an invalid length. [ 206.454886][T10255] syzkaller0: entered promiscuous mode [ 206.460811][T10255] syzkaller0: entered allmulticast mode [ 206.936509][T10272] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 208.287978][T10296] wg1: entered promiscuous mode [ 208.293152][T10296] wg1: entered allmulticast mode [ 208.471584][T10307] netlink: 'syz.0.1149': attribute type 8 has an invalid length. [ 208.482995][T10307] block nbd0: NBD_DISCONNECT [ 208.487664][T10307] block nbd0: Send disconnect failed -32 [ 208.498782][T10309] __nla_validate_parse: 12 callbacks suppressed [ 208.498802][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1150'. [ 208.597067][T10319] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 208.666182][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 208.710813][T10309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.718206][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 208.769148][T10319] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 208.800575][T10327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.878187][T10327] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 208.940380][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 208.968565][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 209.037476][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 209.048414][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 209.056523][ C1] lec:lec_tx_timeout: lec0 [ 209.063538][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.121038][ T6250] IPVS: starting estimator thread 0... [ 209.216465][T10347] IPVS: using max 28 ests per chain, 67200 per kthread [ 209.258002][T10352] pim6reg1: entered promiscuous mode [ 209.265255][T10352] pim6reg1: entered allmulticast mode [ 209.377829][T10359] netlink: 'syz.0.1165': attribute type 8 has an invalid length. [ 209.551040][T10367] Bluetooth: MGMT ver 1.23 [ 209.564650][T10369] netlink: 'syz.0.1169': attribute type 1 has an invalid length. [ 209.849809][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 209.891797][T10382] netlink: 'syz.0.1171': attribute type 10 has an invalid length. [ 209.930924][T10382] team0: Device ipvlan1 failed to register rx_handler [ 209.958128][T10387] netlink: 'syz.2.1175': attribute type 6 has an invalid length. [ 209.976909][T10387] netlink: 'syz.2.1175': attribute type 5 has an invalid length. [ 210.138474][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 210.188737][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 210.385281][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1181'. [ 210.397613][T10398] netlink: 'syz.0.1179': attribute type 8 has an invalid length. [ 210.433728][T10403] syzkaller1: entered promiscuous mode [ 210.439531][T10403] syzkaller1: entered allmulticast mode [ 210.689003][T10419] bridge0: left allmulticast mode [ 210.732623][T10419] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 210.759132][T10419] xfrm1: left allmulticast mode [ 210.911420][ T58] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.937174][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.953709][ T58] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.966603][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.968916][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 211.004360][ T58] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.013691][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.023185][ T58] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.032617][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.309947][ T58] batadv1: left promiscuous mode [ 211.385457][T10446] netlink: 'syz.0.1192': attribute type 8 has an invalid length. [ 211.582624][T10455] netlink: 'syz.3.1194': attribute type 10 has an invalid length. [ 211.656748][T10455] team0: Port device dummy0 added [ 211.688165][T10456] netlink: 'syz.3.1194': attribute type 10 has an invalid length. [ 211.740084][T10456] team0: Port device dummy0 removed [ 211.758677][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 211.762822][ T5828] Bluetooth: hci1: command 0x0401 tx timeout [ 211.765058][ T5145] Bluetooth: hci3: command 0x0401 tx timeout [ 212.832366][T10512] netlink: 'syz.0.1205': attribute type 8 has an invalid length. [ 213.521787][ T1846] block nbd9: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 60 seconds [ 213.533071][T10542] ip6tnl4: entered allmulticast mode [ 213.546026][ T1846] block nbd9: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 60 seconds [ 213.557188][ T1846] block nbd9: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 60 seconds [ 213.568316][ T1846] block nbd9: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 60 seconds [ 213.743977][T10555] __nla_validate_parse: 7 callbacks suppressed [ 213.743995][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1218'. [ 213.806385][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 213.820678][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 213.871395][T10561] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1219'. [ 213.949649][T10565] tipc: Failed to remove unknown binding: 66,0,0/10005162:472494224/472494226 [ 213.987466][T10568] l24): entered promiscuous mode [ 214.041282][T10565] tipc: Failed to remove unknown binding: 66,0,0/10005162:472494224/472494225 [ 214.078456][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.086535][ C1] lec:lec_tx_timeout: lec0 [ 214.094979][T10565] tipc: Failed to remove unknown binding: 66,0,0/10005162:472494224/472494226 [ 214.153526][T10565] tipc: Failed to remove unknown binding: 66,0,0/10005162:472494224/472494225 [ 214.163310][ T1755] block nbd4: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 90 seconds [ 214.174167][ T1755] block nbd4: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 90 seconds [ 214.185994][ T11] block nbd11: Possible stuck request ffff888026ca8000: control (read@0,1024B). Runtime 60 seconds [ 214.196873][ T1755] block nbd4: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 90 seconds [ 214.207925][ T11] block nbd11: Possible stuck request ffff888026ca8200: control (read@1024,1024B). Runtime 60 seconds [ 214.219226][ T11] block nbd11: Possible stuck request ffff888026ca8400: control (read@2048,1024B). Runtime 60 seconds [ 214.230527][ T1755] block nbd4: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 90 seconds [ 214.241566][ T11] block nbd11: Possible stuck request ffff888026ca8600: control (read@3072,1024B). Runtime 60 seconds [ 214.259556][T10575] syzkaller1: entered promiscuous mode [ 214.274065][T10575] syzkaller1: entered allmulticast mode [ 214.300014][ T8087] lec:lec_start_xmit: lec0:No lecd attached [ 214.436758][T10578] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1225'. [ 214.575449][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 214.731635][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 214.762460][T10593] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1228'. [ 214.772986][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1228'. [ 214.904682][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 215.034322][T10601] bridge0: port 3(batadv2) entered blocking state [ 215.056474][T10601] bridge0: port 3(batadv2) entered disabled state [ 215.064254][T10601] batadv2: entered allmulticast mode [ 215.074762][T10601] batadv2: entered promiscuous mode [ 215.285150][T10617] validate_nla: 2 callbacks suppressed [ 215.285170][T10617] netlink: 'syz.4.1238': attribute type 8 has an invalid length. [ 215.354944][T10621] netlink: 'syz.2.1240': attribute type 10 has an invalid length. [ 215.508537][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 215.518646][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 216.386446][T10673] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 216.401192][T10673] netlink: 'syz.1.1257': attribute type 13 has an invalid length. [ 216.620213][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.653049][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.688585][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.714995][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.091503][T10698] netlink: 'syz.3.1264': attribute type 8 has an invalid length. [ 217.131671][T10700] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 217.216670][T10700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.237285][T10708] bond1: entered allmulticast mode [ 217.256296][T10700] bond1: (slave ip6gretap1): making interface the new active one [ 217.265321][T10700] ip6gretap1: entered allmulticast mode [ 217.274283][T10700] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 217.319656][T10709] geneve3: entered promiscuous mode [ 217.324912][T10709] geneve3: entered allmulticast mode [ 217.592912][T10723] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 217.605123][T10722] delete_channel: no stack [ 218.739630][T10773] netlink: 'syz.2.1289': attribute type 22 has an invalid length. [ 218.758329][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.768341][T10773] netlink: 'syz.2.1289': attribute type 22 has an invalid length. [ 218.776457][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.785594][T10773] __nla_validate_parse: 24 callbacks suppressed [ 218.785614][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 218.861565][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.870966][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.599679][T10816] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 219.672751][T10818] vlan3: entered promiscuous mode [ 219.677854][T10818] bridge0: entered promiscuous mode [ 219.782975][T10820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1303'. [ 219.887943][T10826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1306'. [ 219.918477][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5620 ms [ 219.926593][ C1] lec:lec_tx_timeout: lec0 [ 219.932870][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 219.963725][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 220.335748][T10850] x_tables: unsorted entry at hook 2 [ 220.599981][T10862] netlink: 'syz.0.1316': attribute type 21 has an invalid length. [ 220.620952][T10862] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.664813][T10862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.672268][T10862] IPv6: NLM_F_CREATE should be set when creating new route [ 220.679590][T10862] IPv6: NLM_F_CREATE should be set when creating new route [ 220.686967][T10862] IPv6: NLM_F_CREATE should be set when creating new route [ 220.863060][T10872] sctp: [Deprecated]: syz.0.1319 (pid 10872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.863060][T10872] Use struct sctp_sack_info instead [ 221.018950][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1323'. [ 221.070217][T10881] bond7: entered promiscuous mode [ 221.075323][T10881] bond7: entered allmulticast mode [ 221.081391][T10881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 221.147091][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 221.187996][T10887] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 221.289707][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1326'. [ 221.901304][T10929] unsupported nlmsg_type 40 [ 221.951426][T10929] netlink: 'syz.2.1335': attribute type 21 has an invalid length. [ 221.959495][T10929] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.967345][T10929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.974738][T10929] IPv6: NLM_F_CREATE should be set when creating new route [ 221.982150][T10929] IPv6: NLM_F_CREATE should be set when creating new route [ 221.989463][T10929] IPv6: NLM_F_CREATE should be set when creating new route [ 222.033184][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 222.240627][T10944] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 222.263804][T10945] netlink: 'syz.0.1341': attribute type 58 has an invalid length. [ 222.288728][T10945] caif0: left allmulticast mode [ 222.297154][T10948] xt_TCPMSS: Only works on TCP SYN packets [ 222.483153][T10956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.525296][T10956] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.565375][T10956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.660317][ T1086] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 222.676325][ T1086] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 222.704912][ T1086] bond0: now running without any active interface! [ 223.276616][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1356'. [ 223.426759][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 223.951504][T11028] bond2 (unregistering): Released all slaves [ 224.109606][T11045] __nla_validate_parse: 1 callbacks suppressed [ 224.109629][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 224.283561][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 224.283604][T11054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1376'. [ 224.306878][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1376'. [ 224.336361][T11057] netlink: zone id is out of range [ 224.348716][T11057] netlink: zone id is out of range [ 224.354083][T11057] netlink: zone id is out of range [ 224.384905][T11057] netlink: zone id is out of range [ 224.408822][T11057] netlink: zone id is out of range [ 224.427649][T11057] netlink: zone id is out of range [ 224.446884][T11057] netlink: zone id is out of range [ 224.466918][T11057] netlink: zone id is out of range [ 224.887613][T11069] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.903926][T11069] bridge_slave_1: left allmulticast mode [ 224.910205][T11069] bridge_slave_1: left promiscuous mode [ 224.916090][T11069] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.926809][T11069] bond0: (slave bond_slave_0): Releasing backup interface [ 224.936656][T11069] bond0: (slave bond_slave_1): Releasing backup interface [ 224.947846][T11069] team0: Port device team_slave_0 removed [ 224.956264][T11069] team0: Port device team_slave_1 removed [ 224.958543][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.964671][T11069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.970140][ C1] lec:lec_tx_timeout: lec0 [ 224.983425][T11069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.996103][T11069] team0: Port device geneve0 removed [ 225.003389][T11069] vlan2: left allmulticast mode [ 225.008301][T11069] bridge_slave_0: left allmulticast mode [ 225.014731][T11069] vlan2: left promiscuous mode [ 225.019813][T11069] bridge_slave_0: left promiscuous mode [ 225.025909][T11069] bridge0: port 3(vlan2) entered disabled state [ 225.045583][T11069] bond1: (slave ip6gretap1): Releasing active interface [ 225.052728][T11069] ip6gretap1: left allmulticast mode [ 225.156222][T11075] ipvlan2: entered promiscuous mode [ 225.229747][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1386'. [ 225.243056][T11084] bridge_slave_1: left allmulticast mode [ 225.258715][T11084] bridge_slave_1: left promiscuous mode [ 225.270993][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.316188][T11084] bridge_slave_0: left allmulticast mode [ 225.324511][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 225.340283][T11084] bridge_slave_0: left promiscuous mode [ 225.346125][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.372681][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 225.769341][T11112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1394'. [ 226.230856][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 226.638646][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 226.940561][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 226.960989][ T1846] block nbd14: Possible stuck request ffff888026e28000: control (read@0,1024B). Runtime 60 seconds [ 226.971810][ T1846] block nbd14: Possible stuck request ffff888026e28200: control (read@1024,1024B). Runtime 60 seconds [ 226.982850][ T1846] block nbd14: Possible stuck request ffff888026e28400: control (read@2048,1024B). Runtime 60 seconds [ 226.993871][ T1846] block nbd14: Possible stuck request ffff888026e28600: control (read@3072,1024B). Runtime 60 seconds [ 228.097935][T11162] IPVS: length: 24 != 12312 [ 228.787880][T11205] vlan5: entered allmulticast mode [ 228.793281][T11205] gretap0: entered allmulticast mode [ 228.970719][T11215] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.716229][T11246] __nla_validate_parse: 6 callbacks suppressed [ 229.716250][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 229.885903][T11254] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 229.916271][T11254] netlink: 'syz.0.1427': attribute type 3 has an invalid length. [ 229.974293][T11254] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 230.025370][T11262] raw_sendmsg: syz.3.1429 forgot to set AF_INET. Fix it! [ 230.043827][T11254] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1427'. [ 230.136888][T11265] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1430'. [ 230.168969][T11254] syzkaller0: entered promiscuous mode [ 230.174700][T11254] syzkaller0: entered allmulticast mode [ 231.918440][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 231.926543][ C1] lec:lec_tx_timeout: lec0 [ 231.932110][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 231.960984][T11299] syzkaller0: entered promiscuous mode [ 231.966523][T11299] syzkaller0: entered allmulticast mode [ 232.239986][T11302] geneve2: entered promiscuous mode [ 232.247003][T11302] geneve2: entered allmulticast mode [ 232.509098][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1447'. [ 232.593600][T11333] netlink: 'syz.0.1448': attribute type 2 has an invalid length. [ 232.920979][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'. [ 232.944202][T11353] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1452'. [ 233.130973][T11364] IPVS: length: 154 != 24 [ 233.270669][T11366] bridge0: port 1(batadv1) entered blocking state [ 233.288320][T11366] bridge0: port 1(batadv1) entered disabled state [ 233.296053][T11366] batadv1: entered allmulticast mode [ 233.310610][T11366] batadv1: entered promiscuous mode [ 233.380329][T11378] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1457'. [ 233.445202][T11368] netlink: 'syz.2.1457': attribute type 2 has an invalid length. [ 233.515488][T11368] netlink: 'syz.2.1457': attribute type 9 has an invalid length. [ 233.549627][T11368] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1457'. [ 233.768794][ T1104] batman_adv: batadv1: IGMP Querier appeared [ 233.775289][ T1104] batman_adv: batadv1: MLD Querier appeared [ 234.041266][T11400] ÿ: renamed from bond_slave_0 [ 234.048095][T11420] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1469'. [ 234.162276][T11425] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 234.173491][T11423] netlink: 'syz.0.1467': attribute type 1 has an invalid length. [ 234.209530][T11425] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1470'. [ 234.349531][T11422] bond8 (unregistering): Released all slaves [ 234.777694][T11460] bond2: Removing last ns target with arp_interval on [ 235.055503][T11474] __nla_validate_parse: 6 callbacks suppressed [ 235.055524][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 235.087991][T11473] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1483'. [ 235.121767][T11439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1475'. [ 235.145042][T11477] smc: net device wlan0 applied user defined pnetid SYZ0 [ 235.330467][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 235.401369][T11482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1486'. [ 235.446200][T11489] FAULT_INJECTION: forcing a failure. [ 235.446200][T11489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.467267][T11489] CPU: 0 UID: 0 PID: 11489 Comm: syz.0.1488 Not tainted syzkaller #0 PREEMPT(full) [ 235.467297][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.467310][T11489] Call Trace: [ 235.467319][T11489] [ 235.467335][T11489] dump_stack_lvl+0xe8/0x150 [ 235.467369][T11489] should_fail_ex+0x412/0x560 [ 235.467398][T11489] _copy_to_user+0x31/0xb0 [ 235.467429][T11489] simple_read_from_buffer+0xe1/0x170 [ 235.467462][T11489] proc_fail_nth_read+0x1bb/0x230 [ 235.467492][T11489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.467523][T11489] ? rw_verify_area+0x2a6/0x4d0 [ 235.467542][T11489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.467571][T11489] vfs_read+0x20c/0xa70 [ 235.467590][T11489] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.467618][T11489] ? __pfx_vfs_read+0x10/0x10 [ 235.467635][T11489] ? data_sock_bind+0xa2/0x860 [ 235.467659][T11489] ? bpf_lsm_socket_bind+0x9/0x20 [ 235.467683][T11489] ? __sys_bind+0x306/0x410 [ 235.467710][T11489] ? __pfx___sys_bind+0x10/0x10 [ 235.467740][T11489] ksys_read+0x150/0x270 [ 235.467763][T11489] ? __pfx_ksys_read+0x10/0x10 [ 235.467794][T11489] do_syscall_64+0x14d/0xf80 [ 235.467824][T11489] ? trace_irq_disable+0x3b/0x150 [ 235.467852][T11489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.467872][T11489] ? clear_bhb_loop+0x40/0x90 [ 235.467897][T11489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.467917][T11489] RIP: 0033:0x7ff7e6f5cece [ 235.467937][T11489] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.467955][T11489] RSP: 002b:00007ff7e7e74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.467977][T11489] RAX: ffffffffffffffda RBX: 00007ff7e7e756c0 RCX: 00007ff7e6f5cece [ 235.467992][T11489] RDX: 000000000000000f RSI: 00007ff7e7e750a0 RDI: 0000000000000004 [ 235.468003][T11489] RBP: 00007ff7e7e75090 R08: 0000000000000000 R09: 0000000000000000 [ 235.468016][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.468027][T11489] R13: 00007ff7e7216038 R14: 00007ff7e7215fa0 R15: 00007ffe1a4487f8 [ 235.468059][T11489] [ 235.919278][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'. [ 235.955594][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1491'. [ 235.982369][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 236.045027][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 236.281329][T11517] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1495'. [ 236.411680][T11524] netlink: 'syz.0.1497': attribute type 13 has an invalid length. [ 236.431118][T11528] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 236.656912][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 236.840199][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1506'. [ 236.948428][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 236.956516][ C1] lec:lec_tx_timeout: lec0 [ 237.109743][T11563] tipc: Enabled bearer , priority 0 [ 237.119171][T11563] syzkaller0: entered promiscuous mode [ 237.124794][T11563] syzkaller0: entered allmulticast mode [ 237.150829][T11563] tipc: Resetting bearer [ 237.170090][T11563] net_ratelimit: 46 callbacks suppressed [ 237.170110][T11563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.199688][T11564] gtp0: entered promiscuous mode [ 237.218561][T11561] tipc: Resetting bearer [ 237.252324][T11561] tipc: Disabling bearer [ 237.442994][T11587] syzkaller1: entered promiscuous mode [ 237.448641][T11587] syzkaller1: entered allmulticast mode [ 238.604969][T11616] vlan5: entered promiscuous mode [ 238.631076][T11616] gretap0: entered promiscuous mode [ 238.699731][T11621] batadv0: entered promiscuous mode [ 238.705151][T11621] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 238.954788][T11639] vlan3: entered allmulticast mode [ 238.967257][T11639] dummy0: entered allmulticast mode [ 238.984253][T11644] vlan3: entered allmulticast mode [ 238.992123][T11644] dummy0: entered allmulticast mode [ 239.001720][T11639] netlink: 'syz.2.1534': attribute type 29 has an invalid length. [ 239.175800][T11649] netlink: 'syz.4.1539': attribute type 13 has an invalid length. [ 239.236004][T11647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.957397][T11690] bond0: (slave dummy0): Releasing backup interface [ 240.105282][T11695] netlink: 'syz.1.1552': attribute type 7 has an invalid length. [ 240.128641][T11695] netlink: 'syz.1.1552': attribute type 8 has an invalid length. [ 240.148514][T11695] netlink: 'syz.1.1552': attribute type 8 has an invalid length. [ 240.188833][T11695] netlink: 'syz.1.1552': attribute type 4 has an invalid length. [ 240.208539][T11695] netlink: 'syz.1.1552': attribute type 7 has an invalid length. [ 240.228933][T11695] __nla_validate_parse: 19 callbacks suppressed [ 240.228953][T11695] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.1552'. [ 240.284781][T11702] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 240.352249][T11701] tunl0: Caught tx_queue_len zero misconfig [ 240.358350][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1554'. [ 240.515299][T11711] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 240.712961][T11721] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1559'. [ 240.776923][T11721] syzkaller0: entered promiscuous mode [ 240.782890][T11721] syzkaller0: entered allmulticast mode [ 240.854400][T11728] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 240.969368][T11731] syzkaller1: entered promiscuous mode [ 240.978486][T11731] syzkaller1: entered allmulticast mode [ 241.474708][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1573'. [ 241.485264][T11767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1573'. [ 241.758530][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 241.810142][T11777] validate_nla: 8 callbacks suppressed [ 241.810161][T11777] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 241.858001][T11777] netlink: 'syz.2.1576': attribute type 3 has an invalid length. [ 241.874095][T11777] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 241.891987][T11777] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1576'. [ 242.294105][T11795] 8021q: VLANs not supported on 60ªX¹¦À [ 242.368893][T11800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1581'. [ 242.429564][T11800] SET target dimension over the limit! [ 242.648249][T11808] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1583'. [ 242.675780][T11808] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 242.858621][T11826] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1587'. [ 243.000554][T11833] team0: Caught tx_queue_len zero misconfig [ 243.204769][T11852] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 243.230541][T11850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1593'. [ 243.267794][T11852] netlink: 'syz.2.1594': attribute type 3 has an invalid length. [ 243.307339][T11852] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 243.611460][ T1846] block nbd9: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 90 seconds [ 243.622849][ T1846] block nbd9: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 90 seconds [ 243.634191][ T1846] block nbd9: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 90 seconds [ 243.645475][ T1846] block nbd9: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 90 seconds [ 243.929173][T11891] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 244.239208][ T1755] block nbd4: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 120 seconds [ 244.262250][ T11] block nbd11: Possible stuck request ffff888026ca8000: control (read@0,1024B). Runtime 90 seconds [ 244.273137][ T11] block nbd11: Possible stuck request ffff888026ca8200: control (read@1024,1024B). Runtime 90 seconds [ 244.284282][ T1755] block nbd4: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 120 seconds [ 244.295365][ T11] block nbd11: Possible stuck request ffff888026ca8400: control (read@2048,1024B). Runtime 90 seconds [ 244.306505][ T1755] block nbd4: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 120 seconds [ 244.328941][ T11] block nbd11: Possible stuck request ffff888026ca8600: control (read@3072,1024B). Runtime 90 seconds [ 244.341073][ T1755] block nbd4: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 120 seconds [ 244.463661][T11924] geneve4: entered promiscuous mode [ 244.472213][T11414] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 244.480789][T11414] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 244.491288][T11414] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 244.499952][T11414] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 244.756206][T11935] 8021q: VLANs not supported on sit0 [ 244.768042][T11943] netlink: 'syz.4.1615': attribute type 1 has an invalid length. [ 244.776395][T11943] netlink: 'syz.4.1615': attribute type 3 has an invalid length. [ 244.808933][T11943] netlink: 'syz.4.1615': attribute type 1 has an invalid length. [ 245.807065][T12002] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 245.866072][T12006] __nla_validate_parse: 4 callbacks suppressed [ 245.866093][T12006] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1632'. [ 245.939038][T12002] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 246.012158][T12002] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 246.120978][T12002] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 246.142492][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 246.154231][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 246.351769][T11412] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.366281][T11412] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.483848][T12035] bond4: option xmit_hash_policy: invalid value (10) [ 246.499178][T12035] bond4 (unregistering): Released all slaves [ 246.567327][T12045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1641'. [ 246.576895][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1641'. [ 246.590920][T11415] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.608123][T11410] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.772095][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 246.792623][T12056] geneve3: entered promiscuous mode [ 246.800612][T11412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.809751][T11412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.828273][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 246.839505][T11412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.872986][T11412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.881849][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 246.881878][ C1] lec:lec_tx_timeout: lec0 [ 246.890183][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.959652][T12062] validate_nla: 4 callbacks suppressed [ 246.959671][T12062] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 246.975138][T12062] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1647'. [ 246.985583][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 247.211390][T12078] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 247.219439][T12078] netlink: 'syz.4.1654': attribute type 3 has an invalid length. [ 247.227307][T12078] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 247.235911][T12078] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1654'. [ 247.533116][T12101] trusted_key: syz.1.1655 sent an empty control message without MSG_MORE. [ 248.801772][T12164] syzkaller0: entered promiscuous mode [ 248.814437][T12164] syzkaller0: entered allmulticast mode [ 248.838659][T12166] lo: Caught tx_queue_len zero misconfig [ 248.847257][T12164] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 249.595142][T12188] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 249.822883][T12193] bond3: (slave bridge4): making interface the new active one [ 249.840263][T12193] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 250.129427][T12209] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 250.154349][T12212] Cannot find del_set index 1 as target [ 250.645207][T12240] netlink: zone id is out of range [ 250.655217][T12240] netlink: zone id is out of range [ 250.660533][T12240] netlink: zone id is out of range [ 250.666110][T12240] netlink: zone id is out of range [ 250.671443][T12240] netlink: zone id is out of range [ 250.677523][T12240] netlink: zone id is out of range [ 250.683090][T12240] netlink: zone id is out of range [ 251.115041][T12255] team0 (unregistering): Failed to send options change via netlink (err -105) [ 251.125745][T12263] IPv6: Can't replace route, no match found [ 251.169819][T12255] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 251.212165][T12255] team0 (unregistering): Port device team_slave_0 removed [ 251.226046][T12255] team0 (unregistering): Failed to send options change via netlink (err -105) [ 251.241870][T12255] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 251.256914][T12255] team0 (unregistering): Port device team_slave_1 removed [ 251.554649][T12280] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.585660][T12280] __nla_validate_parse: 26 callbacks suppressed [ 251.585680][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 251.610255][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 251.659932][T12280] netlink: 'syz.1.1708': attribute type 6 has an invalid length. [ 251.752871][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 251.777886][T11415] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.786480][T11415] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.798454][T11415] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.827045][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 251.858794][T11415] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.883422][T12280] netlink: 'syz.1.1708': attribute type 6 has an invalid length. [ 251.930027][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 251.938080][ C1] lec:lec_tx_timeout: lec0 [ 252.005129][T12308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1714'. [ 252.067862][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1715'. [ 252.158046][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1715'. [ 252.251512][T12316] netlink: 'syz.3.1716': attribute type 4 has an invalid length. [ 252.500260][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'. [ 252.514524][T12326] netlink: 'syz.0.1719': attribute type 30 has an invalid length. [ 252.550770][T11342] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.569988][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'. [ 252.588344][T11342] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.599117][T12326] netlink: 'syz.0.1719': attribute type 30 has an invalid length. [ 252.661187][T12334] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 252.882247][T11342] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.958200][T12342] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1723'. [ 252.967524][T11342] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.529047][T12363] unsupported nla_type 142 [ 254.446055][ T6250] hid-generic 0005:0006:5508.0002: item fetching failed at offset 0/1 [ 254.469921][ T6250] hid-generic 0005:0006:5508.0002: probe with driver hid-generic failed with error -22 [ 254.613289][T12424] netlink: 'syz.0.1750': attribute type 1 has an invalid length. [ 254.802338][T11413] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 255.762434][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.769021][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.777061][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 257.038911][ T1846] block nbd14: Possible stuck request ffff888026e28000: control (read@0,1024B). Runtime 90 seconds [ 257.049837][ T1846] block nbd14: Possible stuck request ffff888026e28200: control (read@1024,1024B). Runtime 90 seconds [ 257.061017][ T1846] block nbd14: Possible stuck request ffff888026e28400: control (read@2048,1024B). Runtime 90 seconds [ 257.072311][ T1846] block nbd14: Possible stuck request ffff888026e28600: control (read@3072,1024B). Runtime 90 seconds [ 257.593570][T12425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.796066][T12461] netlink: 'syz.1.1761': attribute type 21 has an invalid length. [ 257.814692][T12461] __nla_validate_parse: 9 callbacks suppressed [ 257.814710][T12461] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1761'. [ 257.834818][T12461] netlink: 'syz.1.1761': attribute type 4 has an invalid length. [ 257.843395][T12461] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1761'. [ 257.959712][T12476] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1763'. [ 258.099191][T12486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1769'. [ 258.151293][T12487] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1770'. [ 258.179044][T12493] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1772'. [ 258.228471][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 258.463842][T12505] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1775'. [ 258.494943][T12505] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1775'. [ 258.517667][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 258.531986][ T9] hid-generic 0005:0006:5508.0003: item fetching failed at offset 0/1 [ 258.545602][ T9] hid-generic 0005:0006:5508.0003: probe with driver hid-generic failed with error -22 [ 258.734956][T12529] IPVS: length: 113 != 8 [ 258.834538][T12521] syzkaller0: entered promiscuous mode [ 258.843903][T12534] netlink: 'syz.4.1784': attribute type 1 has an invalid length. [ 258.856091][T12521] syzkaller0: entered allmulticast mode [ 259.831434][ T6250] hid-generic 0005:0006:5508.0004: item fetching failed at offset 0/1 [ 259.841249][ T6250] hid-generic 0005:0006:5508.0004: probe with driver hid-generic failed with error -22 [ 260.880272][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 260.888400][ C1] lec:lec_tx_timeout: lec0 [ 261.082363][T12607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.089738][T12607] IPv6: NLM_F_CREATE should be set when creating new route [ 261.097005][T12607] IPv6: NLM_F_CREATE should be set when creating new route [ 261.119653][T12607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.316974][T12623] netlink: 'syz.2.1804': attribute type 21 has an invalid length. [ 261.518999][T12623] netlink: 'syz.2.1804': attribute type 6 has an invalid length. [ 261.907215][T12652] netlink: 'syz.4.1812': attribute type 2 has an invalid length. [ 261.925611][T12652] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 263.153199][T12716] __nla_validate_parse: 10 callbacks suppressed [ 263.153219][T12716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1827'. [ 263.179365][T12716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1827'. [ 263.385570][ T6250] hid-generic 0005:0006:5508.0005: item fetching failed at offset 0/1 [ 263.403990][ T6250] hid-generic 0005:0006:5508.0005: probe with driver hid-generic failed with error -22 [ 263.624743][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 263.645200][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 263.657608][T12745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1837'. [ 263.790943][T12751] openvswitch: netlink: IP tunnel dst address not specified [ 263.809071][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 263.819579][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 264.007518][T12760] geneve3: entered promiscuous mode [ 264.013131][T12760] geneve3: entered allmulticast mode [ 264.040574][ T6244] hid-generic 0005:0006:5508.0006: item fetching failed at offset 0/1 [ 264.058687][ T6244] hid-generic 0005:0006:5508.0006: probe with driver hid-generic failed with error -22 [ 264.340481][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1848'. [ 264.437828][T12782] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 264.552121][T12793] openvswitch: netlink: Flow key attr not present in new flow. [ 264.637675][ T6244] hid-generic 0005:0006:5508.0007: item fetching failed at offset 0/1 [ 264.647556][ T6244] hid-generic 0005:0006:5508.0007: probe with driver hid-generic failed with error -22 [ 264.880565][T12808] xt_hashlimit: size too large, truncated to 1048576 [ 264.887725][T12808] xt_hashlimit: max too large, truncated to 1048576 [ 264.941098][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1859'. [ 264.962134][T12808] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 265.161532][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 265.291385][T12825] netlink: 'syz.0.1866': attribute type 2 has an invalid length. [ 266.136520][T12876] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 266.193531][T12876] bond4: (slave bridge0): making interface the new active one [ 266.202442][T12876] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 266.572735][T12898] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 266.626007][ T30] audit: type=1800 audit(1771575614.604:2): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1882" name="cgroup.controllers" dev="tmpfs" ino=1811 res=0 errno=0 [ 266.721610][T12903] FAULT_INJECTION: forcing a failure. [ 266.721610][T12903] name failslab, interval 1, probability 0, space 0, times 0 [ 266.748652][T12903] CPU: 0 UID: 0 PID: 12903 Comm: syz.1.1891 Not tainted syzkaller #0 PREEMPT(full) [ 266.748682][T12903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.748708][T12903] Call Trace: [ 266.748716][T12903] [ 266.748725][T12903] dump_stack_lvl+0xe8/0x150 [ 266.748759][T12903] should_fail_ex+0x412/0x560 [ 266.748789][T12903] should_failslab+0xa8/0x100 [ 266.748817][T12903] __kmalloc_cache_noprof+0x88/0x660 [ 266.748840][T12903] ? xfrm_policy_alloc+0x78/0x2b0 [ 266.748886][T12903] xfrm_policy_alloc+0x78/0x2b0 [ 266.748918][T12903] xfrm_policy_construct+0x39/0x6b0 [ 266.748954][T12903] xfrm_add_policy+0x286/0x820 [ 266.748984][T12903] ? __pfx_xfrm_add_policy+0x10/0x10 [ 266.749003][T12903] ? apparmor_capable+0x137/0x1a0 [ 266.749038][T12903] ? __nla_parse+0x40/0x60 [ 266.749070][T12903] xfrm_user_rcv_msg+0x746/0xb20 [ 266.749099][T12903] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 266.749159][T12903] ? __pfx___mutex_trylock_common+0x10/0x10 [ 266.749195][T12903] ? rcu_is_watching+0x15/0xb0 [ 266.749222][T12903] ? trace_contention_end+0x3d/0x150 [ 266.749256][T12903] ? __mutex_lock+0x319/0x1300 [ 266.749295][T12903] netlink_rcv_skb+0x232/0x4b0 [ 266.749322][T12903] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 266.749345][T12903] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.749384][T12903] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.749407][T12903] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.749434][T12903] xfrm_netlink_rcv+0x79/0x90 [ 266.749455][T12903] netlink_unicast+0x80f/0x9b0 [ 266.749487][T12903] ? __pfx_netlink_unicast+0x10/0x10 [ 266.749511][T12903] ? netlink_sendmsg+0x650/0xb40 [ 266.749534][T12903] ? skb_put+0x11b/0x210 [ 266.749565][T12903] netlink_sendmsg+0x813/0xb40 [ 266.749600][T12903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.749629][T12903] ? aa_sock_msg_perm+0xf1/0x1b0 [ 266.749660][T12903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.749685][T12903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.749708][T12903] ____sys_sendmsg+0xa68/0xad0 [ 266.749747][T12903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.749788][T12903] ? import_iovec+0x73/0xa0 [ 266.749821][T12903] ___sys_sendmsg+0x2a5/0x360 [ 266.749857][T12903] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.749933][T12903] ? __fget_files+0x2a/0x420 [ 266.749961][T12903] ? __fget_files+0x3a0/0x420 [ 266.750000][T12903] __x64_sys_sendmsg+0x1bd/0x2a0 [ 266.750033][T12903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.750073][T12903] ? __pfx_ksys_write+0x10/0x10 [ 266.750106][T12903] do_syscall_64+0x14d/0xf80 [ 266.750136][T12903] ? trace_irq_disable+0x3b/0x150 [ 266.750166][T12903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.750188][T12903] ? clear_bhb_loop+0x40/0x90 [ 266.750213][T12903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.750233][T12903] RIP: 0033:0x7ff39ed9c629 [ 266.750254][T12903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.750271][T12903] RSP: 002b:00007ff39cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.750293][T12903] RAX: ffffffffffffffda RBX: 00007ff39f015fa0 RCX: 00007ff39ed9c629 [ 266.750309][T12903] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000008 [ 266.750322][T12903] RBP: 00007ff39cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 266.750335][T12903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.750347][T12903] R13: 00007ff39f016038 R14: 00007ff39f015fa0 R15: 00007ffc50ea4218 [ 266.750383][T12903] [ 267.386016][T12906] bond5 (unregistering): Released all slaves [ 267.925461][T12949] FAULT_INJECTION: forcing a failure. [ 267.925461][T12949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.942692][T12949] CPU: 0 UID: 0 PID: 12949 Comm: syz.0.1905 Not tainted syzkaller #0 PREEMPT(full) [ 267.942720][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.942734][T12949] Call Trace: [ 267.942742][T12949] [ 267.942751][T12949] dump_stack_lvl+0xe8/0x150 [ 267.942797][T12949] should_fail_ex+0x412/0x560 [ 267.942827][T12949] _copy_to_user+0x31/0xb0 [ 267.942860][T12949] simple_read_from_buffer+0xe1/0x170 [ 267.942894][T12949] proc_fail_nth_read+0x1bb/0x230 [ 267.942926][T12949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.942958][T12949] ? rw_verify_area+0x2a6/0x4d0 [ 267.942977][T12949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.943006][T12949] vfs_read+0x20c/0xa70 [ 267.943025][T12949] ? fdget_pos+0x246/0x320 [ 267.943058][T12949] ? __pfx___mutex_lock+0x10/0x10 [ 267.943091][T12949] ? __pfx_vfs_read+0x10/0x10 [ 267.943112][T12949] ? __fget_files+0x2a/0x420 [ 267.943145][T12949] ? __fget_files+0x3a0/0x420 [ 267.943172][T12949] ? __fget_files+0x2a/0x420 [ 267.943209][T12949] ksys_read+0x150/0x270 [ 267.943233][T12949] ? __pfx_ksys_read+0x10/0x10 [ 267.943265][T12949] do_syscall_64+0x14d/0xf80 [ 267.943295][T12949] ? trace_irq_disable+0x3b/0x150 [ 267.943325][T12949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.943346][T12949] ? clear_bhb_loop+0x40/0x90 [ 267.943372][T12949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.943398][T12949] RIP: 0033:0x7ff7e6f5cece [ 267.943418][T12949] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.943435][T12949] RSP: 002b:00007ff7e7e74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.943457][T12949] RAX: ffffffffffffffda RBX: 00007ff7e7e756c0 RCX: 00007ff7e6f5cece [ 267.943471][T12949] RDX: 000000000000000f RSI: 00007ff7e7e750a0 RDI: 000000000000000a [ 267.943483][T12949] RBP: 00007ff7e7e75090 R08: 0000000000000000 R09: 0000000000000000 [ 267.943495][T12949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.943506][T12949] R13: 00007ff7e7216038 R14: 00007ff7e7215fa0 R15: 00007ffe1a4487f8 [ 267.943540][T12949] [ 268.229427][T12951] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 268.339758][T12951] __nla_validate_parse: 7 callbacks suppressed [ 268.339779][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 268.373738][T12951] bond5 (unregistering): Released all slaves [ 268.461548][T12966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1910'. [ 268.654475][T12976] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.1914'. [ 268.836207][T12977] "syz.3.1913" (12977) uses obsolete ecb(arc4) skcipher [ 268.869949][ T30] audit: type=1107 audit(1771575616.844:3): pid=12988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 268.937426][T12993] syzkaller0: entered promiscuous mode [ 268.958745][T12993] syzkaller0: entered allmulticast mode [ 269.147176][T13004] IPv6: sit1: Disabled Multicast RS [ 269.169373][T13001] netlink: 'syz.2.1922': attribute type 12 has an invalid length. [ 269.187706][T13001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1922'. [ 269.289987][T13016] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1926'. [ 269.377870][T13025] netlink: 'syz.0.1927': attribute type 2 has an invalid length. [ 269.563298][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 269.586345][T13025] hmac(sha224): entered promiscuous mode [ 270.415885][ T6239] IPVS: starting estimator thread 0... [ 270.508530][T13046] IPVS: using max 38 ests per chain, 91200 per kthread [ 271.754900][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 271.764023][T13054] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1935'. [ 271.773530][T13054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1935'. [ 271.888808][T13059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1939'. [ 271.923744][ T6239] hid-generic 0005:0006:5508.0008: item fetching failed at offset 0/1 [ 271.939375][ T6239] hid-generic 0005:0006:5508.0008: probe with driver hid-generic failed with error -22 [ 272.193482][T13075] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 273.347767][T13131] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 273.690396][ T1846] block nbd9: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 120 seconds [ 273.706369][ T1846] block nbd9: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 120 seconds [ 273.711468][T13150] netlink: 'syz.0.1958': attribute type 3 has an invalid length. [ 273.719328][ T1846] block nbd9: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 120 seconds [ 273.736542][ T1846] block nbd9: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 120 seconds [ 273.790061][T13150] __nla_validate_parse: 5 callbacks suppressed [ 273.790081][T13150] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1958'. [ 273.821495][T13147] xt_limit: Overflow, try lower: 31324/2147483648 [ 273.863618][T13156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1962'. [ 274.283124][T13177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1968'. [ 274.300698][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 274.326447][ T1755] block nbd4: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 150 seconds [ 274.337687][ T1755] block nbd4: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 150 seconds [ 274.349055][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'. [ 274.358269][ T1755] block nbd4: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 150 seconds [ 274.370265][ T11] block nbd11: Possible stuck request ffff888026ca8000: control (read@0,1024B). Runtime 120 seconds [ 274.381376][ T11] block nbd11: Possible stuck request ffff888026ca8200: control (read@1024,1024B). Runtime 120 seconds [ 274.392544][ T11] block nbd11: Possible stuck request ffff888026ca8400: control (read@2048,1024B). Runtime 120 seconds [ 274.404027][ T1755] block nbd4: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 150 seconds [ 274.415324][ T11] block nbd11: Possible stuck request ffff888026ca8600: control (read@3072,1024B). Runtime 120 seconds [ 274.509270][T13189] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.627711][T13195] x_tables: duplicate entry at hook 1 [ 275.410477][T13227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.425423][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1983'. [ 275.446013][T13227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1983'. [ 275.500420][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1983'. [ 275.517295][T13227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1983'. [ 275.560710][T13232] netlink: 'syz.3.1984': attribute type 2 has an invalid length. [ 276.133924][T13261] bridge5: entered promiscuous mode [ 276.144053][T13261] bridge5: entered allmulticast mode [ 276.154182][T13261] team0: Port device bridge5 added [ 276.671970][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1997'. [ 277.640656][T13311] ip6gretap0: entered promiscuous mode [ 277.647714][T13311] ip6gretap0: left promiscuous mode [ 278.190225][ T8087] lec:lec_start_xmit: lec0:No lecd attached [ 278.834555][T13340] __nla_validate_parse: 2 callbacks suppressed [ 278.834576][T13340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2015'. [ 279.077287][T13346] netlink: 'syz.0.2016': attribute type 2 has an invalid length. [ 279.090776][T13346] wg1 speed is unknown, defaulting to 1000 [ 279.097244][T13346] wg1 speed is unknown, defaulting to 1000 [ 279.106966][T13346] wg1 speed is unknown, defaulting to 1000 [ 279.120431][T13346] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.147574][T13346] infiniband sy+Û: RDMA CMA: cma_listen_on_dev, error -98 [ 279.194331][T13346] wg1 speed is unknown, defaulting to 1000 [ 279.202850][T13346] wg1 speed is unknown, defaulting to 1000 [ 279.210683][T13346] wg1 speed is unknown, defaulting to 1000 [ 279.217866][T13346] wg1 speed is unknown, defaulting to 1000 [ 279.225307][T13346] wg1 speed is unknown, defaulting to 1000 [ 280.101765][T13299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.356877][T13366] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2023'. [ 280.490235][T13366] lo: entered allmulticast mode [ 280.628775][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'. [ 280.652194][T13377] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2027'. [ 280.695670][T13383] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2029'. [ 280.710088][T13382] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 280.842114][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 281.065283][T13400] netlink: 'syz.1.2034': attribute type 10 has an invalid length. [ 281.083838][T13400] syz_tun: entered promiscuous mode [ 281.119593][T13400] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 281.198489][T13406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2036'. [ 281.280085][T13408] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2036'. [ 281.426694][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2040'. [ 281.472829][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 281.898805][T13430] syzkaller0: entered promiscuous mode [ 281.919641][T13430] syzkaller0: entered allmulticast mode [ 282.173345][T13448] ip6gretap1: entered allmulticast mode [ 282.323413][T13458] bond0: (slave bond_slave_1): Releasing backup interface [ 282.351798][T13459] veth0: entered promiscuous mode [ 282.434254][T13458] team0: Device gtp0 is of different type [ 282.652139][T13482] netlink: 'syz.1.2060': attribute type 2 has an invalid length. [ 282.677265][T13482] : entered promiscuous mode [ 282.686536][T13482] netlink: 'syz.1.2060': attribute type 2 has an invalid length. [ 282.725352][T13482] : left promiscuous mode [ 282.925608][T13494] bond5: option mode: invalid value (254) [ 282.950245][T13494] bond5 (unregistering): Released all slaves [ 283.739425][T13502] wg1 speed is unknown, defaulting to 1000 [ 283.918417][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 283.926498][ C1] lec:lec_tx_timeout: lec0 [ 285.509801][T13472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.849553][T13526] netlink: 'syz.2.2068': attribute type 11 has an invalid length. [ 285.880235][T13527] __nla_validate_parse: 3 callbacks suppressed [ 285.880251][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 286.067377][T13530] can: request_module (can-proto-3) failed. [ 286.075411][T13536] ip6tnl0: entered promiscuous mode [ 286.082780][T13536] ip6tnl0: entered allmulticast mode [ 286.159391][T13539] netlink: 'syz.1.2078': attribute type 11 has an invalid length. [ 286.202641][T13541] netlink: 'syz.0.2077': attribute type 10 has an invalid length. [ 286.217405][T13541] syz_tun: entered promiscuous mode [ 286.227092][T13541] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 286.250857][T13541] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 286.272976][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 286.297738][T13544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2079'. [ 286.307108][T13546] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2080'. [ 286.596434][T13555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2082'. [ 286.692729][T13558] syzkaller0: entered promiscuous mode [ 286.698270][T13558] syzkaller0: entered allmulticast mode [ 286.779453][T13564] syzkaller0: entered promiscuous mode [ 286.784987][T13564] syzkaller0: entered allmulticast mode [ 286.993427][T13578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2089'. [ 287.134944][ T1846] block nbd14: Possible stuck request ffff888026e28000: control (read@0,1024B). Runtime 120 seconds [ 287.146044][ T1846] block nbd14: Possible stuck request ffff888026e28200: control (read@1024,1024B). Runtime 120 seconds [ 287.158373][ T1846] block nbd14: Possible stuck request ffff888026e28400: control (read@2048,1024B). Runtime 120 seconds [ 287.169725][ T1846] block nbd14: Possible stuck request ffff888026e28600: control (read@3072,1024B). Runtime 120 seconds [ 287.324287][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 287.406241][T13598] ip6t_srh: unknown srh match flags 4000 [ 287.417761][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 287.450435][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 287.516313][T13606] syzkaller0: entered promiscuous mode [ 287.522591][T13606] syzkaller0: entered allmulticast mode [ 287.594169][T13610] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2098'. [ 287.661819][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 287.751418][T13616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.764881][T13616] team0: Device macvlan2 is already an upper device of the team interface [ 287.835988][T11411] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 287.890277][T13623] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.228633][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 288.397372][T13641] syzkaller0: entered promiscuous mode [ 288.545090][T13641] syzkaller0: entered allmulticast mode [ 288.781979][T13651] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2115'. [ 288.823153][T13651] team0 (unregistering): Port device team_slave_0 removed [ 288.836944][T13651] team0 (unregistering): Port device team_slave_1 removed [ 288.889029][T11412] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 288.899435][T11412] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 289.315397][T13671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2125'. [ 289.359001][ T6250] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 289.427987][T13677] syzkaller0: entered promiscuous mode [ 289.441633][T13677] syzkaller0: entered allmulticast mode [ 289.692417][T13688] bond0: option arp_all_targets: invalid value (16777215) [ 289.827172][T13696] syzkaller1: entered promiscuous mode [ 289.837536][T13696] syzkaller1: entered allmulticast mode [ 289.902673][T13696] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.928813][T13696] team0: Port device bond6 added [ 290.111868][T13717] netlink: 'syz.3.2141': attribute type 5 has an invalid length. [ 290.221188][T13723] syzkaller0: entered promiscuous mode [ 290.226846][T13723] syzkaller0: entered allmulticast mode [ 290.475362][T13732] syzkaller0: entered promiscuous mode [ 290.485888][T13732] syzkaller0: entered allmulticast mode [ 290.632214][T13741] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 290.739094][T13742] veth5: entered promiscuous mode [ 290.823694][T13741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.836607][T13755] netlink: 'syz.2.2154': attribute type 7 has an invalid length. [ 291.008242][T13763] syzkaller0: entered promiscuous mode [ 291.018524][T13763] syzkaller0: entered allmulticast mode [ 291.175175][T13776] tipc: Started in network mode [ 291.181512][T13776] tipc: Node identity 764aa06a2b8f, cluster identity 4711 [ 291.189571][T13776] tipc: Enabled bearer , priority 0 [ 291.197463][T13776] syzkaller0: entered promiscuous mode [ 291.209921][T13776] syzkaller0: entered allmulticast mode [ 291.233566][T13778] __nla_validate_parse: 8 callbacks suppressed [ 291.233587][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'. [ 291.250271][T13776] tipc: Resetting bearer [ 291.290366][T13776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2161'. [ 291.306597][T13775] tipc: Resetting bearer [ 291.339769][T13775] tipc: Disabling bearer [ 291.374599][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 291.403088][T13786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2165'. [ 291.448797][T13787] syzkaller0: entered promiscuous mode [ 291.461030][T13787] syzkaller0: entered allmulticast mode [ 291.709155][T13811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2169'. [ 291.938024][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 292.245230][T13827] wg1 speed is unknown, defaulting to 1000 [ 292.662891][T13843] syzkaller0: entered promiscuous mode [ 292.678734][T13843] syzkaller0: entered allmulticast mode [ 292.691712][T13849] netlink: 'syz.4.2182': attribute type 2 has an invalid length. [ 292.718622][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 292.736646][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2182'. [ 292.835492][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2185'. [ 292.848113][T13856] openvswitch: netlink: Invalid VLAN frame [ 293.101592][T13872] wg1 speed is unknown, defaulting to 1000 [ 293.499869][T13883] syzkaller0: entered promiscuous mode [ 293.525059][T13883] syzkaller0: entered allmulticast mode [ 293.581707][T13883] netlink: 'syz.4.2192': attribute type 13 has an invalid length. [ 293.591006][T13885] syzkaller0: entered promiscuous mode [ 293.596539][T13885] syzkaller0: entered allmulticast mode [ 293.688853][T13887] tipc: Enabled bearer , priority 0 [ 294.151524][ T30] audit: type=1804 audit(1771575642.134:4): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2201" name="/newroot/458/memory.events" dev="tmpfs" ino=2354 res=1 errno=0 [ 294.208134][ T30] audit: type=1800 audit(1771575642.154:5): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2201" name="memory.events" dev="tmpfs" ino=2354 res=0 errno=0 [ 294.230055][ T30] audit: type=1804 audit(1771575642.164:6): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2201" name="/newroot/458/memory.events" dev="tmpfs" ino=2354 res=1 errno=0 [ 294.377452][T13881] tipc: Resetting bearer [ 294.509869][T13881] tipc: Disabling bearer [ 294.803339][T13932] bond8 (unregistering): Released all slaves [ 294.905108][T13940] syzkaller1: entered allmulticast mode [ 295.085262][T13953] openvswitch: netlink: Flow key attr not present in new flow. [ 295.545154][T13970] ip6tnl0: Caught tx_queue_len zero misconfig [ 295.856729][T13989] sch_tbf: peakrate 4294967283 is lower than or equals to rate 6829859379779001161 ! [ 295.873073][T13986] wg1 speed is unknown, defaulting to 1000 [ 295.892155][T13989] netlink: 'syz.0.2225': attribute type 1 has an invalid length. [ 295.974276][T13989] bond8: entered promiscuous mode [ 295.981670][T13989] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.262927][T14008] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 296.483919][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 296.493169][T14014] openvswitch: netlink: Flow actions attr not present in new flow. [ 296.569889][T14015] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 296.687511][T14025] netlink: 'syz.2.2235': attribute type 1 has an invalid length. [ 296.865827][T14030] wg1 speed is unknown, defaulting to 1000 [ 296.955490][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 297.033003][T14035] syz_tun: left promiscuous mode [ 297.059126][T14035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.194630][T14040] tipc: Enabled bearer , priority 0 [ 297.262634][T14056] Cannot find del_set index 1536 as target [ 297.480265][T14044] syzkaller0: entered promiscuous mode [ 297.503823][T14044] syzkaller0: entered allmulticast mode [ 297.532514][T14040] tipc: Resetting bearer [ 297.625956][T14040] tipc: Disabling bearer [ 297.966975][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2254'. [ 297.989110][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2256'. [ 298.334394][T14108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2263'. [ 298.375015][T14108] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2263'. [ 298.389779][T11414] bond0: (slave syz_tun): interface is now down [ 298.407556][T14109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.440920][T14116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2264'. [ 298.451557][T14116] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2264'. [ 298.531260][T11342] bond0: (slave syz_tun): interface is now down [ 298.556749][T11342] bond0: now running without any active interface! [ 298.617421][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 298.672425][T14128] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2268'. [ 298.707539][T14128] netlink: 'syz.0.2268': attribute type 3 has an invalid length. [ 299.126783][T14150] m1Ie5èÿá: entered promiscuous mode [ 299.778077][T14171] pimreg: entered allmulticast mode [ 299.949982][T11413] nci: nci_rsp_packet: unknown rsp opcode 0x12 [ 300.059535][T14177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.558581][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 300.608854][T14233] netlink: 'syz.3.2299': attribute type 1 has an invalid length. [ 300.676460][T14229] wg1 speed is unknown, defaulting to 1000 [ 300.782795][T14245] netlink: 'syz.3.2302': attribute type 64 has an invalid length. [ 301.044428][ T6239] hid-generic 0005:0006:5508.0009: item fetching failed at offset 0/1 [ 301.076562][ T6239] hid-generic 0005:0006:5508.0009: probe with driver hid-generic failed with error -22 [ 301.204509][T14252] scsi_nl_rcv_msg: discarding partial skb [ 301.264938][T14260] wg1 speed is unknown, defaulting to 1000 [ 301.653144][T14285] __nla_validate_parse: 139 callbacks suppressed [ 301.653166][T14285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2314'. [ 301.696882][T14281] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2314'. [ 301.759898][T14283] wg1 speed is unknown, defaulting to 1000 [ 301.904417][T14294] x_tables: duplicate underflow at hook 1 [ 302.352137][T14312] netlink: 'syz.1.2322': attribute type 1 has an invalid length. [ 302.432444][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2323'. [ 302.565289][T14312] bond4: entered promiscuous mode [ 302.577735][T14312] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.593406][T14318] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 302.626663][T14318] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 302.647918][T14318] bond4: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 302.859427][T14341] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2329'. [ 302.904788][T14341] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 302.927202][T14341] batman_adv: batadv0: Adding interface: gretap1 [ 302.964297][T14341] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 303.042420][T14341] batman_adv: batadv0: Interface activated: gretap1 [ 303.492356][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 303.526515][T14371] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2337'. [ 303.557465][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 303.578223][T14373] nbd: must specify at least one socket [ 303.590935][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'. [ 303.600847][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2338'. [ 303.628967][T14376] netlink: 'syz.0.2338': attribute type 1 has an invalid length. [ 303.664811][T14376] bond10: entered promiscuous mode [ 303.671838][T14376] 8021q: adding VLAN 0 to HW filter on device bond10 [ 303.706574][T14378] 8021q: adding VLAN 0 to HW filter on device bond10 [ 303.759494][ T1846] block nbd9: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 150 seconds [ 303.773437][ T1846] block nbd9: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 150 seconds [ 303.784666][ T1846] block nbd9: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 150 seconds [ 303.787926][T14378] bond10: (slave gre1): The slave device specified does not support setting the MAC address [ 303.795838][ T1846] block nbd9: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 150 seconds [ 303.841877][T14378] bond10: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 303.854652][T14378] bond10: (slave gre1): making interface the new active one [ 303.862408][T14378] gre1: entered promiscuous mode [ 303.869450][T14378] bond10: (slave gre1): Enslaving as an active interface with an up link [ 303.892973][T14385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2340'. [ 304.181411][ T6239] hid-generic 0005:0006:5508.000A: item fetching failed at offset 0/1 [ 304.262178][ T6239] hid-generic 0005:0006:5508.000A: probe with driver hid-generic failed with error -22 [ 304.346142][T14401] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 304.398836][ T1755] block nbd4: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 180 seconds [ 304.409696][ T11] block nbd11: Possible stuck request ffff888026ca8000: control (read@0,1024B). Runtime 150 seconds [ 304.420670][ T1755] block nbd4: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 180 seconds [ 304.431767][ T11] block nbd11: Possible stuck request ffff888026ca8200: control (read@1024,1024B). Runtime 150 seconds [ 304.443080][ T1755] block nbd4: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 180 seconds [ 304.454180][ T11] block nbd11: Possible stuck request ffff888026ca8400: control (read@2048,1024B). Runtime 150 seconds [ 304.472103][ T1755] block nbd4: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 180 seconds [ 304.483300][ T11] block nbd11: Possible stuck request ffff888026ca8600: control (read@3072,1024B). Runtime 150 seconds [ 304.954914][T14446] openvswitch: netlink: Message has 572 unknown bytes. [ 304.992861][T14446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.241077][T14464] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 305.753148][T14495] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 305.776182][T14492] wg1 speed is unknown, defaulting to 1000 [ 306.344837][ T31] INFO: task udevd:5837 blocked for more than 143 seconds. [ 306.362614][ T31] Not tainted syzkaller #0 [ 306.371644][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.406811][ T31] task:udevd state:D stack:23168 pid:5837 tgid:5837 ppid:5194 task_flags:0x400140 flags:0x00080000 [ 306.440097][ T31] Call Trace: [ 306.447885][ T31] [ 306.454416][ T31] __schedule+0x1585/0x5340 [ 306.461715][ T31] ? blk_mq_flush_plug_list+0x443/0x570 [ 306.471107][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 306.484043][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 306.494971][ T31] ? __pfx___schedule+0x10/0x10 [ 306.505757][ T31] ? schedule+0x90/0x360 [ 306.515112][ T31] schedule+0x164/0x360 [ 306.524194][ T31] schedule_timeout+0x158/0x2c0 [ 306.534890][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 306.543234][ T31] ? __pfx_process_timeout+0x10/0x10 [ 306.548845][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 306.558706][ T31] ? prepare_to_wait_event+0x436/0x480 [ 306.570253][ T31] nbd_queue_rq+0x857/0x1100 [ 306.579885][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 306.591164][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 306.604060][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 306.615652][ T31] ? sbitmap_get+0x229/0x390 [ 306.625498][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 306.638436][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 306.650769][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 306.671884][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 306.747206][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 306.753857][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 306.759920][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 306.765408][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 306.771294][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 306.776785][ T31] ? blk_mq_dispatch_list+0x1a0/0xe10 [ 306.783187][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 306.789385][ T31] ? rcu_is_watching+0x15/0xb0 [ 306.794422][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 306.800627][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 306.806207][ T31] ? blk_mq_submit_bio+0xef8/0x2810 [ 306.812612][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 306.819176][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 306.824279][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 306.830289][ T31] __submit_bio+0x28d/0x580 [ 306.835055][ T31] ? __pfx___submit_bio+0x10/0x10 [ 306.840834][ T31] ? bio_associate_blkg+0x6d/0x230 [ 306.882732][ T31] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 306.902557][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 306.930810][ T31] ? bio_alloc_bioset+0xa82/0x11b0 [ 306.957004][ T31] block_read_full_folio+0x599/0x830 [ 306.999583][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 307.009578][ T31] filemap_read_folio+0x137/0x3b0 [ 307.019174][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 307.030366][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 307.042793][ T31] ? filemap_add_folio+0x356/0x530 [ 307.052514][ T31] do_read_cache_folio+0x358/0x590 [ 307.068705][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 307.074328][ T31] read_part_sector+0xb6/0x2b0 [ 307.082661][ T31] adfspart_check_ICS+0xa5/0xa40 [ 307.093325][ T31] ? snprintf+0xe8/0x140 [ 307.103238][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 307.116487][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 307.128424][ T31] bdev_disk_changed+0x7ba/0x1550 [ 307.140488][ T31] ? bdev_open+0xe0/0xd30 [ 307.149942][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 307.161180][ T31] blkdev_get_whole+0x380/0x510 [ 307.172510][ T31] bdev_open+0x31e/0xd30 [ 307.176912][ T31] blkdev_open+0x470/0x610 [ 307.181533][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 307.186587][ T31] do_dentry_open+0x785/0x14e0 [ 307.191551][ T31] vfs_open+0x3b/0x340 [ 307.195678][ T31] ? path_openat+0x2df0/0x3860 [ 307.200781][ T31] path_openat+0x2e08/0x3860 [ 307.205531][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 307.211719][ T31] ? stack_depot_save_flags+0x33/0x810 [ 307.217337][ T31] ? __pfx_path_openat+0x10/0x10 [ 307.222566][ T31] ? __x64_sys_openat+0x138/0x170 [ 307.227768][ T31] ? do_syscall_64+0x14d/0xf80 [ 307.232725][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.239339][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 307.244415][ T31] do_file_open+0x23e/0x4a0 [ 307.249348][ T31] ? __pfx_do_file_open+0x10/0x10 [ 307.254807][ T31] ? _raw_spin_unlock+0x28/0x50 [ 307.260254][ T31] ? alloc_fd+0x64b/0x6c0 [ 307.264660][ T31] do_sys_openat2+0x113/0x200 [ 307.269513][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 307.275105][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.280648][ T31] ? rcu_is_watching+0x15/0xb0 [ 307.285575][ T31] __x64_sys_openat+0x138/0x170 [ 307.290606][ T31] do_syscall_64+0x14d/0xf80 [ 307.295325][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.301661][ T31] ? clear_bhb_loop+0x40/0x90 [ 307.306495][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.312579][ T31] RIP: 0033:0x7f45534a7407 [ 307.317114][ T31] RSP: 002b:00007ffe138477e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 307.325820][ T31] RAX: ffffffffffffffda RBX: 00007f4553b5b880 RCX: 00007f45534a7407 [ 307.334266][ T31] RDX: 00000000000a0800 RSI: 000055cdbdecd0f0 RDI: ffffffffffffff9c [ 307.342762][ T31] RBP: 000055cdbdeb5910 R08: 0000000000000000 R09: 0000000000000000 [ 307.351283][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cdbdecde00 [ 307.360245][ T31] R13: 000055cdbdec3190 R14: 0000000000000000 R15: 000055cdbdecde00 [ 307.368971][ T31] [ 307.372303][ T31] [ 307.372303][ T31] Showing all locks held in the system: [ 307.462795][ T31] 3 locks held by kworker/0:0/9: [ 307.467803][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 307.479932][ T31] #1: ffffc900000e7c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 307.492066][ T31] #2: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 307.502415][ T31] 1 lock held by khungtaskd/31: [ 307.507313][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 307.520467][ T31] 1 lock held by udevd/5194: [ 307.525159][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 307.535524][ T31] 2 locks held by getty/5592: [ 307.540679][ T31] #0: ffff888033d6b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 307.551022][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 307.561546][ T31] 1 lock held by udevd/5825: [ 307.566174][ T31] #0: ffff888026b40358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 307.575930][ T31] 3 locks held by udevd/5837: [ 307.580913][ T31] #0: ffff888026cc0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 307.591097][ T31] #1: ffff8880269ab298 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 307.601629][ T31] #2: ffff888026d40180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 307.611463][ T31] 1 lock held by udevd/5843: [ 307.616105][ T31] #0: ffff888026c30358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 307.625822][ T31] 1 lock held by udevd/6496: [ 307.630659][ T31] #0: ffff8880268a7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 307.640270][ T31] 1 lock held by udevd/8406: [ 307.644906][ T31] #0: ffff888026cc4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 307.654609][ T31] 1 lock held by syz.4.2374/14527: [ 307.660389][ T31] [ 307.662759][ T31] ============================================= [ 307.662759][ T31] [ 307.672151][ T31] NMI backtrace for cpu 0 [ 307.672166][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 307.672189][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.672200][ T31] Call Trace: [ 307.672209][ T31] [ 307.672217][ T31] dump_stack_lvl+0xe8/0x150 [ 307.672250][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 307.672277][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 307.672306][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 307.672348][ T31] sys_info+0x135/0x170 [ 307.672369][ T31] watchdog+0xfd9/0x1030 [ 307.672412][ T31] ? watchdog+0x21a/0x1030 [ 307.672452][ T31] kthread+0x388/0x470 [ 307.672472][ T31] ? __pfx_watchdog+0x10/0x10 [ 307.672500][ T31] ? __pfx_kthread+0x10/0x10 [ 307.672522][ T31] ret_from_fork+0x51e/0xb90 [ 307.672552][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 307.672577][ T31] ? __switch_to+0xc7d/0x1450 [ 307.672604][ T31] ? __pfx_kthread+0x10/0x10 [ 307.672626][ T31] ret_from_fork_asm+0x1a/0x30 [ 307.672672][ T31] [ 307.672680][ T31] Sending NMI from CPU 0 to CPUs 1: [ 307.784302][ C1] NMI backtrace for cpu 1 [ 307.784319][ C1] CPU: 1 UID: 0 PID: 5812 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 307.784339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.784350][ C1] RIP: 0010:lapic_next_event+0x11/0x20 [ 307.784380][ C1] Code: c3 cc cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe bf 80 03 00 00 e8 0f 2d 01 00 <31> c0 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 [ 307.784397][ C1] RSP: 0018:ffffc90003a17ad8 EFLAGS: 00000046 [ 307.784412][ C1] RAX: 000000000000ffde RBX: ffff8880b8723e40 RCX: 0000000000000838 [ 307.784425][ C1] RDX: 0000000000000000 RSI: 000000000000ffde RDI: 0000000000000838 [ 307.784435][ C1] RBP: 0000000000000000 R08: ffffffff81b2bc75 R09: ffffffff9a2b4508 [ 307.784447][ C1] R10: 0000000000000003 R11: ffffffff8173c750 R12: 0000000010006b5f [ 307.784459][ C1] R13: dffffc0000000000 R14: 000000000000ffde R15: 0000000000000020 [ 307.784471][ C1] FS: 00005555886fd500(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 307.784486][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.784498][ C1] CR2: 00007f078b5e6158 CR3: 00000000763d8000 CR4: 00000000003526f0 [ 307.784514][ C1] Call Trace: [ 307.784520][ C1] [ 307.784527][ C1] clockevents_program_event+0x1c9/0x350 [ 307.784554][ C1] hrtimer_start_range_ns+0x1687/0x1ff0 [ 307.784587][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 307.784607][ C1] do_nanosleep+0x189/0x620 [ 307.784631][ C1] ? do_nanosleep+0x80/0x620 [ 307.784663][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 307.784686][ C1] ? __hrtimer_setup+0x181/0x200 [ 307.784708][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 307.784736][ C1] hrtimer_nanosleep+0x188/0x390 [ 307.784762][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 307.784788][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 307.784814][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 307.784836][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 307.784863][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 307.784890][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 307.784922][ C1] do_syscall_64+0x14d/0xf80 [ 307.784947][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.784965][ C1] ? clear_bhb_loop+0x40/0x90 [ 307.784985][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.785001][ C1] RIP: 0033:0x7fd654f57817 [ 307.785016][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 307.785031][ C1] RSP: 002b:00007ffc999f83f0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 307.785048][ C1] RAX: ffffffffffffffda RBX: 00005555886fd500 RCX: 00007fd654f57817 [ 307.785060][ C1] RDX: 00007ffc999f8430 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.785071][ C1] RBP: 00007ffc999f8910 R08: 0000000000000000 R09: 0000000000000000 [ 307.785082][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 307.785092][ C1] R13: 00007ffc999f846c R14: 00007ffc999f8500 R15: 0000000000000000 [ 307.785115][ C1] [ 308.088075][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 308.094980][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 308.104114][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.114201][ T31] Call Trace: [ 308.117501][ T31] [ 308.120453][ T31] vpanic+0x56c/0xa60 [ 308.124449][ T31] ? __pfx___schedule+0x10/0x10 [ 308.129305][ T31] ? __pfx_vpanic+0x10/0x10 [ 308.133819][ T31] ? __pfx_console_unlock+0x10/0x10 [ 308.139031][ T31] panic+0xc5/0xd0 [ 308.142772][ T31] ? __pfx_panic+0x10/0x10 [ 308.147192][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 308.152592][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 308.158762][ T31] watchdog+0x1023/0x1030 [ 308.163142][ T31] ? watchdog+0x21a/0x1030 [ 308.167617][ T31] kthread+0x388/0x470 [ 308.171755][ T31] ? __pfx_watchdog+0x10/0x10 [ 308.176465][ T31] ? __pfx_kthread+0x10/0x10 [ 308.181078][ T31] ret_from_fork+0x51e/0xb90 [ 308.185684][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 308.190896][ T31] ? __switch_to+0xc7d/0x1450 [ 308.195583][ T31] ? __pfx_kthread+0x10/0x10 [ 308.200222][ T31] ret_from_fork_asm+0x1a/0x30 [ 308.205018][ T31] [ 308.208659][ T31] Kernel Offset: disabled [ 308.213003][ T31] Rebooting in 86400 seconds..