last executing test programs: 2.565824344s ago: executing program 2 (id=4459): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, r0}, 0x94) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}}}}}}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000a40)="13000000010203", 0x7}, {&(0x7f0000000000)='hOk', 0x29}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept$inet(r5, &(0x7f0000000000), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f00000005c0)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000d00)="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", 0x107}, {&(0x7f0000002f80)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e", 0xbe7}, {&(0x7f00000009c0)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b356ca23162493370e9055e9320279b93aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a000000809658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f01587e997359498ac5b57e8b86fbf5327519ebc68cb81762ebdada6dca6eaee8ac113c10eead6548244be72d5e261f0084329890a01da108431ece9146f6a5f6214c44e05a9750f872bb69b2ac0386c26b78819c32bec4043042e0c8cfc589a077c5e3b062fd0f5a277056779ea2155662ff91e332e587bbd2e7c25d54fbd18052034f68a83ceeb4f3e6f0182a3f88aabf84ddf4428f9a569a161da8d5c74408a24bef6a524953a65b12d16ae5f06c359c5bddc0a9e263c1ffc", 0x173}], 0x5}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) 2.447030718s ago: executing program 4 (id=4461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) 1.966740449s ago: executing program 0 (id=4466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_CACHEINFO={0x14}]}, 0x5c}}, 0x44000) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030004000500e1000c04", 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd70700002000000095000000000000002ba72804605789bfbc7174159805d30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc162619b3af8a4e825d922c65e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bf3d6b2e28f90c52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d350100c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64dc4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a7e008f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d054c744fd06a57f7bcb8fb58c512d0884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637c335892b420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072da00f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce6459200000067c38a656d326cff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b52f79a3f7306436762dd1a08ce023e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac3ffff1ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d0dbaec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f6eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032bd2649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a604e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b0104000000000000a4c0a1d44d9dfd82896f5623e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f330a5e05b59db781cf9cf33752836fff6fcbf379332357c47f3597e084d0779b3cbfb312925a8151e338eca2c80600000000ac5992a4c7ec0b741f117f628562c3b27483ad6d733ffcbfca0ba805af95f8985901b0b8f918efa139e984fe872f22f5f094e3fbdf45ec2076710d8c787156b3e05774ac977c3db6288d252b2a73c84a07d73f9721e52f5b5d331ebb7db0a03be93fd96d7355405e954b8d6d0efcd6c37d869086efe15e30b7b6b2b37647e265a62fccfeb16f12f109dc5e405b53d1737b7a2620943affaa2eb07585e23e0513df2f83218f9f3ed9ba3026bcfbe5e9b36ab5b052886227827b983c0fe8da495f1ea7b5c35e42ff83f6e5e5a71ba3000000000000000000f73ffcd0c92a30304d5142441978012e2e6e1c45c28713fa5354f1fd124598688dffa0890dc8c6b4d9732347896d17d4efe12c20c706dcd4601135c553713cc4000a6690a2eed2e680db50589a659a240afc2c1eaa381a4135933a8d7abff2a7882ff50eabbe493ae54f71473eb65fe8e850f36d096a9c7dfd8fd2a35234bef2ba4755e10489b2508e4a9d911135b6c802e16e23fc7a3c3c0f5939b842bca82db931e5ba180f1eed5f539371105aee1d06af045892e18eb5dfd361f6d89fff0b82da98fa7aa90fe92b59887fda0ed8d375ba13fe3f63e69e417c89e31fdf55b9c2e9e0398c661d4c4ce0804971f3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000003c0)={r1, &(0x7f00000001c0)='\x00', 0x8a000, &(0x7f0000000300)={@_ha_fsid={[0x7fffffff, 0x4]}, {0xff3e, 0x6, 0x2, 0x6}}, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x3}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000c0003400004000008000740000004001800068014000400200100"/177], 0xb4}}, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000004a8c0000000000470000185100"/29, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_CACHEINFO={0x14}]}, 0x5c}}, 0x44000) (async) socket(0x400000000010, 0x3, 0x0) (async) write(r1, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030004000500e1000c04", 0x1d) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000003c0)={r1, &(0x7f00000001c0)='\x00', 0x8a000, &(0x7f0000000300)={@_ha_fsid={[0x7fffffff, 0x4]}, {0xff3e, 0x6, 0x2, 0x6}}, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x3}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000c0003400004000008000740000004001800068014000400200100"/177], 0xb4}}, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000004a8c0000000000470000185100"/29, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) (async) 1.933218786s ago: executing program 4 (id=4468): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/178, 0xb2}, {&(0x7f0000003580)=""/118, 0x76}], 0x4}, 0x0) 1.792040396s ago: executing program 4 (id=4469): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d16080600000000000000f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0) 1.685084045s ago: executing program 0 (id=4471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x37, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x3d, 0x2}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @enum64={0xa, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x10, 0x7, 0x5}, {0x6, 0x772e0f7, 0xb2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000700)=""/115, 0x68, 0x73, 0x1, 0xffffffbd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000840)=""/98, 0x62, 0x0, &(0x7f00000008c0)=""/112, 0x70}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x12, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x39a}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000300)='GPL\x00', 0x0, 0x9a, &(0x7f0000000580)=""/154, 0x40f00, 0x4, '\x00', r3, @fallback=0x1b, r4, 0x8, &(0x7f00000007c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xa, 0xbe, 0x3}, 0x10, r5, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000009c0)=[{0x3, 0x1, 0x9, 0xc}, {0x1, 0x1, 0x7, 0x1}, {0x5, 0x2, 0x6, 0xd}, {0x3, 0x3, 0xc}, {0x4, 0x5, 0xd, 0x3}, {0x5, 0x5, 0x6, 0x4}, {0x3, 0x5, 0x4, 0xb}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x6}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000000)=0x7, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r9], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.665818617s ago: executing program 4 (id=4472): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}], 0x1, 0x931766f6159e6d55) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x0, @private1, 0x9}}, 0x40, 0x1, 0x8, 0x3fd, 0x80, 0x0, 0x4}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x14, 0x3}, &(0x7f00000002c0)=0x90) 1.64200368s ago: executing program 2 (id=4473): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x34}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc740000000c0a010100000000000000000a0000060900020073797a3100000000090001d573797a31000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000100000800034000000008140000001100010000000000000000000300000a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000480)="a6cc04e2d8f1c3adfbf10b29c56e3a") socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32) socket(0x10, 0x3, 0x0) (rerun: 32) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x8) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async, rerun: 32) r5 = socket$inet(0x2, 0x2, 0x3) (rerun: 32) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x2b, 0x6, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 1.54229167s ago: executing program 1 (id=4474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async, rerun: 32) r1 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) (async, rerun: 32) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (rerun: 32) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) 1.466783926s ago: executing program 4 (id=4476): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r4 = socket(0x2, 0x3, 0x100000001) setsockopt(r4, 0xff, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f80)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r6, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES8], 0x33) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000018000380100003800c000180080001000800010004000100"], 0x44}}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001080)={&(0x7f00000012c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf25490000000c009900040000002a000000ad86fb629451249f64949e134462122e037a42c5baae77e85c91b0fbf394876aed11bded02f6f4bb60e8a097cf259e11"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r10, 0xc010f508, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r10, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r10, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="00b0b3", @ANYBLOB="f67ed21eb4de11239de3c615d8453c57f77604e69b3a0945aef86b0de9af84445a8ece98ee1d7cac159e3669c539463c5e2977d46958865dd0d0f3c4d7e8bffe0b2189ef1f4e4e1b6e7ffc2e953226ed27f4fa2e6eb3dc14af197347f11faeb11a7aa5b59470f078ca115650ccad91b730fc7a1bf6285c7a731c3ca43807655a60d97bf622fde3ce81abae167e78c9c78c4a444b8c69cac27d974bbc6dfd8795bb5dcf9a33", @ANYRESDEC=r6], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.463113123s ago: executing program 0 (id=4477): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r4 = socket$inet6(0xa, 0x2, 0x0) close(r4) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x14, r3}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="00008848d100582a", 0x8) 1.421888537s ago: executing program 2 (id=4478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000002680)=ANY=[@ANYBLOB="180000000000000000000000060000008500000097000000850000000700000095"], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008d000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe000085000000c03c0000bf0900000000000055090100ffffffff950000000000000018190000", @ANYRES32=r1, @ANYBLOB="00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b7000000f800000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.215054718s ago: executing program 2 (id=4480): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x6, 0x0, 0x0, 0x574aca18db6b83aa, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r3, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRESDEC=r1], 0x14}}, 0x8000) unshare(0x22020600) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) pread64(r4, &(0x7f00000005c0)=""/208, 0xd0, 0xfffffffffffffff9) 1.181737684s ago: executing program 0 (id=4481): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0xd3, 0x3, 0xd, 0x7f, 0x4, 0x0, [{0xfffffffffffffa80, 0xea6, 0x33, '\x00', 0x800}, {0x1000, 0xff, 0x1b38, '\x00', 0x2404}, {0x4000000, 0x6, 0x4, '\x00', 0x801}, {0x4, 0x2, 0x0, '\x00', 0x8}]}) socket$kcm(0x21, 0x2, 0x2) (async) r1 = socket$kcm(0x21, 0x2, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) 1.154606674s ago: executing program 3 (id=4482): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xf, 0x2, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bb8, 0x0, {0x6, 0x0, 0x10, 0x3, 0x0, 0xffffffc5, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@empty}}]}, 0x50}}, 0x20008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000240)=@get={0x1, &(0x7f0000000180)=""/166, 0x80000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc4, r4, 0x626, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "492f07fb7ac590a17c1c7dbcbd44dd33c16006181d584873af99551e53"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xeaaf}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44000}, 0x80) close(r1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x401}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7fffffff}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x30000010}, 0x40d0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x3, 0x1, 0x3}}, 0x26) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xcb, 0x18}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x954ca95c168975c3}, 0x20004045) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000900)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/186, 0xba, 0x0, &(0x7f0000000840)=""/184, 0xb8}, &(0x7f0000000940)=0x40) r8 = socket(0x2, 0x804, 0x9) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xa0, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfb2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x30}}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xa0}}, 0x40000) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000b40)={@rand_addr=0x64010101, @multicast2, 0x0, 0x8, [@local, @remote, @loopback, @broadcast, @loopback, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xa}]}, 0x30) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000b80)={0x0, 0x3, 0x1, 0x4}) close(r2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001340)={{r8, &(0x7f0000000bc0)='wlan1\x00', 0x20001, &(0x7f0000000c00)={@align=0xc, {0x1, 0x9, 0x80, 0x8}}, 0x3, &(0x7f0000000c40), &(0x7f0000000c80)=0x4}, 0x6, &(0x7f0000001280)=[{0x2, 0x2, &(0x7f0000000cc0)='\x00', &(0x7f0000000d00)="ca69c4b461ecc01d55e95569ba742da28a82184d424f01788561a267bf34a6cc3132b0485b8d521e73f357ecbb2c6fe6f562cc05877f4888eed5909eda7d8c9de55a8dccc1e16e0a42304a265d62992e51e54b1625855f05312403c5e27a51a23c2a9cee8cae8e1ebb3285c5336db637273d12c26dbb518350bbbf7dbda2d80fe89f09332dbd48d50e197fc204b2893a0311cd3987330a43a8161b37293e346e9c205e7ebf169d43d776ce7e7953e6e7387d", 0xb2, 0x8}, {0x3, 0x400, &(0x7f0000000dc0)='TIPCv2\x00', &(0x7f0000000e00)="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", 0xfb, 0x1a}, {0x3, 0x6, &(0x7f0000000f00)='secondname\x00', &(0x7f0000000f40)="92368f89b09d96cdd52173bc4e0a795485d67e4a098654d36484ac0185f1e2c6346df5890281750013bfdd", 0x2b, 0x2a}, {0x3, 0x1, &(0x7f0000000f80)='veth0_to_batadv\x00', &(0x7f0000000fc0)="59bb691aa92f1ef8cbe122ecac66cfdc7fabe12bc95c1c47d76dd4cfd218efafb15583e44762c3a24755912511d7bd37c088693c18c13584cb2d9d0cb7d5c50981decfba421586fd67347d09c4e9bd919d1317c84e8c23059b3c9b6aced02e9d390c0a1a57947cc0ec79c7d9e6ba64010a17bc06896a1af880187f76197250f22b7172489b7b228c82d08c2dc9c3e092665f0bb6dbe3dba3ef4ef0c749f3e4573b3a8a558c8fe17ff85afd73f19c10ce260d4d03b49302d4", 0xb8, 0xcf5f0c523c3362a0}, {0x2, 0x6, &(0x7f0000001080)='\x00', &(0x7f00000010c0)="2bfca5fdc45d6d3c0be1440e053b1535a1d23d2f71c5945203e949a4b434dcc9ee268e3ecda576f3e94f85f7675bd87093bb9bef26b29dd986464c2a1ebaf2109f69b61d97a7240b66f0f76721c15435829ac3f57adf1043e22700d8a271f52643e9ccd7a9ed8dd93b0ad2e77e42e2af96ffa7c63ea386e3046226905903828f3eaed90abc2ac810cf652bffaf580663ab91f82b2a553ff9d4d613483e7b84ce7ad27f4deca7b418bf6bbc67acbfa4f27de8581571f592f8d41c04e07b", 0xbd, 0x2a}, {0x2, 0xe6, &(0x7f0000001180)='\x00', &(0x7f00000011c0)="2d4e51f2a987a07f9f345801d2639594b1b0c70a4c102074de1ea9a0c1dd75081058177bee188e3df1e860a5d3daeeb36cde8036f708f2f6000b6dc89689542963a05d8e49c413dbe44b463430825a1118ebc0a5bba32a95cd52a4708c33fdcb067f26866aa622454c8dbd8073faf9039a34980f78e61eb3bfa4ec7a889012f27d59038788a37723c577f0e02402c00c39d1118acd856e59f11bbc7927d7d5a66935013b62fd2c6c", 0xa8, 0x8}]}) close(r10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r10, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r7, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000001500)={0x80000000}) setsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f0000001540), 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000001580)={@mcast2, 0x8, 0x2, 0xff, 0x4, 0x8, 0xd26}, &(0x7f00000015c0)=0x20) sendmsg$netlink(r3, &(0x7f0000001940)={&(0x7f0000001600)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40008}, 0xc, &(0x7f00000018c0)=[{&(0x7f0000001680)={0x11c, 0x35, 0x200, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x49, 0x0, 0x0, @pid}, @generic="ac2db72ddfecde447ccc37bb79dc87041a94045f6e5bf99e6faee2b44f60c52f6c", @generic="b084faed00a9efcac4112891221e4609c8d84d6ead37c1b3909e594357d1e1bdd0d5add12298d6a23ccbbc23fc1b2e13897296ac2d48a3e04a4286282fce76ffa517ad30312ec0d2b9b339fb30118f22016e952eafc7b34428dc46b25fb092b5bb51a3e6360141e950ead158e1329ed81de7c80136d25e2d6b8c27e5e5a7b2d99338c25547b8fe3c36c5f1dbbf3cc53d1f64518113697ea488e1ffcb081ee45f41634c344b7718f163e4aa515fed6d49cec94748259d0f46aa070eacd7a8b7bf63de4cf48f85b770bcb7f91e", @typed={0x8, 0x46, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xc, 0xe8, 0x0, 0x1, [@nested={0x4, 0xa}, @nested={0x4, 0x143}]}]}, 0x11c}, {&(0x7f00000017c0)={0xe4, 0x1a, 0x200, 0x70bd25, 0x25dfdbff, "", [@typed={0x4, 0x136}, @generic="eac92f38a86d171e3f58f65d8a5dcedbe1e3509fd77b246f76ea266cb2bb179288a52874840da3213f82ce1effc2b077da727a003c2c77a11ebf007c86e6c9ea6718ab7072f604f52c097931ea3819f022a5f94c38ad8f57f63440a49b387377478e79f21141d9f331074ba982228609cc24381d7ccb91a0ed8048d224aa101e5f5ea68b11db5b200a154957e7344fc8229d61119b6222241fd55c128ce15b97bb2db8e0971751420561881a222e1020d746b5c85bf637fc6dbe184a137324ca3fe0ee13546346edefc43afa3eb3"]}, 0xe4}], 0x2, &(0x7f0000001900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r1, r3]}}], 0x28, 0x44004}, 0x40000) 910.339863ms ago: executing program 2 (id=4483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x28, r1, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x2, &(0x7f0000000400)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000a40)='GPL\x00', 0x4, 0x14, &(0x7f0000000a80)=""/20, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x1, 0x0, 0x7fff, 0x400000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 908.524191ms ago: executing program 4 (id=4484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000052c0)=@newtfilter={0x3b08, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3ad4, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x14f4, 0x2, [@m_ct={0xd4, 0x0, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0xb}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "f3b0277cbc54accc93d56489a6dab64a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xa}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}]}, {0x61, 0x6, "2b767723424e8ff70356871881f9d8a38d55b464a0bb4202e28967950819f59995bb77c39988cca2c5a6759fcdc73c474b878eb7239245b2fe80cda1a7c43183d0d1899d5dd9a9d5aab96079ee2b7062b948a9b0176d912b2c05c3b45a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x10c, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0xd5, 0x6, "f4f02b5682b4ed3be7f7e67dc18ecee0adefe829940c264f778879109c49e8eac1e54e3961bd5634586953ac96c02d811776d831a9623fc9e84b0da683b8b1cae19649bf9acde735970874ccbe15af00a49b3df2fa41a46d5017ab4d4fd19ed82b7975a560354caa0ff79fb65e5c5cd3eea60502375205c492fb6c2bc1e60c44e931f1945eebd58dd7f3ce4bcfb58afe0dc03f152a6b3d235515b6fa678e5edcbdc242bfaefe239e46999f8a2710a2ccbd93dc04d755fb823653abfbba7e164863f545735be40943636530235da00a6996"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x10c4, 0xb, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xdd, 0x400, 0x6, 0x0, 0x1}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xaa, 0xfffffff4, 0x5, 0x6d, 0x1}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4c}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x30000002, 0x7, 0x1000}, 0x8}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x4000, 0x6, 0x8, 0x3070}}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xc8, 0x15, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x101, 0x18da, 0x2, 0xd55, 0x5}}]}, {0x85, 0x6, "b36fff679ca13f506900433ae7fe02a2b56e9e698fd928380f6fa0ed62c9520b551903d1d366a362791ee147d844be6c7b94d3ef27a4be1f89cbb8754673fd650073ce12f604922fd040b3413c057d7877dc678529462cd7fc90c2369691396854e0502656e53273ea814fdb7d5e03c2d096d848e71a6b2e6ea2de4526885680e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x184, 0x2, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xd, 0x20000000, 0x100, 0x800}, @multicast2, @private=0xa010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x35, 0x3, 0xffffffffefffffff, 0x6}, @multicast1, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0xa0000, 0x1, 0x5, 0x7}, @multicast1, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff0001, 0x3, 0x3, 0x7, 0x7f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}]}, {0xbc, 0x6, "0487017b465293e979a2c6547b92bdcc2a72f82e1dfbf1190438d09ade765755bece22e90f2ca579710241800d5d63e7e07d49a3e881ce08136bd1e53eff538bc5d7dd9c0d5ae6b6a2c117d1f81c1a3cd9097aec954225b859db22c7be6179a551a64e005826ecb8f45249a35b815bfc5d64375d6bfb84bd67211ea557e85d2e9d2758dcf453350d7fa53f6affbddc356c6e515b3bc194d9b70be72aed94f53ec750a46600517999ef2f03fa11e7d0a2e8d21f8b309a9053"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_ACT={0x25cc, 0x2, [@m_tunnel_key={0x12c, 0x15, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x30}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}]}, {0xd3, 0x6, "cc2866cd878bca423d473f3acbd920a8ca233cede1000c1dd37c5f625535a7a64df9dd74d7a872c633f49c9eb346cf892ad8506a2058f8b7560236ba789559e8e0ade0abf47c116265e089739eda4858091477a50876b6c1827dbfcdd2dcacb5ffa3a2f7c1602c6f85c5d4002485298554d1089c354a99ed813f482c2a5719f47ec13c79e52201128504ed81d5dba3a95ac6886fd869c0f7c19ae8dae29276df472c600cabe624c7f27f6b9cb9da7a0c72119528cd31395f5833ecc2a297f756ea35bffb1be46070d331b3e26c4c2f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x15c, 0xd, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd41}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xff, 0x7, 0x2, 0x8}, 0x2}}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_police={0x22ac, 0x5, 0x0, 0x0, {{0xb}, {0x221c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x3, 0x3, 0x1, 0x5, 0x200, 0x1000, 0x0, 0x7, 0xfffffffe, 0x9, 0x4, 0x7, 0x7, 0x80, 0x1, 0xb5b, 0x401, 0xba46, 0xf43, 0x3, 0x7fffffff, 0xd1, 0x3, 0xc556, 0x0, 0x3, 0x2, 0x6, 0x81, 0x3, 0x5, 0x10001, 0x100, 0x4, 0x40, 0xffff2265, 0x0, 0x0, 0x54, 0x9, 0x4, 0x6, 0x7fff, 0x5000000, 0x7, 0x5, 0x8, 0x3, 0x0, 0x1, 0x7ff, 0x6, 0x7, 0xd9f, 0x6, 0x2, 0x0, 0x10000, 0x5, 0x8, 0x2, 0x80000000, 0x1000, 0x0, 0x5, 0x7, 0x6, 0x9, 0xd75, 0x6, 0x2, 0x4, 0x3, 0x6, 0x10, 0x4, 0x3, 0x100, 0x8, 0x4, 0x1, 0x4, 0xf, 0x6, 0x7, 0x37f, 0xffffffff, 0x0, 0xf5, 0x4, 0xff, 0xffffff7f, 0xd2, 0x4, 0xffffffff, 0xeb3, 0xba, 0x1, 0x8001, 0xfffffff2, 0x6, 0x25e0, 0x9, 0x5, 0x755, 0x8, 0xda48, 0x5, 0x9, 0xe, 0x5, 0x8, 0x7, 0x5, 0x7, 0x4, 0x796, 0x8, 0x5, 0x5, 0xfffffffb, 0x8, 0x200, 0xfffffff7, 0x100, 0x8, 0x9, 0xd, 0x1850, 0x6, 0x1000, 0x7, 0x1, 0x0, 0x8b8c, 0x0, 0xfffffd40, 0x57fd, 0x7, 0x24000, 0x80, 0x5, 0xd, 0x6, 0x6, 0x0, 0x4, 0x81, 0x400, 0x853, 0xc27f, 0x2, 0x8, 0x7, 0x400, 0x7, 0x6, 0x7d63, 0x6, 0x9, 0x2, 0x0, 0x6, 0x7aa2, 0x0, 0x8, 0x6, 0x6, 0x1000, 0xa, 0x80, 0x9, 0x1, 0x7fff, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x9, 0x7fffffff, 0x81, 0x4, 0xf7ea, 0x0, 0xf6f2, 0x1, 0x7, 0x0, 0x3, 0xfffffff7, 0x4, 0x10, 0x3, 0xa307, 0x1, 0xebd7, 0x3, 0x6, 0x3a6c, 0xff, 0x4, 0x200, 0x9b9, 0x5, 0xe, 0x0, 0x8, 0x2a, 0x0, 0x6, 0xb, 0xda, 0x0, 0x8, 0x4, 0x9, 0x2, 0x8, 0x3a, 0x6, 0x8, 0x4, 0x6, 0x401, 0x3ff, 0x4, 0x1, 0x81, 0x0, 0x3, 0x1, 0xe, 0x7f, 0x2, 0x7, 0x7, 0x9, 0xc2, 0x0, 0xae00, 0x8d, 0x9, 0x0, 0xcc, 0x200, 0x3, 0xfffff3b5, 0xb20e, 0x4, 0xd99, 0xf381, 0x1, 0x1, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0xffffffffffffffff, 0xc, 0x2, 0x8a7e, {0x6, 0x0, 0x40, 0x1a0, 0xd, 0x7f}, {0x1, 0x2, 0x4e, 0x9, 0x11, 0xffffffc0}, 0x9, 0xfffffffd, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x9, 0x4a87, 0x3, {0xc, 0x0, 0x3ff, 0x5, 0x3, 0x3c000000}, {0x7, 0x2, 0x7, 0x4, 0x7, 0xa}, 0xffff, 0xffffffff, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x101, 0x2, 0x5, 0x5, 0x1, 0x8, 0x10000, 0x401, 0xffff, 0xba, 0x5, 0xdc, 0x5, 0x3, 0x78f, 0x7, 0x7, 0xffffffff, 0x40, 0x7, 0x4, 0x863, 0x1134, 0x5, 0x2, 0x48a, 0xb394, 0x2, 0x4, 0x1, 0x40, 0xfa5, 0x9, 0x3, 0x2, 0x7, 0x9, 0x2, 0x7, 0x5, 0x8, 0x1, 0x8, 0x2, 0x9, 0x400, 0x1, 0xffff, 0xe, 0x9, 0x5, 0x1b, 0x100, 0x1ff, 0x1, 0x1, 0x9c, 0x8001, 0x0, 0x415, 0x9, 0x5, 0xdf, 0x0, 0xb4d, 0x0, 0x6, 0x7, 0x1, 0x5, 0xf, 0x7fffffff, 0x3, 0x5, 0xc0000000, 0xffffffff, 0x7, 0x5, 0x7, 0x1ff, 0x2, 0x100, 0x8, 0x4f09, 0xfffffff8, 0x80000001, 0xa, 0xc5da, 0x2, 0x2, 0xc, 0x8000, 0x80, 0xaf9e, 0x28000000, 0x6, 0x5, 0x1, 0x0, 0x200, 0x5, 0x7fff, 0x3, 0x4, 0x8, 0x4, 0x50, 0x6, 0x6, 0x3, 0x1, 0x8, 0x2e3, 0x12, 0x1d, 0xe9, 0x5, 0x735, 0x9, 0x8, 0x2, 0x8, 0x3, 0x5, 0xb4, 0x2, 0x40, 0x40, 0x161, 0x6, 0xff, 0x9222, 0x5, 0x5, 0x7fff, 0x4, 0x38d, 0x9, 0x1, 0x5, 0x8, 0x0, 0x2, 0x65, 0x10, 0x10, 0x45, 0x6, 0x4, 0xffffffff, 0x5, 0x9, 0x2, 0xd, 0x6, 0x8bd, 0x9, 0x2, 0x3, 0xc, 0x3, 0xf, 0x8, 0x7, 0x97, 0x3, 0x2, 0x6, 0x8, 0x3, 0x6, 0xc, 0x6, 0x4, 0x7, 0x9, 0xffffffff, 0x8, 0x11, 0x100, 0xf, 0x1, 0xffffff43, 0x2, 0x4, 0x2, 0x482a, 0x1, 0x6, 0x225, 0x8, 0x1ff, 0x4, 0xd1, 0x6, 0x9, 0x2, 0x8cbc, 0xb5, 0x8, 0x10001, 0x7, 0x653a, 0x6, 0x401, 0x8, 0x9, 0x401, 0x8, 0x3, 0x4, 0x2, 0xcfa3, 0xe, 0x3, 0xfffffff8, 0x9f, 0xffffff01, 0x710, 0x0, 0xe, 0x0, 0x1, 0x8000, 0x40000, 0x8, 0x2, 0x8, 0xa, 0xb, 0x6, 0x80, 0x2, 0x3, 0x1, 0x90, 0x1, 0x3, 0x7a, 0x2, 0x1000, 0xf60, 0x8, 0x8, 0x7, 0x1, 0x2, 0xda5, 0x5, 0x8, 0x9, 0x1, 0x2, 0x10, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x5, 0x4, 0x2, {0x3, 0x2, 0x8, 0x7, 0x97, 0xb8}, {0x0, 0x0, 0x401, 0xd82, 0xcc6, 0xd71f}, 0x5, 0x6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xb, 0xfffffffb, 0x5, 0x8, 0x3ff, 0x9, 0xffffffff, 0x1, 0x1ff, 0x9, 0xd0, 0x4, 0x6, 0x4, 0x10000, 0x6, 0x4, 0x8, 0x10, 0x101, 0x2, 0x80000000, 0xd, 0x1, 0x1, 0xa8000, 0x1, 0xffff, 0x8, 0x0, 0x4, 0xffff, 0x0, 0x4, 0x9, 0x3d2, 0x0, 0x8, 0x100, 0x4, 0x6fa7, 0x1, 0x7fff, 0x4, 0x8, 0x54, 0x7, 0x2, 0x8, 0xa75, 0x4, 0x3, 0xb, 0x80000000, 0xd061, 0x5, 0x8, 0xac77, 0x1, 0x179, 0x10, 0x3, 0x1, 0x7f, 0x4, 0xc4, 0xfffff4d4, 0x1, 0x8, 0xe, 0xde8, 0x8, 0x40, 0x5, 0x3, 0x3ff, 0x9, 0x3, 0x3, 0x7, 0xb, 0xd90, 0x6, 0xec5c3905, 0x25d2, 0x7, 0x2b, 0x0, 0x6, 0xfffffffe, 0x3, 0x8, 0x30000, 0x3ff, 0x7eb7, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x47e, 0x1ff, 0x6, 0x2, 0x8, 0x8, 0x10, 0x7, 0x100, 0xd, 0x56b1dd09, 0x614, 0x8, 0x5, 0x10, 0x5, 0x7b, 0x200, 0x1, 0x7, 0x0, 0x2, 0x6, 0xbc8, 0x2, 0x5, 0x800, 0x1ff, 0x132, 0xf, 0xc0000000, 0x8, 0x7, 0xf34, 0x0, 0x6, 0x1, 0x52, 0x2, 0xffffffff, 0x1c18, 0x7, 0x1, 0xc, 0x3, 0x34, 0x6, 0x6, 0x2, 0x2, 0x81, 0x2, 0xfffffff9, 0x8, 0x2, 0x9, 0x7, 0xa, 0x5, 0x9, 0x101, 0xfffffffc, 0x9, 0x6, 0x4, 0x2c9, 0x1000, 0x6, 0x77a3, 0x1, 0x9, 0x6, 0x6, 0x80000000, 0xe83, 0x8, 0x1, 0x8, 0xfffffffa, 0x4, 0x9, 0x6, 0x7, 0x1, 0x7, 0x2, 0x4, 0x253, 0xfffff000, 0xf349, 0x200, 0x3, 0x1, 0x8000, 0x4, 0x9, 0x1000, 0xcfce, 0xfffffffe, 0x3, 0x1107, 0x4, 0xfffffff8, 0x8, 0xffffff10, 0x7ff, 0x6, 0x3ff, 0x7ff, 0x0, 0x10001, 0x1, 0xc, 0x100000, 0x8df7, 0xb, 0xffff1e22, 0x40000, 0x3, 0x3, 0x101, 0x37e3, 0xbb, 0x7ff, 0x3, 0x0, 0x6, 0x9, 0x2, 0x83, 0xc, 0x5, 0x6, 0x5, 0x1, 0x1, 0xb, 0x1, 0xfffffff5, 0x200, 0x1, 0x7, 0x9, 0x4, 0x8, 0xb30, 0x7, 0x8, 0x3, 0x7fffffff, 0x560, 0x9, 0x80, 0x42]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0xffffffff, 0xc, 0x587, 0x8, 0x80, 0x2b, 0x8, 0x5b, 0xffffffff, 0xec3, 0xff, 0x8, 0x5, 0x8, 0x9, 0x800, 0x800, 0x80000000, 0x3, 0x5, 0x7, 0x1, 0x8, 0x508254de, 0x0, 0x7, 0x8, 0x3, 0x10000, 0x7ff, 0x9, 0xfffffffc, 0x579e, 0xece, 0xfa5, 0x7, 0x15, 0x10001, 0x8, 0x77b17243, 0xeaa, 0x13e3, 0x6, 0x4, 0x8, 0x0, 0x101, 0x5, 0xa6c, 0xffff, 0x1, 0x10001, 0x9, 0x5, 0x1, 0x5, 0x2, 0x8, 0x9, 0x6, 0x10, 0x5, 0x7, 0x4, 0xfffffff7, 0xf23, 0x8, 0x3c700000, 0x8, 0x9, 0xffffffff, 0x7, 0x0, 0x0, 0x8000, 0x10000, 0x2, 0x3, 0x6, 0xe9d, 0x8000, 0xcc3, 0xf, 0x18, 0x0, 0x6, 0x0, 0xffff839a, 0x4, 0xee8, 0x4, 0x6, 0x8000, 0x8, 0x8, 0x5, 0x3, 0xffff, 0xa, 0x55dc, 0x101, 0x800, 0x2, 0x2, 0x64, 0x9, 0x400, 0x0, 0x3, 0x6, 0x3, 0x4, 0xfffffff5, 0x26, 0xf5b, 0x2, 0x28f, 0x6, 0x2, 0xde3a, 0x4, 0xff, 0x0, 0x80000000, 0x1ff, 0x8, 0x401, 0x0, 0x2, 0x5bc, 0x4, 0x2, 0x3, 0x10003, 0xffd, 0x4, 0x2, 0x9, 0xf, 0x4649, 0x5e3, 0x5, 0xc82, 0x27, 0x4762c222, 0xb, 0xc6000000, 0x7ff, 0x2, 0x6, 0x6b8, 0x3, 0x2, 0x100, 0x10001, 0x3, 0x0, 0x9, 0x9, 0x5, 0x1, 0x40, 0x3, 0x2, 0x6, 0x0, 0x2, 0x400, 0xc5f, 0x3, 0x8b, 0xffff, 0xf4ed, 0x7ff, 0x3, 0x2, 0x0, 0x60, 0x80000000, 0x0, 0x7, 0x6, 0x4, 0x100, 0x80, 0x8, 0x4, 0xd1b, 0xb54, 0xfffffff7, 0x0, 0x8, 0x80000001, 0x1000, 0x0, 0x7fea, 0xb717, 0x8001, 0x5, 0x8000, 0x4, 0x1, 0x200, 0x800, 0xfffffffa, 0x31c, 0x9, 0x8, 0x80, 0x5, 0x3, 0x7, 0x0, 0x6, 0x3, 0x2, 0xffffffff, 0x6, 0xfffffff9, 0x6, 0x4ba7, 0x5, 0x57, 0xc, 0x2ca, 0xf, 0x5, 0xfff, 0x0, 0xffffff7f, 0xffffff26, 0x4, 0x3, 0xd48, 0x284, 0x6, 0x88, 0x895a, 0x5, 0x0, 0x4, 0x9, 0x6, 0x40, 0x3, 0xe3a, 0x0, 0xe, 0x7, 0x4, 0x2, 0xe1, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x400, 0xa973, 0xffffffff, 0x47e7c309, 0xb2d, 0x8, 0x2, 0xd21d, 0x7, 0x51, 0x8001, 0x2, 0x4, 0xf5, 0x6, 0x7f, 0x9, 0xcb75, 0x8, 0xffffffff, 0x0, 0x9, 0x7, 0x4, 0xb6, 0x2, 0x7, 0xb3, 0x80000001, 0x2, 0x101, 0x8, 0x7, 0xfffffff9, 0xf, 0xfff, 0x85b9, 0x3, 0x1000, 0x9f, 0x5, 0x6, 0x3, 0x7c2, 0xe, 0xfffffff7, 0x3, 0x7, 0xffff, 0x3ff, 0x5, 0xe, 0x3, 0x10001, 0x7, 0x6, 0xd, 0xfffffffe, 0x1, 0x5, 0x9, 0x7b00, 0x1, 0x200, 0x8, 0x0, 0x9, 0x5, 0xe, 0x4, 0xc, 0xd4, 0x3, 0xa9c, 0x6, 0x1, 0x7, 0x1bf70000, 0x369e, 0x7, 0x8, 0x3ff, 0x100, 0x6c, 0x0, 0x7, 0x0, 0x80000001, 0xd467, 0xd, 0x7, 0x2, 0x401, 0x5, 0x3, 0x5, 0x9, 0x8000, 0x590cbbd7, 0x31f73a7a, 0x98, 0xfffffffd, 0x6, 0x24d, 0x8, 0x400, 0x2, 0x7, 0x80000001, 0x10, 0x7, 0xd, 0x1108, 0x80000001, 0xfffffff7, 0x8, 0x7f, 0x101, 0x3, 0x59, 0x3, 0x1, 0xfffffffe, 0x40, 0x1dd, 0x2, 0xfffffffb, 0xb38, 0x8, 0x1, 0x36205e65, 0xf171, 0x8, 0x4, 0x8, 0x4, 0xc, 0x8, 0x1d499980, 0xebf5, 0x0, 0x3ff, 0x3, 0x3, 0x1000, 0x38, 0x3, 0x7, 0x7, 0x0, 0x2, 0x1, 0xfffffffc, 0x1, 0x4, 0xfffffffb, 0x6, 0x1, 0x2400000, 0xfff, 0x0, 0x5, 0xa, 0x80, 0x6, 0x1, 0x6, 0xffffffff, 0x1, 0x4, 0x3, 0xfffffffc, 0x84, 0x7ed, 0xf, 0x1, 0x2, 0x0, 0x8, 0x9, 0x9, 0x6, 0x9, 0xe000, 0xac9d, 0x3, 0x0, 0x4, 0x9, 0x4, 0xf, 0x6, 0x9, 0x4, 0x6, 0x9, 0x4, 0x0, 0x7ff, 0x1ff, 0xfffffc00, 0x40, 0x2, 0x2, 0x4, 0x1, 0x400, 0x40, 0xfffffff3, 0x3, 0x0, 0x3, 0x4, 0x4, 0x4a3, 0x3, 0xf436, 0x6, 0xffffffff, 0x2, 0x40000, 0xe879, 0x4, 0x1, 0x7, 0x1, 0x1, 0x6, 0x8, 0xffff8000, 0x921, 0x1, 0x3, 0xfffffffb, 0x5, 0x81, 0x4, 0x401, 0x7, 0x10001, 0x10, 0x81, 0x3679, 0x5, 0x6, 0x6, 0x4, 0x3, 0xe49d, 0x0, 0x876, 0x8, 0x8, 0x6, 0xf]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0x746, 0x0, 0x0, 0xfffffff8, 0x2, 0x8, 0x3699, 0x3ff, 0xb0, 0x401, 0xfd, 0x80000000, 0xc17b, 0x4, 0x8, 0x6, 0xcf500, 0x800, 0x1, 0x1, 0xed, 0x1, 0xffff, 0x51, 0x6, 0x0, 0xfffffffb, 0x1, 0x7, 0x4, 0x4, 0x7, 0x7, 0x5, 0x242, 0x9, 0x8, 0x1400, 0x8, 0xfffffffb, 0x6, 0x7, 0x8, 0xfffffff9, 0x7, 0x8, 0x8, 0x6ba71d8d, 0xb00000, 0x4, 0x221, 0xfffff8db, 0x10001, 0x1, 0x3, 0x10001, 0x40e, 0x7, 0x2, 0x9, 0xa, 0x9, 0x4, 0x80000001, 0x7c7, 0x9, 0x200, 0x6, 0x5, 0x679, 0x2, 0x5, 0x1, 0x1000000, 0x1, 0x0, 0xfb78, 0x1ff, 0x1, 0x0, 0x400, 0x1, 0x2, 0xba, 0x0, 0x3fc, 0x5, 0x2, 0xaf, 0x6, 0x2, 0xfffffff9, 0x3, 0x1, 0x6, 0x2, 0x3, 0x7, 0x5, 0x5, 0x2, 0x7, 0x5, 0x1ff, 0x7ff, 0x0, 0x8000, 0x1, 0x3, 0x3, 0x1, 0x2, 0x3ba, 0xff, 0x7, 0x80, 0x2, 0x5, 0xe064, 0x64, 0x3, 0xfffffff4, 0x4, 0x1, 0x500dd119, 0x6, 0x1, 0x9, 0xe, 0x0, 0xdc1a, 0x5, 0x7fff, 0x5, 0x1, 0x7, 0xff, 0x6, 0x1, 0xfa, 0x9, 0x21e, 0x10001, 0x8, 0x4d79, 0x5, 0x1, 0x6, 0x95, 0x3ff, 0xe, 0x2, 0x7, 0x401, 0x5, 0x9, 0x4bbc, 0x7, 0x5, 0x21d1, 0x7, 0xf, 0x22, 0x0, 0x80000000, 0x972, 0x1, 0x7, 0x80, 0x4, 0x4, 0x25, 0x73649c8f, 0x3, 0x5, 0x82d, 0x2, 0x3, 0x8000, 0x8, 0x6, 0x7f, 0xb, 0x9, 0x7, 0x5bbd36ce, 0x80000001, 0x6, 0x3, 0x6, 0x4e, 0xffffffd5, 0x7, 0x0, 0x0, 0xcb, 0x10000, 0x77, 0x0, 0x4, 0x5, 0x8, 0x3, 0xe, 0x9, 0x5, 0x80000001, 0x10000, 0x8, 0xfff, 0x8, 0x6, 0x6, 0x800, 0x8, 0x8, 0x1, 0x4, 0x3, 0x10001, 0x8, 0x9, 0x7, 0x9, 0x3, 0xbd4, 0x6, 0x3, 0x3df6, 0x6, 0x1, 0x2000, 0x6, 0x1000, 0x3, 0x80000001, 0x9, 0x2d90, 0x2, 0x8, 0x3, 0x1, 0x3, 0x8, 0x9, 0x45b6, 0x7350, 0x3, 0x10, 0x3800, 0x1, 0x0, 0x5, 0x9]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xc, 0x2, 0x40f7, 0x3, 0x1, 0x101, 0x7, 0x2, 0x0, 0x7, 0xfff, 0x7, 0x800, 0x0, 0xfffffffa, 0xffff, 0xad, 0x0, 0xb, 0x7, 0x9, 0x4, 0x7, 0xfff, 0x7ff, 0x1, 0x3, 0x86d, 0x7fff, 0x8, 0x7, 0x7, 0x3, 0xc42, 0xdac, 0x1, 0x800, 0x0, 0x22, 0x6, 0x2, 0x401, 0x8, 0x6, 0x0, 0xff, 0xc0, 0x80000000, 0x5, 0x8, 0xfffffff9, 0x1ff, 0x10, 0x2, 0xcb, 0x7, 0x9, 0x8453, 0x3, 0x0, 0xf2, 0x2, 0x1, 0xf6, 0xe7b, 0x2, 0x6, 0x5, 0x2, 0x100, 0x8, 0x8, 0x6, 0x4, 0x5, 0x4, 0x3dd2, 0x0, 0x1, 0xbe8, 0x9, 0x62, 0x9, 0x0, 0x9, 0xf59c, 0x94, 0xb5f6, 0x2, 0x9, 0x1000, 0x8, 0x7, 0x2, 0x5, 0x9, 0x7, 0xfffffff9, 0x240, 0x1, 0x5, 0x92, 0xffffffff, 0x401, 0x81, 0x0, 0x8721, 0x2, 0xe, 0x80000001, 0x7fffffff, 0x5, 0x4, 0x8000, 0x7c3d, 0x400, 0xf, 0x7fffffff, 0x0, 0xfff, 0x0, 0x2, 0x3, 0x3, 0x4eb1, 0x1, 0x9, 0x1000, 0x4, 0x1ea7, 0x26, 0x401, 0x65, 0x2, 0x0, 0x5, 0x2, 0xfffffff8, 0xa, 0x3, 0xb0, 0xfffffffc, 0x4, 0xe, 0x4, 0xfffffff7, 0xffffffff, 0x3, 0xfffffffb, 0x7, 0x4, 0x2, 0x765, 0xf7, 0xffffffff, 0x78, 0x10001, 0x0, 0x5, 0x8ab, 0x4, 0xd491, 0x7, 0x8, 0x7, 0x84a, 0x0, 0x8, 0x64f, 0x8a, 0x6, 0x5, 0x7, 0x8, 0x0, 0x7fff, 0xece7, 0xb7, 0x5, 0x9, 0x6, 0x0, 0x4315, 0x0, 0x4, 0x7, 0x1, 0x7, 0x4, 0x5, 0x1, 0x5, 0x100, 0x5, 0x81, 0x5, 0x1, 0x1000, 0x4, 0x10000, 0x9, 0x8, 0x3c3b, 0xfada, 0x0, 0x1d, 0x2, 0xbe2, 0xd, 0x3b29, 0x10000, 0x5, 0x5, 0xcd0000, 0x6, 0x3, 0x6, 0x8, 0x80000001, 0x9, 0x6, 0xb02e, 0x95, 0x71aa, 0x0, 0x6, 0x400, 0x0, 0xfffffffb, 0xe, 0x5, 0x5, 0x4, 0x6, 0x6, 0x1, 0x2, 0x80, 0x9, 0x7, 0x12, 0x5, 0x57, 0x8001, 0x4, 0xfffffffa, 0x80000000, 0x8, 0xa, 0x6, 0xa, 0xfff, 0x6, 0x7, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x7fd, 0x9, 0x0, {0x4, 0x1, 0x7, 0xb, 0xe905, 0x5}, {0x1, 0x0, 0x2, 0x8, 0x2, 0x3}, 0x1ff, 0x20, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2e, 0x1000000, 0x3, 0xeb7, 0xa, 0x8, 0x2, 0x6, 0x10001, 0x8, 0x6, 0x10000, 0x3, 0x4, 0x4, 0x40, 0x5, 0x582, 0x8000, 0x1, 0xd, 0x81, 0x9, 0x0, 0x4f164971, 0xcc, 0x3, 0x5, 0x400, 0xfff, 0x1, 0x2, 0x80000000, 0xe7c, 0x1, 0x7, 0x1644000, 0x401, 0x8, 0x5, 0xffff, 0xf7, 0x3c8d180a, 0x7, 0x3, 0x10001, 0x8, 0x5, 0x8be, 0x7, 0xf30, 0x9, 0x0, 0x100, 0x280000, 0x0, 0x6, 0x0, 0x3ff, 0x1b, 0x6, 0x10001, 0x0, 0x1, 0x7f, 0x401, 0x8, 0x7, 0x6, 0x9, 0x8, 0x0, 0x9, 0x101, 0x7fe, 0x4, 0x8, 0x1, 0x4, 0x9, 0x9, 0x401, 0x8, 0x2, 0x594, 0x820, 0x2, 0x48000, 0x0, 0x5, 0x55b, 0x1, 0x2, 0x800, 0x7, 0x100, 0x92, 0x5, 0x7, 0xffffffb6, 0x4, 0x7fff, 0x5, 0x4, 0x7fff, 0x9, 0x6, 0xfffff000, 0x7, 0xe, 0x4, 0x7, 0x4, 0x9, 0x8, 0x800, 0x0, 0x8000, 0x3, 0x1, 0x9, 0x9, 0xe, 0xe2c, 0x0, 0xfffffffe, 0x5, 0x5, 0x6, 0x7, 0x1, 0x8ba, 0x8, 0x80000000, 0x9, 0x6, 0xbbda, 0x7, 0x1, 0x6, 0x10000, 0x25f, 0xfffffff5, 0x200, 0x2, 0x4bed, 0x0, 0x80000001, 0x3, 0x3fc1, 0x3, 0x10001, 0x6, 0x8, 0x6, 0x3, 0x1, 0x10000, 0xf, 0xd8, 0x0, 0x7, 0x6, 0x623, 0x6, 0x7, 0x4, 0x401, 0x800, 0xfff, 0x5, 0xfffffff8, 0x7, 0x4, 0x10, 0x7fffffff, 0x2, 0x5, 0x2000000, 0x2, 0x9, 0x0, 0xfffffff8, 0x750121c5, 0x2, 0x4, 0x6, 0xb3, 0xe2, 0x9e7, 0xb6, 0x7, 0x18, 0x5, 0x3ff, 0x8, 0x8e, 0x1, 0x81, 0x400, 0x9ec, 0x6, 0x8, 0x7, 0xc, 0x9, 0x1, 0xd90, 0x2, 0x1, 0x4, 0xff, 0x0, 0xe, 0x67fa27e9, 0xa, 0x1, 0xe, 0x59, 0x7fff, 0x1, 0xef80, 0x5, 0x0, 0x8, 0xe68, 0xe, 0x101, 0x381d211f, 0x9, 0x1ff, 0x80, 0x0, 0x7ff, 0xff, 0x8, 0x40, 0x0, 0x0, 0x10000, 0x5, 0x101, 0x1, 0x5, 0x3ff, 0x0, 0x80000000, 0x4, 0x4, 0x3, 0x1, 0xffff759b, 0x772, 0x141, 0x40]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x4, 0xfffff000, 0x6, {0x4, 0x0, 0xe202, 0x6, 0xa1, 0x7f}, {0x4, 0x0, 0x7, 0xd, 0xa, 0x80000000}, 0x10, 0x1, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xcb}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]]}, {0x65, 0x6, "f6a08057adf97160b831458ba1e96d02e6d9b0cb58d4042548c5d0664685c8e25ef74c258bd20eb449421eb603472766c438d53dce593de3993b7347d9be39b1a2cc4badf6b481ff64de5988f2bd9bdcc257ab39482a578eb650ab88280aad6ed3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x94, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xd}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x33, 0x6, "2951acf3af32ac22dda3c29cda3c8cac460abbe04ee01ec195cb95008f40efe05e28a4c7c1d89d3de7a700d73c669d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x3b08}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0xffffff58, @remote}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet6(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000040801"], 0x20}, 0x1, 0x0, 0x0, 0x400c854}, 0x0) recvmmsg(r5, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x3d}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x220e8087) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0) poll(&(0x7f0000000700)=[{r7, 0x2}], 0x1, 0x4) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x401, 0x36}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00022cbd7000040000004e000000"], 0x14}}, 0x30000084) 886.683632ms ago: executing program 0 (id=4485): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket(0x2a, 0x3, 0xf76) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf0300000000000085000000b2000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) socket(0x2a, 0x3, 0xf76) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf0300000000000085000000b2000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) (async) 772.778452ms ago: executing program 2 (id=4486): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r3, @ANYBLOB="010024bd7000fcdbdf2501000000000000000141"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20010808}, 0x8014) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff458}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x256, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9202203afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000340)={0x0, 0x1, 0x1000, 0x200}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x202}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x44080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r9, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x1, 0x2, 0x614, 0x4, 0x9f, 0x7, 0x4}, 0x9c) 651.034074ms ago: executing program 0 (id=4487): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffd14) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0xfffe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffffe, 0x97b, 0x7, 0x10050, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xb}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r6) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x800, 0x76) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x72, '\x00', r4, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="180000000414010025bd7000fedbdf2508000100000000006b57c9e4c176967b820bfd5880687dae7cab5dd78700000000000062332c1ed9f639d466caba0e70ee7ab5de6e4fba4605a7cdba0ed92587fca290dd4a7ac89c98528ff52166f114bbe3d7e0338cb49dc04a1c66f31d911f7277b67fd4e8737a81b1276a4515f5914d16ed6f538ebd6203853e19cf8e4db5d9655f390602ee78120c943adfba1bb9513809d7764f634b6883d8527909438fe2c8534d76db77510a354e9338ea13e899637f40980a735789af16898148d7c4c5ea6f3d0ac850bed106cbf8ffffffffa98ad8a1d12a5a0a0000000000"], 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027400089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fcab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f", 0xdd) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f24040000002e775e0000000000", @ANYRESOCT, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 631.158275ms ago: executing program 1 (id=4488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000f800000000"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x1, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x45}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 485.663113ms ago: executing program 3 (id=4489): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000080)=' ', 0xfdef}], 0x1, 0x0, 0x60}}], 0x1, 0x4000000) 383.165342ms ago: executing program 3 (id=4490): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) splice(r0, &(0x7f0000001140)=0x401, r0, &(0x7f00000011c0)=0x40, 0xc42, 0x0) 381.560507ms ago: executing program 1 (id=4491): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x150, 0x150, 0x260, 0xf8010000, 0x358, 0x238, 0x238, 0x358, 0x238, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @empty, [0x0, 0x0, 0xff000000], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e22], [], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x36a41ab9, 0x0, 0x0, 0x7], 0x0, [], 0x1, 0x2, 0x7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@empty, @mcast1, [], [], 'bridge_slave_0\x00', 'hsr0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x48180, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000500)={0xfb, 0x5}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0xfffffffffffffcf5, r0, 0x329, 0xfffffffc, 0x25dfdbfe, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x4008004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x2, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) 272.599578ms ago: executing program 1 (id=4492): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152c", 0x4d}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/178, 0xb2}, {&(0x7f0000003580)=""/118, 0x76}], 0x4}, 0x0) 242.445202ms ago: executing program 3 (id=4493): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db56379dd861b80aa3b800"/154, 0x9a}, {&(0x7f0000000600)}], 0x2, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/178, 0xb2}, {&(0x7f0000003580)=""/118, 0x76}], 0x4}, 0x0) 172.671144ms ago: executing program 3 (id=4494): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x98, 0x198, 0x198, 0x0, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'batadv_slave_1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {}, 0xda, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x7}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'wg2\x00', 'geneve0\x00', {0xff}, {0xff}, 0x6, 0x2, 0x42}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x4, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000007c0)=0x2, 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0x1, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x41}, 0x60) r3 = socket$inet(0x2, 0x3, 0xb) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0), 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) sendmmsg$inet(r3, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4", 0x1}], 0x1}}], 0x1, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) 152.144149ms ago: executing program 1 (id=4495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="38030600400202002d0012801100010056726964672c0b79ba61766500005b001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x2400c0d1) 3.08179ms ago: executing program 1 (id=4496): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x801, 0x0) socket$netlink(0x10, 0x3, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000130005002cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="5203"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 0s ago: executing program 3 (id=4497): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db56379dd861b80aa3b800"/154, 0x9a}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/178, 0xb2}, {&(0x7f0000003580)=""/118, 0x76}], 0x4}, 0x0) kernel console output (not intermixed with test programs): request ffff8880270a0000: control (read@0,1024B). Runtime 360 seconds [ 471.537193][ T1606] block nbd1: Possible stuck request ffff8880270a01c0: control (read@1024,1024B). Runtime 360 seconds [ 471.548486][ T1606] block nbd1: Possible stuck request ffff8880270a0380: control (read@2048,1024B). Runtime 360 seconds [ 471.559812][ T1606] block nbd1: Possible stuck request ffff8880270a0540: control (read@3072,1024B). Runtime 360 seconds [ 471.660314][T19215] netlink: 'syz.3.3338': attribute type 3 has an invalid length. [ 471.680459][T19215] __nla_validate_parse: 2 callbacks suppressed [ 471.680480][T19215] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3338'. [ 471.707831][T19215] sctp: [Deprecated]: syz.3.3338 (pid 19215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.707831][T19215] Use struct sctp_sack_info instead [ 471.760066][T19217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3339'. [ 471.900147][T19226] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 472.004366][ T5616] Bluetooth: hci4: command tx timeout [ 472.129184][T19232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3342'. [ 472.394523][T19242] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 472.511983][T19160] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.528158][T19160] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.551608][T19160] bridge_slave_0: entered allmulticast mode [ 472.572549][T19160] bridge_slave_0: entered promiscuous mode [ 472.587165][T19242] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 472.675873][T19160] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.701776][T19160] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.717665][T19160] bridge_slave_1: entered allmulticast mode [ 472.725784][T19252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3348'. [ 472.738626][T19160] bridge_slave_1: entered promiscuous mode [ 472.874076][T19160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.888509][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3349'. [ 472.930919][T19160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.075176][T19160] team0: Port device team_slave_0 added [ 473.108385][T19160] team0: Port device team_slave_1 added [ 473.295683][T19160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.318653][T19160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.349678][T19160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.373867][T19160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.384672][T19160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.413750][T19160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.455746][T19285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 473.548115][T19285] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 473.574338][T19160] hsr_slave_0: entered promiscuous mode [ 473.592237][T19160] hsr_slave_1: entered promiscuous mode [ 473.612702][T19285] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 473.621401][T19160] debugfs: 'hsr0' already exists in 'hsr' [ 473.628112][T19288] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3357'. [ 473.637847][T19160] Cannot create hsr debugfs directory [ 473.686709][T19294] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3359'. [ 474.082735][ T5616] Bluetooth: hci4: command tx timeout [ 474.502598][T19160] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.527602][T19160] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 474.618412][T19333] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3366'. [ 474.967096][T19160] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.986036][T19160] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.088402][T19347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3368'. [ 476.025668][T19355] x_tables: duplicate underflow at hook 1 [ 476.162103][ T5616] Bluetooth: hci4: command tx timeout [ 478.144442][T19160] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.164971][T19369] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3373'. [ 478.176581][T19160] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 478.220710][T19373] siw: device registration error -23 [ 478.243135][ T5616] Bluetooth: hci4: command tx timeout [ 478.403209][T19160] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.414343][T19160] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 478.433044][T19377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3376'. [ 478.443523][T19377] tipc: Invalid UDP bearer configuration [ 478.443584][T19377] tipc: Enabling of bearer rejected, failed to enable media [ 478.458606][T19388] netlink: 'syz.4.3378': attribute type 1 has an invalid length. [ 478.537098][T19388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.593077][T19382] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 478.650827][T19392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3380'. [ 478.802111][T19160] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.825143][T19160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.863696][T19160] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 478.885381][T19160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.899406][T19160] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.925704][T19160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.938889][T19403] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3381'. [ 478.965404][T19397] lo speed is unknown, defaulting to 1000 [ 478.994697][T19405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3383'. [ 479.004329][T19160] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 479.028099][T19160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.048005][T19397] wg2 speed is unknown, defaulting to 1000 [ 479.426425][T19160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.537508][T19160] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.609107][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.616395][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.722445][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 479.815054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.822377][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.008860][T19441] netlink: 'syz.2.3386': attribute type 2 has an invalid length. [ 480.350403][T19452] xt_hashlimit: size too large, truncated to 1048576 [ 480.379306][T19452] xt_hashlimit: max too large, truncated to 1048576 [ 480.388371][T19456] vlan2: entered allmulticast mode [ 480.394689][T19456] bond0: entered allmulticast mode [ 480.399962][T19456] bond_slave_0: entered allmulticast mode [ 480.406958][T19452] xt_hashlimit: Unknown mode mask B86BCC12, kernel too old? [ 480.417150][T19456] bond_slave_1: entered allmulticast mode [ 480.688064][T19471] ip6gre0: entered promiscuous mode [ 480.723614][T19471] ip6gre0: entered allmulticast mode [ 480.740084][T19458] xt_hashlimit: max too large, truncated to 1048576 [ 480.778368][T19458] xt_hashlimit: overflow, try lower: 0/0 [ 481.096856][T19484] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 481.199411][T19488] FAULT_INJECTION: forcing a failure. [ 481.199411][T19488] name failslab, interval 1, probability 0, space 0, times 0 [ 481.275822][T19488] CPU: 0 UID: 0 PID: 19488 Comm: syz.4.3393 Not tainted syzkaller #0 PREEMPT(full) [ 481.275853][T19488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.275867][T19488] Call Trace: [ 481.275875][T19488] [ 481.275885][T19488] dump_stack_lvl+0xe8/0x150 [ 481.275921][T19488] should_fail_ex+0x410/0x560 [ 481.275961][T19488] should_failslab+0xa8/0x100 [ 481.275994][T19488] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 481.276021][T19488] ? skb_clone+0x212/0x3a0 [ 481.276137][T19488] ? skb_clone+0x212/0x3a0 [ 481.276165][T19488] skb_clone+0x212/0x3a0 [ 481.276184][T19488] ? nfnetlink_rcv+0x4b0/0x28c0 [ 481.276299][T19488] nfnetlink_rcv+0x4de/0x28c0 [ 481.276336][T19488] ? __dev_queue_xmit+0x29b/0x3820 [ 481.276388][T19488] ? __local_bh_enable_ip+0xd6/0x140 [ 481.276526][T19488] ? lockdep_hardirqs_on+0x7b/0x110 [ 481.276551][T19488] ? __dev_queue_xmit+0x29b/0x3820 [ 481.276572][T19488] ? __local_bh_enable_ip+0xd6/0x140 [ 481.276597][T19488] ? __dev_queue_xmit+0x29b/0x3820 [ 481.276618][T19488] ? __dev_queue_xmit+0x1edc/0x3820 [ 481.276639][T19488] ? do_syscall_64+0x166/0x520 [ 481.276663][T19488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.276699][T19488] ? __dev_queue_xmit+0x29b/0x3820 [ 481.276722][T19488] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 481.276774][T19488] ? ref_tracker_free+0x689/0x830 [ 481.276838][T19488] ? __pfx_ref_tracker_free+0x10/0x10 [ 481.276870][T19488] ? __skb_clone+0x449/0x6c0 [ 481.276937][T19488] ? skb_clone+0x246/0x3a0 [ 481.276961][T19488] ? __netlink_deliver_tap+0x811/0x860 [ 481.277008][T19488] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.277043][T19488] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.277064][T19488] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.277091][T19488] netlink_unicast+0x7bd/0x940 [ 481.277175][T19488] netlink_sendmsg+0x813/0xb40 [ 481.277208][T19488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.277234][T19488] ? aa_sock_msg_perm+0xf6/0x1c0 [ 481.277278][T19488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.277300][T19488] sock_sendmsg_nosec+0x13a/0x180 [ 481.277329][T19488] ____sys_sendmsg+0x54e/0x850 [ 481.277369][T19488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.277412][T19488] ? import_iovec+0x73/0xa0 [ 481.277465][T19488] ___sys_sendmsg+0x2a5/0x360 [ 481.277503][T19488] ? __lock_acquire+0x683/0x2cf0 [ 481.277559][T19488] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.277630][T19488] ? __fget_files+0x2a/0x420 [ 481.277659][T19488] ? __fget_files+0x3a2/0x420 [ 481.277699][T19488] __x64_sys_sendmsg+0x1b1/0x290 [ 481.277736][T19488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.277792][T19488] do_syscall_64+0x166/0x520 [ 481.277815][T19488] ? trace_irq_disable+0x3b/0x140 [ 481.277843][T19488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.277866][T19488] ? clear_bhb_loop+0x70/0xc0 [ 481.277893][T19488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.277914][T19488] RIP: 0033:0x7f1cd6f9e0d9 [ 481.277936][T19488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.277955][T19488] RSP: 002b:00007f1cd7e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.277979][T19488] RAX: ffffffffffffffda RBX: 00007f1cd7225fa0 RCX: 00007f1cd6f9e0d9 [ 481.277995][T19488] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 481.278008][T19488] RBP: 00007f1cd7e99090 R08: 0000000000000000 R09: 0000000000000000 [ 481.278022][T19488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.278042][T19488] R13: 00007f1cd7226038 R14: 00007f1cd7225fa0 R15: 00007ffe5d6706d8 [ 481.278077][T19488] [ 481.552161][ T12] dvmrp0: left allmulticast mode [ 481.889708][T19496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3394'. [ 482.533668][T19525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3398'. [ 482.701464][ T12] bond10 (unregistering): (slave gretap1): Releasing backup interface [ 482.709735][ T12] bond10 (unregistering): (slave gretap1): the permanent HWaddr of slave - 2e:2b:8f:ed:26:ec - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 482.966355][ T12] bond0 (unregistering): Released all slaves [ 482.981919][ T12] bond1 (unregistering): Released all slaves [ 482.997785][ T12] bond2 (unregistering): Released all slaves [ 483.014535][ T12] bond3 (unregistering): Released all slaves [ 483.038661][ T12] bond4 (unregistering): Released all slaves [ 483.057012][ T12] bond5 (unregistering): Released all slaves [ 483.082701][ T12] bond6 (unregistering): (slave veth9): Releasing active interface [ 483.094072][ T12] bond6 (unregistering): (slave veth11): Releasing active interface [ 483.107221][ T12] bond6 (unregistering): Released all slaves [ 483.125304][ T12] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 483.134962][ T12] bond7 (unregistering): Released all slaves [ 483.151137][ T12] bond8 (unregistering): Released all slaves [ 483.177346][ T12] bond9 (unregistering): Released all slaves [ 483.197529][ T12] bond10 (unregistering): (slave bond11): Releasing backup interface [ 483.206593][ T12] bond10 (unregistering): Released all slaves [ 483.228096][ T12] bond11 (unregistering): Released all slaves [ 483.244592][ T12] bond12 (unregistering): Released all slaves [ 483.260922][ T12] bond13 (unregistering): Released all slaves [ 483.280446][ T12] bond14 (unregistering): Released all slaves [ 483.609123][T19534] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 486.574815][ T12] tipc: Disabling bearer [ 486.586588][ T12] tipc: Left network mode [ 486.883764][T19551] gre1: entered promiscuous mode [ 486.917710][T19160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.927443][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'. [ 486.965492][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'. [ 486.988197][T19551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3404'. [ 487.006266][ T12] IPVS: stopping backup sync thread 8200 ... [ 487.069065][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'. [ 487.137823][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'. [ 487.149541][T19160] veth0_vlan: entered promiscuous mode [ 487.295714][T19563] bridge0: port 3(batadv1) entered blocking state [ 487.303573][T19563] bridge0: port 3(batadv1) entered disabled state [ 487.310645][T19563] batadv1: entered allmulticast mode [ 487.320652][ T3360] IPVS: starting estimator thread 0... [ 487.321862][T19567] IPVS: nq: FWM 3 0x00000003 - no destination available [ 487.335600][T19563] batadv1: entered promiscuous mode [ 487.351603][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.382105][T19160] veth1_vlan: entered promiscuous mode [ 487.402004][ T3360] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.415539][ T3360] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.441393][T19568] IPVS: using max 28 ests per chain, 67200 per kthread [ 487.497694][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3408'. [ 487.781854][T17644] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 487.791723][T17644] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 487.844112][T19591] FAULT_INJECTION: forcing a failure. [ 487.844112][T19591] name failslab, interval 1, probability 0, space 0, times 0 [ 487.858616][T19591] CPU: 0 UID: 0 PID: 19591 Comm: syz.1.3412 Not tainted syzkaller #0 PREEMPT(full) [ 487.858647][T19591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.858661][T19591] Call Trace: [ 487.858669][T19591] [ 487.858678][T19591] dump_stack_lvl+0xe8/0x150 [ 487.858715][T19591] should_fail_ex+0x410/0x560 [ 487.858753][T19591] ? __rhashtable_init_noprof+0x545/0xaf0 [ 487.858788][T19591] should_failslab+0xa8/0x100 [ 487.858819][T19591] __kvmalloc_node_noprof+0x176/0x870 [ 487.858854][T19591] ? __rhashtable_init_noprof+0x545/0xaf0 [ 487.858894][T19591] __rhashtable_init_noprof+0x545/0xaf0 [ 487.858932][T19591] __rhltable_init_noprof+0x26/0x70 [ 487.858968][T19591] nf_tables_newtable+0x6e0/0x1990 [ 487.859125][T19591] nfnetlink_rcv+0x1288/0x28c0 [ 487.859205][T19591] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 487.859258][T19591] ? ref_tracker_free+0x689/0x830 [ 487.859304][T19591] ? skb_clone+0x246/0x3a0 [ 487.859329][T19591] ? __netlink_deliver_tap+0x811/0x860 [ 487.859361][T19591] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.859382][T19591] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.859410][T19591] netlink_unicast+0x7bd/0x940 [ 487.859454][T19591] netlink_sendmsg+0x813/0xb40 [ 487.859487][T19591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.859514][T19591] ? aa_sock_msg_perm+0xf6/0x1c0 [ 487.859555][T19591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.859575][T19591] sock_sendmsg_nosec+0x13a/0x180 [ 487.859605][T19591] ____sys_sendmsg+0x54e/0x850 [ 487.859644][T19591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.859687][T19591] ? import_iovec+0x73/0xa0 [ 487.859714][T19591] ___sys_sendmsg+0x2a5/0x360 [ 487.859745][T19591] ? __lock_acquire+0x683/0x2cf0 [ 487.859783][T19591] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.859855][T19591] ? __fget_files+0x2a/0x420 [ 487.859885][T19591] ? __fget_files+0x3a2/0x420 [ 487.859925][T19591] __x64_sys_sendmsg+0x1b1/0x290 [ 487.859962][T19591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.860019][T19591] do_syscall_64+0x166/0x520 [ 487.860046][T19591] ? trace_irq_disable+0x3b/0x140 [ 487.860074][T19591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.860098][T19591] ? clear_bhb_loop+0x70/0xc0 [ 487.860126][T19591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.860148][T19591] RIP: 0033:0x7fbf1379e0d9 [ 487.860169][T19591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.860188][T19591] RSP: 002b:00007fbf1474d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.860220][T19591] RAX: ffffffffffffffda RBX: 00007fbf13a25fa0 RCX: 00007fbf1379e0d9 [ 487.860236][T19591] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 487.860250][T19591] RBP: 00007fbf1474d090 R08: 0000000000000000 R09: 0000000000000000 [ 487.860264][T19591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.860277][T19591] R13: 00007fbf13a26038 R14: 00007fbf13a25fa0 R15: 00007ffeee84d548 [ 487.860312][T19591] [ 487.915818][T19570] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 488.194304][T19570] bond1 (unregistering): Released all slaves [ 488.292093][T19160] veth0_macvtap: entered promiscuous mode [ 488.434547][T19160] veth1_macvtap: entered promiscuous mode [ 488.559512][T19160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.594146][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'. [ 488.605474][T19160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.773159][T17641] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.077104][T17641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.127467][ T95] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.171475][T17641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.208649][T17641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.390090][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 489.412460][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 489.479594][T19625] netlink: 'syz.2.3422': attribute type 2 has an invalid length. [ 489.527311][T19625] netlink: 'syz.2.3422': attribute type 2 has an invalid length. [ 489.537287][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.566913][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.582276][T19625] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3422'. [ 489.696858][T19629] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 489.738623][T17643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.757717][T19629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.780615][T17643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.130561][ T12] hsr_slave_0: left promiscuous mode [ 490.142989][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 490.813713][T19655] netlink: zone id is out of range [ 490.827214][T19655] netlink: zone id is out of range [ 490.839264][T19655] netlink: zone id is out of range [ 490.853564][T19655] netlink: zone id is out of range [ 490.869725][T19655] netlink: zone id is out of range [ 490.890623][T19655] netlink: zone id is out of range [ 490.911495][T19655] netlink: zone id is out of range [ 492.013600][T19681] dvmrp0: entered allmulticast mode [ 492.705399][T19721] __nla_validate_parse: 1 callbacks suppressed [ 492.705426][T19721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3442'. [ 492.723977][ T12] IPVS: stop unused estimator thread 0... [ 493.126382][T10785] net_ratelimit: 4 callbacks suppressed [ 493.126404][T10785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.166610][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 493.183842][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 493.367166][T19734] dvmrp0: entered allmulticast mode [ 493.384328][T19749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3451'. [ 493.426083][T19751] openvswitch: netlink: Flow key attr not present in new flow. [ 493.607583][T19764] dvmrp0: left allmulticast mode [ 493.697613][T19772] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3457'. [ 493.894389][T19781] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3461'. [ 493.929852][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 494.004871][T19790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.035609][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3463'. [ 494.052246][T19787] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 494.063868][T19787] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 494.162092][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.294826][T19795] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 494.312169][T19795] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 494.565548][ T1606] block nbd5: Possible stuck request ffff888027295080: control (read@0,4096B). Runtime 210 seconds [ 494.570967][T10785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.589269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.069446][T19844] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 495.110548][T19840] hsr_slave_1 (unregistering): left promiscuous mode [ 495.172246][T19844] netlink: 'syz.4.3480': attribute type 1 has an invalid length. [ 495.206643][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.216645][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.235280][T19844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.364900][T19844] bond3: (slave gretap1): making interface the new active one [ 495.377233][T19844] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 495.450166][T19852] dvmrp0: entered allmulticast mode [ 495.660205][T19874] FAULT_INJECTION: forcing a failure. [ 495.660205][T19874] name failslab, interval 1, probability 0, space 0, times 0 [ 495.679482][T19874] CPU: 1 UID: 0 PID: 19874 Comm: syz.3.3489 Not tainted syzkaller #0 PREEMPT(full) [ 495.679512][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.679526][T19874] Call Trace: [ 495.679534][T19874] [ 495.679544][T19874] dump_stack_lvl+0xe8/0x150 [ 495.679582][T19874] should_fail_ex+0x410/0x560 [ 495.679617][T19874] ? nf_hook_entries_grow+0x287/0x740 [ 495.679645][T19874] should_failslab+0xa8/0x100 [ 495.679674][T19874] __kvmalloc_node_noprof+0x176/0x870 [ 495.679706][T19874] ? nf_hook_entries_grow+0x287/0x740 [ 495.679735][T19874] nf_hook_entries_grow+0x287/0x740 [ 495.679773][T19874] __nf_register_net_hook+0x2c9/0x930 [ 495.679796][T19874] ? nft_chain_add+0xe58/0x10b0 [ 495.679919][T19874] nf_register_net_hook+0xb2/0x190 [ 495.679945][T19874] nf_tables_newchain+0x2384/0x28b0 [ 495.679990][T19874] ? __pfx_nf_tables_newchain+0x10/0x10 [ 495.680051][T19874] ? nfnl_pernet+0x23/0x240 [ 495.680081][T19874] ? nfnl_pernet+0x23/0x240 [ 495.680118][T19874] ? __nla_parse+0x40/0x60 [ 495.680146][T19874] nfnetlink_rcv+0x1288/0x28c0 [ 495.680216][T19874] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 495.680299][T19874] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.680333][T19874] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.680355][T19874] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.680391][T19874] netlink_unicast+0x7bd/0x940 [ 495.680436][T19874] netlink_sendmsg+0x813/0xb40 [ 495.680467][T19874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.680476][T19872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3488'. [ 495.680494][T19874] ? aa_sock_msg_perm+0xf6/0x1c0 [ 495.680593][T19874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.680670][T19874] sock_sendmsg_nosec+0x13a/0x180 [ 495.680763][T19874] ____sys_sendmsg+0x54e/0x850 [ 495.680869][T19874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.680971][T19874] ? import_iovec+0x73/0xa0 [ 495.681038][T19874] ___sys_sendmsg+0x2a5/0x360 [ 495.681122][T19874] ? __lock_acquire+0x683/0x2cf0 [ 495.681211][T19874] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.681412][T19874] ? __fget_files+0x2a/0x420 [ 495.681482][T19874] ? __fget_files+0x3a2/0x420 [ 495.681595][T19874] __x64_sys_sendmsg+0x1b1/0x290 [ 495.681682][T19874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.681831][T19874] do_syscall_64+0x166/0x520 [ 495.681882][T19874] ? trace_irq_disable+0x3b/0x140 [ 495.681964][T19874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.682027][T19874] ? clear_bhb_loop+0x70/0xc0 [ 495.682122][T19874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.682192][T19874] RIP: 0033:0x7f01af59e0d9 [ 495.682245][T19874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.682288][T19874] RSP: 002b:00007f01b0405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.682353][T19874] RAX: ffffffffffffffda RBX: 00007f01af825fa0 RCX: 00007f01af59e0d9 [ 495.682404][T19874] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 495.682437][T19874] RBP: 00007f01b0405090 R08: 0000000000000000 R09: 0000000000000000 [ 495.682476][T19874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.682508][T19874] R13: 00007f01af826038 R14: 00007f01af825fa0 R15: 00007ffff3038368 [ 495.682595][T19874] [ 496.058138][T19865] syzkaller0: entered promiscuous mode [ 496.073518][T19865] syzkaller0: entered allmulticast mode [ 496.202174][T19887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3492'. [ 496.235260][T19884] x_tables: duplicate underflow at hook 1 [ 496.406111][T19889] netlink: 'syz.1.3491': attribute type 1 has an invalid length. [ 496.601732][T19889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.626589][T19891] syzkaller1: entered promiscuous mode [ 496.655244][T19891] syzkaller1: entered allmulticast mode [ 496.895410][T19911] Bluetooth: MGMT ver 1.23 [ 497.182460][T19929] xt_hashlimit: size too large, truncated to 1048576 [ 497.296275][T19934] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.378121][T19934] bridge_slave_0 (unregistering): left allmulticast mode [ 497.438736][T19934] bridge_slave_0 (unregistering): left promiscuous mode [ 497.458342][T19934] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.192122][T19967] net_ratelimit: 10 callbacks suppressed [ 498.192142][T19967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.323729][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.554651][T19984] netlink: 'syz.4.3516': attribute type 5 has an invalid length. [ 498.580678][T19986] netlink: 'syz.1.3517': attribute type 1 has an invalid length. [ 498.580906][T19978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.599214][T19988] netlink: 'syz.1.3517': attribute type 1 has an invalid length. [ 498.623380][T19981] __nla_validate_parse: 3 callbacks suppressed [ 498.623398][T19981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3516'. [ 498.639902][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3516'. [ 498.656666][T19982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3515'. [ 498.687902][T19986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. [ 498.697439][T19986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3517'. [ 498.715581][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3517'. [ 498.785333][T19986] team0: Port device team_slave_0 removed [ 498.818589][T19995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3520'. [ 498.827926][T19995] netlink: 'syz.3.3520': attribute type 7 has an invalid length. [ 498.845785][T19995] netlink: 'syz.3.3520': attribute type 8 has an invalid length. [ 498.864939][T19996] netlink: 'syz.4.3519': attribute type 1 has an invalid length. [ 498.877557][T19995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3520'. [ 498.897658][T19996] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3519'. [ 499.052599][T20006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3521'. [ 499.164595][T20017] netlink: 'syz.3.3523': attribute type 3 has an invalid length. [ 499.362015][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.104302][T20039] syzkaller0: entered promiscuous mode [ 500.113834][T20039] syzkaller0: entered allmulticast mode [ 500.125808][T20040] tipc: Enabled bearer , priority 0 [ 500.145799][T20039] netlink: 'syz.2.3529': attribute type 5 has an invalid length. [ 500.217613][T20038] tipc: Resetting bearer [ 500.318976][T20038] tipc: Disabling bearer [ 500.365953][T20058] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.373289][T20058] bridge0: port 2(bridge_slave_1) entered listening state [ 500.380794][T20058] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.388093][T20058] bridge0: port 1(bridge_slave_0) entered listening state [ 500.403692][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.560551][T20058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.581882][T20058] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 500.809412][T20080] netlink: 'syz.4.3539': attribute type 3 has an invalid length. [ 500.860513][T20080] pim6reg: entered allmulticast mode [ 501.397505][T20111] netlink: 'syz.1.3545': attribute type 4 has an invalid length. [ 501.443493][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.481540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.605856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.612160][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.624743][ T1606] block nbd1: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 390 seconds [ 501.625262][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.636052][ T1606] block nbd1: Possible stuck request ffff8880270a01c0: control (read@1024,1024B). Runtime 390 seconds [ 501.645691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.655070][ T1606] block nbd1: Possible stuck request ffff8880270a0380: control (read@2048,1024B). Runtime 390 seconds [ 501.655103][ T1606] block nbd1: Possible stuck request ffff8880270a0540: control (read@3072,1024B). Runtime 390 seconds [ 501.897200][T20135] ipt_REJECT: TCP_RESET invalid for non-tcp [ 501.965057][ T95] nci: nci_ntf_packet: unknown ntf opcode 0x12e [ 502.204501][T20154] geneve2: entered promiscuous mode [ 502.635490][T20170] sctp: [Deprecated]: syz.0.3563 (pid 20170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.635490][T20170] Use struct sctp_sack_info instead [ 502.668829][T20135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.229761][T20207] syzkaller1: entered promiscuous mode [ 503.244602][T20207] syzkaller1: entered allmulticast mode [ 503.429563][T20212] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.437019][T20212] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.525185][T10777] net_ratelimit: 6 callbacks suppressed [ 503.525207][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.539682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.662366][T20227] __nla_validate_parse: 15 callbacks suppressed [ 503.662389][T20227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3576'. [ 503.667404][T20226] netlink: 'syz.3.3577': attribute type 3 has an invalid length. [ 503.720553][T20226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3577'. [ 503.920003][T20239] netlink: 'syz.2.3580': attribute type 11 has an invalid length. [ 504.013450][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3582'. [ 504.108403][T20247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.119157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.140702][T20247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.150352][T17641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.171328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.197754][T20250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.209598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.562404][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.574576][T20268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3589'. [ 504.676288][T20276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3588'. [ 504.760503][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3590'. [ 505.052405][T20294] netlink: 632 bytes leftover after parsing attributes in process `syz.4.3593'. [ 505.196281][T12519] udevd[12519]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 505.555135][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'. [ 508.648628][ T13] net_ratelimit: 7 callbacks suppressed [ 508.648659][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.664649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.723975][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.733344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.894045][ T5733] dummy0: entered promiscuous mode [ 508.917443][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3604'. [ 508.967521][ T5733] dummy0: left promiscuous mode [ 509.142768][T20356] syzkaller1: entered promiscuous mode [ 509.161603][T20356] syzkaller1: entered allmulticast mode [ 509.762418][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.771307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.955164][T20389] syzkaller0: entered promiscuous mode [ 509.967783][T20389] syzkaller0: entered allmulticast mode [ 510.064690][T20398] batman_adv: batadv0: Adding interface: ip6gretap1 [ 510.073907][T20398] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.074421][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 510.128525][T20398] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 510.568515][ T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.578953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.696956][T20425] netlink: 'syz.4.3620': attribute type 4 has an invalid length. [ 510.778376][T20428] sctp: [Deprecated]: syz.1.3621 (pid 20428) Use of int in max_burst socket option deprecated. [ 510.778376][T20428] Use struct sctp_assoc_value instead [ 510.801820][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.810601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.840570][T20428] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3621'. [ 511.025135][T20438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3627'. [ 511.056764][T20438] bond0: entered promiscuous mode [ 511.062693][T20438] bond_slave_0: entered promiscuous mode [ 511.068686][T20438] bond_slave_1: entered promiscuous mode [ 511.085147][T20438] bond0: left promiscuous mode [ 511.090508][T20438] bond_slave_0: left promiscuous mode [ 511.097084][T20438] bond_slave_1: left promiscuous mode [ 511.133216][T20441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3628'. [ 511.301061][T20455] FAULT_INJECTION: forcing a failure. [ 511.301061][T20455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.315375][T20455] CPU: 0 UID: 0 PID: 20455 Comm: syz.3.3632 Not tainted syzkaller #0 PREEMPT(full) [ 511.315406][T20455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.315419][T20455] Call Trace: [ 511.315427][T20455] [ 511.315436][T20455] dump_stack_lvl+0xe8/0x150 [ 511.315471][T20455] should_fail_ex+0x410/0x560 [ 511.315510][T20455] _copy_from_user+0x2d/0xb0 [ 511.315545][T20455] ___sys_sendmsg+0x1c6/0x360 [ 511.315577][T20455] ? __lock_acquire+0x683/0x2cf0 [ 511.315614][T20455] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.315686][T20455] ? __fget_files+0x2a/0x420 [ 511.315719][T20455] ? __fget_files+0x3a2/0x420 [ 511.315760][T20455] __x64_sys_sendmsg+0x1b1/0x290 [ 511.315797][T20455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.315854][T20455] do_syscall_64+0x166/0x520 [ 511.315879][T20455] ? trace_irq_disable+0x3b/0x140 [ 511.315909][T20455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.315931][T20455] ? clear_bhb_loop+0x70/0xc0 [ 511.315958][T20455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.315980][T20455] RIP: 0033:0x7f01af59e0d9 [ 511.316000][T20455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.316019][T20455] RSP: 002b:00007f01b0405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.316043][T20455] RAX: ffffffffffffffda RBX: 00007f01af825fa0 RCX: 00007f01af59e0d9 [ 511.316058][T20455] RDX: 0000000000008000 RSI: 0000200000000140 RDI: 0000000000000006 [ 511.316072][T20455] RBP: 00007f01b0405090 R08: 0000000000000000 R09: 0000000000000000 [ 511.316086][T20455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.316100][T20455] R13: 00007f01af826038 R14: 00007f01af825fa0 R15: 00007ffff3038368 [ 511.316133][T20455] [ 511.673937][T20465] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3636'. [ 511.710965][T20467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3634'. [ 511.896449][T20479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3640'. [ 511.906994][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3640'. [ 512.147979][T20495] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3643'. [ 512.433201][T20508] FAULT_INJECTION: forcing a failure. [ 512.433201][T20508] name failslab, interval 1, probability 0, space 0, times 0 [ 512.463512][T20508] CPU: 0 UID: 0 PID: 20508 Comm: syz.1.3645 Not tainted syzkaller #0 PREEMPT(full) [ 512.463546][T20508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.463561][T20508] Call Trace: [ 512.463570][T20508] [ 512.463581][T20508] dump_stack_lvl+0xe8/0x150 [ 512.463621][T20508] should_fail_ex+0x410/0x560 [ 512.463666][T20508] should_failslab+0xa8/0x100 [ 512.463703][T20508] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 512.463731][T20508] ? local_lock_release+0x9c/0x160 [ 512.463766][T20508] ? __alloc_skb+0x1db/0x7a0 [ 512.463797][T20508] ? __alloc_skb+0x1db/0x7a0 [ 512.463838][T20508] __alloc_skb+0x1db/0x7a0 [ 512.463877][T20508] netlink_sendmsg+0x5d4/0xb40 [ 512.463914][T20508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.463944][T20508] ? aa_sock_msg_perm+0xf6/0x1c0 [ 512.463991][T20508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.464015][T20508] sock_sendmsg_nosec+0x13a/0x180 [ 512.464048][T20508] ____sys_sendmsg+0x54e/0x850 [ 512.464092][T20508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.464140][T20508] ? import_iovec+0x73/0xa0 [ 512.464170][T20508] ___sys_sendmsg+0x2a5/0x360 [ 512.464206][T20508] ? __lock_acquire+0x683/0x2cf0 [ 512.464247][T20508] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.464335][T20508] ? __fget_files+0x2a/0x420 [ 512.464368][T20508] ? __fget_files+0x3a2/0x420 [ 512.464415][T20508] __x64_sys_sendmsg+0x1b1/0x290 [ 512.464457][T20508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.464521][T20508] do_syscall_64+0x166/0x520 [ 512.464552][T20508] ? trace_irq_disable+0x3b/0x140 [ 512.464585][T20508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.464610][T20508] ? clear_bhb_loop+0x70/0xc0 [ 512.464640][T20508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.464665][T20508] RIP: 0033:0x7fbf1379e0d9 [ 512.464688][T20508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.464710][T20508] RSP: 002b:00007fbf1470b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.464736][T20508] RAX: ffffffffffffffda RBX: 00007fbf13a26180 RCX: 00007fbf1379e0d9 [ 512.464754][T20508] RDX: 0000000000008000 RSI: 0000200000000140 RDI: 0000000000000006 [ 512.464770][T20508] RBP: 00007fbf1470b090 R08: 0000000000000000 R09: 0000000000000000 [ 512.464792][T20508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.464807][T20508] R13: 00007fbf13a26218 R14: 00007fbf13a26180 R15: 00007ffeee84d548 [ 512.464846][T20508] [ 513.174181][T20522] xt_bpf: check failed: parse error [ 513.417401][T20531] syzkaller1: entered promiscuous mode [ 513.442754][T20531] syzkaller1: entered allmulticast mode [ 513.929227][T10777] net_ratelimit: 7 callbacks suppressed [ 513.929249][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.944568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.402911][T17643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.411443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.480641][T20568] __nla_validate_parse: 1 callbacks suppressed [ 514.480663][T20568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3662'. [ 514.667515][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3663'. [ 514.694531][T20572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3663'. [ 514.737518][T20572] netlink: 'syz.4.3663': attribute type 12 has an invalid length. [ 514.755303][T20572] netlink: 'syz.4.3663': attribute type 13 has an invalid length. [ 514.966269][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.975044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.266555][T20607] veth0: entered promiscuous mode [ 515.436590][T20618] Bluetooth: MGMT ver 1.23 [ 515.481057][T20599] veth0: left promiscuous mode [ 515.897876][T20632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3678'. [ 515.928681][T20639] IPVS: length: 142 != 8 [ 515.941684][T20638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3682'. [ 516.005908][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.015055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.061840][T20640] netlink: 'syz.1.3679': attribute type 16 has an invalid length. [ 516.090355][T20640] netlink: 'syz.1.3679': attribute type 17 has an invalid length. [ 516.103787][T20645] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3684'. [ 516.262950][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3686'. [ 516.322980][ T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.331527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.379195][T20640] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.386568][T20640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.434067][T20640] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.441446][T20640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.684647][T20640] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 516.746237][T20640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.944002][T20648] lo speed is unknown, defaulting to 1000 [ 516.980370][T20648] wg2 speed is unknown, defaulting to 1000 [ 516.996512][T20679] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3689'. [ 517.030720][T20681] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3690'. [ 517.320095][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3692'. [ 517.413049][T20687] syzkaller0: entered promiscuous mode [ 517.434589][T20687] syzkaller0: entered allmulticast mode [ 518.299401][T20705] FAULT_INJECTION: forcing a failure. [ 518.299401][T20705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.314301][T20705] CPU: 1 UID: 0 PID: 20705 Comm: syz.3.3697 Not tainted syzkaller #0 PREEMPT(full) [ 518.314332][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.314346][T20705] Call Trace: [ 518.314354][T20705] [ 518.314361][T20705] dump_stack_lvl+0xe8/0x150 [ 518.314399][T20705] should_fail_ex+0x410/0x560 [ 518.314439][T20705] _copy_from_user+0x2d/0xb0 [ 518.314464][T20705] ___sys_sendmsg+0x1c6/0x360 [ 518.314497][T20705] ? __lock_acquire+0x683/0x2cf0 [ 518.314534][T20705] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.314604][T20705] ? __fget_files+0x2a/0x420 [ 518.314635][T20705] ? __fget_files+0x3a2/0x420 [ 518.314675][T20705] __x64_sys_sendmsg+0x1b1/0x290 [ 518.314712][T20705] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.314769][T20705] do_syscall_64+0x166/0x520 [ 518.314795][T20705] ? trace_irq_disable+0x3b/0x140 [ 518.314824][T20705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.314847][T20705] ? clear_bhb_loop+0x70/0xc0 [ 518.314874][T20705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.314912][T20705] RIP: 0033:0x7f01af59e0d9 [ 518.314932][T20705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.314951][T20705] RSP: 002b:00007f01b0405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.314974][T20705] RAX: ffffffffffffffda RBX: 00007f01af825fa0 RCX: 00007f01af59e0d9 [ 518.314991][T20705] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 518.315004][T20705] RBP: 00007f01b0405090 R08: 0000000000000000 R09: 0000000000000000 [ 518.315018][T20705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.315030][T20705] R13: 00007f01af826038 R14: 00007f01af825fa0 R15: 00007ffff3038368 [ 518.315065][T20705] [ 519.548066][T17644] net_ratelimit: 13 callbacks suppressed [ 519.548088][T17644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.562824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.593896][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.642776][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.696405][T20719] bridge0: port 3(wlan1) entered blocking state [ 521.714174][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.722551][T20719] bridge0: port 3(wlan1) entered disabled state [ 521.740519][T20719] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 521.773374][T20719] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 521.782449][T20719] bridge0: port 3(wlan1) entered blocking state [ 521.788925][T20719] bridge0: port 3(wlan1) entered forwarding state [ 521.815810][ T95] bridge0: port 3(wlan1) entered disabled state [ 521.898004][ T4979] udevd[4979]: worker [5901] /devices/virtual/block/nbd5 timeout; kill it [ 521.917474][ T4979] udevd[4979]: seq 17906 '/devices/virtual/block/nbd5' killed [ 522.187156][T20748] netlink: 'syz.1.3709': attribute type 4 has an invalid length. [ 522.239891][T20745] lo speed is unknown, defaulting to 1000 [ 522.259906][T20750] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.309810][T20745] wg2 speed is unknown, defaulting to 1000 [ 522.417173][T17644] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 522.610133][T20757] lo speed is unknown, defaulting to 1000 [ 522.787578][T20764] netlink: 'syz.2.3712': attribute type 5 has an invalid length. [ 522.816928][T20764] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 522.827224][T20764] netlink: 'syz.2.3712': attribute type 2 has an invalid length. [ 522.839260][T20765] __nla_validate_parse: 3 callbacks suppressed [ 522.839281][T20765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3713'. [ 522.930171][T20757] wg2 speed is unknown, defaulting to 1000 [ 523.009338][T20750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.225653][T20772] x_tables: duplicate underflow at hook 1 [ 523.263136][T20767] syzkaller0: entered promiscuous mode [ 523.268663][T20767] syzkaller0: entered allmulticast mode [ 524.653189][ T1606] block nbd5: Possible stuck request ffff888027295080: control (read@0,4096B). Runtime 240 seconds [ 526.865807][T20787] macsec1: entered promiscuous mode [ 526.871754][T20787] hsr0: entered promiscuous mode [ 526.890398][T20787] hsr0: left promiscuous mode [ 527.247141][T20795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 527.328197][T20798] v: renamed from veth0_vlan (while UP) [ 527.824809][T20814] openvswitch: netlink: IP tunnel TTL not specified. [ 527.850292][T20814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.123857][T20820] syzkaller0: entered promiscuous mode [ 528.149958][T20820] syzkaller0: entered allmulticast mode [ 528.256108][T20840] Cannot find set identified by id 0 to match [ 528.381848][T20844] netlink: 'syz.2.3735': attribute type 5 has an invalid length. [ 528.574775][T20855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3736'. [ 528.599934][T20855] openvswitch: netlink: Flow actions attr not present in new flow. [ 528.680894][T20862] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3739'. [ 530.407706][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 530.417253][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 531.686895][ T1606] block nbd1: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 420 seconds [ 531.699586][ T1606] block nbd1: Possible stuck request ffff8880270a01c0: control (read@1024,1024B). Runtime 420 seconds [ 531.711036][ T1606] block nbd1: Possible stuck request ffff8880270a0380: control (read@2048,1024B). Runtime 420 seconds [ 531.723289][ T1606] block nbd1: Possible stuck request ffff8880270a0540: control (read@3072,1024B). Runtime 420 seconds [ 531.831037][T20847] dvmrp0: left allmulticast mode [ 531.854059][T20858] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 532.013519][T20875] netlink: 524 bytes leftover after parsing attributes in process `syz.3.3742'. [ 532.152717][T20885] FAULT_INJECTION: forcing a failure. [ 532.152717][T20885] name failslab, interval 1, probability 0, space 0, times 0 [ 532.191604][T20885] CPU: 1 UID: 0 PID: 20885 Comm: syz.3.3747 Not tainted syzkaller #0 PREEMPT(full) [ 532.191635][T20885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.191648][T20885] Call Trace: [ 532.191657][T20885] [ 532.191667][T20885] dump_stack_lvl+0xe8/0x150 [ 532.191704][T20885] should_fail_ex+0x410/0x560 [ 532.191741][T20885] ? __rhashtable_init_noprof+0x545/0xaf0 [ 532.191776][T20885] should_failslab+0xa8/0x100 [ 532.191810][T20885] __kvmalloc_node_noprof+0x176/0x870 [ 532.191844][T20885] ? __rhashtable_init_noprof+0x545/0xaf0 [ 532.191885][T20885] __rhashtable_init_noprof+0x545/0xaf0 [ 532.191924][T20885] __rhltable_init_noprof+0x26/0x70 [ 532.191966][T20885] nf_tables_newtable+0x6e0/0x1990 [ 532.192017][T20885] nfnetlink_rcv+0x1288/0x28c0 [ 532.192089][T20885] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 532.192172][T20885] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.192207][T20885] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.192228][T20885] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.192256][T20885] netlink_unicast+0x7bd/0x940 [ 532.192305][T20885] netlink_sendmsg+0x813/0xb40 [ 532.192345][T20885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.192372][T20885] ? aa_sock_msg_perm+0xf6/0x1c0 [ 532.192413][T20885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.192435][T20885] sock_sendmsg_nosec+0x13a/0x180 [ 532.192464][T20885] ____sys_sendmsg+0x54e/0x850 [ 532.192505][T20885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.192548][T20885] ? import_iovec+0x73/0xa0 [ 532.192575][T20885] ___sys_sendmsg+0x2a5/0x360 [ 532.192606][T20885] ? __lock_acquire+0x683/0x2cf0 [ 532.192644][T20885] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.192717][T20885] ? __fget_files+0x2a/0x420 [ 532.192746][T20885] ? __fget_files+0x3a2/0x420 [ 532.192788][T20885] __x64_sys_sendmsg+0x1b1/0x290 [ 532.192825][T20885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.192884][T20885] do_syscall_64+0x166/0x520 [ 532.192910][T20885] ? trace_irq_disable+0x3b/0x140 [ 532.192938][T20885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.192961][T20885] ? clear_bhb_loop+0x70/0xc0 [ 532.192988][T20885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.193010][T20885] RIP: 0033:0x7f01af59e0d9 [ 532.193030][T20885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.193049][T20885] RSP: 002b:00007f01b0405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.193073][T20885] RAX: ffffffffffffffda RBX: 00007f01af825fa0 RCX: 00007f01af59e0d9 [ 532.193089][T20885] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 532.193103][T20885] RBP: 00007f01b0405090 R08: 0000000000000000 R09: 0000000000000000 [ 532.193116][T20885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.193130][T20885] R13: 00007f01af826038 R14: 00007f01af825fa0 R15: 00007ffff3038368 [ 532.193164][T20885] [ 532.194767][T20885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3747'. [ 532.536003][T20885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3747'. [ 532.578547][T20893] netlink: 'syz.2.3750': attribute type 1 has an invalid length. [ 532.679182][T20893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.766474][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3753'. [ 532.783996][T20905] netlink: 'syz.3.3753': attribute type 1 has an invalid length. [ 532.804942][T20905] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 532.948674][T20915] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3755'. [ 532.998736][T20915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3755'. [ 533.158555][T20918] lo speed is unknown, defaulting to 1000 [ 533.219391][T20918] wg2 speed is unknown, defaulting to 1000 [ 533.247686][T20925] xt_socket: unknown flags 0x8 [ 533.262944][T20926] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3759'. [ 533.584421][T20930] erspan0: entered promiscuous mode [ 533.839262][T20938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3763'. [ 533.855899][T20938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3763'. [ 533.870283][T20938] FAULT_INJECTION: forcing a failure. [ 533.870283][T20938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.921075][T20938] CPU: 1 UID: 0 PID: 20938 Comm: syz.1.3763 Not tainted syzkaller #0 PREEMPT(full) [ 533.921110][T20938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.921123][T20938] Call Trace: [ 533.921131][T20938] [ 533.921139][T20938] dump_stack_lvl+0xe8/0x150 [ 533.921177][T20938] should_fail_ex+0x410/0x560 [ 533.921217][T20938] _copy_to_user+0x31/0xb0 [ 533.921243][T20938] simple_read_from_buffer+0xe1/0x170 [ 533.921280][T20938] proc_fail_nth_read+0x1bb/0x230 [ 533.921319][T20938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.921357][T20938] ? rw_verify_area+0x24a/0x4c0 [ 533.921391][T20938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.921424][T20938] vfs_read+0x213/0xa80 [ 533.921462][T20938] ? __pfx___mutex_lock+0x10/0x10 [ 533.921489][T20938] ? __pfx_vfs_read+0x10/0x10 [ 533.921523][T20938] ? __fget_files+0x2a/0x420 [ 533.921558][T20938] ? __fget_files+0x3a2/0x420 [ 533.921586][T20938] ? __fget_files+0x2a/0x420 [ 533.921635][T20938] ksys_read+0x150/0x270 [ 533.921671][T20938] ? __pfx_ksys_read+0x10/0x10 [ 533.921716][T20938] do_syscall_64+0x166/0x520 [ 533.921741][T20938] ? trace_irq_disable+0x3b/0x140 [ 533.921770][T20938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.921793][T20938] ? clear_bhb_loop+0x70/0xc0 [ 533.921819][T20938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.921839][T20938] RIP: 0033:0x7fbf1375e90e [ 533.921858][T20938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.921875][T20938] RSP: 002b:00007fbf1474cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.921895][T20938] RAX: ffffffffffffffda RBX: 00007fbf1474d6c0 RCX: 00007fbf1375e90e [ 533.921910][T20938] RDX: 000000000000000f RSI: 00007fbf1474d0a0 RDI: 0000000000000004 [ 533.921956][T20938] RBP: 00007fbf1474d090 R08: 0000000000000000 R09: 0000000000000000 [ 533.921969][T20938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.921981][T20938] R13: 00007fbf13a26038 R14: 00007fbf13a25fa0 R15: 00007ffeee84d548 [ 533.922017][T20938] [ 534.541700][T20954] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3769'. [ 534.554101][T20954] netlink: 'syz.3.3769': attribute type 9 has an invalid length. [ 534.564731][T20954] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3769'. [ 534.574838][T20954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3769'. [ 534.648285][T20959] geneve2: entered allmulticast mode [ 535.669360][T20982] syzkaller0: entered promiscuous mode [ 535.712777][T20982] syzkaller0: entered allmulticast mode [ 535.740361][T20983] tipc: Started in network mode [ 535.746183][T20989] FAULT_INJECTION: forcing a failure. [ 535.746183][T20989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.761843][T20983] tipc: Node identity b2329e1dc651, cluster identity 4711 [ 535.763990][T20989] CPU: 1 UID: 0 PID: 20989 Comm: syz.3.3777 Not tainted syzkaller #0 PREEMPT(full) [ 535.764073][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.764113][T20989] Call Trace: [ 535.764136][T20989] [ 535.764159][T20989] dump_stack_lvl+0xe8/0x150 [ 535.764262][T20989] should_fail_ex+0x410/0x560 [ 535.764366][T20989] strncpy_from_user+0x36/0x2c0 [ 535.764460][T20989] strncpy_from_user_nofault+0x71/0x150 [ 535.764595][T20989] bpf_probe_read_user_str+0x2a/0x70 [ 535.764669][T20989] bpf_prog_4cd33f1e055526e9+0x43/0x49 [ 535.764730][T20989] bpf_flow_dissect+0x224/0x770 [ 535.764918][T20989] ? ktime_get+0x1f5/0x220 [ 535.765034][T20989] bpf_prog_test_run_flow_dissector+0x3a4/0x610 [ 535.765178][T20989] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 535.765245][T20989] ? __fget_files+0x2a/0x420 [ 535.765349][T20989] ? __fget_files+0x2a/0x420 [ 535.765435][T20989] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 535.765505][T20989] bpf_prog_test_run+0x2c5/0x340 [ 535.765593][T20989] __sys_bpf+0xa22/0xd90 [ 535.765702][T20989] ? __pfx___sys_bpf+0x10/0x10 [ 535.765810][T20989] ? __fget_files+0x2a/0x420 [ 535.765935][T20989] ? ksys_write+0x242/0x270 [ 535.766028][T20989] ? __pfx_ksys_write+0x10/0x10 [ 535.766143][T20989] __x64_sys_bpf+0xba/0xd0 [ 535.766256][T20989] do_syscall_64+0x166/0x520 [ 535.766323][T20989] ? trace_irq_disable+0x3b/0x140 [ 535.766408][T20989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.766463][T20989] ? clear_bhb_loop+0x70/0xc0 [ 535.766536][T20989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.766585][T20989] RIP: 0033:0x7f01af59e0d9 [ 535.766639][T20989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.766691][T20989] RSP: 002b:00007f01b0405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 535.766753][T20989] RAX: ffffffffffffffda RBX: 00007f01af825fa0 RCX: 00007f01af59e0d9 [ 535.766795][T20989] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 535.766829][T20989] RBP: 00007f01b0405090 R08: 0000000000000000 R09: 0000000000000000 [ 535.766862][T20989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.766893][T20989] R13: 00007f01af826038 R14: 00007f01af825fa0 R15: 00007ffff3038368 [ 535.766985][T20989] [ 536.017616][T20983] tipc: Enabled bearer , priority 0 [ 536.037802][T20987] hsr0: entered promiscuous mode [ 536.067616][T20987] hsr0: entered allmulticast mode [ 536.090130][T20987] hsr_slave_0: entered allmulticast mode [ 536.106888][T20987] hsr_slave_1: entered allmulticast mode [ 536.201006][T20985] tipc: Resetting bearer [ 536.266203][T20985] tipc: Disabling bearer [ 536.457966][T21004] ip_tables: iptables: counters copy to user failed while replacing table [ 539.622927][T21026] FAULT_INJECTION: forcing a failure. [ 539.622927][T21026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.650781][T21026] CPU: 1 UID: 0 PID: 21026 Comm: syz.3.3791 Not tainted syzkaller #0 PREEMPT(full) [ 539.650817][T21026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.650830][T21026] Call Trace: [ 539.650839][T21026] [ 539.650848][T21026] dump_stack_lvl+0xe8/0x150 [ 539.650886][T21026] should_fail_ex+0x410/0x560 [ 539.650925][T21026] strncpy_from_user+0x36/0x2c0 [ 539.650961][T21026] strncpy_from_user_nofault+0x71/0x150 [ 539.650991][T21026] bpf_probe_read_user_str+0x2a/0x70 [ 539.651019][T21026] bpf_prog_4cd33f1e055526e9+0x43/0x49 [ 539.651043][T21026] bpf_flow_dissect+0x224/0x770 [ 539.651094][T21026] bpf_prog_test_run_flow_dissector+0x3a4/0x610 [ 539.651136][T21026] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 539.651162][T21026] ? __fget_files+0x2a/0x420 [ 539.651197][T21026] ? __fget_files+0x2a/0x420 [ 539.651231][T21026] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 539.651256][T21026] bpf_prog_test_run+0x2c5/0x340 [ 539.651295][T21026] __sys_bpf+0xa22/0xd90 [ 539.651335][T21026] ? __pfx___sys_bpf+0x10/0x10 [ 539.651379][T21026] ? __fget_files+0x2a/0x420 [ 539.651429][T21026] ? ksys_write+0x242/0x270 [ 539.651465][T21026] ? __pfx_ksys_write+0x10/0x10 [ 539.651504][T21026] __x64_sys_bpf+0xba/0xd0 [ 539.651536][T21026] do_syscall_64+0x166/0x520 [ 539.651561][T21026] ? trace_irq_disable+0x3b/0x140 [ 539.651589][T21026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.651612][T21026] ? clear_bhb_loop+0x70/0xc0 [ 539.651639][T21026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.651661][T21026] RIP: 0033:0x7f01af59e0d9 [ 539.651682][T21026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.651702][T21026] RSP: 002b:00007f01b0405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.651725][T21026] RAX: ffffffffffffffda RBX: 00007f01af825fa0 RCX: 00007f01af59e0d9 [ 539.651741][T21026] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 539.651754][T21026] RBP: 00007f01b0405090 R08: 0000000000000000 R09: 0000000000000000 [ 539.651767][T21026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.651780][T21026] R13: 00007f01af826038 R14: 00007f01af825fa0 R15: 00007ffff3038368 [ 539.651816][T21026] [ 540.118971][T21041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3794'. [ 540.142945][T21041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3794'. [ 540.782726][T21067] syzkaller0: entered promiscuous mode [ 540.788412][T21067] syzkaller0: entered allmulticast mode [ 540.993885][T21078] netlink: 'syz.3.3806': attribute type 2 has an invalid length. [ 541.208158][T21087] syzkaller0: entered promiscuous mode [ 541.223688][T21087] syzkaller0: entered allmulticast mode [ 541.387748][T21100] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3812'. [ 541.437019][T21103] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3810'. [ 541.602245][T21108] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3813'. [ 544.389666][T21121] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 544.507251][T21128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3821'. [ 544.554386][T21133] netlink: 'syz.4.3822': attribute type 1 has an invalid length. [ 544.603799][T21126] ip6gre1: entered promiscuous mode [ 544.621783][T21126] ip6gre1: entered allmulticast mode [ 544.853537][T21133] 8021q: adding VLAN 0 to HW filter on device bond4 [ 544.995410][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3825'. [ 545.011514][T21135] macvlan3: entered promiscuous mode [ 545.034031][T21135] macvlan3: entered allmulticast mode [ 545.200207][T21158] netlink: 'syz.3.3827': attribute type 7 has an invalid length. [ 545.221486][T21159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3825'. [ 545.354066][T21149] netlink: 'syz.0.3825': attribute type 1 has an invalid length. [ 545.406726][T21165] netlink: 'syz.2.3830': attribute type 3 has an invalid length. [ 545.427849][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3830'. [ 545.820757][T21188] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3833'. [ 545.860867][T21188] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3833'. [ 545.894045][T21188] veth1_to_bond: Caught tx_queue_len zero misconfig [ 545.964624][T21197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3838'. [ 545.999055][T21191] can: request_module (can-proto-0) failed. [ 546.098845][T21191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3838'. [ 546.113126][T21196] syzkaller1: entered promiscuous mode [ 546.135250][T21196] syzkaller1: entered allmulticast mode [ 546.318962][T21209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3843'. [ 546.357842][T21211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3844'. [ 546.598105][T21229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3848'. [ 546.608619][T21229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3848'. [ 546.675539][T21234] netlink: 'syz.0.3848': attribute type 6 has an invalid length. [ 548.051173][T21270] netlink: 'syz.0.3861': attribute type 9 has an invalid length. [ 548.170508][T21272] netlink: 'syz.1.3862': attribute type 3 has an invalid length. [ 548.378850][T21275] mac80211_hwsim hwsim45 wlan0: left promiscuous mode [ 548.416403][T21275] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 548.464093][T21284] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 3, id = 0 [ 548.643405][T21266] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 548.657166][T21266] bond5 (unregistering): Released all slaves [ 548.764262][T21285] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 548.827140][T21285] bond5 (unregistering): Released all slaves [ 549.277787][T21316] netlink: 'syz.0.3871': attribute type 23 has an invalid length. [ 549.409391][T21321] netlink: 'syz.1.3874': attribute type 3 has an invalid length. [ 549.768186][T17444] Bluetooth: hci2: command 0x0406 tx timeout [ 549.808617][T21340] netlink: 'syz.0.3882': attribute type 2 has an invalid length. [ 549.959853][T21329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.035938][T21354] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 550.268873][T21363] __nla_validate_parse: 12 callbacks suppressed [ 550.268895][T21363] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3888'. [ 550.269456][T21329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.469538][T21329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.612294][T21329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.039256][T21384] ip6tnl0: Caught tx_queue_len zero misconfig [ 551.054182][ T95] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.079753][T21391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3899'. [ 551.101067][ T95] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.137241][T21391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'. [ 551.304180][T21391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3899'. [ 551.319365][T21395] vlan3: entered allmulticast mode [ 551.338343][T21395] bridge4: entered allmulticast mode [ 551.372560][T17641] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.399021][T17641] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.296439][T21418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3907'. [ 552.429988][T21425] netlink: 'syz.2.3909': attribute type 1 has an invalid length. [ 552.494852][T21429] netlink: 'syz.3.3911': attribute type 1 has an invalid length. [ 552.590029][T21439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3913'. [ 552.600701][T21439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3913'. [ 552.623557][T21425] bond3: option mode: invalid value (7) [ 552.639156][T21425] bond3 (unregistering): Released all slaves [ 552.650898][T21442] netlink: 'syz.2.3909': attribute type 10 has an invalid length. [ 552.678292][T21442] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3909'. [ 552.756563][T21425] netlink: 'syz.2.3909': attribute type 39 has an invalid length. [ 552.865155][T21429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.031966][T21435] bond1: (slave veth11): Enslaving as an active interface with a down link [ 553.089810][T21436] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3912'. [ 553.230829][T21440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.267893][T21440] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.290634][T21440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.528953][T21440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.614898][T21440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.659441][T21440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 553.676540][T21440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.695655][T21440] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 553.723838][T21440] veth1_vlan: left promiscuous mode [ 553.733502][T21440] veth0_vlan: left promiscuous mode [ 553.741992][T21440] veth0_vlan: entered promiscuous mode [ 553.750827][T21440] veth1_vlan: entered promiscuous mode [ 553.768397][T21440] veth1_macvtap: left promiscuous mode [ 553.776121][T21440] veth0_macvtap: left promiscuous mode [ 553.784842][T21440] veth0_macvtap: entered promiscuous mode [ 553.792863][T21440] veth1_macvtap: entered promiscuous mode [ 553.809079][T21440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.818591][T21440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.827769][T21440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.838707][T21440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.853658][T21440] gre1: left promiscuous mode [ 553.861431][T21440] bridge0: port 3(batadv1) entered blocking state [ 553.868078][T21440] bridge0: port 3(batadv1) entered forwarding state [ 553.888106][T21440] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 553.943474][T21440] geneve2: left promiscuous mode [ 553.957479][T21442] dummy0: entered promiscuous mode [ 553.978338][T21445] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 553.989192][T21474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3917'. [ 553.998749][T21445] bond1: (slave batadv2): making interface the new active one [ 554.019161][T21445] batadv2: entered promiscuous mode [ 554.025231][T21445] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 554.074424][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.083013][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.104260][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.111540][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.232488][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.261460][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.413167][T17641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.473208][T17643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.524900][T21489] syzkaller1: entered promiscuous mode [ 554.546339][T21489] syzkaller1: entered allmulticast mode [ 554.597435][T21496] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 554.731672][T21505] netlink: 'syz.0.3925': attribute type 30 has an invalid length. [ 554.746726][ T1606] block nbd5: Possible stuck request ffff888027295080: control (read@0,4096B). Runtime 270 seconds [ 554.770406][T21507] netlink: 'syz.4.3924': attribute type 1 has an invalid length. [ 554.837238][T21507] netlink: 'syz.4.3924': attribute type 2 has an invalid length. [ 554.893200][T17641] bond1: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 555.091889][T21522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 555.119240][T21522] bond3: Removing last arp target with arp_interval on [ 555.140426][T21522] netlink: 'syz.1.3931': attribute type 2 has an invalid length. [ 555.326609][T21532] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 555.336619][T21533] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 555.489012][T21540] __nla_validate_parse: 5 callbacks suppressed [ 555.489033][T21540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3935'. [ 555.507978][T21540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3935'. [ 555.614823][T21545] 8021q: VLANs not supported on ip6_vti0 [ 555.866163][T21555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3938'. [ 555.907528][T21555] netlink: 'syz.0.3938': attribute type 6 has an invalid length. [ 555.989122][T21557] lo speed is unknown, defaulting to 1000 [ 556.035090][T21564] geneve1: entered promiscuous mode [ 556.074686][T21557] wg2 speed is unknown, defaulting to 1000 [ 556.230755][T21566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3941'. [ 556.256277][T21566] Cannot find add_set index 3840 as target [ 556.388357][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3942'. [ 556.479602][T21570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.812566][T21578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3946'. [ 556.938440][T21587] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 556.990962][T21585] netlink: 'syz.0.3947': attribute type 10 has an invalid length. [ 557.060316][T21585] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.068125][T21585] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.248810][T21585] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.256179][T21585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.263817][T21585] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.271044][T21585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.404115][T21585] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 557.623861][T21608] netlink: 'syz.2.3953': attribute type 3 has an invalid length. [ 557.655973][T21608] netlink: 'syz.2.3953': attribute type 1 has an invalid length. [ 557.673997][T21608] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3953'. [ 557.697977][T21611] FAULT_INJECTION: forcing a failure. [ 557.697977][T21611] name failslab, interval 1, probability 0, space 0, times 0 [ 557.789662][T21611] CPU: 0 UID: 0 PID: 21611 Comm: syz.1.3954 Not tainted syzkaller #0 PREEMPT(full) [ 557.789694][T21611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.789708][T21611] Call Trace: [ 557.789725][T21611] [ 557.789734][T21611] dump_stack_lvl+0xe8/0x150 [ 557.789775][T21611] should_fail_ex+0x410/0x560 [ 557.789819][T21611] should_failslab+0xa8/0x100 [ 557.789853][T21611] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 557.789881][T21611] ? skb_clone+0x212/0x3a0 [ 557.789903][T21611] ? skb_clone+0x212/0x3a0 [ 557.789931][T21611] skb_clone+0x212/0x3a0 [ 557.789956][T21611] __netlink_deliver_tap+0x413/0x860 [ 557.789992][T21611] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.790017][T21611] netlink_deliver_tap+0x19c/0x1b0 [ 557.790040][T21611] netlink_unicast+0x781/0x940 [ 557.790085][T21611] netlink_sendmsg+0x813/0xb40 [ 557.790117][T21611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.790143][T21611] ? aa_sock_msg_perm+0xf6/0x1c0 [ 557.790185][T21611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.790205][T21611] sock_sendmsg_nosec+0x13a/0x180 [ 557.790234][T21611] ____sys_sendmsg+0x54e/0x850 [ 557.790272][T21611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.790313][T21611] ? import_iovec+0x73/0xa0 [ 557.790341][T21611] ___sys_sendmsg+0x2a5/0x360 [ 557.790372][T21611] ? __lock_acquire+0x683/0x2cf0 [ 557.790409][T21611] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.790481][T21611] ? __fget_files+0x2a/0x420 [ 557.790510][T21611] ? __fget_files+0x3a2/0x420 [ 557.790549][T21611] __x64_sys_sendmsg+0x1b1/0x290 [ 557.790586][T21611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.790642][T21611] do_syscall_64+0x166/0x520 [ 557.790669][T21611] ? trace_irq_disable+0x3b/0x140 [ 557.790698][T21611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.790733][T21611] ? clear_bhb_loop+0x70/0xc0 [ 557.790761][T21611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.790784][T21611] RIP: 0033:0x7fbf1379e0d9 [ 557.790804][T21611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.790823][T21611] RSP: 002b:00007fbf1474d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.790847][T21611] RAX: ffffffffffffffda RBX: 00007fbf13a25fa0 RCX: 00007fbf1379e0d9 [ 557.790863][T21611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 557.790876][T21611] RBP: 00007fbf1474d090 R08: 0000000000000000 R09: 0000000000000000 [ 557.790890][T21611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.790902][T21611] R13: 00007fbf13a26038 R14: 00007fbf13a25fa0 R15: 00007ffeee84d548 [ 557.790938][T21611] [ 558.317220][T21624] netlink: 'syz.0.3958': attribute type 1 has an invalid length. [ 558.330692][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3958'. [ 558.784487][T21657] xt_hashlimit: size too large, truncated to 1048576 [ 558.965515][T21663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3964'. [ 559.080061][T21631] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.087343][T21631] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.625647][T21631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.665094][T21631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.840678][T21631] ip6gre1: left promiscuous mode [ 559.846249][T21631] ip6gre1: left allmulticast mode [ 559.876219][T21628] syzkaller1: entered promiscuous mode [ 559.882421][T21628] syzkaller1: entered allmulticast mode [ 559.891403][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.013291][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 560.088213][ T9336] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.271600][T17643] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.291266][T17643] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.394669][T21700] netlink: 'syz.4.3970': attribute type 1 has an invalid length. [ 560.456420][T21698] lo speed is unknown, defaulting to 1000 [ 560.481349][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.488680][ C1] bridge0: topology change detected, propagating [ 560.496807][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.504160][ C1] bridge0: topology change detected, propagating [ 560.519002][T21698] wg2 speed is unknown, defaulting to 1000 [ 561.007462][T21727] syzkaller0: entered promiscuous mode [ 561.013548][T21727] syzkaller0: entered allmulticast mode [ 561.775521][ T1606] block nbd1: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 450 seconds [ 561.786912][ T1606] block nbd1: Possible stuck request ffff8880270a01c0: control (read@1024,1024B). Runtime 450 seconds [ 561.798727][ T1606] block nbd1: Possible stuck request ffff8880270a0380: control (read@2048,1024B). Runtime 450 seconds [ 561.810054][ T1606] block nbd1: Possible stuck request ffff8880270a0540: control (read@3072,1024B). Runtime 450 seconds [ 561.981566][T21757] pim6reg: left allmulticast mode [ 562.184679][T21765] netlink: 'syz.0.3989': attribute type 4 has an invalid length. [ 562.208584][T21767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3990'. [ 562.209822][T21765] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3989'. [ 562.332887][T21765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.398067][T21773] ip_tables: iptables: counters copy to user failed while replacing table [ 562.992112][T21763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3988'. [ 563.051642][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.906020][T21823] dvmrp0: entered allmulticast mode [ 564.297026][T21840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4013'. [ 564.315038][T21840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4013'. [ 564.349852][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4013'. [ 564.374820][T21843] 8021q: VLANs not supported on vcan0 [ 564.384171][T21841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4012'. [ 564.389188][T21845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4013'. [ 564.595906][T21852] netlink: 'syz.4.4016': attribute type 1 has an invalid length. [ 564.724063][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'. [ 564.747219][T21852] bond5: entered promiscuous mode [ 564.752598][T21852] bond5: entered allmulticast mode [ 564.758218][T21852] 8021q: adding VLAN 0 to HW filter on device bond5 [ 564.786189][T21853] erspan1: entered allmulticast mode [ 564.796653][T21853] bond5: (slave erspan1): making interface the new active one [ 564.805132][T21853] erspan1: entered promiscuous mode [ 564.815377][T21853] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 565.042365][ T5616] Bluetooth: hci4: command 0x0405 tx timeout [ 565.151759][T21881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.273314][T21885] dummy0: Caught tx_queue_len zero misconfig [ 565.482872][ T36] batadv2: left promiscuous mode [ 565.489313][T21903] netlink: 'syz.1.4029': attribute type 8 has an invalid length. [ 565.625571][T21906] netlink: 'syz.0.4030': attribute type 9 has an invalid length. [ 565.645081][T21908] hsr0: entered promiscuous mode [ 565.770718][T21907] hsr0: left promiscuous mode [ 566.073980][T21929] xt_CT: No such helper "syz1" [ 566.105247][T21929] SET target dimension over the limit! [ 566.123271][T21933] SET target dimension over the limit! [ 566.205179][T21940] ip_tables: iptables: counters copy to user failed while replacing table [ 566.308505][T21940] syzkaller0: entered promiscuous mode [ 566.319293][T21940] syzkaller0: entered allmulticast mode [ 566.333389][T21952] netlink: 'syz.2.4044': attribute type 1 has an invalid length. [ 566.405153][T21952] bond3: (slave veth0_to_bond): making interface the new active one [ 566.426337][T21952] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 566.460818][T21957] macvlan3: entered promiscuous mode [ 566.470198][T21957] macvlan3: entered allmulticast mode [ 566.481982][T21957] bond3: entered promiscuous mode [ 566.490683][T21957] veth0_to_bond: entered promiscuous mode [ 566.517179][T21957] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 566.541757][T21957] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 566.634833][T21957] bond3: left promiscuous mode [ 566.658792][T21957] veth0_to_bond: left promiscuous mode [ 567.499893][T22001] syzkaller0: entered promiscuous mode [ 567.507401][T22001] syzkaller0: entered allmulticast mode [ 567.607157][T22003] syzkaller0: entered promiscuous mode [ 567.617939][T22003] syzkaller0: entered allmulticast mode [ 567.776227][T22005] syzkaller0: entered promiscuous mode [ 567.782056][T22005] syzkaller0: entered allmulticast mode [ 567.797456][T22005] netlink: 'syz.2.4062': attribute type 8 has an invalid length. [ 567.805461][T22005] __nla_validate_parse: 4 callbacks suppressed [ 567.805479][T22005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4062'. [ 567.828531][T22005] veth1_to_team: entered promiscuous mode [ 567.840282][T22005] veth1_to_team: left promiscuous mode [ 568.075002][T22016] netlink: 'syz.4.4066': attribute type 1 has an invalid length. [ 568.128723][T22023] x_tables: duplicate underflow at hook 2 [ 568.320716][T22034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4072'. [ 569.009587][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4075'. [ 569.236693][T22054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4077'. [ 571.013274][T22016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.270657][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4080'. [ 571.304304][T22070] netlink: 'syz.4.4083': attribute type 1 has an invalid length. [ 571.384269][T22074] nbd: socks must be embedded in a SOCK_ITEM attr [ 571.490188][T22080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4085'. [ 571.512951][T22070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.615203][T22086] netlink: 'syz.3.4087': attribute type 1 has an invalid length. [ 571.637165][T22074] bond2: (slave veth0_to_bond): Releasing backup interface [ 571.675899][T22074] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 571.839678][T22086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.890840][T22090] bond2: (slave geneve3): making interface the new active one [ 571.905706][T22090] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 572.547933][T22130] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4098'. [ 572.857418][T22139] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4100'. [ 572.905960][T22157] lo: entered allmulticast mode [ 572.915090][T22139] netlink: 'syz.2.4100': attribute type 1 has an invalid length. [ 572.918763][T22157] lo: left allmulticast mode [ 572.938958][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4104'. [ 572.983890][T22154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4103'. [ 573.220915][T22171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'. [ 573.381272][T22179] netlink: 'syz.1.4109': attribute type 49 has an invalid length. [ 573.395621][T22180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4111'. [ 573.460102][T22179] bond0: (slave ip6gretap0): Releasing backup interface [ 573.494949][T22179] ip6gretap0: entered promiscuous mode [ 573.510794][T22179] ip6gretap0: entered allmulticast mode [ 573.550683][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056611800: rx timeout, send abort [ 573.617958][T22183] IPv6: Can't replace route, no match found [ 573.791876][T22203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4116'. [ 574.050863][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805753f000: rx timeout, send abort [ 574.059319][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056611800: abort rx timeout. Force session deactivation [ 574.435320][T22220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4118'. [ 574.559190][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805753f000: abort rx timeout. Force session deactivation [ 576.658437][T22205] bridge0: port 3(wlan1) entered disabled state [ 576.990661][T22248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4123'. [ 577.264490][T22263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4125'. [ 577.294900][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4126'. [ 577.526515][T22272] netlink: 'syz.0.4128': attribute type 1 has an invalid length. [ 577.540640][T22272] netlink: 'syz.0.4128': attribute type 1 has an invalid length. [ 577.744246][T22286] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 578.030480][T22283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.128373][T22302] __nla_validate_parse: 2 callbacks suppressed [ 578.130329][T22302] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4133'. [ 578.190292][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 578.388214][T22283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.469627][ T36] vlan0: left allmulticast mode [ 578.488389][ T36] geneve0: left allmulticast mode [ 578.508107][ T36] vlan0: left promiscuous mode [ 578.533350][ T36] geneve0: left promiscuous mode [ 578.554626][ T36] bridge0: port 3(vlan0) entered disabled state [ 578.760253][T22327] netlink: 'syz.0.4140': attribute type 1 has an invalid length. [ 578.784965][T22327] netlink: 'syz.0.4140': attribute type 4 has an invalid length. [ 578.805801][T22327] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4140'. [ 578.831779][T22331] netlink: 'syz.0.4140': attribute type 1 has an invalid length. [ 578.849871][T22331] netlink: 'syz.0.4140': attribute type 4 has an invalid length. [ 578.868364][T22331] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4140'. [ 578.902562][T22327] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4140'. [ 578.944352][ T36] bridge_slave_1: left allmulticast mode [ 578.954373][ T36] bridge_slave_1: left promiscuous mode [ 578.962686][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.982551][ T36] bridge_slave_0: left allmulticast mode [ 578.994187][ T36] bridge_slave_0: left promiscuous mode [ 579.006738][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.072068][T22340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4142'. [ 579.106296][ T36] dvmrp0: left allmulticast mode [ 579.259134][T22343] netlink: 'syz.4.4142': attribute type 1 has an invalid length. [ 579.617720][ T36] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 579.903985][ T36] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.924200][ T36] bond_slave_0: left promiscuous mode [ 579.933667][ T145] smbdirect: ib_dev[syz1] removed [ 579.948472][ T36] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.973236][ T36] bond_slave_1: left promiscuous mode [ 579.980698][ T36] .` (unregistering): Released all slaves [ 580.005789][ T36] bond1 (unregistering): Released all slaves [ 580.026385][ T36] bond2 (unregistering): Released all slaves [ 580.055606][ T36] bond3 (unregistering): Released all slaves [ 580.077774][ T36] bond4 (unregistering): Released all slaves [ 580.098453][ T36] bond5 (unregistering): Released all slaves [ 580.133148][ T36] bond6 (unregistering): Released all slaves [ 580.153835][ T36] bond0 (unregistering): Released all slaves [ 580.177453][ T36] bond7 (unregistering): Released all slaves [ 580.292295][T22343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4142'. [ 580.505658][T22283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.681957][ T36] : left promiscuous mode [ 580.745587][T22358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4146'. [ 580.924303][T22283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.065267][ T36] tipc: Left network mode [ 581.153411][T22364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4148'. [ 581.185249][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'. [ 581.502413][T17641] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.593635][ T95] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.733272][ T145] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.765832][ T145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.031584][T22374] rdma_op ffff8880335bb238 conn xmit_rdma 0000000000000000 [ 582.096442][T22374] netlink: 'syz.0.4151': attribute type 10 has an invalid length. [ 582.215061][T22374] team0: Device wg2 is of different type [ 582.337436][T22387] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 582.575433][T22394] netlink: 'syz.0.4157': attribute type 1 has an invalid length. [ 582.678976][T22394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.809243][T22400] veth7: entered allmulticast mode [ 582.852533][T22400] bond1: (slave veth7): Enslaving as an active interface with an up link [ 582.939850][T22401] bond1 (unregistering): (slave veth7): Releasing backup interface [ 582.992090][T22401] bond1 (unregistering): Released all slaves [ 583.188275][T22407] __nla_validate_parse: 3 callbacks suppressed [ 583.188299][T22407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4159'. [ 583.488203][T22417] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4161'. [ 583.594729][T22421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4160'. [ 583.614171][T22428] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4164'. [ 583.687357][T22419] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4164'. [ 583.775219][T22434] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4166'. [ 584.199689][T22428] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.207096][T22428] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.258501][ T36] hsr_slave_0: left promiscuous mode [ 584.289144][ T36] hsr_slave_1: left promiscuous mode [ 584.311231][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.325895][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.406837][T22447] netlink: 'syz.1.4170': attribute type 1 has an invalid length. [ 584.441355][T22447] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4170'. [ 584.460895][T22447] netlink: 'syz.1.4170': attribute type 2 has an invalid length. [ 584.495555][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'. [ 584.525367][T22448] netlink: 'syz.1.4170': attribute type 1 has an invalid length. [ 584.558035][T22448] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4170'. [ 584.579969][T22448] netlink: 'syz.1.4170': attribute type 2 has an invalid length. [ 584.598504][T22448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'. [ 584.805410][ T1606] block nbd5: Possible stuck request ffff888027295080: control (read@0,4096B). Runtime 300 seconds [ 584.896390][ T36] team0 (unregistering): Port device team_slave_1 removed [ 584.916903][ T36] team0 (unregistering): Port device team_slave_0 removed [ 585.065609][ T36] team0 (unregistering): Port device dummy0 removed [ 585.772758][ T36] IPVS: stop unused estimator thread 0... [ 585.802255][T22494] openvswitch: netlink: Key type 12543 is out of range max 32 [ 585.824013][T22494] netlink: 'syz.2.4182': attribute type 1 has an invalid length. [ 585.901534][T22494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 586.768976][T22503] batman_adv: batadv0: Adding interface: vlan2 [ 586.783705][T22503] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.822643][T22510] Cannot find set identified by id 0 to match [ 586.840171][T22503] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 586.875921][T22512] netlink: 'syz.4.4187': attribute type 1 has an invalid length. [ 586.889865][ T36] IPVS: starting estimator thread 0... [ 587.001683][T22514] IPVS: using max 26 ests per chain, 62400 per kthread [ 587.040823][T22512] bond7: entered promiscuous mode [ 587.072628][T22512] 8021q: adding VLAN 0 to HW filter on device bond7 [ 587.164194][T22526] 8021q: adding VLAN 0 to HW filter on device bond7 [ 587.182961][T22526] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 587.193460][T22526] bond7: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 587.208877][T22526] bond7: (slave ipip0): making interface the new active one [ 587.218485][T22526] ipip0: entered promiscuous mode [ 587.229588][T22526] bond7: (slave ipip0): Enslaving as an active interface with an up link [ 587.324434][T22532] bond3: entered promiscuous mode [ 587.443613][T22542] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 588.249954][T22555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.353005][T22575] x_tables: unsorted entry at hook 3 [ 588.511025][T22580] netlink: 'syz.1.4206': attribute type 1 has an invalid length. [ 588.703532][T22555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.086082][T22590] syzkaller0: left promiscuous mode [ 589.149591][T22590] bond3: left promiscuous mode [ 589.353020][T22555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.465941][T22555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.555852][T22621] __nla_validate_parse: 5 callbacks suppressed [ 589.555872][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4213'. [ 589.568750][T22628] netlink: 'syz.3.4216': attribute type 29 has an invalid length. [ 589.620070][T22621] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 589.905527][T22639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4217'. [ 589.979225][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 589.998584][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 590.029697][T22640] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4217'. [ 590.039500][T22644] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4217'. [ 590.117859][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 590.130449][T22639] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4217'. [ 590.367892][T22647] gre0: Caught tx_queue_len zero misconfig [ 590.381312][ T9336] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.611852][ T9336] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.633696][T22669] veth1_to_bond: entered allmulticast mode [ 590.662835][T22672] veth1_to_bond: entered promiscuous mode [ 590.673208][T22669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4224'. [ 590.693487][ T95] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.787276][T22669] veth1_to_bond (unregistering): left allmulticast mode [ 590.799335][T22669] veth1_to_bond (unregistering): left promiscuous mode [ 590.819095][T22669] bond0: (slave bond_slave_1): Releasing backup interface [ 590.860072][T22682] tipc: Enabled bearer , priority 0 [ 590.921192][ T95] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.969591][T22690] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4230'. [ 591.044780][T22695] netlink: 'syz.0.4229': attribute type 7 has an invalid length. [ 591.114715][T22690] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 591.330226][T22699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.434706][T22693] syzkaller1: entered promiscuous mode [ 591.461038][T22693] syzkaller1: entered allmulticast mode [ 591.506325][T22718] bond4: entered promiscuous mode [ 591.520911][T22718] bond4: entered allmulticast mode [ 591.640377][T22726] netlink: 'syz.2.4236': attribute type 1 has an invalid length. [ 591.774932][T22732] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.855610][ T1606] block nbd1: Possible stuck request ffff8880270a0000: control (read@0,1024B). Runtime 480 seconds [ 591.867725][ T1606] block nbd1: Possible stuck request ffff8880270a01c0: control (read@1024,1024B). Runtime 480 seconds [ 591.878945][ T1606] block nbd1: Possible stuck request ffff8880270a0380: control (read@2048,1024B). Runtime 480 seconds [ 591.890336][ T1606] block nbd1: Possible stuck request ffff8880270a0540: control (read@3072,1024B). Runtime 480 seconds [ 591.920708][T22740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.957433][T22732] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 591.974518][T22732] bond5 (unregistering): Released all slaves [ 592.080684][T22728] veth9: entered promiscuous mode [ 592.088442][T22728] veth9: entered allmulticast mode [ 592.125278][T22728] team0: Device veth9 is up. Set it down before adding it as a team port [ 592.169372][T21674] tipc: Node number set to 608385123 [ 592.262233][T22754] openvswitch: ovs-system: Dropping previously announced user features [ 592.451673][T22764] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.644876][T22774] syzkaller0: entered promiscuous mode [ 593.262498][T22811] syzkaller0: entered promiscuous mode [ 593.268068][T22811] syzkaller0: entered allmulticast mode [ 593.535175][T22833] tls_set_device_offload: netdev not found [ 594.358445][T22856] netlink: 'syz.1.4270': attribute type 1 has an invalid length. [ 594.387268][T22856] netlink: 'syz.1.4270': attribute type 2 has an invalid length. [ 594.406732][T22867] Bluetooth: ISO socket layer initialized [ 594.615075][T22879] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 594.837104][T22888] __nla_validate_parse: 13 callbacks suppressed [ 594.837123][T22888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4278'. [ 594.874748][T22879] bond5 (unregistering): Released all slaves [ 595.131990][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'. [ 595.164950][T22895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.169203][T22898] netlink: 'syz.4.4281': attribute type 30 has an invalid length. [ 595.212741][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'. [ 595.235483][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'. [ 595.250074][T22898] vxlan1: entered promiscuous mode [ 595.258918][T22898] vxlan1: entered allmulticast mode [ 595.266270][T22899] netlink: 'syz.4.4281': attribute type 30 has an invalid length. [ 595.272536][ T3360] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.276565][T22900] netlink: 'syz.4.4281': attribute type 30 has an invalid length. [ 595.304456][ T3360] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.337587][T22899] vxlan2: entered promiscuous mode [ 595.353857][T22899] vxlan2: entered allmulticast mode [ 595.371425][ T3360] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.411992][T22900] vxlan3: entered promiscuous mode [ 595.418773][T22900] vxlan3: entered allmulticast mode [ 595.451536][ T95] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.585256][T22912] batman_adv: batadv0: Adding interface: macvtap1 [ 595.593439][T22912] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.623334][T22912] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 595.652346][T22918] batman_adv: batadv0: Removing interface: macvtap1 [ 596.204135][T22940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4290'. [ 596.769443][T22957] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4295'. [ 596.960565][T22962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4296'. [ 596.981559][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4296'. [ 596.998467][T22964] openvswitch: netlink: Duplicate or invalid key (type 0). [ 597.006348][T22964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.111892][T22973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4301'. [ 597.127147][T22973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4301'. [ 597.155191][T22973] gretap0: entered promiscuous mode [ 597.165944][T22973] gretap0: left promiscuous mode [ 597.529256][T22995] IPv6: NLM_F_REPLACE set, but no existing node found! [ 598.928792][T23052] tipc: Enabled bearer , priority 0 [ 599.240270][T23045] tipc: Disabling bearer [ 599.717232][T23077] netlink: 'syz.4.4333': attribute type 12 has an invalid length. [ 600.403888][T23100] __nla_validate_parse: 4 callbacks suppressed [ 600.403910][T23100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4340'. [ 600.478902][T23105] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 600.522156][T23102] syzkaller1: entered promiscuous mode [ 600.558486][T23102] syzkaller1: entered allmulticast mode [ 600.650427][T23116] netlink: 'syz.1.4344': attribute type 1 has an invalid length. [ 600.786331][T23116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 600.837540][T23124] ip_tables: iptables: counters copy to user failed while replacing table [ 600.896552][T23116] netlink: 'syz.1.4344': attribute type 1 has an invalid length. [ 600.921959][T23119] bond4: (slave gretap1): making interface the new active one [ 600.931968][T23116] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4344'. [ 600.978251][T23119] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 600.988309][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4344'. [ 601.220979][T23127] syzkaller0: entered promiscuous mode [ 601.251654][T23127] syzkaller0: entered allmulticast mode [ 601.439858][T23141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4350'. [ 601.490728][T23141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4350'. [ 602.222182][T23159] 8021q: adding VLAN 0 to HW filter on device bond5 [ 602.254778][T23168] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 602.269694][T23159] team0: Port device bond5 added [ 602.291222][T23168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.365429][T23170] tipc: Enabled bearer , priority 0 [ 602.390616][T23170] syzkaller0: entered promiscuous mode [ 602.417305][T23170] syzkaller0: entered allmulticast mode [ 602.509844][T23174] netlink: 'syz.4.4360': attribute type 1 has an invalid length. [ 602.821892][T23170] tipc: Resetting bearer [ 602.975872][T23170] tipc: Disabling bearer [ 603.233999][T23197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4369'. [ 603.276974][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4368'. [ 603.342832][T23202] netlink: 'syz.2.4368': attribute type 10 has an invalid length. [ 603.391227][T23202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4368'. [ 603.567880][T23212] tipc: Enabling of bearer rejected, failed to enable media [ 604.395176][T23256] tipc: Enabling of bearer rejected, failed to enable media [ 604.433203][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4385'. [ 604.554437][T23264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 605.148588][T23301] ip6gre0: left promiscuous mode [ 605.163003][T23301] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.170296][T23301] bridge0: port 2(bridge_slave_1) entered listening state [ 605.177792][T23301] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.185011][T23301] bridge0: port 1(bridge_slave_0) entered listening state [ 605.230872][T23301] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 605.445770][T23311] netlink: 'syz.0.4406': attribute type 16 has an invalid length. [ 605.616747][T23324] __nla_validate_parse: 5 callbacks suppressed [ 605.616767][T23324] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4411'. [ 605.657351][T23326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4410'. [ 605.702995][T23326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4410'. [ 605.713281][T23326] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4410'. [ 605.728960][T23326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4410'. [ 605.743442][T23326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4410'. [ 605.758092][T23326] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4410'. [ 605.858044][T23340] netlink: 'syz.2.4415': attribute type 6 has an invalid length. [ 606.228392][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 606.254224][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 606.314089][T23354] bridge0: port 3(batadv1) entered disabled state [ 606.320915][T23354] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.328463][T23354] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.497682][T23354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.519013][T23354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.589726][T23379] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4427'. [ 606.911602][ T3360] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.938095][ T3360] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.011719][ T95] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.039647][ T95] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.075086][T23395] FAULT_INJECTION: forcing a failure. [ 607.075086][T23395] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.100379][T23395] CPU: 0 UID: 0 PID: 23395 Comm: syz.4.4430 Not tainted syzkaller #0 PREEMPT(full) [ 607.100415][T23395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.100429][T23395] Call Trace: [ 607.100438][T23395] [ 607.100447][T23395] dump_stack_lvl+0xe8/0x150 [ 607.100486][T23395] should_fail_ex+0x410/0x560 [ 607.100530][T23395] prepare_alloc_pages+0x230/0x650 [ 607.100569][T23395] __alloc_frozen_pages_noprof+0x12f/0x380 [ 607.100603][T23395] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 607.100639][T23395] ? __pfx_policy_nodemask+0x10/0x10 [ 607.100676][T23395] ? __lock_acquire+0x683/0x2cf0 [ 607.100712][T23395] alloc_pages_mpol+0x212/0x390 [ 607.100751][T23395] folio_alloc_mpol_noprof+0x39/0x160 [ 607.100808][T23395] vma_alloc_folio_noprof+0xe1/0x1e0 [ 607.100844][T23395] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 607.100878][T23395] ? __pte_offset_map+0x29/0x240 [ 607.100902][T23395] ? __pte_offset_map+0x29/0x240 [ 607.100934][T23395] do_pte_missing+0x173a/0x34b0 [ 607.100984][T23395] handle_mm_fault+0x1b36/0x3080 [ 607.101020][T23395] ? handle_mm_fault+0xec/0x3080 [ 607.101052][T23395] ? __pfx_handle_mm_fault+0x10/0x10 [ 607.101076][T23395] ? follow_page_pte+0x6ce/0xe70 [ 607.101105][T23395] ? __pfx_follow_page_pte+0x10/0x10 [ 607.101141][T23395] __get_user_pages+0x1678/0x2720 [ 607.101210][T23395] __gup_longterm_locked+0xd52/0x15c0 [ 607.101245][T23395] ? sanity_check_pinned_pages+0x817/0x8d0 [ 607.101286][T23395] gup_fast_fallback+0x1d92/0x20e0 [ 607.101324][T23395] ? __kernel_text_address+0xd/0x30 [ 607.101406][T23395] ? __pfx_gup_fast_fallback+0x10/0x10 [ 607.101443][T23395] ? __kmalloc_noprof+0x1af/0x720 [ 607.101469][T23395] ? is_valid_gup_args+0x11f/0x200 [ 607.101505][T23395] ? pin_user_pages_fast+0x4d/0xb0 [ 607.101542][T23395] iov_iter_extract_pages+0x3a1/0x690 [ 607.101577][T23395] extract_iter_to_sg+0xeda/0x2610 [ 607.101682][T23395] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 607.101719][T23395] ? rcu_is_watching+0x16/0xb0 [ 607.101743][T23395] ? trace_kmalloc+0x2a/0xf0 [ 607.101771][T23395] ? __asan_memset+0x22/0x50 [ 607.101798][T23395] af_alg_get_rsgl+0x493/0x8d0 [ 607.101908][T23395] ? af_alg_alloc_areq+0xac/0x200 [ 607.101948][T23395] skcipher_recvmsg+0x39d/0xe10 [ 607.102002][T23395] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 607.102033][T23395] ? __lock_acquire+0x683/0x2cf0 [ 607.102068][T23395] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 607.102088][T23395] ? security_socket_recvmsg+0x7e/0x2c0 [ 607.102141][T23395] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 607.102174][T23395] sock_recvmsg+0x196/0x1e0 [ 607.102205][T23395] ____sys_recvmsg+0x1e6/0x4a0 [ 607.102254][T23395] ? __pfx_____sys_recvmsg+0x10/0x10 [ 607.102306][T23395] ? import_iovec+0x73/0xa0 [ 607.102333][T23395] ___sys_recvmsg+0x213/0x5a0 [ 607.102372][T23395] ? __pfx____sys_recvmsg+0x10/0x10 [ 607.102410][T23395] ? __fget_files+0x2a/0x420 [ 607.102458][T23395] ? __fget_files+0x3a2/0x420 [ 607.102499][T23395] __x64_sys_recvmsg+0x1ae/0x290 [ 607.102537][T23395] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 607.102594][T23395] do_syscall_64+0x166/0x520 [ 607.102619][T23395] ? trace_irq_disable+0x3b/0x140 [ 607.102648][T23395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.102671][T23395] ? clear_bhb_loop+0x70/0xc0 [ 607.102698][T23395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.102721][T23395] RIP: 0033:0x7f1cd6f9e0d9 [ 607.102743][T23395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.102762][T23395] RSP: 002b:00007f1cd7e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 607.102786][T23395] RAX: ffffffffffffffda RBX: 00007f1cd7225fa0 RCX: 00007f1cd6f9e0d9 [ 607.102802][T23395] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 607.102815][T23395] RBP: 00007f1cd7e99090 R08: 0000000000000000 R09: 0000000000000000 [ 607.102829][T23395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.102841][T23395] R13: 00007f1cd7226038 R14: 00007f1cd7225fa0 R15: 00007ffe5d6706d8 [ 607.102877][T23395] [ 607.289700][T23403] netlink: 'syz.0.4433': attribute type 1 has an invalid length. [ 607.641958][T23400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.800923][T23418] IPVS: Unknown mcast interface: netpci0 [ 607.880823][T23414] netlink: 'syz.4.4435': attribute type 2 has an invalid length. [ 608.097177][T23435] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 608.159793][T23414] D†'|o: entered promiscuous mode [ 608.358677][T23441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.635777][T23453] FAULT_INJECTION: forcing a failure. [ 608.635777][T23453] name failslab, interval 1, probability 0, space 0, times 0 [ 608.676511][T23453] CPU: 0 UID: 0 PID: 23453 Comm: syz.4.4445 Not tainted syzkaller #0 PREEMPT(full) [ 608.676543][T23453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.676556][T23453] Call Trace: [ 608.676564][T23453] [ 608.676574][T23453] dump_stack_lvl+0xe8/0x150 [ 608.676613][T23453] should_fail_ex+0x410/0x560 [ 608.676654][T23453] should_failslab+0xa8/0x100 [ 608.676686][T23453] __kmalloc_noprof+0xfe/0x720 [ 608.676714][T23453] ? sock_kmalloc+0xd6/0x160 [ 608.676734][T23453] ? sock_kmalloc+0xd6/0x160 [ 608.676761][T23453] sock_kmalloc+0xd6/0x160 [ 608.676784][T23453] skcipher_recvmsg+0x564/0xe10 [ 608.676838][T23453] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 608.676870][T23453] ? __lock_acquire+0x683/0x2cf0 [ 608.676906][T23453] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 608.676926][T23453] ? security_socket_recvmsg+0x7e/0x2c0 [ 608.676953][T23453] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 608.676989][T23453] sock_recvmsg+0x196/0x1e0 [ 608.677018][T23453] ____sys_recvmsg+0x1e6/0x4a0 [ 608.677061][T23453] ? __pfx_____sys_recvmsg+0x10/0x10 [ 608.677111][T23453] ? import_iovec+0x73/0xa0 [ 608.677138][T23453] ___sys_recvmsg+0x213/0x5a0 [ 608.677177][T23453] ? __pfx____sys_recvmsg+0x10/0x10 [ 608.677217][T23453] ? __fget_files+0x2a/0x420 [ 608.677266][T23453] ? __fget_files+0x3a2/0x420 [ 608.677308][T23453] __x64_sys_recvmsg+0x1ae/0x290 [ 608.677346][T23453] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 608.677413][T23453] do_syscall_64+0x166/0x520 [ 608.677437][T23453] ? trace_irq_disable+0x3b/0x140 [ 608.677466][T23453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.677489][T23453] ? clear_bhb_loop+0x70/0xc0 [ 608.677517][T23453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.677538][T23453] RIP: 0033:0x7f1cd6f9e0d9 [ 608.677559][T23453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.677578][T23453] RSP: 002b:00007f1cd7e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 608.677601][T23453] RAX: ffffffffffffffda RBX: 00007f1cd7225fa0 RCX: 00007f1cd6f9e0d9 [ 608.677617][T23453] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 608.677631][T23453] RBP: 00007f1cd7e99090 R08: 0000000000000000 R09: 0000000000000000 [ 608.677645][T23453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.677658][T23453] R13: 00007f1cd7226038 R14: 00007f1cd7225fa0 R15: 00007ffe5d6706d8 [ 608.677693][T23453] [ 609.335465][T23465] bridge0: port 4(vlan3) entered blocking state [ 609.358769][T23465] bridge0: port 4(vlan3) entered disabled state [ 609.398204][T23465] vlan3: entered allmulticast mode [ 609.430128][T23465] geneve0: entered allmulticast mode [ 609.446855][T23465] vlan3: entered promiscuous mode [ 609.456021][T23465] geneve0: entered promiscuous mode [ 609.657254][T23479] netlink: 'syz.4.4455': attribute type 1 has an invalid length. [ 609.675187][T23479] netlink: 'syz.4.4455': attribute type 2 has an invalid length. [ 609.696313][T23479] netlink: 'syz.4.4455': attribute type 1 has an invalid length. [ 609.740198][T23479] netlink: 'syz.4.4455': attribute type 2 has an invalid length. [ 609.766982][T23479] netlink: 'syz.4.4455': attribute type 1 has an invalid length. [ 609.780076][T23479] netlink: 'syz.4.4455': attribute type 2 has an invalid length. [ 609.807717][T23486] ip_tables: iptables: counters copy to user failed while replacing table [ 610.565707][T23522] validate_nla: 124 callbacks suppressed [ 610.565727][T23522] netlink: 'syz.4.4469': attribute type 1 has an invalid length. [ 610.920769][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 610.940802][T23543] pimreg: tun_chr_ioctl cmd 1074025677 [ 610.955439][T23543] pimreg: linktype set to 6 [ 610.966646][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.052563][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.084186][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.121732][ T5616] Bluetooth: hci4: link tx timeout [ 611.132212][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 611.151964][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.173016][ T5616] Bluetooth: hci4: link tx timeout [ 611.178268][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 611.195489][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.227362][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.233790][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.239563][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.247857][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.253697][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.259324][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.265177][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.275448][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.282605][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.288378][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.294383][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.300129][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.305906][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.311751][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.317380][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.323333][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.329004][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.334898][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.340538][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.346554][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.361623][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.382025][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.404057][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.437883][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.469577][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.501769][T23541] pimreg: tun_chr_ioctl cmd 1074025673 [ 611.704028][T23579] lo speed is unknown, defaulting to 1000 [ 611.737408][T23579] wg2 speed is unknown, defaulting to 1000 [ 611.780196][T23583] netlink: 'syz.2.4486': attribute type 1 has an invalid length. [ 611.794103][T23583] __nla_validate_parse: 188 callbacks suppressed [ 611.794128][T23583] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4486'. [ 612.321866][ T30] INFO: task udevd:5902 blocked in I/O wait for more than 143 seconds. [ 612.346453][ T30] Not tainted syzkaller #0 [ 612.355652][T23585] smbdirect: ib_dev[syz0] removed [ 612.358731][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 612.385911][ T30] task:udevd state:D stack:26208 pid:5902 tgid:5902 ppid:4979 task_flags:0x400140 flags:0x00080002 [ 612.408778][ T30] Call Trace: [ 612.416186][ T30] [ 612.422917][ T30] __schedule+0x17d4/0x5630 [ 612.433879][ T30] ? __pfx___schedule+0x10/0x10 [ 612.446144][ T30] ? schedule+0x90/0x2b0 [ 612.449984][T23614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4496'. [ 612.458969][ T30] schedule+0x164/0x2b0 [ 612.474311][ T30] io_schedule+0x7f/0xd0 [ 612.492388][ T30] folio_wait_bit_common+0x836/0xbc0 [ 612.498679][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 612.517024][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 612.535469][ T30] ? filemap_read_folio+0x234/0x3a0 [ 612.546200][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 612.557010][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 612.574508][ T30] do_read_cache_folio+0x1ac/0x590 [ 612.583272][T23614] 8021q: adding VLAN 0 to HW filter on device bond6 [ 612.589736][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 612.606454][T23618] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.607766][ T30] read_part_sector+0xb6/0x2b0 [ 612.622258][T23618] bond6: (slave team0): Enslaving as an active interface with an up link [ 612.632746][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 612.639952][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 612.646821][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 612.653142][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 612.658444][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 612.664074][ T30] bdev_disk_changed+0x851/0x17a0 [ 612.669216][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 612.674985][ T30] blkdev_get_whole+0x372/0x510 [ 612.679920][ T30] bdev_open+0x324/0xd70 [ 612.684386][ T30] blkdev_open+0x461/0x600 [ 612.688841][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 612.694044][ T30] do_dentry_open+0x816/0x1380 [ 612.698887][ T30] vfs_open+0x3b/0x340 [ 612.705276][ T30] ? path_openat+0x1428/0x1d60 [ 612.710121][ T30] path_openat+0x1443/0x1d60 [ 612.715074][ T30] do_file_open+0x23e/0x4a0 [ 612.719686][ T30] ? __pfx_do_file_open+0x10/0x10 [ 612.725678][ T30] ? _raw_spin_unlock+0x28/0x50 [ 612.730906][ T30] ? alloc_fd+0x651/0x6c0 [ 612.736379][ T30] do_sys_openat2+0x115/0x200 [ 612.741300][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.746631][ T30] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 612.752674][ T30] __x64_sys_openat+0x138/0x170 [ 612.757623][ T30] do_syscall_64+0x166/0x520 [ 612.762407][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.768540][ T30] ? clear_bhb_loop+0x70/0xc0 [ 612.773688][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.779669][ T30] RIP: 0033:0x7efedaea7407 [ 612.784342][ T30] RSP: 002b:00007ffdcd4ba0a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 612.792928][ T30] RAX: ffffffffffffffda RBX: 00007efedb612880 RCX: 00007efedaea7407 [ 612.800940][ T30] RDX: 00000000000a0800 RSI: 000055e749c284d0 RDI: ffffffffffffff9c [ 612.810992][ T30] RBP: 000055e749c27910 R08: 0000000000000000 R09: 0000000000000000 [ 612.819158][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e749c65540 [ 612.827723][ T30] R13: 000055e749c35190 R14: 0000000000000000 R15: 000055e749c65540 [ 612.835876][ T30] [ 612.839722][ T30] [ 612.839722][ T30] Showing all locks held in the system: [ 612.849446][ T30] locks held by khungtaskd/30: 1, last CPU#1: [ 612.855875][ T30] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 612.866321][ T30] locks held by klogd/4968: 3, last CPU#0: [ 612.872317][ T30] #0: ffffffff8eca8090 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 612.882435][ T30] #1: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 612.893569][ T30] #2: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xc9/0x320 [ 612.910541][ T30] locks held by getty/5369: 2, on CPU#0: [ 612.916390][ T30] #0: ffff888031e0a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 612.926455][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 612.936836][ T30] locks held by udevd/5901: 1, on CPU#1: [ 612.942562][ T30] #0: ffff88802714e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 612.951904][ T30] locks held by udevd/5902: 1, on CPU#1: [ 612.957616][ T30] #0: ffff888026b96350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 612.967508][ T30] locks held by kworker/u8:12/9336: 3, on CPU#0: [ 612.979225][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 612.991601][ T30] #1: ffffc9000da27c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 613.002714][ T30] #2: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 613.012045][ T30] locks held by kworker/u9:0/17444: 3, on CPU#1: [ 613.018452][ T30] #0: ffff88807c9b4940 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 613.029577][ T30] #1: ffffc90005137c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 613.042343][ T30] #2: ffff88802a03cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 613.052487][ T30] locks held by kworker/u8:15/17643: 4, on CPU#1: [ 613.058976][ T30] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 613.070111][ T30] #1: ffffc9000252fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 613.080836][ T30] #2: ffffffff90027b28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 613.090312][ T30] #3: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 613.099597][ T30] locks held by kworker/1:15/21681: 3, on CPU#1: [ 613.106299][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 613.117435][ T30] #1: ffffc900060b7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 613.128240][ T30] #2: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 613.137719][ T30] locks held by syz.0.4487/23584: 2, on CPU#0: [ 613.143986][ T30] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 613.153231][ T30] #1: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 613.164283][ T30] locks held by syz.1.4496/23620: 1, on CPU#1: [ 613.170478][ T30] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ac/0x810 [ 613.179754][ T30] [ 613.182189][ T30] ============================================= [ 613.182189][ T30] [ 613.190652][ T30] NMI backtrace for cpu 1 [ 613.190670][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 613.190698][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.190711][ T30] Call Trace: [ 613.190720][ T30] [ 613.190728][ T30] dump_stack_lvl+0xe8/0x150 [ 613.190765][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 613.190902][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 613.190950][ T30] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 613.190987][ T30] sys_info+0x135/0x170 [ 613.191016][ T30] watchdog+0xfd7/0x1030 [ 613.191073][ T30] ? watchdog+0x1c7/0x1030 [ 613.191109][ T30] kthread+0x38b/0x480 [ 613.191142][ T30] ? __pfx_watchdog+0x10/0x10 [ 613.191169][ T30] ? __pfx_kthread+0x10/0x10 [ 613.191201][ T30] ret_from_fork+0x514/0xb70 [ 613.191253][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 613.191283][ T30] ? __switch_to+0xc89/0x1420 [ 613.191314][ T30] ? __pfx_kthread+0x10/0x10 [ 613.191346][ T30] ret_from_fork_asm+0x1a/0x30 [ 613.191396][ T30] [ 613.300031][ T30] Sending NMI from CPU 1 to CPUs 0: [ 613.305482][ C0] NMI backtrace for cpu 0 [ 613.305500][ C0] CPU: 0 UID: 0 PID: 95 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 613.305523][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.305536][ C0] Workqueue: events_unbound toggle_allocation_gate [ 613.305569][ C0] RIP: 0010:__schedule+0xf2e/0x5630 [ 613.305591][ C0] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 05 e8 d4 ef 5c f6 48 8b 04 24 4c 8d b8 30 05 00 00 48 01 98 38 05 00 00 <4c> 8d a0 50 05 00 00 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc [ 613.305608][ C0] RSP: 0018:ffffc900025a7420 EFLAGS: 00000016 [ 613.305624][ C0] RAX: ffff888021ff9f40 RBX: 000000000018628c RCX: dffffc0000000000 [ 613.305638][ C0] RDX: 0000000000000000 RSI: ffffffff8e4dc38e RDI: ffff888021ffa478 [ 613.305652][ C0] RBP: ffffc900025a7618 R08: ffffffff90589237 R09: 1ffffffff20b1246 [ 613.305666][ C0] R10: dffffc0000000000 R11: fffffbfff20b1247 R12: ffff8880b863c050 [ 613.305680][ C0] R13: 0000008ecbbeb859 R14: 0000008ecbd71ae5 R15: ffff888021ffa470 [ 613.305701][ C0] FS: 0000000000000000(0000) GS:ffff888124f24000(0000) knlGS:0000000000000000 [ 613.305717][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.305730][ C0] CR2: 00007f1cd71ef2f8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 613.305747][ C0] Call Trace: [ 613.305754][ C0] [ 613.305785][ C0] ? __pfx___schedule+0x10/0x10 [ 613.305815][ C0] preempt_schedule_irq+0x4b/0x90 [ 613.305835][ C0] irqentry_exit+0x14f/0x910 [ 613.305855][ C0] ? trace_irq_disable+0x3b/0x140 [ 613.305885][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 613.305906][ C0] RIP: 0010:smp_call_function_many_cond+0x1132/0x1500 [ 613.305936][ C0] Code: 78 44 8b 2b 44 89 ee 83 e6 01 31 ff e8 87 2b 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 72 26 0c 00 eb 35 f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 58 26 0c 00 [ 613.305952][ C0] RSP: 0018:ffffc900025a7740 EFLAGS: 00000293 [ 613.305967][ C0] RAX: ffffffff81bae6f8 RBX: ffff8880b8741208 RCX: ffff88801e721f40 [ 613.305981][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 613.305993][ C0] RBP: ffffc900025a7890 R08: ffffffff90589237 R09: 1ffffffff20b1246 [ 613.306007][ C0] R10: dffffc0000000000 R11: fffffbfff20b1247 R12: 1ffff110170e8241 [ 613.306021][ C0] R13: dffffc0000000000 R14: 1ffff11003ce469a R15: 0000000000000001 [ 613.306039][ C0] ? smp_call_function_many_cond+0x1148/0x1500 [ 613.306076][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 613.306102][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 613.306128][ C0] ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0 [ 613.306155][ C0] ? __pfx___text_poke+0x10/0x10 [ 613.306181][ C0] smp_text_poke_batch_finish+0x5fd/0x1110 [ 613.306205][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 613.306230][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 613.306252][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 613.306278][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 613.306306][ C0] ? __jump_label_update+0x347/0x370 [ 613.306337][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 613.306362][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 613.306388][ C0] ? process_scheduled_works+0xa1a/0x14c0 [ 613.306410][ C0] static_key_disable+0x1a/0x20 [ 613.306435][ C0] toggle_allocation_gate+0x1fe/0x290 [ 613.306460][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 613.306486][ C0] ? process_scheduled_works+0xa1a/0x14c0 [ 613.306512][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 613.306534][ C0] ? process_scheduled_works+0xa1a/0x14c0 [ 613.306555][ C0] process_scheduled_works+0xa88/0x14c0 [ 613.306593][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 613.306619][ C0] ? assign_work+0x3cf/0x5d0 [ 613.306642][ C0] worker_thread+0xa47/0xfb0 [ 613.306680][ C0] kthread+0x38b/0x480 [ 613.306715][ C0] ? __pfx_worker_thread+0x10/0x10 [ 613.306736][ C0] ? __pfx_kthread+0x10/0x10 [ 613.306762][ C0] ret_from_fork+0x514/0xb70 [ 613.306791][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 613.306818][ C0] ? __switch_to+0xc89/0x1420 [ 613.306841][ C0] ? __pfx_kthread+0x10/0x10 [ 613.306869][ C0] ret_from_fork_asm+0x1a/0x30 [ 613.306907][ C0] [ 613.322820][ T5616] Bluetooth: hci4: command 0x0405 tx timeout [ 613.337432][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 613.337512][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 613.337578][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.337625][ T30] Call Trace: [ 613.337662][ T30] [ 613.337684][ T30] vpanic+0x56d/0xa60 [ 613.337788][ T30] ? __pfx___schedule+0x10/0x10 [ 613.337869][ T30] ? __pfx_vpanic+0x10/0x10 [ 613.337952][ T30] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 613.338073][ T30] panic+0xc5/0xd0 [ 613.338156][ T30] ? __pfx_panic+0x10/0x10 [ 613.338231][ T30] ? preempt_schedule_common+0x7f/0xd0 [ 613.338296][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 613.338357][ T30] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 613.338461][ T30] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 613.338498][ T30] watchdog+0x1030/0x1030 [ 613.806051][ T30] ? watchdog+0x1c7/0x1030 [ 613.810514][ T30] kthread+0x38b/0x480 [ 613.814618][ T30] ? __pfx_watchdog+0x10/0x10 [ 613.819330][ T30] ? __pfx_kthread+0x10/0x10 [ 613.823968][ T30] ret_from_fork+0x514/0xb70 [ 613.828594][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 613.833746][ T30] ? __switch_to+0xc89/0x1420 [ 613.838474][ T30] ? __pfx_kthread+0x10/0x10 [ 613.843101][ T30] ret_from_fork_asm+0x1a/0x30 [ 613.847922][ T30] [ 613.851580][ T30] Kernel Offset: disabled [ 613.855915][ T30] Rebooting in 86400 seconds..