last executing test programs: 5.310440629s ago: executing program 1 (id=2572): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x8, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x8, 0x9}, @srh={0x2c, 0x0, 0x4, 0x0, 0x8, 0x40, 0x100}]}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x114, r3, 0xe701ac47a3d23ecd, 0x1, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x48000) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x13, 0x3, "fd02b21edf8b721e23f25f47a7af48"}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES32], 0x60}}, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000480)=0x3f48, 0x4) (async) bind$inet(r5, &(0x7f0000000740)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000780)={0x2, 0x0, @multicast1}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="230000000800000002130000ffff000005"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x7ff, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x0, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8004}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x6, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0x80000000, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0xa, 0x87}, {0x5, 0xa, 0x2, 0x1, 0x3, 0x2000}, {0x32e, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x203, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0xfffffffd, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0xffffffff, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x10001, 0x4000008, 0x25ff}, {0x4e37, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x5, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x400, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0xfff, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc4, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0x0, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8e}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x2009f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffbff, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x4}, {0xb3, 0xe, 0x0, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x406}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x5}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0xffffffff, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x795}, {0x7, 0x400, 0x9, 0x8, 0xa, 0xcdb}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x9, 0x3, 0x6cf1, 0x1}, {0x6, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x3, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x2, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0x3ffc, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x106, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x100002, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x101, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x4, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1}, {}, {0x4, 0x1}, {0x3}, {0x2}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740), &(0x7f0000001780), 0x1103, r8}, 0x38) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{r8, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900), 0x531c, r9}, 0x38) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000018c0)=ANY=[@ANYBLOB="d80000000314010025bd7000ffdbdf250900020073787a310000000008004100727865001400330069703665727370616e300000000000000900020073797a3200000000080041007369770014003300636169663000000000000000000000000900020073797a310000000008"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x4c, r7, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}}, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000001940)={0x2c, 0x6, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x10, [0x3]}}, @jumbo={0xc2, 0x4, 0xf6}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xffffffff}]}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x1, 0x5, &(0x7f0000001a40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000002480)='GPL\x00'}, 0x48) (async) socket$kcm(0x2, 0x1, 0x0) 5.167696826s ago: executing program 1 (id=2574): socket(0x2, 0x3, 0xff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x8c1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000060900010073797a30000200000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000030900010073797a3000000000140000001100010000000000000000581576f430e4487e7c2ea81f70000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000580)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000780)={0x0, 0xfffffff5, &(0x7f00000007c0)=[{&(0x7f0000000800)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x18, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa100000000000007010000faffffffb702000008000000b70300000280007f720000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f00000009c0), 0x4) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000a00), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000b40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f0000000c00)={0x40000000, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r11, &(0x7f0000000d00), 0x400008a, 0x0) sendmsg$key(r11, &(0x7f0000000d40)={0x9, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000e00), 0x3) socket$nl_route(0x10, 0x3, 0x0) 3.866065561s ago: executing program 1 (id=2582): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0xb002}) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000002c0)=0x28) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x24, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x24}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) sendfile(0xffffffffffffffff, r8, 0x0, 0x10000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async, rerun: 32) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x2000}, @l2tp={0x2, 0x0, @private=0xa010100, 0x2}, @ethernet={0x303, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x9, 0x0, 0x0, 0x0, 0xff2, &(0x7f00000000c0)='lo\x00', 0x1c0ed06b, 0x8e2, 0x9}) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x28, 0x3, 0x5c}, 0x2c) setsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r8, 0x84, 0x83, &(0x7f0000000380)={0x0, 0x2}, 0x8) 3.315747472s ago: executing program 3 (id=2587): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0xada6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x12, &(0x7f0000000240)=[{&(0x7f00000002c0)='@', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003e00070127bd7000fefdffff017cefff040042800c000180060306009e99763d630e0800000017800e4729ef1955736f95e767bba034df6211f8ba2cc3beff62062f1f090be8df5df65f432f1d4362d4"], 0x2c}, 0x1, 0x0, 0x0, 0x4040084}, 0xc0d4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001240)={'bridge0\x00', &(0x7f0000001280)=@ethtool_link_settings={0x4c, 0xfffffffe, 0x7, 0x0, 0x5, 0x4, 0x6e, 0x2, 0x5, 0x5, [0x7, 0x5, 0x4e, 0x22, 0xa4d, 0x2, 0x10, 0x8000]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000008c0)={0x0, 0x0}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3418000040000901feffffff00000000017c0000040042800c00018006000600800a000010180280091814800518", @ANYRES64=r7], 0x1834}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r9, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="81000010", @ANYRES16=r4, @ANYBLOB="030028bd7000ffdbdf253f00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000000002b0000002c005e8008000500130000000800090005c1000018000100040000000180000001000000010000000800000024005e8008000300f90000000800050011000000080005005c000000080009000200000024005e8004000100140001003affffff080000000000000004000000080002000600000024005e80080001000f00000008000700e0020000080002000a00000008000600090000004c005e8008000200ffff0000080007005f010000080006000100000008000600dbfbffff08000200510600000800020003000000080005001e0000000800010009000000080002000700000050005e800c000100080000008100000008000700d905000008000200010000000800030001800000100001000100000007ed0000040000000800020007000000080006000700000008000700d201000014005e80080005001c00000008000600ff000000"], 0x170}, 0x1, 0x0, 0x0, 0x240400a1}, 0x4) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000001000)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000131bd7000fedbdfff6a000000080003001e32a5ba95772ce76e602f320312fc4c443b8338c8a6aea4dd1dce5896db483b9f039588d7208525af5f1c", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000500d200060000000a00060008021100000000000500d200000000000500d200050000000a00060008021100000000000500d2000a000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4104) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b40)={'sit0\x00', &(0x7f00000012c0)={'gre0\x00', 0x0, 0x10, 0x700, 0x3, 0x3, {{0x27, 0x4, 0x0, 0x4, 0x9c, 0x9, 0x0, 0x7, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0xb9, [@multicast2, @multicast1, @loopback, @local, @loopback, @multicast2, @multicast1]}, @end, @timestamp={0x44, 0x18, 0x6a, 0x0, 0x6, [0x9, 0x1, 0x0, 0xe51, 0x5]}, @ssrr={0x89, 0xf, 0xe6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x6e, [@dev={0xac, 0x14, 0x14, 0x25}]}, @cipso={0x86, 0x3a, 0x1, [{0x7, 0x4, "bc67"}, {0x2, 0xf, "feda7806fb8ebf1b9b1a430e65"}, {0x5, 0x12, "db91e59e975bc0986140768c465f33cd"}, {0x0, 0xc, "69069c81aa79974314af"}, {0x7, 0x3, "1d"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xe, 0x5, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x7, 0x72b41923, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x4, 0x8, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x10}, 0xd8b2e2876bc676a4, 0x10, 0x5, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000001380)={'syztnl2\x00', 0x0, 0x1, 0x10, 0x6, 0x22b, {{0x18, 0x4, 0x3, 0x1b, 0x60, 0x65, 0x0, 0xf, 0x2f, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x44, 0x85, 0x3, 0xf, [{@broadcast, 0x2}, {@broadcast, 0x8}, {@private=0xa010100, 0xc8a0}, {@rand_addr=0x64010100, 0x4}, {@empty, 0x8}, {@local, 0x3}, {@local, 0xb3}, {@local, 0xa}]}, @cipso={0x86, 0x6, 0x3}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000e80)={'ip6tnl0\x00', &(0x7f0000000e00)={'ip6_vti0\x00', 0x0, 0x2, 0x0, 0xb, 0x40, 0x15, @mcast1, @mcast1, 0x701, 0x80, 0x8, 0x6}}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ec0)={'ip6_vti0\x00'}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x4000000) 3.083916658s ago: executing program 0 (id=2588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011c6e2130000000000008000000180004801300010062726f616463617374807e17989393"], 0x2c}}, 0x0) 2.896696639s ago: executing program 2 (id=2590): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000300)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x2d00, 0xe, 0x0, &(0x7f0000000b00)="f0906c35cdf31300000000000000", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000dc0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40005200060010"], 0x24}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/123, 0x7b}, {&(0x7f0000000d40)=""/21, 0x15}], 0x2, 0x5, 0xa7c) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x80080, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r7, &(0x7f00000007c0)="4c00000011000f14001100020000190002000000200000", 0x17) (async, rerun: 32) ioctl$XFS_IOC_SET_RESBLKS(r7, 0xc0105872, &(0x7f0000000c80)={0x56bf, 0x7}) (async, rerun: 32) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x80800, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) close(r8) (async) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000640)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2400000046c1cd10ce89ccf38ac05204b36f6d8a1d975da12d6a1074fede8bb447258a6ee0a80a81710b2dd4fb47cb9dc67f01e831ef409800c787d9fb2d71d05a2a4b07f8c51498b3f415de7ca4c84a3d8a87b015392c08700fed05cb884a81769538ed8b02f20823a75cf27b4664270a6ae4c1631da3061aa6cc763438fe1dcda18f11a60d9724a19e6618070a942a9c21f16eff51ab00bf5784decc18aaa9f482797fe9b3e9fbcabb72fe6b517f6dca40da437c19687be4f10949c6abb6c7cf713bdd64bf68c9e78b838d6935bacc63c88799a92ed28e8ca1f11325d05442d8a5a48fface3bcb23ceadbd67892d83432731dab66701d06795be00e4a8f1", @ANYRES16=r11, @ANYBLOB="010000000000ffffffff0200000008000300", @ANYRES32=r12, @ANYBLOB="0800020001000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000800)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="068bfa0405d539cf55376b60fc0a1914f404357bd5e9569d3bf099b638fabf7aff3b6f70807da293eb85b5892378a879f3e8281638366afe4580ed4355e16e190000000000000000000000000021b98c0b2c57338a3936eea0d6a3d8386f9c1c740e24601d04e07d02e960830f310814b78a6dd92eeefe2c42963f3459139c3abe49702530", @ANYRES32=r12, @ANYBLOB="0c009900050000003e000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x100) (async, rerun: 32) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r6, 0xc040583f, &(0x7f0000000900)={{@_ha_fsid={[0x100, 0x4]}, {0x8c, 0x90e9, 0x8, 0x7f}}, {{[0x1, 0x6, 0x80000001, 0x8001]}, 0x0, 0x2, 0x4, 0x0, &(0x7f0000000940)=[{{@_ha_fsid={[0xb, 0x4]}, {0x0, 0x3, 0xfffffff2, 0xfff}}, 0x100, 0x0, '\xce\x00'}, {{@_ha_fsid={[0xffffffff, 0x4]}, {0x53b, 0x3, 0x5, 0x5}}, 0xc, 0x0, 'S/-.\x00'}, {{@_ha_fsid={[0x2, 0xfff]}, {0x9, 0x2, 0x5, 0x10001}}, 0xfffffff9, 0x0, '(\x7f\x00'}]}}) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) 2.734380582s ago: executing program 3 (id=2592): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x3a5) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.700407371s ago: executing program 0 (id=2593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11ff010000000000000000000400000000000000c6cf566b1a8806c20c625d99785f5d5f3ab4d05dda9568118af37c81346ab2148729027917379b14de807097feafd71f7df3b7a803000000000000b692acd5fcdf04769cdd6ec5f5bc439e3cc8493b4217d306877f43a38998bcb7f894817b19885e8e53d97c17f812bc955386ff64eb35cb9e0f76d1ff4f0dc4524c1e0472093e1d8d5a50dd833a14b61865cfd5cd26b3044699be252f03de34513cffdccd73b3e2962ed0af437a42ab8d64d6b36d316837f8ba75c8e381d0cd5968973fdb7f6f7fff50d32db185cd1631ebbff7d64b4f455821ce", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffff9}, [@generic={0x91, 0x1, 0x1, 0x6f}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018400000fdffffff0000000000000900b703000000000000850000003300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.498038148s ago: executing program 1 (id=2594): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @random="769193a9518c", @val={@val={0x88a8, 0x2, 0x1, 0x3}, {0x8100, 0x1}}, {@can={0xc, {{0x2, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "24b0a18bc36f321d"}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x40000) r1 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r1, 0x84, 0x25, &(0x7f0000000200)={0x2, @in={{0x2, 0x4e20, @multicast1}}, 0x7, 0x4, 0x3804}, &(0x7f0000000340)=0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5a7}}}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000600000003c001280f2c67614a99644856e6c00002c0002801400030020010000000000ff000000000000000114000200000000000000"], 0x5c}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x0, 0x1, r4}, 0xc) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(r0, &(0x7f0000003240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003200)={&(0x7f0000000940)=@newchain={0x2898, 0x64, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff3, 0x3}, {0xd, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7a}}, @TCA_CHAIN={0x8, 0xb, 0x800}, @TCA_RATE={0x6, 0x5, {0xb5, 0x80}}, @TCA_RATE={0x6, 0x5, {0x4c, 0x67}}, @filter_kind_options=@f_fw={{0x7}, {0x284c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x7}}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x10}}, @TCA_FW_ACT={0x2838, 0x4, [@m_skbedit={0xc0, 0x6, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xc}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xb}}]}, {0x7c, 0x6, "ed1bb0ddae4ec752b12307d55443d45c944b18e23952491c8986c165a0a42d3dd01d7d79a1a47185522ab96e4cb5e13dd4860ebf5a4ac5717ca0b962d65f0c1c921589485e075c7e7cef2ca5dce86701a019343528fd4d9de65d8748554148f9053144025d4be8720e07a32e24d70d7fb2c8248386fe4c8f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x2500, 0x13, 0x0, 0x0, {{0xb}, {0x245c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0xa5549ef, 0x9, 0x200, 0x7, 0x200, 0x1, 0x8, 0x554, 0x4, 0x9, 0x7f, 0x80, 0x2, 0x0, 0x1000, 0xfffffff9, 0x81, 0x6, 0x7, 0x2, 0x9a8a, 0x8, 0x8, 0x3, 0x8, 0x9, 0x5, 0x7, 0x9, 0xfffffffb, 0x49ff, 0xb80, 0x4, 0x80000, 0x3, 0x8, 0x7, 0x4, 0xc, 0xfffff000, 0x0, 0x0, 0x9, 0x80, 0x0, 0x81, 0x14000, 0x3, 0x4e, 0x5, 0x80000000, 0x7, 0x5, 0x0, 0x6, 0xd148, 0x6, 0x1c66, 0x4f, 0x8, 0x8, 0x8, 0xffff64ef, 0x2, 0x400, 0x7ff, 0x5, 0x40, 0x2800000, 0x10, 0x7ff, 0x20000, 0xff, 0x8, 0x6, 0x7fffffff, 0xe314, 0x3, 0x2, 0x2e, 0x7fff, 0x0, 0xb97, 0x3, 0x10000, 0x8, 0x245031f5, 0x6, 0x80000000, 0x2, 0x4, 0x1cc, 0x7f, 0x9, 0x6, 0x2, 0x9c5, 0x8, 0x6, 0x3, 0x2, 0xd6b, 0x3, 0x0, 0x4, 0x3, 0x7, 0xa, 0x6, 0x3b6, 0x9, 0x3, 0xff, 0x3ff, 0x8, 0x4, 0x43, 0x1, 0x8, 0x1, 0xf4a, 0x4, 0x80000000, 0x43, 0x401, 0x101, 0x6, 0x400, 0x100, 0x16504000, 0xfffffffd, 0x7ff, 0x2, 0x80, 0x6, 0x7, 0x6, 0xada1, 0x8, 0x8, 0x4, 0xfffffffc, 0x2, 0x8, 0x4, 0x5, 0x3, 0xfffffffd, 0x0, 0x2, 0x1, 0x1, 0x5, 0xfffffffb, 0x1, 0xff, 0x5, 0x0, 0x6, 0xf, 0xe, 0x7, 0x3, 0xffffffff, 0xfffd, 0xe, 0x3ff, 0x7, 0x1ff, 0xfffffffa, 0x7, 0x4, 0x7, 0x5, 0x1, 0x2, 0x1, 0xf6, 0x3, 0x0, 0x5, 0x1000, 0x6, 0x2, 0x3, 0x100, 0x81, 0x0, 0x5, 0xfd3, 0x7, 0x200, 0x7, 0x1000, 0x4, 0x6, 0x4, 0x3, 0x8, 0x8, 0xfffffffe, 0x50c, 0x2db, 0x5, 0x1, 0x1ff, 0x8, 0x5, 0x7b1, 0xeda, 0xfad, 0xb10, 0x4, 0x8, 0x7, 0xffff, 0x8000, 0xfffffffb, 0x4, 0x2, 0x4, 0xcc2, 0x0, 0x7, 0x8, 0x0, 0xfffffffb, 0x1, 0xfffffffc, 0x9, 0x8000, 0x2, 0x0, 0x200, 0x6, 0x2, 0x4, 0x7, 0x4ec9, 0xd, 0x622, 0x6f3f, 0x1, 0x2, 0x6, 0x3, 0xfffffc00, 0x9e0, 0x10000, 0x7fffffff, 0x7, 0x5, 0x1, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x3f69fafa, 0x6, 0x2, 0x9f2000, 0x7, 0x3, 0xe, 0xd, 0x5, 0xa1, 0x100, 0x0, 0x6, 0xd97, 0xcdb, 0x81, 0x45b6, 0x7, 0x5, 0x2, 0x1000, 0x9, 0x3, 0x10001, 0x9, 0x8001, 0x6, 0x5, 0xa, 0x0, 0xfffff000, 0x7, 0x2, 0x2, 0x2, 0x1, 0x8c5, 0x10001, 0x29, 0x1, 0x0, 0x5, 0x0, 0x4, 0x3, 0x3, 0x8bbd, 0x100, 0x4, 0x4, 0x9, 0x9, 0xb0d, 0x80000000, 0x6b, 0x9, 0x4, 0x4, 0xce, 0x7, 0x8bee, 0x2, 0x1, 0x7ff, 0x8, 0xfffffffb, 0x4, 0x788, 0x10000, 0x80, 0xfffffffb, 0x7, 0x9, 0x8, 0x7, 0x1, 0x4, 0x2, 0x2, 0x8, 0x6, 0x4304, 0x80, 0x10, 0x5, 0x3, 0x2, 0x8, 0x1, 0xfffffc01, 0x1, 0x7, 0x7c6f, 0x9, 0xd6, 0x2, 0xf, 0x5, 0x2, 0x8001, 0x5, 0x7f, 0x6, 0x7f, 0x4, 0x9, 0x2, 0xfc, 0x4000000, 0x3, 0x8, 0x8, 0xd, 0x9, 0x4b, 0xd9, 0x6d44, 0x3ff, 0x916, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x6, 0x7ff, 0x0, 0xfffc0000, 0x2, 0x5, 0x101, 0xe, 0xb, 0xae, 0x1, 0x401, 0x9, 0x6, 0x23b, 0x7f, 0x5, 0x7, 0x5, 0xd4, 0x8000, 0xe, 0x2, 0x3, 0x7, 0xffff, 0x1, 0x8, 0xb97, 0x6, 0x10, 0x23, 0x8, 0x6, 0xdf, 0x6, 0x334, 0x1, 0xfffffff3, 0x1ff, 0xce, 0x9, 0xb500, 0x2, 0x8, 0x8, 0x3, 0x401, 0x7fffffff, 0x30, 0x7, 0x8, 0x7, 0x0, 0x800, 0x82e7, 0x1, 0x200, 0x5, 0x2, 0x1, 0x2, 0x0, 0x2, 0x9, 0x7, 0x9, 0x1, 0x9, 0x0, 0x3befff16, 0xd5e4, 0xe9, 0x6, 0xc, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x3, 0x2, 0x7, 0xb, 0x0, 0x1, 0x10000, 0x3, 0x9, 0x4, 0x9, 0xea, 0xa, 0x1, 0xc808, 0x0, 0x4, 0x5, 0x8, 0xd, 0x683, 0x9e3, 0x2, 0x7, 0x6, 0x12b, 0x6, 0x7, 0x5, 0x6a7a, 0x3, 0x4, 0x5, 0x0, 0x8000000, 0x6, 0xe6c, 0x9, 0xc6, 0xaa, 0x8, 0x2, 0x8, 0x7, 0x7, 0x3, 0x475, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x101, 0x729, 0x8000, 0x4, 0x800, 0x2d6, 0x4, 0x2, 0x2, 0x6501, 0xf0000000, 0x400, 0x2cf2, 0x3, 0x2, 0x9, 0x80000, 0xd1, 0x3ff, 0x9, 0x0, 0x9233, 0xffffff94, 0x3, 0x8, 0x8, 0x4ec, 0x3, 0x3, 0x2, 0x62, 0xda6f, 0x9, 0xfffffff6, 0x7c5, 0x7, 0x8, 0x6, 0x800, 0xbbd, 0x538f5c2b, 0x3, 0x10000, 0x3, 0xc30, 0x4, 0x2, 0xc, 0x1, 0x9, 0x7, 0x0, 0x5, 0x8, 0x5, 0x6, 0xfffffffb, 0x7, 0x7, 0x7, 0x5, 0x7f, 0x7, 0x1, 0x7, 0x2, 0x7, 0xffffef57, 0x3ff, 0x0, 0x77e, 0x1, 0x0, 0x1, 0x3, 0x8001, 0x9, 0x7f, 0x65f, 0x7b, 0x0, 0x6, 0x1, 0xff, 0x2, 0x4, 0x6, 0x81, 0x4, 0x401, 0x7fff, 0x2, 0x5, 0x7, 0x2, 0x4, 0xd, 0x45, 0x0, 0x4, 0x3, 0x0, 0x9, 0x1b17, 0x8, 0x90, 0x8, 0xaa6, 0x6, 0x7, 0x7ff, 0x8, 0x5, 0xb, 0x80000001, 0x4800000, 0x2, 0x7, 0x1, 0x2, 0x0, 0x80000001, 0x200, 0x8, 0x6, 0x7, 0x1, 0x80000000, 0x8, 0x3, 0x8, 0x1, 0xffffffaf, 0xf6c, 0xfffffffc, 0x0, 0x4, 0x5, 0xff, 0xc4fd, 0xb, 0x2, 0xfffffff1, 0x82f, 0x2, 0xf, 0x0, 0xc, 0x2c, 0x9, 0x7cc1, 0x3, 0x7, 0x1, 0xfa, 0xfffffffa, 0x0, 0x8, 0x6, 0x8001, 0x30, 0x5, 0x8, 0x7, 0x8, 0x2, 0xec, 0x5, 0x10, 0x1, 0x6, 0x708f724b, 0xfffffffb, 0x86, 0x7, 0x3, 0x6, 0x4, 0x8, 0x1000, 0xcce, 0xfffffffb, 0x0, 0x0, 0x9, 0x5, 0x400, 0xe6, 0xfffffffe, 0x7, 0x9, 0x9, 0x1, 0x7fffffff, 0xff, 0x2, 0x65cf, 0x8, 0x1, 0x4, 0xfffffff6, 0x9, 0x2, 0x4, 0x4, 0x5, 0x6, 0xd, 0x81, 0x912880b2, 0x6, 0x29, 0x3, 0x4, 0x3, 0x5, 0x2, 0x5, 0x1, 0x80000000, 0x8, 0x200, 0xfffffeff, 0x8, 0xe116, 0xabe, 0x2, 0x7, 0xfffffff7, 0x81, 0x6, 0x9, 0x81, 0x7, 0xdd68, 0xa, 0x4, 0xb, 0x1, 0x7bb803e9, 0x8, 0x3, 0xfffffffa, 0x9, 0x1, 0x3, 0x4, 0x1, 0x0, 0x2, 0x5, 0x0, 0x8000, 0x3, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xfffffff9, 0x271, 0x0, 0x9, 0x10000, 0x1ec4, 0x0, 0xf, 0x7, 0x7, 0xf, 0x7, 0x2, 0x5, 0x8, 0x7, 0x7fff, 0x9, 0x2, 0x101, 0x1, 0x1, 0x80, 0x2, 0x8, 0xbcd, 0xd5e, 0x7fffffff, 0xcb, 0x8, 0x3, 0x6, 0x8001, 0x8, 0x3aca, 0xe, 0x9, 0x80000000, 0x7fff, 0x34, 0x740b, 0x40, 0x2, 0xffffffff, 0x0, 0x9, 0x6, 0x8, 0x2, 0x7, 0x8, 0x1000, 0x43b57440, 0x538, 0x276, 0x4, 0x2, 0xe9, 0x9, 0xfffffc00, 0x4, 0x10001, 0x2, 0x400, 0x0, 0x8, 0x5, 0x4, 0x1, 0xc, 0x9, 0xfffffeff, 0x6, 0x3, 0x100000, 0x10, 0x8, 0x10000000, 0x6, 0x40, 0x57, 0x2, 0xfffffff5, 0x5, 0x6, 0xd3, 0x9, 0x37, 0x5, 0x5, 0x8, 0x692, 0x96, 0x7, 0xde3, 0x800, 0x39b, 0x10, 0x9, 0x2, 0x0, 0x9, 0x5, 0x6a, 0xfffffffb, 0x3, 0xfff, 0x8, 0xc33, 0xc, 0x9, 0xa, 0x7, 0x2, 0x7, 0x1, 0xf6, 0x0, 0x101, 0x7, 0x1, 0x5, 0x2, 0x9, 0x2, 0x8, 0x7, 0x5, 0x1000, 0xfffffff3, 0xa, 0x7, 0xfffff426, 0x5, 0x4, 0x2, 0xfffff417, 0x6, 0x3, 0x0, 0xca0f, 0x9, 0x6000, 0x7, 0x7, 0x400, 0x4, 0xa, 0xfc7, 0x10000, 0x1, 0x1000, 0x1, 0x4, 0x6, 0x2, 0x2509, 0x9, 0x9, 0x7, 0x6, 0x80000001, 0x70, 0x9, 0x3, 0x3, 0x3, 0x8001, 0x0, 0x2, 0x5, 0x8, 0x401, 0x9, 0x9, 0xfffffffe, 0x1, 0x7f, 0xb, 0xfffffff9, 0x4, 0x2, 0x5, 0x101, 0x8, 0xfe9, 0x81, 0x1, 0x4, 0x4, 0x7, 0x1, 0x4, 0x9, 0x7, 0x0, 0x0, 0x25, 0x5, 0x3, 0xca1, 0x6, 0xe, 0x7, 0x3, 0x2, 0xfff, 0x5a5b, 0x1ff, 0x5, 0x3, 0x9, 0x3ac5b2ad, 0x9, 0x10, 0x7ff, 0xfffffff9, 0x10, 0x1, 0x100, 0x8f7, 0x8, 0x9, 0x5, 0x4e, 0x9, 0xff, 0x3, 0x8aeb, 0x0, 0x85f, 0x4, 0x3, 0x4, 0x50, 0x7, 0xffff, 0xe0000000, 0x6, 0xffff0000, 0xa, 0x8, 0x6, 0x9bcc, 0x1, 0x1, 0xc, 0x8, 0x42, 0x5, 0xfffffff9, 0x6, 0x1, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x2, 0x8000, 0x9, 0x65b, 0x4, 0xfffffffd, 0x2, 0x9, 0x8, 0x6, 0xcf0, 0xfffffff0, 0x9b8, 0x3, 0x0, 0x7, 0xfe, 0xfffffffb, 0x5, 0xa72, 0x400, 0x1000, 0x7, 0x8, 0x5, 0x1, 0x1f78, 0x4, 0x10001, 0x3, 0x8, 0x0, 0x1, 0x10d, 0x200, 0xd809, 0x8, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x40e8, 0x97, 0xf0, 0x5, 0x3, 0x7fff, 0x1, 0x3, 0x1, 0xdea, 0xffffffc6, 0xbcf, 0x7, 0x9, 0x3ff, 0xfffff991, 0x1, 0x1, 0x0, 0x7ff, 0xff, 0x8, 0x1, 0x6, 0x7c, 0x8, 0x100000, 0xffffffff, 0x6, 0x401, 0xfffffffa, 0x6, 0xe, 0x401, 0xe68, 0x7f, 0x2, 0xf8, 0x8, 0x5, 0x5a, 0x7fffffff, 0x1, 0x6, 0x4, 0x6, 0x99a5, 0x81, 0x95a0, 0xe, 0x4d49, 0x2, 0xffff, 0x5, 0x4, 0xb6cd, 0x3, 0x0, 0x3, 0x8, 0x1, 0x5, 0x0, 0x5, 0x101, 0x6c2, 0x4, 0x80000000, 0x8f8d, 0x9, 0x1, 0x2f8384c9, 0x4, 0x10, 0x9, 0x85, 0x6, 0x52, 0x25, 0x596c510, 0x5, 0x2, 0x8, 0x5, 0x8, 0x95, 0x63, 0x8, 0x3, 0x4, 0x7fff, 0x3, 0x5, 0x5, 0x6, 0x7fffffff, 0x8, 0x0, 0x9, 0xd26, 0x5, 0x6, 0x8, 0x1, 0x6419, 0xed, 0xf78, 0x3, 0x2, 0x80000000, 0x7, 0x7, 0x0, 0x7, 0x7, 0x8, 0x8, 0x0, 0x914, 0x10, 0xffffffff, 0xf83, 0x0, 0x1000, 0x7, 0x4, 0x4, 0x0, 0x7, 0x9, 0x814a, 0x5, 0xff, 0x9, 0x0, 0xffff, 0x6, 0x7, 0x1c33, 0x8001, 0x3, 0x4, 0x0, 0x49f, 0x6, 0x7, 0x3ff, 0x3, 0xfffffffe, 0x9, 0xaa89, 0xa, 0x7fffffff, 0x1, 0xc4, 0xf, 0xb0a4, 0x3, 0x1ff, 0x4, 0x80, 0xfffffff9, 0x1, 0x10, 0x8, 0x80, 0x7, 0xff, 0x6, 0x40, 0x0, 0x9, 0x7, 0x2, 0x0, 0x1, 0x6, 0x0, 0x9, 0x1, 0x5, 0x7, 0x41e, 0xb271, 0x3, 0x10, 0x1ff, 0x8, 0x7fffffff, 0xabb, 0x9, 0x45a, 0x280a, 0x9, 0x5322, 0x3, 0x9, 0x9, 0x3, 0x40, 0x3, 0xfffff6e4, 0x1000, 0x6ab, 0x7e2b, 0x79e1, 0x4, 0x4, 0x8000, 0x2, 0x9, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x81de, 0x5, 0x1, 0xc, 0x6, 0x1000, 0x2, 0xffff, 0xffffffff, 0x101, 0x0, 0x8001, 0x8, 0x6, 0xffff, 0xdfd, 0x9, 0x9, 0x200, 0x8, 0x7ff, 0x401, 0xd72, 0x4, 0xa7d, 0x5, 0xffffffff, 0xaa42, 0x4, 0xffffffff, 0x6304, 0x8000, 0xfffffffd, 0x1000, 0x1ff, 0x1, 0x1, 0x200, 0x0, 0x2, 0xca00eb5, 0x3ff, 0x3, 0xffffff01, 0x6e1, 0xfd7f, 0x6, 0x4, 0x400, 0x2, 0xc9a0, 0x3, 0x0, 0x4, 0x7ff, 0x7, 0xf, 0x2, 0x1, 0x9, 0x7, 0xf9, 0xfd, 0x0, 0x6, 0x6, 0x9, 0x5, 0x4f, 0x8, 0xa, 0x7, 0xfffffffe, 0x775e, 0x2, 0xf, 0x101, 0x2, 0xa, 0x0, 0x3, 0x2, 0x400, 0xfffffff8, 0x2, 0x22, 0x5, 0xa956, 0x1ff, 0x10, 0xb608, 0x200, 0x6, 0x6, 0xfffffffc, 0x7ff, 0x833, 0x30, 0x3, 0x754, 0x0, 0x8, 0x7, 0x80000000, 0x3, 0x4, 0x2, 0x2, 0x6, 0x10, 0x10000, 0x3, 0x7, 0x1, 0xf, 0x8, 0x80000001, 0x2f1, 0x7, 0x737e, 0x7, 0x1000, 0x6, 0x3, 0x7, 0x3, 0x4, 0x2, 0x91, 0x9, 0x2, 0x0, 0xffff, 0x5, 0x4, 0x0, 0x5, 0x6, 0xd, 0x6, 0x0, 0x80000001, 0xa, 0xa1, 0x1, 0x7, 0x8, 0x7, 0x0, 0x7fff, 0x414b, 0x9, 0x4, 0x7, 0xfffffff0, 0x7efaaeee, 0x4, 0x5, 0x100, 0x8, 0x7, 0x4, 0x6, 0xb, 0x0, 0x7, 0x2, 0x809f, 0x5, 0x1ff, 0x8001, 0x8, 0x10, 0x9, 0x6, 0x2, 0x80000000, 0xd9, 0x9, 0xffffffff, 0x6, 0x1, 0xa1, 0xa9c, 0x6, 0x9, 0xd1ad, 0x800, 0x8, 0x7, 0xe7c, 0xb, 0xe5, 0x80000000, 0x4, 0x6, 0x7fffffff, 0x9, 0x5, 0x1, 0x3, 0x8, 0x1, 0x6, 0x9, 0x5, 0x6, 0x7, 0xfbd6, 0x1000, 0x4, 0xcd, 0x401, 0x0, 0x9, 0x80, 0x3, 0x7, 0x2000000, 0x1, 0x4, 0x3, 0x1, 0x7, 0x6, 0x4, 0x5, 0xb8a4, 0x1, 0xffff9002, 0x8, 0x4, 0x9, 0x324d9181, 0x4, 0x5, 0x2, 0x0, 0xa, 0x81e, 0x76d, 0x5, 0x7, 0x7, 0x3, 0x7fa8, 0x6, 0x2, 0x82e, 0x23e, 0x9, 0x101, 0x80000000, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x401, 0x0, 0x234, 0x7, 0x3, 0x4, 0x9bb0, 0x42, 0x5c1, 0x9a, 0x3, 0x9, 0x9, 0xd, 0x200, 0x7, 0x274b619d, 0xb, 0x2, 0x0, 0xc, 0x8, 0x3ff, 0x0, 0x6, 0x7, 0x8, 0x8, 0xfffffffa, 0x5, 0x80000001, 0x1, 0x8, 0x3, 0x2, 0x5b, 0xa48a, 0x3, 0x7, 0x7fff, 0xa9c, 0x2b, 0x1, 0x1, 0x1, 0x5, 0x7, 0x7fffffff, 0x8, 0x5, 0x0, 0x7f, 0x6, 0x6, 0x9, 0x667e, 0x9, 0x1, 0x1, 0x4552, 0x7, 0xece, 0x3, 0x6f, 0xe, 0x7, 0x800, 0x2, 0x83, 0xfffffa2a, 0x5, 0x937, 0x3, 0x5eb2, 0x2, 0x1, 0x7, 0xbd, 0x5, 0xb4f6, 0x3ff, 0x3, 0x4, 0x100, 0x3, 0x7fff, 0x0, 0x1000, 0x5ec, 0x5, 0x400, 0x10000, 0x9, 0x9, 0xfff, 0x3, 0xfffffff8, 0xfffffff7, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0x2, 0x24, 0x9, 0x4000000, 0x8, 0x5, 0x3, 0x6, 0xfd, 0x0, 0x7222dd1, 0x8, 0x1, 0x79, 0xec6, 0x0, 0x7, 0x17, 0x3, 0x3f, 0x1, 0x4d1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x2, 0x7fffffff, 0x0, 0xe492, 0x3, 0x400, 0x2, 0x0, 0x6d, 0xfffffffd, 0xef1, 0x3, 0x6, 0xfe9d, 0xf, 0x9, 0x401, 0x6, 0x3, 0x8, 0x1, 0x9, 0x9, 0x6, 0x3f, 0x3ff, 0xca40, 0xff, 0xfffff70d, 0x7, 0x4, 0x800, 0x4c3a3d1a, 0xa, 0x4, 0x8e, 0x4, 0x2, 0x8000, 0x2, 0xb, 0xfffffffd, 0x2, 0x10, 0x9, 0x9, 0x1, 0x1, 0xff, 0xfffffffd, 0x8, 0x6, 0x5, 0x1, 0x10000, 0x1f, 0x2, 0x2, 0x4, 0x2d300000, 0x6ff7, 0x10000000, 0x8, 0xfffffff7, 0x7, 0x3, 0x38, 0x100, 0x81, 0x1, 0xcb, 0x5, 0x6, 0x4, 0x5, 0x100, 0xbad, 0x7, 0x1, 0xff, 0x5, 0x9, 0x9, 0x5, 0x3, 0xf5a, 0x6, 0x5b, 0x2, 0xf, 0x9, 0x2, 0xc0000000, 0x5, 0x7, 0xfffffffb, 0xb, 0x401, 0x4, 0x4, 0xe, 0x812e3c0e, 0x62d6, 0x30, 0x0, 0xbcb, 0x4, 0x200, 0x2, 0xa9, 0xeb, 0x9, 0x5, 0x9, 0x2, 0x6, 0x4, 0x4, 0xe67, 0x10000, 0x2, 0x8, 0x87bb]}, @TCA_POLICE_RATE={0x404, 0x2, [0xae, 0x8000, 0x8, 0x7181, 0x2, 0x0, 0x0, 0x3, 0x7fffffff, 0x1, 0x4, 0x2, 0x9, 0x2917, 0x7, 0x10000, 0x9, 0xb96, 0x11e, 0x6, 0x0, 0x5, 0x7, 0x400, 0x9, 0x2, 0x3, 0x2, 0x5, 0x80, 0x9, 0x7, 0xc85, 0x9, 0x551, 0x10001, 0x3, 0x7, 0x7, 0x1, 0x8, 0x10, 0x6, 0x80, 0x3, 0x4, 0x40, 0x0, 0x2, 0x3, 0x4, 0x4, 0x5, 0x9, 0x6, 0x4, 0x9, 0x6, 0x3, 0x8000, 0x0, 0xfffffffc, 0x4, 0x400, 0x7f, 0xfffffc01, 0x2, 0x3, 0x0, 0x800, 0x5, 0xd, 0xffff7fff, 0x200, 0x7, 0xa, 0x80, 0x9, 0x6, 0x3, 0x80, 0xed3, 0x9, 0x7ff, 0xfffffffb, 0x4, 0x8000, 0x8, 0x200, 0x214a, 0xb080, 0x0, 0x0, 0x3, 0x2, 0x82f3e233, 0x1, 0x5, 0xfe0, 0x6, 0x2, 0x1, 0x7e90, 0x4, 0x8000, 0x10, 0xfffffffa, 0x100, 0x90, 0x7, 0x4, 0x7, 0xfffffff9, 0x1, 0x1, 0xf, 0x0, 0x5, 0x6, 0x8, 0xfffff800, 0x0, 0x4e5, 0x5, 0xfffffffe, 0x3ff8, 0x9, 0x7, 0xfffffff7, 0x9, 0x1ff, 0x1, 0xe202, 0x7, 0xfffffff7, 0x3, 0x401, 0x7, 0x4, 0x47f6, 0x3, 0x9, 0x3, 0x140, 0xa617, 0x5, 0x3, 0xfffffffa, 0x1c7, 0xa9a0, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x800, 0x3113, 0x5, 0x3, 0x5, 0x80, 0x8, 0x9, 0x8, 0x1118c609, 0xfffffff7, 0x308, 0xc, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x2, 0x249, 0xf9fe, 0x8, 0x8, 0x7, 0x0, 0x8, 0x9, 0x0, 0x9, 0x0, 0x80000001, 0x5, 0x381, 0xc, 0x0, 0x2, 0x0, 0xfffffffa, 0x9, 0x9, 0x7ff, 0x80000001, 0x2, 0x8, 0xe360, 0x8, 0x4, 0x0, 0x8, 0x1, 0x0, 0xfffff378, 0x0, 0x4, 0x63c2ca4d, 0x3, 0x0, 0x473e, 0x10001, 0x101, 0x2, 0x8, 0x9, 0x4, 0xd56, 0x1e60, 0x40, 0x1, 0x5, 0x6, 0x9, 0x5, 0xca, 0xfffffffb, 0x6, 0x80000001, 0xf391a4f, 0x200, 0x5, 0x1, 0x40000000, 0x9, 0x3ff, 0x3, 0x5, 0x8, 0xfffffffc, 0x3000, 0x3, 0x2, 0x4ff, 0x5, 0x10, 0x0, 0x7, 0x5fe, 0xfffffffd, 0x8, 0x7, 0xffff0000, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x2b2, 0x3, 0x7f, 0x40, 0x2080000, 0x7, 0xb, 0x8, 0x5, 0x33b8a304, 0x5, 0x7fff, 0x8001, 0xffffffb2, 0xee, 0xffffffff, 0x5, 0x7, 0x4, 0xfffffffe, 0x5, 0x7, 0x9, 0x100, 0x7b1500, 0x1, 0xc, 0x9, 0x80000000, 0x400, 0xffffd440, 0x6, 0x7, 0x0, 0xfff, 0x0, 0x8, 0x10001, 0xfffffffa, 0x1, 0xc, 0x400, 0x2, 0xff, 0x3, 0x80000000, 0x2, 0x743, 0xda19, 0xe5, 0x7, 0x7f, 0xb, 0x4, 0x80000000, 0x63e, 0x80000001, 0x3, 0x7, 0x80000001, 0x5, 0x0, 0xc, 0x7, 0xe8, 0xce, 0x10000, 0x3, 0x5, 0x5, 0x4, 0x9, 0xda, 0xfffffffa, 0x10000, 0x2, 0x4, 0x6, 0x3000, 0xa8d3, 0x1000000, 0x0, 0x6, 0x8, 0x1, 0x4, 0x3, 0x4, 0x9, 0x5, 0x1c8a643f, 0xb, 0x7fffffff, 0x7, 0xfffffffa, 0xc, 0x22, 0x101, 0x0, 0x8, 0x80000000, 0x5, 0x1ff, 0x800, 0xc63, 0x2e, 0xaa5, 0x1, 0x101, 0xcdb, 0x8, 0x2, 0x3, 0x42, 0x3, 0x7, 0xf0, 0x8, 0x7, 0x558, 0x0, 0x8, 0xd6c0, 0xffffffff, 0x7f, 0x61b5b361, 0x7d4b, 0x3, 0x7, 0x3e7, 0x8, 0x4, 0xfffffff9, 0xda8d, 0x7fff, 0x6, 0x5, 0xff, 0x63, 0x9, 0xff, 0x7835, 0x10, 0x6, 0x5, 0x5, 0x5, 0x1, 0x3cc0000, 0x0, 0x2, 0xfffffff6, 0x5, 0x0, 0x0, 0x6, 0x7, 0x4, 0x8001, 0xd, 0x6, 0xfffffff7, 0x7fffffff, 0x1, 0x5, 0xa7f3, 0x5, 0x800, 0x6, 0x5, 0xd29, 0x8, 0x9, 0x7, 0x8bd, 0x400, 0x7fffffff, 0x7, 0x8, 0x3, 0x4, 0xe, 0x0, 0x42, 0x1, 0x4000, 0x0, 0x0, 0xbf9c, 0x7ff, 0x5, 0x0, 0x0, 0x5, 0x101, 0xffffffff, 0x4, 0x80000001, 0xa, 0x0, 0x8, 0x4, 0x3d, 0x400, 0x0, 0x4, 0x21, 0x9, 0xa, 0x80000000, 0x4, 0x7, 0x4, 0x7ff, 0xe, 0x69, 0x7, 0x9, 0x101, 0x10001, 0x5, 0x81, 0x3, 0x15, 0x3, 0x4, 0x0, 0x0, 0xd, 0x7, 0x72, 0x18, 0x8, 0x2, 0x7f, 0x10000, 0x7a90, 0x0, 0x7, 0x6, 0x8, 0x9, 0x5, 0x1, 0x81, 0x0, 0x4, 0x7, 0x0, 0x9f22, 0x10000, 0x2, 0xd, 0x539, 0x2, 0x5]}]]}, {0x79, 0x6, "5011ded2c2ca310791cf81664b81cf6258b2f0c7c1bbd5c62cfdccce84f8b3d3f979dda6c35340556936e2452e1e866d68c8b5f58218759be126274a05fc3805fc1c419373ae3968ca262f299970e459c62d2355aa6be9c5afc59c9454b722aabe95f2f9881555c90062f47aaf2ff8f29e12ae47dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x174, 0x1, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff913a, 0x4, 0x2, 0x1, 0x3}, 0x23}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2fd0, 0x401, 0x20000000, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9094, 0x20000003, 0x426b, 0x81}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x20000002, 0x2, 0x6d0b}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x80000000, 0x5, 0x1, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc396, 0x7, 0xffffffffffffffff, 0x0, 0x3}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x6, 0x5, 0xbbb}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x7, 0x5, 0xffffffff}, 0x80}}]}, {0x64, 0x6, "b00ea7e17679061639da74a3ee013ed154270cb787dffb1860f26d311941dae885f62368d2e8485308103f689fabc6119ec17652f6753423a2e2062bd1704a3b2507f924ba57a427cc5f51a3924f66e54ab212081805749d07fea6b5c7dfe9ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x15, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xe, 0x7, 0x7ff, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xf, 0x6, "1d48a0e0a436709ee3dbdb"}, {0xc}, {0xc, 0x8, {0x4}}}}, @m_vlan={0x90, 0xd, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff7, 0x9, 0x10000000, 0x8, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xf03, 0x20000000, 0x80, 0x2}, 0x1}}]}, {0x23, 0x6, "2fae0cd907400376aa4f432e4e15bdbb48f20ba72e00044765ae5a76680c71"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x2898}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) 2.423781801s ago: executing program 0 (id=2595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r9, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x884) 2.106164041s ago: executing program 4 (id=2597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaab2aaaaaa32080045000028006700000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000590780006"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000180), 0x0}, 0x20) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018020000000200000000000000800020000000045", 0x24) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.837196905s ago: executing program 4 (id=2598): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, &(0x7f00000003c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "0e3f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x13, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000001cc0)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000001d00)={0xa, 0x4e24, 0x0, @empty, 0xffff8b92}, 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00d74ebf2200080045008b9f253a000000069078ac1414bbac1414aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000007c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0xff17, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x20050800) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="20ea100013006ff0201824dc9c510f84a266ab7e081402b36f2e287f3b4f7199581cc29c170700000000000000e3c60e4534d60dce99c423a3debbda5028b69f5e383f23e3cb824210e4fc89bd8d2e8a1ffd218376aa3f5845da487f1f3554de2032b072", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) (async) socket$kcm(0x21, 0x2, 0xa) (async) r11 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r11, &(0x7f0000001e80)={&(0x7f0000001ec0)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001f40)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1.61451857s ago: executing program 3 (id=2599): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x2a0, 0x390, 0x1c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x5}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f9) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f00000000c0)=""/152, 0x98) bind$packet(r0, &(0x7f0000000340)={0x11, 0xf5, r1, 0x1, 0x7, 0x6, @local}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x24, 0x11, 0x1, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810) 1.448826996s ago: executing program 2 (id=2600): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x5, 0x0, 0x1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x5, 0x609f, 0x40000, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x2, 0x3}}, 0x48}, 0x1, 0x0, 0x225c17d03, 0x24000805}, 0x44801) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x48, r4, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) connect$phonet_pipe(r2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000001500010000000000000000000a"], 0x28}}, 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 1.324273561s ago: executing program 2 (id=2601): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x1, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in=@multicast2, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x9, 0x200000000000000, 0x4}, 0xffffffff, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000005508f0ff0000000085000000b4000000b70000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x80, 0x0) close(r7) r8 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000880)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xe, "00000000000204000e00000000000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) close(r10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x6, 0x4, 0x0, 0xfffffffe}]}) ioctl$TUNGETVNETLE(r10, 0x40107446, &(0x7f0000000840)) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r12, 0x4004743d, 0x110e22fff6) write$cgroup_type(r12, &(0x7f0000000900), 0x9) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) 1.277049367s ago: executing program 1 (id=2602): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0400fcffffff04"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x24040040) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001000)={'bridge_slave_0\x00', @random="e4a8b032869c"}) (async) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x8000) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.199626916s ago: executing program 0 (id=2603): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000080000000"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000010114010000000035c4cc8c0200fffd300002802c00018014000300fe80820000000000000000000000000e14000400fe88000000000014000000be1c00fd010c0019800800020059050000"], 0x50}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg(r3, &(0x7f0000000580), 0x4000000000001f2, 0xfc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 1.147350511s ago: executing program 4 (id=2604): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000060000000800000002"], 0x50) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xb}, {0x1}, {0x5, 0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x22) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@fwd={0xe}, @float={0x8, 0x0, 0x0, 0x10, 0xc}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x2}]}, @restrict={0x3}]}, {0x0, [0x5f, 0x61, 0x2e, 0x61, 0x0, 0x0]}}, &(0x7f0000000380)=""/213, 0x58, 0xd5, 0x0, 0x3e5}, 0x28) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x52e, 0x8001, {{0x25, 0x4, 0x2, 0x20, 0x94, 0x64, 0x0, 0xfb, 0x4, 0x0, @broadcast, @private=0xa010100, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x79, [@dev={0xac, 0x14, 0x14, 0x2f}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0x0, [{@private=0xa010102, 0x6}, {@rand_addr=0x64010101, 0x7}, {@multicast1, 0x6}]}, @timestamp={0x44, 0x14, 0xe5, 0x0, 0x6, [0x5, 0x10, 0x3, 0x0]}, @cipso={0x86, 0x18, 0x3, [{0x1, 0x12, "d17a0c1ed032d89dc5d537a50612186b"}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x4, [{@private=0xa010101, 0x3}, {@empty, 0x9}, {@loopback, 0xb}]}]}}}}}) (rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xe, 0x0, r3, 0x80000000, '\x00', r5, r4, 0x4, 0x3, 0x5}, 0x50) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)}], 0x1}, 0x4040004) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f00000002c0), 0x0}, 0x20) 1.043636668s ago: executing program 3 (id=2605): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x18, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000001800000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000b5000400010000001801000020646c2500000000002020207b1af8ff00000000bfa120000000000007010000f8ffffffb702000008001000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000cc0)='GPL\x00', 0x6, 0x1001, &(0x7f0000001000)=""/4097, 0x41100, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r1, 0x1, 0x38, 0xffffffffffffffff, &(0x7f0000000080)=0x60) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum64={0xe, 0x1, 0x0, 0x13, 0x0, 0x0, [{0xa, 0x6566, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x2e]}}, &(0x7f0000000340)=""/111, 0x35, 0x6f, 0x1, 0x7f}, 0x28) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum64={0xe, 0x1, 0x0, 0x13, 0x0, 0x0, [{0xa, 0x6566, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x2e]}}, &(0x7f0000000340)=""/111, 0x35, 0x6f, 0x1, 0x7f}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000480)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0x8, 0xb, 0x4, 0x100, 0x10}, @jmp={0x5, 0x1, 0x9, 0x8, 0xb, 0x2, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0xce, &(0x7f00000001c0)=""/206, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x9, 0xef, 0x7fffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r4], &(0x7f0000000500)=[{0x0, 0x1, 0xd, 0x9}, {0x2, 0x2, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x2}], 0x10, 0x8}, 0x94) 1.025815286s ago: executing program 2 (id=2606): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket(0x5, 0x2, 0x1) socket(0x10, 0x803, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, 0x0, &(0x7f0000000080), 0x20}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_cmd={0x2c, 0x6, 0x240004, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'veth0_to_team\x00', &(0x7f0000000600)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) 957.408945ms ago: executing program 4 (id=2607): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) (async) write(r1, &(0x7f00000002c0)="04", 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x54) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) (async) close(r1) 863.988027ms ago: executing program 0 (id=2608): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x6, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7, 0x923, 0x101, 0x1155, 0x1, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x4, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x20001, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x8, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0xb, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x7, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x4, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x200007, 0xb96, 0x3, 0x7, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1a, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0x1, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x1, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x5, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x0, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0xfffffffd, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10400, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x1fe, 0x1, 0x80, 0xffc, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x0, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x0, 0x10, &(0x7f0000000bc0), 0xf000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xb, &(0x7f0000000b40)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffe7}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x20}}]}, &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f0000000100)=ANY=[], 0x33) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xe, 0xc, &(0x7f0000001c00)=ANY=[@ANYBLOB="180800000000000000000000000000002408000009000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007600000095"], &(0x7f0000001c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) readv(r5, &(0x7f0000001a00)=[{&(0x7f0000001a40)=""/220, 0xdc}], 0x1) sendfile(r2, r1, 0x0, 0x10000) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000200)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)={0x40, r7, 0x1, 0x0, 0x800000, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x40}}, 0x2008040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000cff527bc7400fadbdf2500000000", @ANYRES32, @ANYBLOB="3c6a02002b9205001c0012800b00010067726574617000000c00d4c7cc620700000000000a000100aa"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x5) socket$inet_sctp(0x2, 0x1, 0x84) 863.312811ms ago: executing program 3 (id=2609): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x150, 0x111, 0x4b4, 0x0, 0x700, 0x268, 0x278, 0x278, 0x268, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [], 'ip6gre0\x00', 'caif0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xff, [0x0, 0x0, 0x0, 0x8800, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffffff], [], 'geneve1\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1, 0x836ab3a, 0x2, 'snmp_trap\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 717.444864ms ago: executing program 3 (id=2610): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x124) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x1, 0xfffffffe}]}, [{}, {}, {}, {}, {0xfff}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {0x1}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8fb3}, {}, {0x0, 0x47da3496, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {0xfffffffe}, {0x20000}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xffffffff, 0x0, 0xfffffffd}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x4}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1ff}, {}, {0x4, 0x7}, {}, {0x0, 0x0, 0x0, 0xa9cd}, {}, {0x0, 0x3, 0x0, 0x4, 0x2}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xc}, {0x10000}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x8) poll(0x0, 0x0, 0x200) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) poll(&(0x7f0000000040)=[{r4, 0x2}], 0x1, 0x80000000) close(0x3) 705.924438ms ago: executing program 4 (id=2611): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000064000000060a01040000000000000000010000003c000480380001800e000100696d6d65646961746500000024000280080001400000001518000280110001007c3760b63c07f96ed951bfe08717000008000b40000000000900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) getsockname$netlink(r6, &(0x7f0000000680), &(0x7f00000006c0)=0xc) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800060019000000040005000800000800030000000000000000000000000000bc25844ed87b764a11fa211439914ea7f53c7f2191793adc66f131997149ab4ce03abf07258d3b7daeb5bc7e2eb424300af3d5d7a170f352c7c1063a0121d618d2bc4a6df35f5eaf257d72d5fc7da2e6c9ee55b10de8487e13d59a", @ANYRES32=r2, @ANYBLOB="08001900", @ANYRES32=r3, @ANYBLOB="140005000000000000000000000000000000000008001900", @ANYRES32=r5, @ANYBLOB="08001700080000000800170006000000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 704.345832ms ago: executing program 2 (id=2612): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000b0800aa1202"], 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, r2, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="13000000e2b28052151a0da6b94626dd784d88d69982feb0fc455697cd46162a595f9bac98200de5599fde0451a3a87c2e44f7e399954a90eebcbd2e0b48bbdd64634d05149b20a3aa7b222a8f225dff26b3fa745284b41285f77cbc42b5540135dfb23aa5a91eb978801408dbfb54079fd15cc1f1c17c43f34bebb843183f8895d28185a4d234b6ffa846544582f628eeb1832c6e7cbda74b58798d7ecb9f50a4bbe8", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf2502000000060001004e220000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x14, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000540)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x1d66}, 0x1c, 0x0}}], 0x2, 0xc040) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="db14b571d61f44925a8770ca189a14060aebae31ff09730e440627ce371e8fae097e81d5066b8255d517ff9a", @ANYRES16=r3, @ANYBLOB="0100000000e5ffffffff010000000900010053"], 0x34}}, 0x0) 303.802641ms ago: executing program 4 (id=2613): r0 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r12, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r12, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000480)={r13, 0x7, 0x3}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000102, 0x0) 165.022961ms ago: executing program 2 (id=2614): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1a00f800000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6b) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = gettid() sendmsg$AUDIT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x3e9, 0x400, 0x0, 0x25dfdbfd, {0x72, 0x1, 0x2, r1, 0x4, 0x6, 0xe, 0x0, 0x0, 0x5, 0x7}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48804) 124.677901ms ago: executing program 1 (id=2615): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000ed0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$inet6(0xa, 0x3, 0x3c) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000680)="06c3", 0x2}, {&(0x7f00000006c0)="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", 0x600}, {&(0x7f0000000cc0)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb", 0x1e}], 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000d40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000e40)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027"], 0xb4}}, 0x8044) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000011c0)={0x48, r2, 0x5, 0x0, 0x400, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xda1, 0x59}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfffd}, @NL80211_ATTR_STA_AID={0x0, 0x10, 0x64f}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f00000010c0)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r9, &(0x7f0000001100)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={0x0}}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @multicast1}], 0x2c) 0s ago: executing program 0 (id=2616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000e40)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xb019, &(0x7f0000000300)=""/234}, 0x78) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={r3, 0x6}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000f00)="b9e20200600d0600f307108c3336", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xb, 0x9}, 0x48) unshare(0x22020400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000580)="b9ff0303000d698cb89e40f086", 0x0, 0xfffff1de, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000000c0)={r4, 0x0, &(0x7f0000000100)=""/53}, 0x20) pipe(&(0x7f0000000000)) kernel console output (not intermixed with test programs): red promiscuous mode [ 179.127239][ T9618] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 179.130973][ T9618] team0: Port device macvlan4 added [ 180.291966][ T5298] veth0_macvtap: left promiscuous mode [ 180.420754][ T9659] __nla_validate_parse: 14 callbacks suppressed [ 180.420773][ T9659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1028'. [ 180.940177][ T9672] netlink: 'syz.1.1032': attribute type 1 has an invalid length. [ 181.060528][ T9672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.174446][ T9672] macvlan4: entered promiscuous mode [ 181.174482][ T9672] macvlan4: entered allmulticast mode [ 181.174802][ T9672] bond6: entered allmulticast mode [ 181.174840][ T9672] bond6: entered promiscuous mode [ 181.182950][ T9672] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 181.218290][ T9672] team0: Port device macvlan4 added [ 181.849921][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 182.186939][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1037'. [ 182.461606][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1043'. [ 182.461630][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 182.505621][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 182.611034][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1044'. [ 182.878813][ T9738] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 182.935686][ T9738] 8021q: adding VLAN 0 to HW filter on device bond7 [ 183.053733][ T9749] vlan2: entered promiscuous mode [ 183.085829][ T9745] macvlan5: entered promiscuous mode [ 183.085852][ T9745] macvlan5: entered allmulticast mode [ 183.086141][ T9745] bond7: entered allmulticast mode [ 183.086178][ T9745] bond7: entered promiscuous mode [ 183.091056][ T9745] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 183.096107][ T9745] team0: Port device macvlan5 added [ 183.537972][ T9770] vlan2: entered allmulticast mode [ 183.538250][ T9770] bridge0: port 3(vlan2) entered blocking state [ 183.538442][ T9770] bridge0: port 3(vlan2) entered disabled state [ 183.542299][ T9770] vlan2: entered promiscuous mode [ 183.551858][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1058'. [ 183.604855][ T9776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1057'. [ 183.629928][ T9777] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 183.698910][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1058'. [ 183.756855][ T9772] nbd: device at index 64 is going down [ 183.946769][ T9047] udevd[9047]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 184.223207][ T9796] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 184.422739][ T9801] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 184.528727][ T9801] 8021q: adding VLAN 0 to HW filter on device bond8 [ 184.667572][ T9815] macvlan7: entered promiscuous mode [ 184.667594][ T9815] macvlan7: entered allmulticast mode [ 184.755663][ T9819] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 184.763391][ T9819] 0ªX¹¦Dö»: entered allmulticast mode [ 184.904238][ T9826] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 184.942588][ T9826] smc: smcd device lo applied user defined pnetid SYZ0 [ 184.982175][ T9838] Bluetooth: hci0: unsupported parameter 5135 [ 184.982195][ T9838] Bluetooth: hci0: unsupported parameter 8192 [ 184.982222][ T9838] Bluetooth: hci0: unsupported parameter 5135 [ 184.982235][ T9838] Bluetooth: hci0: unsupported parameter 8192 [ 184.983540][ T9838] xt_hashlimit: max too large, truncated to 1048576 [ 184.983994][ T9838] Cannot find del_set index 4 as target [ 185.307384][ T9856] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 185.310880][ T9856] bond4 (unregistering): Released all slaves [ 185.407180][ T9852] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 185.433160][ T9858] geneve2: entered promiscuous mode [ 185.433181][ T9858] geneve2: entered allmulticast mode [ 185.450325][ T9864] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 185.542037][ T9864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.609579][ T9864] netlink: 'syz.4.1076': attribute type 3 has an invalid length. [ 185.630208][ T9875] __nla_validate_parse: 8 callbacks suppressed [ 185.630226][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 185.803527][ T9882] x_tables: duplicate underflow at hook 4 [ 185.865050][ T9887] netlink: 'syz.4.1081': attribute type 1 has an invalid length. [ 186.014217][ T9887] 8021q: adding VLAN 0 to HW filter on device bond6 [ 186.053500][ T9894] macvlan4: entered promiscuous mode [ 186.053570][ T9894] macvlan4: entered allmulticast mode [ 186.053823][ T9894] bond6: entered allmulticast mode [ 186.053861][ T9894] bond6: entered promiscuous mode [ 186.080472][ T9894] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 186.095660][ T9894] team0: Port device macvlan4 added [ 186.139705][ T9887] bond6: (slave ip6gretap1): making interface the new active one [ 186.139726][ T9887] ip6gretap1: entered promiscuous mode [ 186.139872][ T9887] ip6gretap1: entered allmulticast mode [ 186.141382][ T9887] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 186.185537][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1087'. [ 186.342841][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 186.512236][ T9914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1088'. [ 186.684752][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 186.684786][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 186.742848][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 186.742881][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 186.744492][ T9279] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.744531][ T9279] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.744562][ T9279] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.744593][ T9279] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.087920][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'. [ 187.149098][ T9922] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.1092'. [ 187.570824][ T9954] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 187.664983][ T9954] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.718315][ T9954] macvlan5: entered promiscuous mode [ 187.718337][ T9954] macvlan5: entered allmulticast mode [ 187.718822][ T9954] bond4: entered allmulticast mode [ 187.718877][ T9954] bond4: entered promiscuous mode [ 187.737033][ T9954] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 187.749763][ T9954] team0: Port device macvlan5 added [ 188.253400][ T9976] ip_tables: iptables: counters copy to user failed while replacing table [ 188.680861][ T9991] pim6reg: entered allmulticast mode [ 188.691295][ T9993] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 188.764208][ T9993] 8021q: adding VLAN 0 to HW filter on device bond8 [ 189.178180][ T9997] macvlan6: entered promiscuous mode [ 189.178202][ T9997] macvlan6: entered allmulticast mode [ 189.180815][ T9997] bond8: entered allmulticast mode [ 189.180879][ T9997] bond8: entered promiscuous mode [ 189.181588][ T9997] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 189.219003][ T9997] team0: Port device macvlan6 added [ 189.426338][T10008] netlink: 'syz.0.1115': attribute type 2 has an invalid length. [ 189.661967][T10022] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 189.687867][T10014] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 190.108813][T10033] netlink: 'syz.3.1123': attribute type 10 has an invalid length. [ 190.136275][T10033] netlink: 'syz.3.1123': attribute type 11 has an invalid length. [ 190.191257][T10037] netlink: 'syz.3.1123': attribute type 10 has an invalid length. [ 190.327596][T10034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.389971][T10034] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 191.854489][ T9287] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.854531][ T9287] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.854564][ T9287] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.854594][ T9287] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.097019][T10118] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 192.253088][ T4954] block nbd0: Receive control failed (result -32) [ 192.254911][ T5649] block nbd0: Receive control failed (result -32) [ 192.501590][T10135] __nla_validate_parse: 13 callbacks suppressed [ 192.501610][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 192.501635][T10135] netlink: 'syz.0.1147': attribute type 20 has an invalid length. [ 192.501648][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 192.750609][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1149'. [ 192.772741][T10146] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 192.773628][T10147] netlink: 'syz.2.1149': attribute type 3 has an invalid length. [ 192.798472][T10147] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1149'. [ 193.317189][T10175] erspan2: entered allmulticast mode [ 193.601100][ T4954] block nbd1: Receive control failed (result -32) [ 193.727614][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1161'. [ 193.727649][T10198] nbd: must specify at least one socket [ 194.268335][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268394][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.459329][T10256] tipc: Enabling of bearer rejected, failed to enable media [ 195.535074][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.549995][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 195.570785][T10260] bridge4: entered promiscuous mode [ 195.856376][T10275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1183'. [ 196.226691][T10291] gretap0: entered promiscuous mode [ 196.262099][T10292] syzkaller1: entered allmulticast mode [ 196.331837][T10296] x_tables: unsorted entry at hook 2 [ 196.357869][T10296] x_tables: unsorted entry at hook 2 [ 196.881106][T10318] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1195'. [ 196.990190][T10327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1198'. [ 197.029755][T10330] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 197.029755][T10330] Please contact the netfilter-devel mailing list or update your nftables rules. [ 197.197982][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.652523][T10362] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 198.330878][T10405] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 198.555582][T10417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1217'. [ 198.926813][T10438] netlink: 'syz.2.1224': attribute type 21 has an invalid length. [ 198.959095][T10438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1224'. [ 199.533809][T10466] bridge5: entered allmulticast mode [ 199.560787][T10454] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.624151][T10454] bond5: (slave lo): Enslaving as an active interface with an up link [ 199.641529][T10454] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 200.085490][T10497] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1234'. [ 200.130593][T10500] virt_wifi0: mtu less than device minimum [ 200.278447][T10505] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 200.377386][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 200.823867][T10552] netlink: 'syz.1.1244': attribute type 2 has an invalid length. [ 201.485941][T10557] ip6tnl2: entered promiscuous mode [ 201.485963][T10557] ip6tnl2: entered allmulticast mode [ 201.488873][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 201.523567][T10557] ipvlan2: entered allmulticast mode [ 201.523588][T10557] virt_wifi0: entered allmulticast mode [ 201.537564][T10557] batman_adv: batadv0: Adding interface: ipvlan2 [ 201.537579][T10557] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.538330][T10557] batman_adv: batadv0: Interface activated: ipvlan2 [ 201.655066][T10560] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1247'. [ 201.658487][T10560] ip_tables: iptables: counters copy to user failed while replacing table [ 202.205588][ T5805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.554546][ T5805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.715666][T10612] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1256'. [ 202.715685][T10612] tipc: Invalid UDP bearer configuration [ 202.715725][T10612] tipc: Enabling of bearer rejected, failed to enable media [ 202.774977][ T5765] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.166058][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.416088][T10654] ip_tables: iptables: counters copy to user failed while replacing table [ 203.423941][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 203.429875][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 203.430204][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 203.430544][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 203.430849][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 203.431160][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 203.434643][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 203.435006][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 203.435309][T10657] ip_tables: iptables: counters copy to user failed while replacing table [ 203.735482][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1270'. [ 203.936271][T10675] syzkaller1: entered promiscuous mode [ 203.936294][T10675] syzkaller1: entered allmulticast mode [ 204.220367][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 204.308841][T10688] rxe_eth0 speed is unknown, defaulting to 1000 [ 204.310339][T10693] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 204.466109][T10693] 8021q: adding VLAN 0 to HW filter on device bond9 [ 205.166946][T10733] bond5: option mode: unable to set because the bond device has slaves [ 205.209148][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 205.268583][T10738] bond9: option broadcast_neighbor: invalid value (4) [ 205.271521][T10738] bond9 (unregistering): Released all slaves [ 205.314384][T10742] netlink: 'syz.4.1288': attribute type 3 has an invalid length. [ 205.482998][T10753] batman_adv: batadv0: Adding interface: syz_tun [ 205.483015][T10753] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.483044][T10753] batman_adv: batadv0: Interface activated: syz_tun [ 205.774095][T10764] macsec1: entered promiscuous mode [ 205.957767][T10772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1297'. [ 206.008489][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 206.053987][T10779] x_tables: duplicate underflow at hook 3 [ 206.065072][T10778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1300'. [ 206.065139][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 206.065160][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1300'. [ 206.065306][T10778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1300'. [ 206.065322][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 207.686775][T10851] netlink: 'syz.2.1319': attribute type 1 has an invalid length. [ 207.687783][T10850] netlink: 'syz.2.1319': attribute type 1 has an invalid length. [ 207.814003][T10860] x_tables: duplicate underflow at hook 3 [ 208.471136][T10891] erspan1: entered promiscuous mode [ 208.895120][T10908] block nbd2: shutting down sockets [ 209.217968][T10924] __nla_validate_parse: 102 callbacks suppressed [ 209.217987][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1337'. [ 209.530029][T10935] x_tables: duplicate underflow at hook 3 [ 210.108390][T10952] syzkaller0: entered promiscuous mode [ 210.108413][T10952] syzkaller0: entered allmulticast mode [ 210.407286][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1349'. [ 210.407320][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'. [ 210.502570][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'. [ 210.591756][T10974] net_ratelimit: 61 callbacks suppressed [ 210.591774][T10974] ip_tables: iptables: counters copy to user failed while replacing table [ 211.549458][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.550200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.550821][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.180215][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.180898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.181851][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.182348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.408359][T10985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1352'. [ 213.058455][T11018] batman_adv: batadv0: Adding interface: syz_tun [ 213.058472][T11018] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.058500][T11018] batman_adv: batadv0: Interface activated: syz_tun [ 213.092321][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 213.093790][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 213.093861][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 213.103299][T11020] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1363'. [ 213.104183][T11019] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1363'. [ 213.455068][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.531225][T11026] netlink: 'syz.4.1365': attribute type 5 has an invalid length. [ 213.732517][T11047] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 213.747343][T11047] netlink: 'syz.0.1371': attribute type 4 has an invalid length. [ 213.921004][T11056] x_tables: duplicate underflow at hook 3 [ 214.152941][T11060] TC_ACT_REPEAT abuse ? [ 214.602036][T11084] __nla_validate_parse: 1 callbacks suppressed [ 214.602056][T11084] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1385'. [ 214.678639][T11086] x_tables: duplicate underflow at hook 2 [ 214.836606][T11093] tipc: Started in network mode [ 214.836628][T11093] tipc: Node identity 4, cluster identity 4711 [ 214.836641][T11093] tipc: Node number set to 4 [ 215.092129][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1389'. [ 215.092165][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1389'. [ 215.170131][T11107] netlink: 'syz.2.1391': attribute type 4 has an invalid length. [ 215.466731][T11114] veth0: entered promiscuous mode [ 215.474732][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 215.474759][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 215.474772][T11119] netlink: 'syz.4.1394': attribute type 1 has an invalid length. [ 215.513635][T11112] veth0: left promiscuous mode [ 215.849354][T11133] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1397'. [ 216.156910][T11144] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 216.156967][T11144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1401'. [ 216.238020][T11144] net_ratelimit: 2 callbacks suppressed [ 216.238066][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.238671][T11144] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 216.238703][T11144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1401'. [ 216.238763][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.241384][T11144] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 216.241419][T11144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1401'. [ 216.333985][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.350804][T11144] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 216.350860][T11144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1401'. [ 216.351288][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.351909][T11144] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 216.351950][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.353262][T11144] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 216.353321][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.353774][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.357314][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.358831][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.359417][T11144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.598448][T11166] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 216.598700][T11166] ipt_ECN: cannot use operation on non-tcp rule [ 216.956208][ T9279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.956270][ T9279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.028336][ T9293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.028392][ T9293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.663525][T11206] raw_sendmsg: syz.3.1418 forgot to set AF_INET. Fix it! [ 218.005377][T11225] x_tables: duplicate underflow at hook 3 [ 218.762503][T11255] validate_nla: 61 callbacks suppressed [ 218.762558][T11255] netlink: 'syz.2.1428': attribute type 1 has an invalid length. [ 218.929292][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.967267][T11261] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 219.028844][T11264] netlink: 'syz.1.1433': attribute type 4 has an invalid length. [ 219.677408][T11295] netlink: 'syz.3.1443': attribute type 6 has an invalid length. [ 219.961046][T11299] __nla_validate_parse: 66 callbacks suppressed [ 219.961067][T11299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1444'. [ 220.146410][T11320] ipt_REJECT: TCP_RESET invalid for non-tcp [ 220.578333][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 220.612845][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 221.264493][T11359] 8021q: adding VLAN 0 to HW filter on device bond10 [ 221.347181][T11359] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.351247][T11359] bond10: (slave team0): Enslaving as an active interface with an up link [ 221.386271][T11362] bond_slave_0: left promiscuous mode [ 221.386375][T11362] bond_slave_1: left promiscuous mode [ 221.473817][T11362] bond2: (slave macvlan3): Releasing active interface [ 221.506926][T11362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.566936][T11362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.597213][T11362] bond0 (unregistering): Released all slaves [ 221.722683][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'. [ 221.722706][T11368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1464'. [ 221.722719][T11368] tc_dump_action: action bad kind [ 221.739758][T11386] netlink: 'syz.0.1466': attribute type 3 has an invalid length. [ 221.781738][T11385] syzkaller0: entered promiscuous mode [ 221.781760][T11385] syzkaller0: entered allmulticast mode [ 222.169825][T11410] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 222.239510][T11410] bond0: entered promiscuous mode [ 222.239921][T11410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.240139][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 222.282720][T11409] bridge2: entered promiscuous mode [ 222.283439][T11417] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1474'. [ 222.419086][T11422] netlink: 'syz.1.1477': attribute type 11 has an invalid length. [ 222.421456][ T9293] net_ratelimit: 62 callbacks suppressed [ 222.421488][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.696673][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 222.696792][T11423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.702055][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 222.795874][T11423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.031835][T11439] netlink: 'syz.4.1481': attribute type 2 has an invalid length. [ 223.059819][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.061033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.097118][T11439] !: entered promiscuous mode [ 223.162881][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'. [ 223.214135][T11439] !: left promiscuous mode [ 223.313647][T11457] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 223.313689][T11457] netlink: 'syz.3.1486': attribute type 8 has an invalid length. [ 224.377494][T11493] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 224.700414][T11505] 8021q: adding VLAN 0 to HW filter on device bond9 [ 224.751641][T11505] xt_NFQUEUE: number of total queues is 0 [ 224.980699][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.509802][T11537] __nla_validate_parse: 5 callbacks suppressed [ 225.509823][T11537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1506'. [ 225.625170][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.625843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.919086][T11556] ip_tables: iptables: counters copy to user failed while replacing table [ 225.922133][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1510'. [ 226.169006][T11572] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 226.169032][T11572] batman_adv: batadv0: Removing interface: ipvlan2 [ 226.182375][T11572] batman_adv: batadv0: Interface deactivated: syz_tun [ 226.183167][T11572] batman_adv: batadv0: Removing interface: syz_tun [ 226.227374][T11572] bond0: (slave batadv0): Releasing backup interface [ 226.746408][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1516'. [ 226.815422][T11586] ip_tables: iptables: counters copy to user failed while replacing table [ 227.534777][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.570448][T11604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1520'. [ 227.911297][T11613] tap0: tun_chr_ioctl cmd 1074025680 [ 228.243503][T11620] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1522'. [ 228.411628][T11627] sit0: entered promiscuous mode [ 228.500862][T11627] netlink: 'syz.3.1526': attribute type 1 has an invalid length. [ 228.500920][T11627] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1526'. [ 228.818188][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.819432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.509610][T11658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1534'. [ 229.643409][T11662] netlink: 'syz.4.1534': attribute type 32 has an invalid length. [ 230.559569][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1541'. [ 230.737135][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.001058][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1541'. [ 231.067808][T11712] 8021q: adding VLAN 0 to HW filter on device bond11 [ 231.068591][T11716] lo: entered allmulticast mode [ 231.663973][T11732] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1547'. [ 231.847582][T11734] netlink: 'syz.3.1549': attribute type 4 has an invalid length. [ 231.990270][T11744] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 232.630197][T11761] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 232.655445][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.066412][T11765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1559'. [ 233.203589][T11771] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1560'. [ 233.291128][T11775] netlink: 'syz.0.1561': attribute type 21 has an invalid length. [ 233.563755][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 233.801313][T11795] tipc: Started in network mode [ 233.801401][T11795] tipc: Node identity eea43d9bb5f1, cluster identity 4711 [ 233.801790][T11795] tipc: Enabled bearer , priority 0 [ 233.855501][T11795] syzkaller0: entered promiscuous mode [ 233.855525][T11795] syzkaller0: entered allmulticast mode [ 233.856560][T11795] tipc: Resetting bearer [ 233.894136][T11794] tipc: Resetting bearer [ 234.581363][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.582043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.030878][T11849] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1579'. [ 235.030956][T11849] netlink: 'syz.2.1579': attribute type 9 has an invalid length. [ 235.030971][T11849] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1579'. [ 235.030985][T11849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1579'. [ 235.298364][T11853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1580'. [ 236.495272][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.679509][T11794] tipc: Disabling bearer [ 236.729576][T11810] syzkaller0: entered promiscuous mode [ 236.729599][T11810] syzkaller0: entered allmulticast mode [ 236.771191][ T5758] tipc: Node number set to 1532312987 [ 236.773595][T11853] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1580'. [ 237.258764][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'. [ 237.786255][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.873305][T11886] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 239.150261][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'. [ 239.182519][T11901] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1591'. [ 239.442711][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 239.529288][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 239.614054][T11926] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.627597][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 239.704609][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.705348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.705946][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.706634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.981064][T11943] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 240.011677][T11948] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 240.151178][T11952] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 240.151226][T11952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.152458][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1604'. [ 240.152481][T11952] openvswitch: netlink: EtherType 0 is less than min 600 [ 240.253255][T11953] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1603'. [ 240.409295][T11960] netlink: 'syz.1.1606': attribute type 1 has an invalid length. [ 240.452672][T11960] 8021q: adding VLAN 0 to HW filter on device bond12 [ 240.519343][T11963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1608'. [ 240.536315][T11963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.603590][T11963] veth0: entered promiscuous mode [ 240.611876][T11962] veth0: left promiscuous mode [ 241.167159][T11996] netlink: 'syz.3.1619': attribute type 1 has an invalid length. [ 241.362222][T11995] veth7: entered allmulticast mode [ 241.903300][T12015] hsr_slave_0: left promiscuous mode [ 241.911767][T12015] hsr_slave_1: left promiscuous mode [ 242.447616][T12040] __nla_validate_parse: 5 callbacks suppressed [ 242.447665][T12040] netlink: 3576 bytes leftover after parsing attributes in process `syz.3.1632'. [ 242.534097][T12046] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 242.573899][T12046] 8021q: adding VLAN 0 to HW filter on device bond11 [ 242.591426][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 242.641960][T12046] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 242.661845][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 242.688930][T12046] 8021q: adding VLAN 0 to HW filter on device bond12 [ 242.886206][T12064] netlink: 'syz.1.1639': attribute type 3 has an invalid length. [ 242.886229][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'. [ 242.982633][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 242.982689][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 243.011815][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 243.026150][T12068] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1640'. [ 243.175391][T12078] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 243.350383][T12084] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 243.463836][T12082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 243.474669][T12082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 243.546425][ T9276] net_ratelimit: 3 callbacks suppressed [ 243.546443][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.591215][T12083] nbd: device at index 64 is going down [ 243.591534][T12083] nbd: device at index 64 is going down [ 243.591968][T12083] nbd: device at index 64 is going down [ 243.592258][T12083] nbd: device at index 64 is going down [ 243.592526][T12083] nbd: device at index 64 is going down [ 243.593278][T12083] nbd: device at index 64 is going down [ 243.593701][T12083] nbd: device at index 64 is going down [ 243.594156][T12083] nbd: device at index 64 is going down [ 243.602353][T12083] nbd: device at index 64 is going down [ 243.602669][T12083] nbd: device at index 64 is going down [ 243.602974][T12083] nbd: device at index 64 is going down [ 243.672351][T12083] nbd: device at index 64 is going down [ 243.672935][T12083] nbd: device at index 64 is going down [ 243.673359][T12083] nbd: device at index 64 is going down [ 243.673821][T12083] nbd: device at index 64 is going down [ 243.674107][T12083] nbd: device at index 64 is going down [ 243.708522][T12083] nbd: device at index 64 is going down [ 243.708785][T12083] nbd: device at index 64 is going down [ 243.709038][T12083] nbd: device at index 64 is going down [ 243.709438][T12083] nbd: device at index 64 is going down [ 243.709709][T12083] nbd: device at index 64 is going down [ 243.710000][T12083] nbd: device at index 64 is going down [ 243.710449][T12083] nbd: device at index 64 is going down [ 243.710727][T12083] nbd: device at index 64 is going down [ 243.711016][T12083] nbd: device at index 64 is going down [ 243.711309][T12083] nbd: device at index 64 is going down [ 243.712089][T12083] nbd: device at index 64 is going down [ 243.712385][T12083] nbd: device at index 64 is going down [ 243.712807][T12083] nbd: device at index 64 is going down [ 243.713077][T12083] nbd: device at index 64 is going down [ 243.713340][T12083] nbd: device at index 64 is going down [ 243.713565][T12083] nbd: device at index 64 is going down [ 243.931803][T12009] udevd[12009]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 243.940319][T12009] udevd[12009]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 244.058760][T12027] NFSD: Failed to start, no listeners configured. [ 244.259976][T12109] netlink: 'syz.3.1648': attribute type 12 has an invalid length. [ 244.269177][T12109] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 244.466204][T12119] netlink: 'syz.1.1652': attribute type 2 has an invalid length. [ 244.470881][T12119] xt_LOG: level 128 >= 8 [ 244.733923][T12130] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.851109][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.851831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.891151][T12130] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.979832][T12130] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.063390][T12130] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.298421][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.252925][ T9279] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.252977][ T9279] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.253011][ T9279] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.253043][ T9279] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.616710][T12168] 8021q: VLANs not supported on vcan0 [ 248.740015][T12175] netlink: 'syz.4.1668': attribute type 10 has an invalid length. [ 248.740037][T12175] __nla_validate_parse: 137 callbacks suppressed [ 248.740049][T12175] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1668'. [ 248.822402][T12178] netlink: 'syz.3.1667': attribute type 1 has an invalid length. [ 248.822425][T12178] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1667'. [ 249.071806][T12178] veth8: entered allmulticast mode [ 249.295843][ T9274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.705214][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 249.705249][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 250.586233][ T9286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.587048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.063127][T12183] NFSD: Failed to start, no listeners configured. [ 252.499789][ T9286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.709482][T12206] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.712003][T12206] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.840813][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 252.840938][T12229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.867572][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.064173][T12206] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.064212][T12206] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.214064][T12206] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.214102][T12206] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.263584][T12242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1683'. [ 253.334077][T12206] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.334117][T12206] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.403280][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 253.544407][ T9276] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.544442][ T9276] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.554998][ T9276] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.555029][ T9276] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.558935][ T9286] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.558963][ T9286] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.559088][ T9286] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.559112][ T9286] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.661030][T12260] netlink: 588 bytes leftover after parsing attributes in process `syz.4.1689'. [ 253.692842][T12265] netlink: 'syz.2.1688': attribute type 362 has an invalid length. [ 253.781032][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.781906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.993797][T12276] veth0: entered promiscuous mode [ 254.001462][T12276] bond0: entered promiscuous mode [ 254.048612][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 254.101073][T12274] bond0: left promiscuous mode [ 254.106186][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 254.107499][T12274] veth0: left promiscuous mode [ 254.264774][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 254.479423][T12300] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 254.479449][T12300] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 254.523194][T12280] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 254.716046][T12328] sctp: [Deprecated]: syz.3.1703 (pid 12328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.716046][T12328] Use struct sctp_sack_info instead [ 254.965431][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 254.965451][T12337] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1705'. [ 254.995402][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 254.995421][T12337] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1705'. [ 254.995635][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 254.995649][T12337] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1705'. [ 254.995878][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 254.995892][T12337] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1705'. [ 255.009414][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 255.009435][T12337] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1705'. [ 255.009638][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 255.009651][T12337] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1705'. [ 255.009843][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 255.009856][T12337] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1705'. [ 255.010046][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 255.010278][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 255.010472][T12337] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 255.066159][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.377890][T12356] netlink: set zone limit has 4 unknown bytes [ 255.617251][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.617963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.697450][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.697541][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.241735][T12403] veth11: entered allmulticast mode [ 256.263550][T12403] bond13: (slave veth11): Enslaving as an active interface with a down link [ 256.282234][T12402] tipc: Enabling of bearer rejected, failed to enable media [ 256.299708][T12405] bond13: (slave veth0_to_bond): making interface the new active one [ 256.300612][T12405] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 256.873678][T12432] 8021q: adding VLAN 0 to HW filter on device bond14 [ 256.906471][T12438] bond13: (slave veth0_to_bond): Releasing active interface [ 256.937675][T12438] bond14: (slave veth0_to_bond): making interface the new active one [ 256.939432][T12438] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 257.022002][T12438] macvlan4: entered promiscuous mode [ 257.022024][T12438] macvlan4: entered allmulticast mode [ 257.023868][T12438] bond14: entered promiscuous mode [ 257.024009][T12438] veth0_to_bond: entered promiscuous mode [ 257.025768][T12438] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 257.026516][T12438] bond14: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 257.026761][T12438] bond14: left promiscuous mode [ 257.026775][T12438] veth0_to_bond: left promiscuous mode [ 257.398661][T12459] syzkaller0: entered promiscuous mode [ 257.398684][T12459] syzkaller0: entered allmulticast mode [ 257.501049][T12444] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 257.522077][T12444] virtio_blk virtio5: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 257.766348][ T30] audit: type=1804 audit(1793915555.919:3): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1733" name="/newroot/340/cgroup.controllers" dev="tmpfs" ino=1754 res=1 errno=0 [ 257.769251][ T30] audit: type=1800 audit(1793915555.919:4): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1733" name="cgroup.controllers" dev="tmpfs" ino=1754 res=0 errno=-22 [ 258.003581][T12486] bridge2: entered promiscuous mode [ 258.003606][T12486] bridge2: entered allmulticast mode [ 258.180544][T12458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.181044][T12459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.255570][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.512563][T12503] gretap0: entered promiscuous mode [ 258.633802][T12503] IPv6: Can't replace route, no match found [ 258.656715][T12514] batadv0: entered promiscuous mode [ 258.671346][T12514] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 258.690921][T12514] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 258.739044][T12514] batadv0: left promiscuous mode [ 260.175479][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.816739][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.817154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.304784][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.935072][ T9286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.574772][ T9275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.575436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.855236][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.855919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.495339][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.054549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.054668][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 271.695173][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.335862][ T9275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.336520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.255223][ T9275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.814712][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.095250][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.095933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.015567][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.934897][ T9275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.935522][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.935943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.854852][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.855521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.054939][ T9274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.695038][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.614763][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.615447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.254844][ T9274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.816082][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.376234][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.376654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.016170][ T9276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.017295][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.017938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.575451][ T9274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.429797][T12527] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 300.498711][ T9275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.499406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.592742][T12541] validate_nla: 60 callbacks suppressed [ 300.592762][T12541] netlink: 'syz.3.1753': attribute type 4 has an invalid length. [ 300.592787][T12541] __nla_validate_parse: 67 callbacks suppressed [ 300.592798][T12541] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.1753'. [ 300.959827][T12560] netlink: 'syz.2.1758': attribute type 2 has an invalid length. [ 301.093176][T12564] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 301.134742][ T9274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.243195][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 301.607584][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1764'. [ 301.688590][T12594] erspan0: entered promiscuous mode [ 301.707320][T12594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1768'. [ 301.724037][T12594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1768'. [ 302.137729][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 302.429487][T12587] erspan0: left promiscuous mode [ 302.442415][T12610] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 302.513287][T12622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1774'. [ 302.791591][T12640] netlink: 'syz.4.1775': attribute type 12 has an invalid length. [ 303.323038][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1778'. [ 303.367574][T12653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1779'. [ 303.367802][T12653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1779'. [ 303.671662][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052acf400: rx timeout, send abort [ 303.671822][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888052acf400: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 304.345282][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.682480][T12656] __nla_validate_parse: 31 callbacks suppressed [ 305.682500][T12656] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1779'. [ 305.831020][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 306.001632][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 306.265019][ T9275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.266232][ T9274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.267098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.423550][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 307.618118][T12691] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 307.704511][T12691] 8021q: adding VLAN 0 to HW filter on device bond16 [ 307.827812][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 307.980141][T12696] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1788'. [ 308.029303][T12715] netlink: 233 bytes leftover after parsing attributes in process `syz.2.1792'. [ 308.090802][T12723] smc: removing ib device rxe0 [ 308.176648][T12723] smbdirect: ib_dev[rxe0] removed [ 308.259753][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1797'. [ 308.349603][T12741] bridge0: port 1(syz_tun) entered blocking state [ 308.349697][T12741] bridge0: port 1(syz_tun) entered disabled state [ 308.370448][T12741] syz_tun: entered allmulticast mode [ 308.392347][T12741] syz_tun: entered promiscuous mode [ 308.399888][T12741] bridge0: port 1(syz_tun) entered blocking state [ 308.400019][T12741] bridge0: port 1(syz_tun) entered forwarding state [ 308.438208][T12741] bridge0: port 2(ip6gretap0) entered blocking state [ 308.438296][T12741] bridge0: port 2(ip6gretap0) entered disabled state [ 308.440774][T12741] ip6gretap0: entered allmulticast mode [ 308.476820][T12741] ip6gretap0: entered promiscuous mode [ 308.480674][T12741] bridge0: port 2(ip6gretap0) entered blocking state [ 308.480786][T12741] bridge0: port 2(ip6gretap0) entered forwarding state [ 308.806169][T12752] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 308.937367][T12754] pim6reg: entered allmulticast mode [ 309.653226][T12776] syzkaller1: entered promiscuous mode [ 309.653250][T12776] syzkaller1: entered allmulticast mode [ 309.820485][T12781] syzkaller1: entered promiscuous mode [ 309.820509][T12781] syzkaller1: entered allmulticast mode [ 310.210339][T12792] netlink: 'syz.4.1811': attribute type 5 has an invalid length. [ 310.469152][T12799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1813'. [ 310.469180][T12799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1813'. [ 310.703577][T12811] batman_adv: batadv0: Adding interface: veth0 [ 310.703596][T12811] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.703627][T12811] batman_adv: batadv0: Interface activated: veth0 [ 310.719703][T12811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.719723][T12811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.761725][T12811] batman_adv: batadv0: Interface deactivated: veth0 [ 310.761746][T12811] batman_adv: batadv0: Removing interface: veth0 [ 310.797528][T12815] netlink: 'syz.2.1820': attribute type 4 has an invalid length. [ 310.797546][T12815] __nla_validate_parse: 3 callbacks suppressed [ 310.797556][T12815] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1820'. [ 310.882005][T12819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1821'. [ 310.927460][T12820] ip6gretap2: entered allmulticast mode [ 310.933859][T12820] batman_adv: batadv0: Adding interface: ip6gretap2 [ 310.933878][T12820] batman_adv: batadv0: Interface activated: ip6gretap2 [ 311.016977][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 311.017187][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 311.322947][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1828'. [ 311.741746][T12853] netlink: 'syz.2.1831': attribute type 2 has an invalid length. [ 311.784035][T12856] tipc: Started in network mode [ 311.784065][T12856] tipc: Node identity 00000000000000000300000000000001, cluster identity 4711 [ 311.784118][T12856] tipc: Enabling of bearer rejected, failed to enable media [ 311.787112][T12856] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 311.891869][T12859] syzkaller1: entered promiscuous mode [ 311.891891][T12859] syzkaller1: entered allmulticast mode [ 312.307079][T12871] ip_tables: iptables: counters copy to user failed while replacing table [ 312.443870][T12877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1835'. [ 312.543200][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 312.543249][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 312.590005][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1837'. [ 312.596586][T12882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1837'. [ 313.280251][T12892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.013697][T12940] netlink: 'syz.4.1853': attribute type 2 has an invalid length. [ 314.059972][T12940] Cannot find add_set index 2 as target [ 315.703579][T13004] ip_tables: iptables: counters copy to user failed while replacing table [ 315.799845][T13012] netlink: 'syz.0.1871': attribute type 16 has an invalid length. [ 315.799867][T13012] netlink: 'syz.0.1871': attribute type 17 has an invalid length. [ 315.851995][T13012] 0ªX¹¦Dö»: left allmulticast mode [ 315.866439][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.913823][T13012] veth1_vlan: left promiscuous mode [ 315.923617][T13012] veth0_vlan: left promiscuous mode [ 315.933383][T13012] veth0_vlan: entered promiscuous mode [ 315.966748][T13012] veth1_vlan: entered promiscuous mode [ 315.994984][T13012] veth1_macvtap: left promiscuous mode [ 316.009144][T13012] veth0_macvtap: left promiscuous mode [ 316.016773][T13012] veth0_macvtap: entered promiscuous mode [ 316.023829][T13012] veth1_macvtap: entered promiscuous mode [ 316.040458][T13012] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 316.361034][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 316.416299][T13029] netlink: 'syz.0.1876': attribute type 1 has an invalid length. [ 316.416321][T13029] netlink: 'syz.0.1876': attribute type 2 has an invalid length. [ 316.434852][T13029] netlink: 'syz.0.1876': attribute type 1 has an invalid length. [ 316.434871][T13029] netlink: 'syz.0.1876': attribute type 2 has an invalid length. [ 316.797786][T13049] xt_hashlimit: overflow, try lower: 0/0 [ 316.953102][T13053] veth0: entered promiscuous mode [ 316.965777][T13053] __nla_validate_parse: 13 callbacks suppressed [ 316.965796][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1883'. [ 316.965928][T13053] batman_adv: batadv0: Interface deactivated: veth0 [ 317.059035][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 317.112065][T13067] netlink: 'syz.3.1887': attribute type 11 has an invalid length. [ 317.112087][T13067] netlink: 'syz.3.1887': attribute type 11 has an invalid length. [ 317.112100][T13067] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1887'. [ 317.154326][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.179816][T13053] batman_adv: batadv0: Removing interface: veth0 [ 317.209009][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 317.209032][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1888'. [ 317.248593][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1888'. [ 317.390890][T13074] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 317.696915][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 317.700651][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 317.769178][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 317.769535][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 317.771324][T13090] bond17: entered allmulticast mode [ 317.780050][T13095] bond17: (slave macvlan4): Opening slave failed [ 317.815323][T13094] bond17: (slave macvlan4): Opening slave failed [ 318.149808][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.149925][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.150109][T13117] bridge_slave_0: entered allmulticast mode [ 318.178554][T13117] bridge_slave_0: entered promiscuous mode [ 318.182831][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.182955][T13117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.361011][T13122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.415821][T13129] x_tables: duplicate underflow at hook 1 [ 318.523741][T13136] openvswitch: netlink: Message has 4 unknown bytes. [ 318.523777][T13136] openvswitch: netlink: Actions may not be safe on all matching packets [ 318.524041][T13136] openvswitch: netlink: Message has 4 unknown bytes. [ 318.524070][T13136] openvswitch: netlink: Actions may not be safe on all matching packets [ 318.546683][T13136] openvswitch: netlink: Message has 4 unknown bytes. [ 318.546714][T13136] openvswitch: netlink: Actions may not be safe on all matching packets [ 318.546983][T13136] openvswitch: netlink: Message has 4 unknown bytes. [ 318.547009][T13136] openvswitch: netlink: Actions may not be safe on all matching packets [ 318.547253][T13136] openvswitch: netlink: Message has 4 unknown bytes. [ 318.632936][T13137] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 318.672402][T13137] bond18 (unregistering): Released all slaves [ 318.814099][T13148] netlink: 'syz.0.1907': attribute type 1 has an invalid length. [ 318.858064][T13148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 318.864367][T13148] bond6: entered allmulticast mode [ 319.702999][T13187] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 319.754179][T13187] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.850119][T13189] bond7: (slave gretap0): making interface the new active one [ 319.853773][T13189] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 319.928054][T13187] bridge0: port 2(ip6gretap0) entered disabled state [ 320.020935][T13196] netlink: 'syz.1.1919': attribute type 61 has an invalid length. [ 320.020960][T13196] netlink: 'syz.1.1919': attribute type 62 has an invalid length. [ 320.285273][T13214] netlink: 'syz.3.1924': attribute type 8 has an invalid length. [ 320.307158][T13214] syzkaller1: entered promiscuous mode [ 320.307179][T13214] syzkaller1: entered allmulticast mode [ 320.610403][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.610572][T13222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.610896][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.611024][T13222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.638858][T13222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.781982][T13222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.802506][T13222] 8021q: adding VLAN 0 to HW filter on device bond5 [ 320.858050][T13222] 8021q: adding VLAN 0 to HW filter on device bond10 [ 320.876637][T13222] 8021q: adding VLAN 0 to HW filter on device eth0 [ 320.880029][T13222] 8021q: adding VLAN 0 to HW filter on device eth1 [ 320.883103][T13222] 8021q: adding VLAN 0 to HW filter on device eth2 [ 320.907076][T13222] 8021q: adding VLAN 0 to HW filter on device eth3 [ 321.070878][ T9277] bond8: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 321.071244][ T9277] bond8: active interface up! [ 321.187258][T13245] netlink: 'syz.2.1933': attribute type 3 has an invalid length. [ 322.219978][T13299] C: renamed from veth1_to_team (while UP) [ 322.222386][T13299] netlink: 'syz.1.1952': attribute type 8 has an invalid length. [ 322.285101][T13303] __nla_validate_parse: 12 callbacks suppressed [ 322.285120][T13303] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1953'. [ 322.293484][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1950'. [ 322.293855][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1950'. [ 322.355107][T13303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1953'. [ 322.355141][T13303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1953'. [ 322.355158][T13303] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1953'. [ 322.398692][T13303] syzkaller1: entered promiscuous mode [ 322.398711][T13303] syzkaller1: entered allmulticast mode [ 322.403048][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1953'. [ 322.535567][ T9275] net_ratelimit: 145 callbacks suppressed [ 322.535592][ T9275] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 322.536158][T13308] tipc: Enabled bearer , priority 0 [ 322.540144][T13308] syzkaller0: entered promiscuous mode [ 322.540162][T13308] syzkaller0: entered allmulticast mode [ 322.553136][T13308] tipc: Resetting bearer [ 322.583731][T13306] tipc: Resetting bearer [ 322.811778][T13323] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1958'. [ 323.498387][T13306] tipc: Disabling bearer [ 323.634484][ T9279] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 323.738965][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1964'. [ 323.739034][T13333] netlink: 'syz.1.1964': attribute type 2 has an invalid length. [ 323.739047][T13333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1964'. [ 323.755114][ T9277] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 323.866634][ T9276] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 323.899566][T13345] syzkaller1: entered promiscuous mode [ 323.899585][T13345] syzkaller1: entered allmulticast mode [ 324.005316][ T9279] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 324.115476][ T9277] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 324.228306][ T9275] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 324.291307][T13374] netlink: 'syz.1.1975': attribute type 1 has an invalid length. [ 324.326316][T13374] 8021q: adding VLAN 0 to HW filter on device bond13 [ 324.336390][ T9275] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 324.444764][ T9274] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 324.555931][ T9274] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 324.624019][T13394] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 324.624039][T13394] netlink: 'syz.4.1982': attribute type 2 has an invalid length. [ 324.709749][T13397] validate_nla: 1 callbacks suppressed [ 324.709768][T13397] netlink: 'syz.1.1981': attribute type 10 has an invalid length. [ 325.131610][T13415] netlink: 'syz.3.1987': attribute type 1 has an invalid length. [ 325.165152][T13419] FAULT_INJECTION: forcing a failure. [ 325.165152][T13419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.165181][T13419] CPU: 1 UID: 0 PID: 13419 Comm: syz.1.1988 Not tainted syzkaller #0 PREEMPT(full) [ 325.165202][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 325.165221][T13419] Call Trace: [ 325.165228][T13419] [ 325.165236][T13419] dump_stack_lvl+0xe8/0x150 [ 325.165273][T13419] should_fail_ex+0x3eb/0x540 [ 325.165301][T13419] _copy_from_user+0x2d/0xb0 [ 325.165326][T13419] ___sys_sendmsg+0x1c6/0x360 [ 325.165345][T13419] ? __lock_acquire+0x747/0x2de0 [ 325.165381][T13419] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.165437][T13419] ? __fget_files+0x3a2/0x420 [ 325.165458][T13419] ? __fget_files+0x2a/0x420 [ 325.165490][T13419] __x64_sys_sendmsg+0x1b1/0x290 [ 325.165514][T13419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.165559][T13419] do_syscall_64+0x166/0x520 [ 325.165581][T13419] ? trace_irq_disable+0x3b/0x140 [ 325.165607][T13419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.165628][T13419] ? clear_bhb_loop+0x70/0xc0 [ 325.165652][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.165672][T13419] RIP: 0033:0x7f71c119fb19 [ 325.165690][T13419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.165707][T13419] RSP: 002b:00007f71c2037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.165727][T13419] RAX: ffffffffffffffda RBX: 00007f71c1425fa0 RCX: 00007f71c119fb19 [ 325.165740][T13419] RDX: 0000000000044801 RSI: 0000200000000340 RDI: 0000000000000005 [ 325.165752][T13419] RBP: 00007f71c2037090 R08: 0000000000000000 R09: 0000000000000000 [ 325.165763][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.165774][T13419] R13: 00007f71c1426038 R14: 00007f71c1425fa0 R15: 00007fffc9dbbb08 [ 325.165806][T13419] [ 325.361390][T13415] bond18: entered promiscuous mode [ 325.361932][T13415] 8021q: adding VLAN 0 to HW filter on device bond18 [ 325.422617][T13423] 8021q: adding VLAN 0 to HW filter on device bond18 [ 325.422838][T13423] bond18: (slave gre1): The slave device specified does not support setting the MAC address [ 325.422857][T13423] bond18: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 325.429520][T13423] bond18: (slave gre1): Opening slave failed [ 327.481747][T13467] netlink: 'syz.2.1998': attribute type 21 has an invalid length. [ 327.481769][T13467] __nla_validate_parse: 4 callbacks suppressed [ 327.481780][T13467] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1998'. [ 327.481852][T13467] netlink: 'syz.2.1998': attribute type 5 has an invalid length. [ 327.481864][T13467] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1998'. [ 327.644540][ T9275] net_ratelimit: 23 callbacks suppressed [ 327.644561][ T9275] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 327.655814][T13472] veth0_to_bond: entered allmulticast mode [ 327.688292][T13472] syzkaller0: entered promiscuous mode [ 327.688305][T13472] syzkaller0: entered allmulticast mode [ 327.754467][ T9274] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 327.846522][T13479] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2001'. [ 327.864426][ T9275] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 327.941075][T13485] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 327.974670][ T9275] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 328.084381][ T9275] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 328.204399][ T9275] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 328.314455][ T9275] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 328.424641][ T9274] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 328.454741][T13428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.543439][ T9274] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 328.644462][ T9277] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 328.763467][T13502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2008'. [ 329.053653][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 329.053677][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 329.383348][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2015'. [ 329.523913][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2015'. [ 330.358387][T13574] netlink: 'syz.2.2021': attribute type 1 has an invalid length. [ 330.399305][T13574] bond9: entered promiscuous mode [ 330.399722][T13574] 8021q: adding VLAN 0 to HW filter on device bond9 [ 330.424144][T13574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2021'. [ 330.436888][T13574] bond9: entered allmulticast mode [ 330.473434][T13574] bond9: (slave bridge8): making interface the new active one [ 330.473455][T13574] bridge8: entered promiscuous mode [ 330.473612][T13574] bridge8: entered allmulticast mode [ 330.503572][T13574] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 330.539232][T13574] syz_tun: entered allmulticast mode [ 330.541241][T13574] –: renamed from virt_wifi0 [ 330.564778][T13573] syz_tun: left allmulticast mode [ 330.988915][T13603] lo: entered promiscuous mode [ 331.041448][T13603] tunl0: entered promiscuous mode [ 331.050318][T13603] gre0: entered promiscuous mode [ 331.083697][T13603] erspan0: entered promiscuous mode [ 331.097694][T13603] ip_vti0: entered promiscuous mode [ 331.101796][T13603] ip6_vti0: entered promiscuous mode [ 331.111394][T13612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2028'. [ 331.179624][T13603] ip6tnl0: entered promiscuous mode [ 331.185469][T13603] ip6gre0: entered promiscuous mode [ 331.202257][T13603] batman_adv: batadv0: Interface deactivated: syz_tun [ 331.215583][T13603] syz_tun: entered promiscuous mode [ 331.223932][T13603] ip6gretap0: entered promiscuous mode [ 331.235240][T13621] netlink: 'syz.0.2032': attribute type 3 has an invalid length. [ 331.248803][T13603] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.249412][T13603] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.251690][T13603] bridge0: entered promiscuous mode [ 331.276290][T13603] vcan0: entered promiscuous mode [ 331.282606][T13603] bond0: entered promiscuous mode [ 331.282625][T13603] bond_slave_0: entered promiscuous mode [ 331.282826][T13603] bond_slave_1: entered promiscuous mode [ 331.283732][T13623] nbd: must specify a device to reconfigure [ 331.315419][T13603] team0: entered promiscuous mode [ 331.316964][T13603] team_slave_0: entered promiscuous mode [ 331.317597][T13603] team_slave_1: entered promiscuous mode [ 331.324004][T13603] dummy0: entered promiscuous mode [ 331.353768][T13603] nlmon0: entered promiscuous mode [ 331.368853][T13603] batadv0: entered promiscuous mode [ 331.382977][T13603] vxcan0: entered promiscuous mode [ 331.383933][T13603] vxcan1: entered promiscuous mode [ 331.393107][T13603] veth0: entered promiscuous mode [ 331.402545][T13603] veth1: entered promiscuous mode [ 331.422198][T13603] wg0: entered promiscuous mode [ 331.440296][T13603] wg1: entered promiscuous mode [ 331.449675][T13603] wg2: entered promiscuous mode [ 331.462773][T13603] veth0_to_bridge: entered promiscuous mode [ 331.482983][T13603] veth1_to_bridge: entered promiscuous mode [ 331.493989][T13603] veth0_to_bond: entered promiscuous mode [ 331.509501][T13603] veth1_to_bond: entered promiscuous mode [ 331.527898][T13603] veth0_to_team: entered promiscuous mode [ 331.572388][T13603] veth1_to_team: entered promiscuous mode [ 331.597903][T13603] veth0_to_batadv: entered promiscuous mode [ 331.609058][T13603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.609105][T13603] batadv_slave_0: entered promiscuous mode [ 331.617247][T13603] veth1_to_batadv: entered promiscuous mode [ 331.629465][T13603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.629512][T13603] batadv_slave_1: entered promiscuous mode [ 331.642363][T13603] xfrm0: entered promiscuous mode [ 331.651269][T13603] veth0_to_hsr: entered promiscuous mode [ 331.698955][T13603] veth1_to_hsr: entered promiscuous mode [ 331.727835][T13603] hsr0: entered promiscuous mode [ 331.741798][T13603] veth1_virt_wifi: entered promiscuous mode [ 331.749098][T13603] veth0_virt_wifi: entered promiscuous mode [ 331.758173][T13603] virt_wifi0: entered promiscuous mode [ 331.780007][T13603] vlan0: entered promiscuous mode [ 331.788239][T13603] vlan1: entered promiscuous mode [ 331.794718][T13603] macvlan0: entered promiscuous mode [ 331.800155][T13603] macvlan1: entered promiscuous mode [ 331.813231][T13603] ipvlan0: entered promiscuous mode [ 331.819199][T13603] ipvlan1: entered promiscuous mode [ 331.847108][T13603] macvtap0: entered promiscuous mode [ 331.853099][T13603] macsec0: entered promiscuous mode [ 331.869604][T13603] geneve0: entered promiscuous mode [ 331.875694][T13603] geneve1: entered promiscuous mode [ 331.910451][T13603] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 331.922726][T13603] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 331.933805][T13603] bond1: left allmulticast mode [ 331.940998][T13603] ip6gretap1: entered promiscuous mode [ 331.951379][T13603] vlan1.0: entered promiscuous mode [ 331.960743][T13603] bridge2: entered promiscuous mode [ 331.962884][T13603] bond2: entered promiscuous mode [ 331.970143][T13603] ip6gre1: entered promiscuous mode [ 331.982937][T13603] bond3: entered promiscuous mode [ 331.982954][T13603] gretap1: entered promiscuous mode [ 331.999993][T13603] veth2: entered promiscuous mode [ 332.004167][T13603] veth3: entered promiscuous mode [ 332.010998][T13603] bridge3: entered promiscuous mode [ 332.022339][T13603] sit1: entered promiscuous mode [ 332.098140][T13603] bond5: entered promiscuous mode [ 332.112552][T13603] bond6: left allmulticast mode [ 332.119791][T13603] bond7: entered promiscuous mode [ 332.120556][T13603] geneve2: entered promiscuous mode [ 332.130147][T13603] bond8: entered promiscuous mode [ 332.130165][T13603] ip6gretap2: entered promiscuous mode [ 332.150478][T13603] veth4: entered promiscuous mode [ 332.153959][T13603] ip6tnl2: entered promiscuous mode [ 332.160667][T13603] ip6tnl3: entered promiscuous mode [ 332.170248][T13603] wireguard0: entered promiscuous mode [ 332.171317][T13603] wireguard1: entered promiscuous mode [ 332.172480][T13603] bridge5: entered promiscuous mode [ 332.193789][T13603] bareudp0: entered promiscuous mode [ 332.197788][T13603] syztnl1: entered promiscuous mode [ 332.207796][T13603] bond9: entered promiscuous mode [ 332.228420][T13603] mac80211_hwsim hwsim27 wlan2: entered promiscuous mode [ 332.231148][T13603] bond10: entered promiscuous mode [ 332.233034][T13603] veth6: entered promiscuous mode [ 332.238244][T13603] veth7: entered promiscuous mode [ 332.259174][T13603] bond11: entered promiscuous mode [ 332.263961][T13603] geneve3: entered promiscuous mode [ 332.277481][T13603] bond12: entered promiscuous mode [ 332.302736][T13603] mac80211_hwsim hwsim28 wlan3: entered promiscuous mode [ 332.306804][T13603] netdevsim netdevsim3 eth0: entered promiscuous mode [ 332.322736][T13603] netdevsim netdevsim3 eth1: entered promiscuous mode [ 332.333863][T13603] netdevsim netdevsim3 eth2: entered promiscuous mode [ 332.342940][T13603] netdevsim netdevsim3 eth3: entered promiscuous mode [ 332.347940][T13603] veth8: entered promiscuous mode [ 332.351341][T13603] veth9: entered promiscuous mode [ 332.354838][T13603] geneve4: entered promiscuous mode [ 332.354962][T13603] bond13: entered promiscuous mode [ 332.355085][T13603] veth10: entered promiscuous mode [ 332.361527][T13603] veth11: entered promiscuous mode [ 332.367267][T13603] bond14: entered promiscuous mode [ 332.371357][T13603] bond15: entered promiscuous mode [ 332.377548][T13603] bond16: entered promiscuous mode [ 332.378088][T13603] bond17: entered promiscuous mode [ 332.378235][T13603] bridge6: entered promiscuous mode [ 332.378358][T13603] geneve5: entered promiscuous mode [ 332.448133][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.457225][ T9276] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.457263][ T9276] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.457295][ T9276] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.457326][ T9276] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.856311][T13675] netlink: 'syz.4.2037': attribute type 1 has an invalid length. [ 332.856335][T13675] __nla_validate_parse: 3 callbacks suppressed [ 332.856346][T13675] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2037'. [ 332.980443][T13687] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 333.385193][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'. [ 333.772441][T13714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2045'. [ 333.772470][T13714] net_ratelimit: 14 callbacks suppressed [ 333.772481][T13714] openvswitch: netlink: EtherType 0 is less than min 600 [ 334.039533][T13726] netlink: 'syz.0.2051': attribute type 1 has an invalid length. [ 334.073902][T13726] gretap0: entered allmulticast mode [ 334.162832][T13736] bond9: left promiscuous mode [ 334.166676][T13736] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 334.190447][T13736] bond9: (slave lo): Enslaving as an active interface with an up link [ 334.190713][T13736] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 334.340755][T13750] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2053'. [ 334.877327][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 335.069036][T13786] syz_tun: Device is already in use. [ 335.677473][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2068'. [ 335.696123][T13821] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2068'. [ 335.876079][T13829] syzkaller0: entered promiscuous mode [ 335.876103][T13829] syzkaller0: entered allmulticast mode [ 335.977282][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2072'. [ 335.977304][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 336.137246][T13804] netlink: 65 bytes leftover after parsing attributes in process `syz.0.2066'. [ 336.762742][T13865] netlink: 'syz.3.2077': attribute type 61 has an invalid length. [ 336.762764][T13865] netlink: 'syz.3.2077': attribute type 105 has an invalid length. [ 337.783339][T13929] batman_adv: batadv0: Adding interface: syz_tun [ 337.783358][T13929] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.783391][T13929] batman_adv: batadv0: Interface activated: syz_tun [ 338.101239][T13942] __nla_validate_parse: 1 callbacks suppressed [ 338.101258][T13942] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2093'. [ 338.122279][T13938] ip_tables: iptables: counters copy to user failed while replacing table [ 338.989016][T13979] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2100'. [ 339.007682][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'. [ 339.026532][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'. [ 339.028564][T13982] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 339.030307][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2101'. [ 339.130392][T13984] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 339.338715][T13996] netlink: 'syz.0.2105': attribute type 1 has an invalid length. [ 339.338735][T13996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2105'. [ 339.339126][T13993] bond14 (unregistering): Released all slaves [ 339.640569][T14009] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.2108'. [ 339.642365][T14009] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 339.682194][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 339.830657][T14027] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 339.969457][T14034] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 340.077871][T14038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2116'. [ 340.105487][T14038] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 340.273898][T14049] netlink: 'syz.3.2120': attribute type 2 has an invalid length. [ 340.300865][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'. [ 340.349317][T14050] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 341.027119][T14083] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 341.208893][T14097] netlink: 'syz.1.2133': attribute type 3 has an invalid length. [ 341.208914][T14097] netlink: 'syz.1.2133': attribute type 1 has an invalid length. [ 341.208931][T14097] NCSI netlink: No device for ifindex 0 [ 341.450432][T14104] netlink: 'syz.4.2136': attribute type 2 has an invalid length. [ 341.461223][T14101] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 341.461269][T14101] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 342.011292][T14143] syzkaller1: entered promiscuous mode [ 342.011358][T14143] syzkaller1: entered allmulticast mode [ 342.182362][T14158] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.491331][T14171] netlink: 'syz.4.2150': attribute type 2 has an invalid length. [ 342.533965][T14171] netlink: 'syz.4.2150': attribute type 10 has an invalid length. [ 342.538948][T14178] ip_tables: iptables: counters copy to user failed while replacing table [ 342.619488][T14171] team0: Port device dummy0 added [ 342.631090][T14171] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 342.732057][T14184] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.732202][T14184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.733950][T14184] bridge0: entered promiscuous mode [ 342.734009][T14184] bridge0: entered allmulticast mode [ 342.985870][T14200] netlink: 'syz.3.2159': attribute type 4 has an invalid length. [ 343.348849][T14219] netlink: 'syz.0.2163': attribute type 39 has an invalid length. [ 343.449273][T14227] __nla_validate_parse: 12 callbacks suppressed [ 343.449293][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 343.687971][T14232] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 343.800136][T14242] netlink: 'syz.0.2168': attribute type 1 has an invalid length. [ 343.800722][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 343.800750][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 344.133626][T14269] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 344.636932][T14295] openvswitch: netlink: Message has 1 unknown bytes. [ 344.636978][T14295] openvswitch: netlink: Actions may not be safe on all matching packets [ 344.689483][T14298] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2183'. [ 344.691537][T14298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2183'. [ 344.701212][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 345.057093][T14327] xt_hashlimit: overflow, try lower: 18446744073709551615/8388608 [ 345.278902][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 345.278924][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2191'. [ 345.278949][T14338] netlink: 'syz.4.2191': attribute type 11 has an invalid length. [ 345.548720][T14351] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 345.549409][T14351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2197'. [ 345.732793][T14364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2198'. [ 346.011289][T14373] netlink: 'syz.2.2204': attribute type 1 has an invalid length. [ 346.108868][T14373] bond10: entered promiscuous mode [ 346.109299][T14373] 8021q: adding VLAN 0 to HW filter on device bond10 [ 346.137891][T14383] ipvlan3: entered allmulticast mode [ 346.137908][T14383] bond10: entered allmulticast mode [ 346.138221][T14376] netlink: 'syz.1.2202': attribute type 3 has an invalid length. [ 346.165542][T14373] ipvlan4: entered allmulticast mode [ 346.232410][T14373] bond10: (slave bridge9): making interface the new active one [ 346.232430][T14373] bridge9: entered promiscuous mode [ 346.237685][T14373] bridge9: entered allmulticast mode [ 346.265240][T14373] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 346.290736][T14397] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 346.300582][T14394] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 346.300616][T14394] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 346.300654][T14394] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 346.398488][T14400] netlink: 'syz.3.2211': attribute type 1 has an invalid length. [ 346.481721][T14406] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 346.483835][T14400] 8021q: adding VLAN 0 to HW filter on device bond19 [ 346.492966][T14402] netlink: 'syz.2.2212': attribute type 13 has an invalid length. [ 346.626874][T14403] bond14: (slave veth0_to_bond): Releasing active interface [ 346.626902][T14403] veth0_to_bond: left promiscuous mode [ 346.649873][T14403] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 346.761929][T14415] SET target dimension over the limit! [ 346.963203][T14428] netlink: 'syz.2.2220': attribute type 11 has an invalid length. [ 347.077543][T14432] syzkaller1: entered promiscuous mode [ 347.077567][T14432] syzkaller1: entered allmulticast mode [ 347.631211][T14456] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.631941][T14456] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.802612][T14456] wg1: left promiscuous mode [ 347.833344][T14456] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 347.834051][T14460] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 347.894638][T14471] validate_nla: 1 callbacks suppressed [ 347.894657][T14471] netlink: 'syz.0.2229': attribute type 1 has an invalid length. [ 348.102130][T14484] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 349.073386][T14516] __nla_validate_parse: 12 callbacks suppressed [ 349.073477][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2241'. [ 349.126876][T14517] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 349.310615][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066552800: rx timeout, send abort [ 349.310848][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888066552800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 350.265348][T14515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2241'. [ 350.732122][T14543] bond14: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 350.754924][T14543] bond14 (unregistering): Released all slaves [ 350.935564][T14545] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 351.601038][T14566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2254'. [ 351.601062][T14566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2254'. [ 351.601080][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2254'. [ 352.131489][T14628] block nbd2: server does not support multiple connections per device. [ 352.145889][T14628] block nbd2: shutting down sockets [ 352.608780][T14661] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2265'. [ 352.636219][T14661] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2265'. [ 353.012777][T14680] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 353.012798][T14680] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2267'. [ 353.106862][T14685] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 353.106885][T14685] netlink: 'syz.0.2270': attribute type 2 has an invalid length. [ 353.280589][T14690] syzkaller0: entered promiscuous mode [ 353.280612][T14690] syzkaller0: entered allmulticast mode [ 353.459627][T14694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.475385][T14682] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.475417][T14682] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.600465][T14700] netlink: 'syz.2.2273': attribute type 12 has an invalid length. [ 353.708214][T14682] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.728633][T14682] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.930704][T14682] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.930742][T14682] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.046198][T14682] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.046235][T14682] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.404450][ T9293] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.404484][ T9293] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.439401][ T9276] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.439434][ T9276] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.439469][ T9276] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.439500][ T9276] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.454415][ T9276] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.454445][ T9276] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.886457][T14772] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2290'. [ 356.000627][T14776] FAULT_INJECTION: forcing a failure. [ 356.000627][T14776] name failslab, interval 1, probability 0, space 0, times 1 [ 356.000661][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.4.2291 Not tainted syzkaller #0 PREEMPT(full) [ 356.000683][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 356.000695][T14776] Call Trace: [ 356.000786][T14776] [ 356.000804][T14776] dump_stack_lvl+0xe8/0x150 [ 356.000964][T14776] should_fail_ex+0x3eb/0x540 [ 356.001061][T14776] should_failslab+0xa8/0x100 [ 356.001114][T14776] ? skb_clone+0x212/0x3a0 [ 356.001243][T14776] kmem_cache_alloc_noprof+0x9c/0x600 [ 356.001274][T14776] ? skb_clone+0x212/0x3a0 [ 356.001302][T14776] skb_clone+0x212/0x3a0 [ 356.001328][T14776] __netlink_deliver_tap+0x355/0x6e0 [ 356.001412][T14776] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.001441][T14776] netlink_deliver_tap+0x19c/0x1b0 [ 356.001470][T14776] netlink_unicast+0x8c1/0xa80 [ 356.001511][T14776] netlink_sendmsg+0x7f0/0xb20 [ 356.001553][T14776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.001583][T14776] ? aa_sock_msg_perm+0x144/0x210 [ 356.001665][T14776] ? apparmor_socket_sendmsg+0x98/0x360 [ 356.001724][T14776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.001751][T14776] sock_sendmsg_nosec+0x14e/0x190 [ 356.001809][T14776] ____sys_sendmsg+0x54e/0x850 [ 356.001838][T14776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.001870][T14776] ? import_iovec+0x73/0xa0 [ 356.001936][T14776] ___sys_sendmsg+0x2a5/0x360 [ 356.001956][T14776] ? __lock_acquire+0x747/0x2de0 [ 356.002005][T14776] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.002064][T14776] ? __fget_files+0x3a2/0x420 [ 356.002134][T14776] ? __fget_files+0x2a/0x420 [ 356.002168][T14776] __x64_sys_sendmsg+0x1b1/0x290 [ 356.002194][T14776] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.002241][T14776] do_syscall_64+0x166/0x520 [ 356.002360][T14776] ? trace_irq_disable+0x3b/0x140 [ 356.002403][T14776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.002441][T14776] ? clear_bhb_loop+0x70/0xc0 [ 356.002467][T14776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.002488][T14776] RIP: 0033:0x7fda6a99fb19 [ 356.002514][T14776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.002533][T14776] RSP: 002b:00007fda6b7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.002591][T14776] RAX: ffffffffffffffda RBX: 00007fda6ac25fa0 RCX: 00007fda6a99fb19 [ 356.002605][T14776] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 356.002617][T14776] RBP: 00007fda6b7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 356.002629][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.002641][T14776] R13: 00007fda6ac26038 R14: 00007fda6ac25fa0 R15: 00007ffe6c3e5848 [ 356.002675][T14776] [ 356.810293][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2297'. [ 356.829552][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2296'. [ 357.018568][T14797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2296'. [ 357.143782][T14813] batman_adv: batadv0: Interface deactivated: syz_tun [ 357.143806][T14813] batman_adv: batadv0: Removing interface: syz_tun [ 357.468636][T14818] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2304'. [ 357.470066][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 357.488226][T14827] xt_LOG: level 128 >= 8 [ 357.921317][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 358.156821][T14851] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 358.188287][T14855] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2314'. [ 358.356106][T14861] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 359.094185][T14897] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2324'. [ 359.760663][T14924] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 359.874132][T14928] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 359.956669][T14928] bond20: entered promiscuous mode [ 359.960721][T14928] 8021q: adding VLAN 0 to HW filter on device bond20 [ 360.154060][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 360.380500][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.395555][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.395908][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.396247][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.435387][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.436231][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.436577][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.443729][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.444074][T14952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 361.042048][T14967] __nla_validate_parse: 66 callbacks suppressed [ 361.042069][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2344'. [ 361.160769][T14967] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2344'. [ 361.729792][T14990] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2350'. [ 362.037087][T14999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2352'. [ 362.680215][T15009] pim6reg: entered allmulticast mode [ 362.723345][T15009] pim6reg: left allmulticast mode [ 362.853242][T15012] x_tables: unsorted entry at hook 3 [ 363.490331][T15019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2358'. [ 363.690328][T15025] netlink: 'syz.0.2361': attribute type 1 has an invalid length. [ 363.866218][T15025] 8021q: adding VLAN 0 to HW filter on device bond7 [ 363.946281][T15024] bond7: (slave veth0_to_bond): making interface the new active one [ 363.964682][T15024] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 363.975221][T15032] bond7: entered promiscuous mode [ 363.975243][T15032] veth0_to_bond: entered promiscuous mode [ 363.975432][T15032] bond7: entered allmulticast mode [ 363.975445][T15032] veth0_to_bond: entered allmulticast mode [ 364.053024][T15024] macvlan0: entered promiscuous mode [ 364.053046][T15024] macvlan0: entered allmulticast mode [ 364.078881][T15024] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 364.107696][T15024] bond7: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 364.152772][T15042] netlink: 'syz.4.2366': attribute type 1 has an invalid length. [ 364.225455][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2366'. [ 364.225607][T15042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2366'. [ 364.234060][T15042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2366'. [ 364.472695][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2369'. [ 364.543304][T15060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2368'. [ 364.734897][T15061] netlink: 'syz.0.2369': attribute type 30 has an invalid length. [ 364.780543][T15061] vxlan1: entered promiscuous mode [ 364.780567][T15061] vxlan1: entered allmulticast mode [ 364.800013][T15062] netlink: 'syz.0.2369': attribute type 30 has an invalid length. [ 365.085747][T15062] vxlan1: entered promiscuous mode [ 365.085771][T15062] vxlan1: entered allmulticast mode [ 365.261194][T15071] net_ratelimit: 25 callbacks suppressed [ 365.261294][T15071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 365.261804][T15074] netlink: 'syz.1.2372': attribute type 3 has an invalid length. [ 365.261821][T15074] netlink: 'syz.1.2372': attribute type 1 has an invalid length. [ 365.261838][T15074] NCSI netlink: No device for ifindex 0 [ 365.403730][T15077] netlink: 'syz.4.2376': attribute type 83 has an invalid length. [ 365.616859][T15087] netlink: 'syz.4.2378': attribute type 29 has an invalid length. [ 365.726687][T15093] bridge10: entered allmulticast mode [ 365.730348][T15093] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 365.787700][ T30] audit: type=1800 audit(1793915663.939:5): pid=15102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2375" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2467 res=0 errno=-22 [ 366.118758][T15113] syzkaller0: entered promiscuous mode [ 366.118936][T15113] syzkaller0: entered allmulticast mode [ 366.509783][T15131] netlink: zone id is out of range [ 366.510063][T15131] netlink: get zone limit has 4 unknown bytes [ 366.729845][T15133] __nla_validate_parse: 8 callbacks suppressed [ 366.729865][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'. [ 366.835152][T15137] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 366.882157][ T9275] IPVS: starting estimator thread 0... [ 366.984559][T15143] IPVS: using max 31 ests per chain, 74400 per kthread [ 367.303726][T15157] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2394'. [ 367.445124][T15158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2394'. [ 367.698833][T15168] netlink: 'syz.1.2395': attribute type 1 has an invalid length. [ 367.698855][T15168] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2395'. [ 368.078441][T15184] net wpan0: Using DEBUGing ioctl SIOCSIFADDR isn't recommended! [ 368.116866][T15189] net wpan0: Using DEBUGing ioctl SIOCSIFADDR isn't recommended! [ 368.253362][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2402'. [ 368.603510][T15200] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 368.613825][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2407'. [ 368.637701][T15207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2407'. [ 368.986386][T15176] netlink: 'syz.1.2399': attribute type 2 has an invalid length. [ 368.986408][T15176] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2399'. [ 369.587347][T15231] x_tables: duplicate underflow at hook 1 [ 369.613585][T15234] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ƒÄ&;ßC§ÂЊ¨—,_÷•QÇ丹¨Sö [_Ö [ 369.645989][T15233] team0: Port device dummy0 removed [ 369.697705][T15233] batman_adv: batadv0: Adding interface: dummy0 [ 369.697723][T15233] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 369.831463][T15247] netlink: 13184 bytes leftover after parsing attributes in process `syz.0.2419'. [ 370.612958][T15263] syzkaller1: entered allmulticast mode [ 370.761021][T15266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.773245][T15267] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.809703][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2424'. [ 371.073129][T15273] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.160059][T15273] syzkaller0: entered promiscuous mode [ 371.160082][T15273] syzkaller0: entered allmulticast mode [ 371.645841][T15295] netlink: 'syz.2.2433': attribute type 10 has an invalid length. [ 371.664522][T15295] bond_slave_0: left promiscuous mode [ 371.664900][T15295] bond_slave_1: left promiscuous mode [ 371.856290][T15297] netlink: 'syz.2.2433': attribute type 10 has an invalid length. [ 372.188541][T15328] tipc: Enabling of bearer rejected, failed to enable media [ 372.218674][T15331] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 372.351236][T15336] __nla_validate_parse: 1 callbacks suppressed [ 372.351256][T15336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'. [ 372.593729][T15345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2449'. [ 372.593757][T15345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'. [ 372.615572][T15344] ip_tables: iptables: counters copy to user failed while replacing table [ 372.648165][T15347] netlink: 'syz.4.2447': attribute type 5 has an invalid length. [ 372.648187][T15347] netlink: 980 bytes leftover after parsing attributes in process `syz.4.2447'. [ 372.649137][T15348] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 372.651267][T15345] openvswitch: netlink: Unknown key attributes 2 [ 373.332281][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 373.462480][T15371] netlink: 'syz.0.2456': attribute type 10 has an invalid length. [ 373.478604][T15371] bond7: (slave veth0_to_bond): Releasing active interface [ 373.478630][T15371] veth0_to_bond: left promiscuous mode [ 373.478800][T15371] veth0_to_bond: left allmulticast mode [ 373.813758][T15376] ip_tables: iptables: counters copy to user failed while replacing table [ 373.814108][T15376] ip_tables: iptables: counters copy to user failed while replacing table [ 373.839469][T15376] ip_tables: iptables: counters copy to user failed while replacing table [ 373.839843][T15376] ip_tables: iptables: counters copy to user failed while replacing table [ 374.089852][T15392] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2461'. [ 374.542690][T15408] bond10: (slave team0): Releasing backup interface [ 374.613944][T15408] team0 (unregistering): Port device team_slave_0 removed [ 374.673537][T15408] team0 (unregistering): Port device team_slave_1 removed [ 374.741761][T15408] bond1: left allmulticast mode [ 374.741811][T15408] bond1: left promiscuous mode [ 374.769092][T15408] team0 (unregistering): Port device macvlan2 removed [ 374.792931][T15408] bond6: left allmulticast mode [ 374.792974][T15408] bond6: left promiscuous mode [ 374.817505][T15408] team0 (unregistering): Port device macvlan4 removed [ 374.850967][T15408] bond7: left allmulticast mode [ 374.851009][T15408] bond7: left promiscuous mode [ 374.868434][T15408] team0 (unregistering): Port device macvlan5 removed [ 374.890638][T15408] bond8: left allmulticast mode [ 374.890680][T15408] bond8: left promiscuous mode [ 374.920365][T15408] team0 (unregistering): Port device macvlan6 removed [ 374.944840][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 374.944869][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2466'. [ 375.047378][T15415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2467'. [ 375.047869][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2467'. [ 375.439886][T15437] netlink: 'syz.0.2473': attribute type 25 has an invalid length. [ 376.031191][T15443] syzkaller0: entered promiscuous mode [ 376.031876][T15443] syzkaller0: entered allmulticast mode [ 379.947380][T15469] __nla_validate_parse: 3 callbacks suppressed [ 379.947400][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2479'. [ 379.973767][T15468] nbd2: detected capacity change from 0 to 63 [ 380.050208][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2481'. [ 380.065605][ T4954] block nbd2: Receive control failed (result -104) [ 380.077682][T15469] bond22: entered promiscuous mode [ 380.083250][T15469] 8021q: adding VLAN 0 to HW filter on device bond22 [ 380.308546][T15469] 8021q: adding VLAN 0 to HW filter on device bond22 [ 380.309638][T15469] bond22: (slave sit2): The slave device specified does not support setting the MAC address [ 380.314708][T15469] bond22: (slave sit2): Error -95 calling set_mac_address [ 380.687158][T15500] net_ratelimit: 61 callbacks suppressed [ 380.687179][T15500] ip_tables: iptables: counters copy to user failed while replacing table [ 380.689183][T15500] x_tables: duplicate underflow at hook 2 [ 381.479048][T15532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2494'. [ 381.479125][T15532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2494'. [ 381.581604][T15534] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2495'. [ 381.731119][T15539] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2497'. [ 382.975683][T15584] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2511'. [ 383.573987][T15587] bridge7: entered promiscuous mode [ 383.912201][T15610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2517'. [ 383.955139][T15610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2517'. [ 384.029760][T15610] bridge0: port 2(ip6gretap0) entered blocking state [ 384.029874][T15610] bridge0: port 2(ip6gretap0) entered forwarding state [ 384.071016][T15609] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2516'. [ 384.142811][T15610] batman_adv: batadv0: Interface activated: dummy0 [ 384.195984][T15610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.369534][T15589] Can't find ip_set type hasyf-p_ú2¬rt,net [ 384.640783][T15610] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 385.389533][T15656] bridge_slave_1: left allmulticast mode [ 385.389558][T15656] bridge_slave_1: left promiscuous mode [ 385.389834][T15656] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.469607][T15656] bond0: (slave bond_slave_0): Releasing backup interface [ 385.599995][T15656] bond0: (slave bond_slave_1): Releasing backup interface [ 385.626499][T15656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.626523][T15656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.653260][T15656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.691326][T15667] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2528'. [ 385.846289][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2531'. [ 385.846326][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2531'. [ 386.133138][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 386.133162][T15675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2532'. [ 387.051020][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.051428][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.051837][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.052230][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.103186][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.103590][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.103972][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.138155][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.139510][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.140921][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.146460][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.149039][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.154067][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.176001][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.183996][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.186426][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.192088][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.209617][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.210928][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.216101][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.225744][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.227037][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.229605][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.244480][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.245903][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.248777][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.260953][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.269830][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.291061][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.295275][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.298778][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.356284][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.357738][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 387.703589][T15706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2538'. [ 387.968259][T15718] netlink: 'syz.1.2542': attribute type 1 has an invalid length. [ 388.080036][T15720] xt_TPROXY: Can be used only with -p tcp or -p udp [ 388.095488][T15718] 8021q: adding VLAN 0 to HW filter on device bond14 [ 388.184113][T15718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2542'. [ 388.326319][T15732] netlink: 'syz.1.2542': attribute type 10 has an invalid length. [ 388.326341][T15732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2542'. [ 388.964966][T15724] 8021q: adding VLAN 0 to HW filter on device bond12 [ 388.967139][T15718] bond14: entered promiscuous mode [ 388.967161][T15718] bond14: entered allmulticast mode [ 389.150451][T15753] Cannot find map_set index 135 as target [ 389.309490][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2550'. [ 389.395174][T15736] macvlan7: entered promiscuous mode [ 389.395197][T15736] macvlan7: entered allmulticast mode [ 389.610538][T15756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2550'. [ 389.867406][T15775] trusted_key: syz.1.2556 sent an empty control message without MSG_MORE. [ 390.013947][T15780] xt_hashlimit: size too large, truncated to 1048576 [ 390.713906][T15782] syzkaller1: entered promiscuous mode [ 390.713929][T15782] syzkaller1: entered allmulticast mode [ 390.794025][T15807] ip_tables: iptables: counters copy to user failed while replacing table [ 390.841621][T15790] syzkaller1: left promiscuous mode [ 390.841642][T15790] syzkaller1: left allmulticast mode [ 390.917592][T15813] ip_tables: iptables: counters copy to user failed while replacing table [ 390.991224][T15798] IPVS: Scheduler module ip_vs_mÏ2Ñ– not found [ 391.050486][T15805] syzkaller0: entered promiscuous mode [ 391.050536][T15805] syzkaller0: entered allmulticast mode [ 391.331916][T15832] __nla_validate_parse: 2 callbacks suppressed [ 391.331935][T15832] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2563'. [ 393.927800][T15855] openvswitch: netlink: Multiple metadata blocks provided [ 396.201380][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'. [ 396.298358][T15938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.327462][T15938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2587'. [ 396.378086][T15943] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2589'. [ 396.378126][T15943] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2589'. [ 396.378143][T15943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2589'. [ 396.423385][T15943] ip6gre1: entered promiscuous mode [ 396.766875][T15956] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2590'. [ 396.767002][T15956] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 397.009615][T15971] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 397.037170][T15970] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2594'. [ 397.115166][T15956] 0ªX¹¦Dö»: entered allmulticast mode [ 397.370275][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2597'. [ 397.679384][T15968] veth7: entered allmulticast mode [ 397.700982][T15968] bond8: (slave veth7): Enslaving as an active interface with a down link [ 397.725904][T15971] bond8: (slave veth0_to_bond): making interface the new active one [ 397.727054][T15971] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 397.733154][T15984] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2598'. [ 397.790076][T15972] macvlan0: entered promiscuous mode [ 397.790100][T15972] macvlan0: entered allmulticast mode [ 397.790783][T15972] bond8: entered promiscuous mode [ 397.790800][T15972] veth0_to_bond: entered promiscuous mode [ 397.825729][T15972] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 397.826646][T15972] bond8: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 397.831389][T15972] bond8: left promiscuous mode [ 397.831407][T15972] veth0_to_bond: left promiscuous mode [ 397.956095][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2599'. [ 398.106520][T15998] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2601'. [ 399.185819][T16043] block nbd0: reconnected socket [ 399.186391][T16043] block nbd0: reconnected socket [ 399.190129][T16043] netlink: 'syz.4.2613': attribute type 9 has an invalid length. [ 399.394200][T16049] [ 399.396564][T16049] ====================================================== [ 399.403634][T16049] WARNING: possible circular locking dependency detected [ 399.410666][T16049] syzkaller #0 Not tainted [ 399.415106][T16049] ------------------------------------------------------ [ 399.422117][T16049] syz.1.2615/16049 is trying to acquire lock: [ 399.428176][T16049] ffffffff90094cc0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x5f/0x600 [ 399.437660][T16049] [ 399.437660][T16049] but task is already holding lock: [ 399.445018][T16049] ffffffff900771b8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x59/0x470 [ 399.454549][T16049] [ 399.454549][T16049] which lock already depends on the new lock. [ 399.454549][T16049] [ 399.464947][T16049] [ 399.464947][T16049] the existing dependency chain (in reverse order) is: [ 399.473962][T16049] [ 399.473962][T16049] -> #7 (slab_mutex){+.+.}-{4:4}: [ 399.481289][T16049] __mutex_lock+0x197/0x15a0 [ 399.486465][T16049] kmem_cache_destroy+0x73/0x180 [ 399.491936][T16049] nfsd_file_cache_shutdown+0x126/0x370 [ 399.498113][T16049] nfsd_svc+0x539/0x710 [ 399.502823][T16049] nfsd_nl_threads_set_doit+0xa6c/0xc30 [ 399.508892][T16049] genl_family_rcv_msg_doit+0x233/0x340 [ 399.514958][T16049] genl_rcv_msg+0x614/0x7a0 [ 399.519974][T16049] netlink_rcv_skb+0x226/0x4a0 [ 399.525262][T16049] genl_rcv+0x28/0x40 [ 399.529764][T16049] netlink_unicast+0x8ef/0xa80 [ 399.535043][T16049] netlink_sendmsg+0x7f0/0xb20 [ 399.540331][T16049] sock_sendmsg_nosec+0x14e/0x190 [ 399.545878][T16049] ____sys_sendmsg+0x54e/0x850 [ 399.551163][T16049] ___sys_sendmsg+0x2a5/0x360 [ 399.556355][T16049] __x64_sys_sendmsg+0x1b1/0x290 [ 399.561813][T16049] do_syscall_64+0x166/0x520 [ 399.566926][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.573338][T16049] [ 399.573338][T16049] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 399.581074][T16049] cpus_read_lock+0x3d/0x160 [ 399.586221][T16049] static_key_slow_inc+0x12/0x30 [ 399.591696][T16049] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 399.598034][T16049] nbd_genl_foreach_sock+0x265/0x450 [ 399.603844][T16049] nbd_genl_reconfigure+0xbbb/0x1040 [ 399.609711][T16049] genl_family_rcv_msg_doit+0x233/0x340 [ 399.615783][T16049] genl_rcv_msg+0x614/0x7a0 [ 399.620804][T16049] netlink_rcv_skb+0x226/0x4a0 [ 399.626091][T16049] genl_rcv+0x28/0x40 [ 399.630589][T16049] netlink_unicast+0x8ef/0xa80 [ 399.635878][T16049] netlink_sendmsg+0x7f0/0xb20 [ 399.641171][T16049] sock_sendmsg_nosec+0x14e/0x190 [ 399.646716][T16049] ____sys_sendmsg+0x54e/0x850 [ 399.652001][T16049] ___sys_sendmsg+0x2a5/0x360 [ 399.657199][T16049] __x64_sys_sendmsg+0x1b1/0x290 [ 399.662653][T16049] do_syscall_64+0x166/0x520 [ 399.667770][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.674184][T16049] [ 399.674184][T16049] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 399.681834][T16049] __mutex_lock+0x197/0x15a0 [ 399.686946][T16049] nbd_queue_rq+0x373/0xff0 [ 399.691968][T16049] blk_mq_dispatch_rq_list+0x499/0x1990 [ 399.698150][T16049] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 399.705058][T16049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 399.711564][T16049] blk_mq_run_work_fn+0x167/0x2f0 [ 399.717109][T16049] process_scheduled_works+0xc3d/0x1630 [ 399.723185][T16049] worker_thread+0xa47/0xfb0 [ 399.728318][T16049] kthread+0x38b/0x480 [ 399.732920][T16049] ret_from_fork+0x514/0xb70 [ 399.738069][T16049] ret_from_fork_asm+0x1a/0x30 [ 399.743353][T16049] [ 399.743353][T16049] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 399.750568][T16049] __mutex_lock+0x197/0x15a0 [ 399.755689][T16049] nbd_queue_rq+0xc1/0xff0 [ 399.760625][T16049] blk_mq_dispatch_rq_list+0x499/0x1990 [ 399.766704][T16049] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 399.773549][T16049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 399.780050][T16049] blk_mq_run_work_fn+0x167/0x2f0 [ 399.785598][T16049] process_scheduled_works+0xc3d/0x1630 [ 399.791672][T16049] worker_thread+0xa47/0xfb0 [ 399.796792][T16049] kthread+0x38b/0x480 [ 399.801385][T16049] ret_from_fork+0x514/0xb70 [ 399.806495][T16049] ret_from_fork_asm+0x1a/0x30 [ 399.811777][T16049] [ 399.811777][T16049] -> #3 (set->srcu){.+.+}-{0:0}: [ 399.818898][T16049] __synchronize_srcu+0xca/0x2f0 [ 399.824393][T16049] elevator_switch+0x1e8/0x7b0 [ 399.829771][T16049] elevator_change+0x2fa/0x480 [ 399.835065][T16049] elevator_set_default+0x375/0x440 [ 399.840801][T16049] blk_register_queue+0x404/0x4f0 [ 399.846398][T16049] __add_disk+0x6b8/0xdb0 [ 399.851287][T16049] add_disk_fwnode+0x100/0x3a0 [ 399.856576][T16049] nbd_dev_add+0x733/0xb60 [ 399.861506][T16049] nbd_init+0x168/0x1f0 [ 399.866285][T16049] do_one_initcall+0x250/0x870 [ 399.871569][T16049] do_initcall_level+0x10a/0x1a0 [ 399.877115][T16049] do_initcalls+0x59/0xa0 [ 399.881965][T16049] kernel_init_freeable+0x29d/0x3e0 [ 399.887695][T16049] kernel_init+0x22/0x1d0 [ 399.892548][T16049] ret_from_fork+0x514/0xb70 [ 399.897654][T16049] ret_from_fork_asm+0x1a/0x30 [ 399.902937][T16049] [ 399.902937][T16049] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 399.910763][T16049] __mutex_lock+0x197/0x15a0 [ 399.915881][T16049] elevator_change+0x1af/0x480 [ 399.921169][T16049] elevator_set_none+0xb5/0x140 [ 399.926545][T16049] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 399.932867][T16049] nbd_start_device+0x189/0xb30 [ 399.938228][T16049] nbd_genl_connect+0x167d/0x1cd0 [ 399.943772][T16049] genl_family_rcv_msg_doit+0x233/0x340 [ 399.949845][T16049] genl_rcv_msg+0x614/0x7a0 [ 399.954866][T16049] netlink_rcv_skb+0x226/0x4a0 [ 399.960147][T16049] genl_rcv+0x28/0x40 [ 399.964646][T16049] netlink_unicast+0x8ef/0xa80 [ 399.969925][T16049] netlink_sendmsg+0x7f0/0xb20 [ 399.975235][T16049] sock_sendmsg_nosec+0x14e/0x190 [ 399.980804][T16049] ____sys_sendmsg+0x54e/0x850 [ 399.986087][T16049] ___sys_sendmsg+0x2a5/0x360 [ 399.991282][T16049] __x64_sys_sendmsg+0x1b1/0x290 [ 399.996734][T16049] do_syscall_64+0x166/0x520 [ 400.001848][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.008261][T16049] [ 400.008261][T16049] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 400.016859][T16049] blk_alloc_queue+0x544/0x690 [ 400.022155][T16049] __blk_mq_alloc_disk+0x194/0x390 [ 400.027789][T16049] nbd_dev_add+0x494/0xb60 [ 400.032724][T16049] nbd_init+0x168/0x1f0 [ 400.037392][T16049] do_one_initcall+0x250/0x870 [ 400.042671][T16049] do_initcall_level+0x10a/0x1a0 [ 400.048127][T16049] do_initcalls+0x59/0xa0 [ 400.052987][T16049] kernel_init_freeable+0x29d/0x3e0 [ 400.058704][T16049] kernel_init+0x22/0x1d0 [ 400.063554][T16049] ret_from_fork+0x514/0xb70 [ 400.068669][T16049] ret_from_fork_asm+0x1a/0x30 [ 400.073951][T16049] [ 400.073951][T16049] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 400.081162][T16049] __lock_acquire+0x164c/0x2de0 [ 400.086536][T16049] lock_acquire+0x115/0x350 [ 400.091550][T16049] fs_reclaim_acquire+0x71/0x100 [ 400.097026][T16049] kmem_cache_alloc_noprof+0x5f/0x600 [ 400.102925][T16049] __kmem_cache_create_args+0x30c/0x470 [ 400.109006][T16049] ieee80211_mesh_init_sdata+0x371/0x620 [ 400.115286][T16049] ieee80211_setup_sdata+0x858/0xc10 [ 400.121150][T16049] ieee80211_if_change_type+0x141/0x940 [ 400.127216][T16049] ieee80211_change_iface+0xdc/0x4b0 [ 400.133056][T16049] cfg80211_change_iface+0x40f/0x9c0 [ 400.138915][T16049] nl80211_set_interface+0x78e/0xaa0 [ 400.144778][T16049] genl_family_rcv_msg_doit+0x233/0x340 [ 400.150839][T16049] genl_rcv_msg+0x614/0x7a0 [ 400.155865][T16049] netlink_rcv_skb+0x226/0x4a0 [ 400.161151][T16049] genl_rcv+0x28/0x40 [ 400.165648][T16049] netlink_unicast+0x8ef/0xa80 [ 400.170927][T16049] netlink_sendmsg+0x7f0/0xb20 [ 400.176241][T16049] sock_sendmsg_nosec+0x14e/0x190 [ 400.181784][T16049] ____sys_sendmsg+0x54e/0x850 [ 400.187067][T16049] ___sys_sendmsg+0x2a5/0x360 [ 400.192255][T16049] __x64_sys_sendmsg+0x1b1/0x290 [ 400.197709][T16049] do_syscall_64+0x166/0x520 [ 400.202823][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.209234][T16049] [ 400.209234][T16049] other info that might help us debug this: [ 400.209234][T16049] [ 400.219459][T16049] Chain exists of: [ 400.219459][T16049] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 400.219459][T16049] [ 400.231726][T16049] Possible unsafe locking scenario: [ 400.231726][T16049] [ 400.239326][T16049] CPU0 CPU1 [ 400.244683][T16049] ---- ---- [ 400.250063][T16049] lock(slab_mutex); [ 400.254050][T16049] lock(cpu_hotplug_lock); [ 400.261069][T16049] lock(slab_mutex); [ 400.267571][T16049] lock(fs_reclaim); [ 400.271544][T16049] [ 400.271544][T16049] *** DEADLOCK *** [ 400.271544][T16049] [ 400.279675][T16049] locks held by syz.1.2615/16049: 4, last CPU#1: [ 400.286096][T16049] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 400.294285][T16049] #1: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x117/0xfa0 [ 400.303603][T16049] #2: ffff888054630800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_pre_doit+0x6b2/0xfa0 [ 400.313439][T16049] #3: ffffffff900771b8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x59/0x470 [ 400.323374][T16049] [ 400.323374][T16049] stack backtrace: [ 400.329284][T16049] CPU: 1 UID: 0 PID: 16049 Comm: syz.1.2615 Not tainted syzkaller #0 PREEMPT(full) [ 400.338656][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.348734][T16049] Call Trace: [ 400.352016][T16049] [ 400.354945][T16049] dump_stack_lvl+0xe8/0x150 [ 400.359551][T16049] print_circular_bug+0x2e2/0x300 [ 400.364597][T16049] check_noncircular+0x12f/0x150 [ 400.369550][T16049] __lock_acquire+0x164c/0x2de0 [ 400.374407][T16049] ? __pfx___mutex_trylock_common+0x10/0x10 [ 400.380310][T16049] ? __pfx___schedule+0x10/0x10 [ 400.385164][T16049] ? trace_contention_end+0x3d/0x140 [ 400.390462][T16049] lock_acquire+0x115/0x350 [ 400.394961][T16049] ? kmem_cache_alloc_noprof+0x5f/0x600 [ 400.400514][T16049] ? __kmem_cache_create_args+0x30c/0x470 [ 400.406244][T16049] fs_reclaim_acquire+0x71/0x100 [ 400.411187][T16049] ? kmem_cache_alloc_noprof+0x5f/0x600 [ 400.416728][T16049] kmem_cache_alloc_noprof+0x5f/0x600 [ 400.422103][T16049] ? __kmem_cache_create_args+0x30c/0x470 [ 400.427911][T16049] __kmem_cache_create_args+0x30c/0x470 [ 400.433462][T16049] ieee80211_mesh_init_sdata+0x371/0x620 [ 400.439110][T16049] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 400.445281][T16049] ? __raw_spin_lock_init+0x45/0x100 [ 400.450571][T16049] ieee80211_setup_sdata+0x858/0xc10 [ 400.455867][T16049] ieee80211_if_change_type+0x141/0x940 [ 400.461422][T16049] ieee80211_change_iface+0xdc/0x4b0 [ 400.466738][T16049] cfg80211_change_iface+0x40f/0x9c0 [ 400.472028][T16049] nl80211_set_interface+0x78e/0xaa0 [ 400.477319][T16049] ? __pfx_nl80211_set_interface+0x10/0x10 [ 400.483136][T16049] genl_family_rcv_msg_doit+0x233/0x340 [ 400.488686][T16049] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 400.494755][T16049] ? bpf_lsm_capable+0x9/0x20 [ 400.499434][T16049] ? security_capable+0x7e/0x2c0 [ 400.504502][T16049] genl_rcv_msg+0x614/0x7a0 [ 400.509013][T16049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.514030][T16049] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 400.519401][T16049] ? __pfx_nl80211_set_interface+0x10/0x10 [ 400.525210][T16049] ? __pfx_nl80211_post_doit+0x10/0x10 [ 400.530679][T16049] netlink_rcv_skb+0x226/0x4a0 [ 400.535458][T16049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.540482][T16049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.545776][T16049] ? down_read+0x2b9/0x320 [ 400.550289][T16049] genl_rcv+0x28/0x40 [ 400.554289][T16049] netlink_unicast+0x8ef/0xa80 [ 400.559080][T16049] netlink_sendmsg+0x7f0/0xb20 [ 400.563859][T16049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.569170][T16049] ? aa_sock_msg_perm+0x144/0x210 [ 400.574199][T16049] ? apparmor_socket_sendmsg+0x98/0x360 [ 400.579752][T16049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.585049][T16049] sock_sendmsg_nosec+0x14e/0x190 [ 400.590085][T16049] ____sys_sendmsg+0x54e/0x850 [ 400.594848][T16049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.600141][T16049] ? import_iovec+0x73/0xa0 [ 400.604655][T16049] ___sys_sendmsg+0x2a5/0x360 [ 400.609327][T16049] ? __lock_acquire+0x747/0x2de0 [ 400.614274][T16049] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.619476][T16049] ? tomoyo_path_number_perm+0x219/0x5f0 [ 400.625205][T16049] ? __fget_files+0x3a2/0x420 [ 400.629884][T16049] ? __fget_files+0x2a/0x420 [ 400.634477][T16049] __x64_sys_sendmsg+0x1b1/0x290 [ 400.639409][T16049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.644876][T16049] ? kfree+0x4d/0x650 [ 400.648864][T16049] ? __pfx_kcov_ioctl+0x10/0x10 [ 400.653747][T16049] do_syscall_64+0x166/0x520 [ 400.658334][T16049] ? trace_irq_disable+0x3b/0x140 [ 400.663363][T16049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.669419][T16049] ? clear_bhb_loop+0x70/0xc0 [ 400.674094][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.680004][T16049] RIP: 0033:0x7f71c119fb19 [ 400.684421][T16049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.704035][T16049] RSP: 002b:00007f71c2016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.712976][T16049] RAX: ffffffffffffffda RBX: 00007f71c1426090 RCX: 00007f71c119fb19 [ 400.720938][T16049] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 400.728901][T16049] RBP: 00007f71c1237b70 R08: 0000000000000000 R09: 0000000000000000 [ 400.736871][T16049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.744840][T16049] R13: 00007f71c1426128 R14: 00007f71c1426090 R15: 00007fffc9dbbb08 [ 400.752819][T16049] [ 400.857482][ T5649] block nbd0: Receive control failed (result -32) [ 400.857713][ T4954] block nbd0: Receive control failed (result -32) [ 400.883450][T16047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2615'.