last executing test programs: 9.443555652s ago: executing program 1 (id=3614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x6, 0x4) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}]}}]}, 0x4c}}, 0x24004000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002500)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 9.172792533s ago: executing program 1 (id=3617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe0, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x1, 0xfffd, 0x4, 0x73}, {0x5, 0x2, 0x2, 0x2, 0xd012, 0x10000}, 0xff6, 0x3, 0x2ff}}, @TCA_TBF_PBURST={0x8, 0x7, 0x141d}, @TCA_TBF_BURST={0x8, 0x6, 0x100}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x8169c27e2093e573) 6.571325435s ago: executing program 1 (id=3627): socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x84, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xc4ff}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x62}]}}, @filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x6}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xb}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5e}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x84}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x77}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x155}]}, 0x68}, 0x1, 0x0, 0x0, 0x48004}, 0x850) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x84, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xc4ff}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x62}]}}, @filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x6}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xb}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5e}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x84}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x77}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x155}]}, 0x68}, 0x1, 0x0, 0x0, 0x48004}, 0x850) (async) 5.154420324s ago: executing program 1 (id=3641): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, [0x6, 0xfa05, 0x1, 0xd, 0xa, 0x5, 0xfff, 0x100, 0x8000000000000000, 0x3ff, 0x2, 0x10001, 0x6, 0x10, 0x2]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={r1, @in={{0x2, 0x4e21, @multicast1}}, 0x9, 0x7, 0x4, 0x8, 0x8, 0x6, 0x4}, &(0x7f0000000240)=0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x4, 0x0, &(0x7f0000001680)="db6928e8"}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000), 0xc) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1, 0x4000}, 0xc) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) 4.49563266s ago: executing program 1 (id=3648): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d02, 0xe) 4.366497219s ago: executing program 1 (id=3650): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x2120, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="faff491f6a0bffff", @ANYRES16=r4, @ANYBLOB="010069bd7000fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0c0023800500060006000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf256400000008000300", @ANYRES32=r5, @ANYBLOB="a4f49d83bddab5767f0e2cbf4c3a8c8807fe40ccb7f20000000000000000984e44dcce1c61"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f0000000100)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="18100000ab37b41c385465f95d898193c30e4cfe43cc29ecf677cfc0570ebe23a1d1db84c2b9b2485a013128b1fb7007035d197e1dbb2099db6bd2545c1f3582e97172f45c16a6e88241910864aefc32e05de2490046976ce78aa73952f41b33291aea9b71", @ANYRES16=r10, @ANYBLOB="080029bd7000fedbdf251000000004000680"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x4000041) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="00012000000000000300000008000000000085", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf256000000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x80) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 4.173831293s ago: executing program 3 (id=3653): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfd9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x2882, 0x10401}}}}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x3c}}, 0x800) 3.396195258s ago: executing program 3 (id=3661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @in6=@loopback, 0x0, 0x0, 0x7}, 0xfffffffc}, [@mark={0xc}]}, 0x5c}}, 0x4004040) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x3f94, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x2, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x1f}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x3f10, 0x1, [@m_pedit={0x3c40, 0x11, 0x0, 0x0, {{0xa}, {0x3c00, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x2, 0x13a, 0x8, 0x2, 0x40}, 0x3, 0x8, [{0x6, 0x3, 0x0, 0x5, 0x2, 0xb0}, {0x4, 0xa, 0xb686, 0x0, 0xfffffff8, 0x4}, {0x7, 0x7bd, 0x3, 0x1000, 0x6, 0x101}, {0x3, 0x3, 0x4, 0x8, 0x0, 0xffff}, {0x9, 0x1, 0x0, 0xfffffffe, 0x3, 0x100}, {0x5, 0x0, 0xd, 0xb538, 0x7, 0x9}, {0x366, 0x84, 0x7, 0x1, 0xe, 0x7}]}, [{0x6, 0x2, 0x6, 0xc70, 0x5}, {0x32, 0xc, 0x8, 0xd507, 0x7, 0x9}, {0x8000, 0x80000000, 0x1ff, 0x10, 0x5, 0xb}, {0x66, 0x81, 0x9, 0x6, 0x80000000, 0x2}, {0x11, 0x6, 0x7, 0x8, 0x1, 0x2}, {0xff, 0x400, 0x800, 0x6, 0x1, 0x3}, {0xac0, 0x1, 0x9, 0x7fffffff, 0x0, 0x6}, {0x40, 0x9e3, 0x7ff, 0x3, 0x61, 0x7}, {0x4c, 0x200, 0xf, 0x2, 0x8, 0x51}, {0x6, 0xf0b4, 0xfffffffd, 0xe04, 0x3, 0x6}, {0xff, 0x5, 0x5, 0x6, 0x6, 0x4}, {0x2, 0x8, 0x8000, 0x7, 0x7fff, 0x7}, {0x4, 0xc, 0x2, 0x2, 0x8, 0xfffffff9}, {0x0, 0x8, 0xfff, 0x7, 0x5, 0x7fff}, {0x7, 0x2, 0x9, 0x10, 0x6, 0x1}, {0xc3, 0x2, 0x6, 0x4, 0x6, 0x2}, {0x7c37, 0x5, 0x4, 0x5, 0x4, 0xa}, {0x4, 0x0, 0x7, 0x5371, 0x699, 0xa90}, {0x7, 0x0, 0x4, 0x6f34}, {0x800, 0x40, 0x5fed, 0x9, 0x2, 0x2}, {0x8, 0x7, 0x7f, 0x80000001, 0xe, 0x8}, {0x8, 0x116, 0x1, 0x10d6, 0x6, 0x8}, {0x7f, 0x2, 0x2, 0x3, 0x7ff, 0xc00}, {0x1, 0xac, 0x8, 0x2, 0x7fffffff, 0x2}, {0x9, 0xfffffffa, 0x200, 0x4, 0x0, 0xfffffd14}, {0x10, 0x10000, 0xfffffffa, 0x0, 0x80000001}, {0xfffffffb, 0xb, 0x6, 0x10001, 0x5, 0x7}, {0x1, 0x4, 0x5, 0xae29, 0x7, 0x1}, {0x80, 0xff, 0x6, 0x5, 0xb, 0xa}, {0x9, 0x10000, 0x3, 0x1a, 0x3, 0x9}, {0x56, 0xc74a, 0xffffffc0, 0x7, 0x2, 0xfffffffa}, {0xffffffff, 0x0, 0x5, 0x9, 0x0, 0x9}, {0xff, 0x5e, 0x2, 0xfffffff6, 0x3, 0x4}, {0x1, 0xfb41, 0x7, 0x2, 0x3, 0x3}, {0x2, 0xc, 0x5, 0xffff, 0x9, 0xc}, {0x2, 0x9, 0x4, 0x5, 0x5, 0xfffffcb9}, {0x0, 0x6, 0x2, 0x1, 0x7fff, 0x69}, {0x2, 0x7f, 0x5, 0x6, 0x3, 0x6}, {0x3, 0x9, 0x5, 0x8, 0x3, 0x100}, {0x5175a52e, 0xbb, 0x3, 0xfffffffd, 0x6, 0x8000}, {0xdc3, 0x9, 0x0, 0x2, 0x5, 0x36}, {0x8, 0x8, 0x10000, 0x7, 0x8, 0x5}, {0x40, 0xa, 0x49ad, 0x5662, 0x5a2, 0x2}, {0xfffffe00, 0xfffff800, 0xd3, 0x6, 0x9, 0x5de7}, {0x9, 0x2, 0x4, 0x4acc, 0x8, 0x6}, {0xffffffff, 0xe7, 0x951e, 0x8000, 0xa, 0x5}, {0x0, 0x6, 0x6, 0x6029, 0xfffffff9, 0x20000000}, {0x3, 0x1, 0x8, 0x7, 0xcd, 0x4}, {0x504e, 0x8, 0x2, 0x5, 0xe8e, 0x2}, {0xe09d, 0x5, 0xb, 0x4fa, 0x5}, {0x1, 0x1, 0x0, 0x58cb, 0x5, 0xffffffff}, {0x4000000, 0x3, 0x3, 0x4, 0xfff, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x9, 0xd}, {0x6, 0x100, 0x9, 0x7f, 0x1, 0x7fff}, {0x4ea, 0x2, 0x7, 0x6, 0x800, 0x7}, {0xd, 0x90000000, 0x6, 0x4, 0x4, 0x8001}, {0xf957, 0x3, 0x4, 0x0, 0x3b7, 0xd64b}, {0x2, 0xf, 0x1, 0x3, 0x9, 0x9}, {0x4, 0xffffe9c7, 0x0, 0x7, 0x2, 0xe3}, {0x8001, 0x1, 0x1, 0x2, 0x9, 0x7}, {0x800, 0x5, 0x9, 0x9, 0x3, 0x8}, {0x6, 0x1, 0x5, 0xb0, 0x805, 0xfffffff8}, {0x2, 0x9, 0x8, 0x1, 0x908, 0x401}, {0xf0f5, 0x9, 0x8, 0x8, 0x0, 0x9}, {0x2, 0xa, 0xf, 0x2, 0x0, 0xffffffc0}, {0x7, 0x71ff, 0x4, 0x6, 0xa, 0x1ff}, {0x4, 0x8000, 0xa, 0x4, 0x8e0, 0x6}, {0x6, 0x4273, 0x5, 0x4, 0x20000000, 0x5}, {0x3, 0x6, 0x31, 0xcc7, 0x3, 0x81}, {0x9d, 0x7, 0x8, 0x3ff, 0x3, 0x1}, {0x6, 0xa9, 0xa, 0xfffffff9, 0xa}, {0xcf, 0x3, 0x6ad, 0x101, 0x4}, {0x0, 0x3, 0x7, 0xfffffff7, 0x7, 0x3}, {0x0, 0x4c, 0x7, 0x2, 0x2, 0x8}, {0x4, 0x2, 0x9, 0x2, 0x7, 0x5}, {0xb, 0xfffffbff, 0xc6a, 0x7, 0xf01, 0x7}, {0x9, 0x0, 0x5, 0x1, 0x4, 0xffff}, {0xd, 0x6, 0x6, 0x3ff, 0x7, 0x3ff}, {0x9, 0x3, 0x5, 0x1, 0x4, 0xcea7}, {0xfffffffe, 0xc, 0xd6, 0x7, 0x3, 0x8}, {0x4, 0x8, 0x10, 0x8, 0x101, 0xef24}, {0x3, 0x6, 0x7, 0x8001, 0x2, 0x8}, {0x525, 0x0, 0x6, 0x8, 0xe, 0x6}, {0x4, 0x4, 0xffffffff, 0x2, 0x28, 0xfff}, {0x9, 0x2, 0x7, 0x6, 0x8, 0x1200}, {0x7, 0x3, 0x2, 0x8, 0x0, 0x1}, {0xd, 0x3, 0x5, 0x1, 0x5, 0xd}, {0x0, 0x9, 0x0, 0x1200, 0x4, 0x9}, {0x5, 0x5, 0x3, 0x0, 0x5, 0x80}, {0x8, 0x80000001, 0xfffff42e, 0x5, 0x9, 0x5}, {0x2, 0x9, 0xa1be7ac, 0x2, 0x6, 0x400}, {0x6, 0x2, 0x1, 0x8001, 0xffff, 0xff}, {0x9, 0xfff, 0x6, 0x5, 0x5, 0x2e0f99f3}, {0xf, 0x7fffffff, 0x4, 0xff, 0xffffffff, 0x5}, {0x38b, 0xcd7, 0x3a, 0xfffffff7, 0x0, 0x4}, {0x10000, 0xfffffffb, 0x2, 0x98, 0x8}, {0x4, 0x6, 0x4, 0x5, 0x0, 0x3}, {0x10001, 0x1, 0x0, 0xe3, 0x7fffffff, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x7d}, {0x2, 0x8, 0x7, 0x6, 0x2, 0x3ff}, {0x0, 0x80000001, 0xffffff6f, 0xdfcf, 0x5, 0xb2f}, {0x6, 0x63, 0x5, 0xc0000000, 0x1, 0xb}, {0x1e00, 0x4, 0x5, 0x38c, 0x775, 0x2}, {0x10, 0x8, 0xfffffffe, 0x6, 0x6, 0x1}, {0x10000, 0xffffff01, 0x1cd, 0x80000001, 0xfff, 0x6}, {0x36, 0x1e4, 0x5, 0x1, 0x28, 0x7fff}, {0x9, 0x2, 0x0, 0x4, 0xf4, 0x400}, {0x1ff, 0x7, 0xe00, 0x0, 0x3, 0x2}, {0x63d480a9, 0x3, 0x8000, 0xc6b, 0x7, 0x6}, {0x5, 0x1, 0x3, 0x55, 0x5d}, {0x9, 0x7000, 0x9, 0xfff, 0x2, 0xffffffff}, {0x1, 0x6, 0x378, 0x3, 0x2, 0xfd01}, {0x0, 0x7, 0x400, 0x0, 0x8000, 0x3}, {0xa, 0x3, 0x8, 0x3, 0x5}, {0x800, 0xffff, 0x5, 0x0, 0x1, 0x7}, {0x4, 0x8, 0xe, 0x5, 0x8b6e, 0xfff}, {0x4, 0x2, 0xc0, 0x1, 0x4d9358e1, 0xfffff000}, {0x393, 0x7, 0x3ff, 0x4, 0xa, 0x8}, {0x3, 0x7, 0x7, 0x200, 0x4, 0x742}, {0x7, 0xeb, 0x9, 0x3364, 0x7f, 0x10000}, {0x81, 0x0, 0x7f, 0x1, 0x4, 0x7}, {0x0, 0x27, 0xe, 0x8001, 0x9, 0x8}, {0x9, 0x7fffffff, 0x2, 0x7, 0x90f, 0x1ff}, {0x8000, 0x1ff, 0x3, 0x10, 0x3, 0x8}, {0x7, 0x6, 0x3, 0x6, 0x7, 0x7}, {0xd0, 0x7ff, 0x2, 0x8, 0x800, 0x37ff}, {0x80000000, 0xe384, 0x1f9, 0x2, 0xa, 0x9}, {0x1000, 0x1, 0x6, 0x7f, 0x3ff, 0x4}], [{0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x51b07ccfb05236ae, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {}, {0x1}, {0x1}, {0x2}, {}, {0x5, 0x1e65bc88011d1242}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0xbc80fbdfeb74eeaa, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x4}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0xe54a20f5a1e75849, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {}, {}, {}, {0x4, 0x1}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x2}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0xac, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x3, 0x3, 0x0, 0x6, 0x3}, 0x9, 0x8c, [{0x3, 0xffffffff, 0x4, 0x8000, 0xffff8000, 0x101}, {0x4, 0x3ff, 0x5, 0x9, 0x9, 0xd8}, {0x0, 0x2, 0xffffffff, 0x1, 0x0, 0xffff}, {0x0, 0x10000, 0x5, 0x0, 0x5, 0xfb}, {0x8e5c, 0x0, 0x4, 0x5, 0x5, 0xef}, {0x6, 0x9a1, 0x7ff, 0xb, 0x401, 0xff}]}, [{0x0, 0xbcb6, 0x101, 0x6, 0x1, 0x69ee}, {0xfffffff8, 0x0, 0x3, 0x8, 0x8a, 0x5}, {0x5, 0x10, 0x5, 0xf, 0x1, 0x3}, {0x3, 0xd3f, 0x3, 0xfff, 0xa1c4}, {0x200000, 0x6a51, 0x3, 0x6, 0x1000, 0x4}, {0x4, 0x5, 0x5, 0x4, 0x6, 0x757}, {0x800, 0x892f, 0x3, 0x0, 0xaf9d, 0x8}, {0xff, 0xe, 0x40, 0x0, 0x5, 0x52}, {0x5b, 0x8, 0xa, 0x9, 0xfffffffa, 0x5}, {0x0, 0xf7, 0x851, 0x9, 0x10, 0x1}, {0x6, 0x4, 0x8, 0x1, 0xffffe29d, 0x4}, {0x6, 0x0, 0xffffff7e, 0xffffffff, 0xffff7a2c, 0x3}, {0x8, 0x1, 0x1, 0xc9490a4, 0x7}, {0x1, 0x6, 0x5, 0x1, 0x1ff}, {0x1ff, 0x3, 0x4c9, 0x0, 0x3, 0xcda5}, {0x7fffffff, 0x9, 0xb, 0x9, 0xffff}, {0xfffffff1, 0x6, 0x4c, 0x3, 0x4, 0xa}, {0x7, 0x3ff, 0x37613a7a, 0x2, 0x4, 0x2}, {0xb, 0xffffff33, 0x5, 0x5, 0x1ff, 0x70000}, {0x9, 0x6, 0x1, 0xc943, 0x6, 0xd3a}, {0x7, 0x1, 0x390, 0x7f, 0x9, 0xfffffffd}, {0x5, 0x81, 0x5, 0xffffffff, 0xf80, 0x1}, {0x8, 0x4, 0x0, 0xffffffff, 0xffff168d, 0x705}, {0x79e2, 0x400, 0x3, 0x7, 0x7, 0x2}, {0x183e, 0x0, 0x5, 0x9, 0xc, 0x7a3}, {0x3, 0x26a6cdc7, 0x7, 0xfffffffd, 0xfffffff9, 0x3}, {0x1, 0x8, 0x80000001, 0x100, 0xa29}, {0x401, 0xff, 0x3, 0x4, 0x3, 0x8}, {0xf182, 0x2, 0xd12f, 0x6c, 0x1, 0x8}, {0x4, 0x6dbb, 0x7, 0x80, 0x4, 0x8}, {0x0, 0xa, 0x49, 0x6, 0xfffffd16, 0xffffffc0}, {0x2, 0xae, 0x5c, 0x4, 0x4, 0xf0000000}, {0xa, 0xffffff60, 0x7, 0xffffff00, 0x9, 0x3}, {0x67c5, 0x2, 0xed13, 0xf94, 0xfffffff8, 0x7}, {0x7, 0x1, 0x84, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x2, 0xf89f, 0x6, 0xfffffe01}, {0xfff, 0x2, 0xa, 0x5, 0xa0, 0x7}, {0x4e22e24, 0x3ff, 0x1, 0x7, 0x56519284, 0x8}, {0x2, 0x3, 0x3, 0x9, 0xa, 0x4}, {0x800, 0x101, 0x5, 0x40, 0x8001, 0x1}, {0x10001, 0x359, 0xb9, 0xa, 0xffff8000, 0x6}, {0x8, 0x1, 0xffffffff, 0x80000001, 0xe6, 0x5}, {0x2, 0x3, 0x9, 0x10, 0x3, 0x4}, {0x9, 0x8, 0xff, 0x800}, {0x4f228ebf, 0x2, 0x3, 0x8001, 0x4}, {0x6, 0x9c7c, 0x881, 0x5, 0xfffffff9, 0x4}, {0x4, 0x3, 0x1, 0x9d44, 0x7, 0x3}, {0x6, 0x4, 0x1, 0x9, 0x4}, {0x66, 0x5, 0x2c000, 0x1, 0x5, 0x200}, {0x1000, 0x7, 0x10001, 0x2d633f83, 0x125, 0xe}, {0x200, 0x2, 0x7, 0x7c, 0x9, 0x401}, {0x2, 0x9c9, 0x6, 0x574, 0xffff, 0x5}, {0x8, 0x8, 0x5, 0x4, 0x4, 0x4}, {0x4, 0x80000001, 0x2, 0x1, 0x200, 0x3}, {0x9, 0x7, 0x9, 0x1, 0x401, 0x40}, {0x4, 0x401, 0x4, 0x6, 0x0, 0x7f}, {0x93be, 0xb04c, 0x9, 0x7, 0x2, 0x2d01}, {0x8001, 0x5, 0x3, 0x1, 0x300, 0x1}, {0x2, 0x1, 0x4, 0x33d, 0x3, 0xffffffff}, {0xc, 0x3, 0xfffffffd, 0x400, 0x0, 0x80000001}, {0x800, 0x10001, 0x7, 0x3c17, 0x3c1fd5ca, 0x2}, {0x7, 0x1, 0x3, 0x2, 0x7, 0x9}, {0x6, 0x5, 0x8, 0xffff8000, 0xffffff0d, 0x3}, {0x0, 0x1, 0x1c000000, 0x38067025, 0xa, 0x6}, {0x6, 0x9, 0x200, 0x6, 0x6, 0x4}, {0x1, 0x10, 0x7, 0x1, 0x9}, {0x2, 0x7, 0xf, 0x7f, 0x7681, 0x215}, {0x2, 0xfffffffc, 0xbc2, 0x24fb, 0x5, 0x8}, {0xc2, 0x1, 0xfffff1de, 0x9, 0x3, 0x1}, {0x4, 0x8000, 0xffff, 0x4, 0x7fff, 0x1}, {0x4, 0x4, 0x6, 0x1337, 0x0, 0xb}, {0x6, 0x8d1, 0x7, 0x8, 0xd06b, 0x7fff}, {0x8, 0xf, 0x2, 0xd, 0x3, 0x5}, {0x9, 0x756b, 0x10001, 0xfffffffa, 0x9}, {0x4, 0x9, 0x4, 0x9a5, 0x3, 0x81}, {0x2, 0x9, 0x4, 0xc9, 0xff, 0xffff}, {0x961b, 0xbf96, 0x4, 0x5, 0xfffffffe, 0xd}, {0x8000, 0x10000, 0x9d, 0x5, 0xfffffff7, 0x2}, {0x80, 0x101, 0x8000, 0x100, 0x7, 0x4}, {0x1, 0x3ff, 0x8, 0x6, 0x2, 0x6}, {0x7, 0x0, 0x5, 0x4, 0x6, 0xb1e1}, {0x2, 0x40, 0x3, 0x7fff, 0x8, 0x5c65}, {0xfff, 0x240f03d0, 0x2, 0x5, 0x37, 0x1}, {0x0, 0x2, 0x2, 0x7, 0x3, 0xc59}, {0x6, 0xfffffffc, 0x4, 0xfffffffb, 0x6, 0x5}, {0x4, 0x8, 0x1, 0x0, 0x40, 0x31}, {0x1000, 0x8, 0x0, 0x9, 0x0, 0x6}, {0xb8, 0x5, 0xf18, 0x8, 0x3, 0xff}, {0xa0, 0x9, 0x6c, 0xfff, 0x10000, 0x9}, {0x80000000, 0xb0, 0x6, 0x734, 0x7, 0xffffffff}, {0x7, 0x7fffffff, 0xfffffffc, 0x5, 0xfff, 0x1}, {0x1, 0x6, 0x8, 0x9, 0x0, 0xfffff071}, {0x10, 0x7f, 0xbf1, 0x1, 0x2, 0x1ff}, {0x988, 0x2fda, 0x8e, 0x8, 0x9, 0x8001}, {0x9, 0x200, 0xff, 0x2, 0x9, 0x1a36}, {0xe, 0xd, 0x1, 0x7, 0x1, 0x5}, {0x10, 0x8000, 0x7, 0x7, 0xa23b, 0x1500784e}, {0x3bd, 0x0, 0xfffffff8, 0x2, 0x7, 0x1}, {0x1000, 0xfffffff7, 0x8, 0x7, 0x6, 0x7fff}, {0x5, 0x2111, 0x4, 0x101, 0xc0f0, 0xff}, {0x4, 0x4, 0x1, 0xffffe94b, 0xfff, 0x7}, {0x0, 0x6, 0xb4, 0xfff, 0x51a, 0x7fffffff}, {0x0, 0xb, 0x1, 0x6, 0x8, 0x6}, {0xfcb, 0x2, 0x5, 0x8, 0xffffffff, 0x1000}, {0x7, 0x1, 0x3b7e, 0x8, 0x7f, 0x8}, {0x5, 0x7, 0x6c294872, 0x3, 0x9, 0x7}, {0x7, 0x3, 0x7fff, 0x8ad7, 0xf, 0x8}, {0x7, 0xc, 0x7, 0x8, 0x2, 0x3}, {0x2, 0x3, 0x10000, 0x9, 0xc91, 0x800}, {0x3, 0x10, 0x1, 0x800, 0x2, 0x8c4e}, {0x10001, 0x7, 0x2, 0x6, 0x8, 0xd}, {0x6, 0x683f, 0x6, 0xe, 0x3, 0x12c00}, {0x3, 0x9, 0x6a8, 0x3, 0x10, 0x6}, {0x1ff, 0x9, 0x80000001, 0x8, 0x9, 0x977}, {0x0, 0x5, 0xfffffffd, 0x1000, 0x6, 0x4}, {0x4, 0x0, 0x3, 0x8, 0x3c, 0x8}, {0x7ff, 0x1, 0xffffffbc, 0x1, 0x1f8, 0xac}, {0x8, 0x9, 0x0, 0x6, 0xc781}, {0x6, 0x5, 0x8, 0x0, 0x6, 0x6}, {0xf, 0x81a2, 0xa9d5, 0x7, 0x3, 0x7}, {0x5, 0x2, 0x6, 0x9, 0x9, 0x7d38acd}, {0x6, 0xf3, 0x1000, 0x0, 0x1ff, 0x5}, {0xfffff9a2, 0x0, 0xa, 0x400, 0x5b, 0x6}, {0x8001, 0x3, 0x400, 0xfffffff5, 0x8, 0xca6b547}, {0x4, 0xb, 0x5, 0xb01c, 0x3, 0x2}, {0x7, 0x7, 0xe97, 0xc4, 0x0, 0x1}, {0xc0, 0x800, 0x9, 0x5aa, 0xffff0000, 0x169}, {0x3, 0xa, 0x2, 0xf, 0x7, 0x3b}], [{0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2}, {0x4}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2}, {}, {}, {0x4}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x2}, {0x6}, {0x4}, {0x3, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x7}, {0x2, 0x1}, {0x2}, {}, {}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0xc, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x300000, 0x200, 0x20000000, 0x1, 0x85b}, 0x5, 0x8, [{0x5, 0x2, 0x8, 0x3ff, 0x7, 0x8}, {0x965b, 0x1, 0x6, 0xeb2, 0x4, 0x5}, {0x1, 0x3fafd13c, 0x7, 0x5, 0xff, 0x15}, {0x3, 0x4, 0x2, 0xfffffff7, 0x9, 0x7f}, {0x1000, 0x5, 0x0, 0x3, 0xfffffffa}, {0x9, 0x1, 0x7fff, 0x7, 0x6, 0x7}, {0x5, 0x0, 0x0, 0x1, 0x7ab, 0x8}, {0x59b, 0x400, 0x14f2, 0x8, 0x0, 0x7}, {0x6, 0x6, 0xaf, 0xffffffff, 0x6, 0x3}]}, [{0x7f, 0x5, 0x80000001, 0x2, 0xa, 0xe}, {0x40, 0x5, 0x8001, 0x8, 0x0, 0x1000}, {0x6, 0x10001, 0x6, 0x2, 0x2, 0x9}, {0x342, 0x8, 0x6b59, 0x8, 0xc958, 0xd330}, {0x9, 0x8, 0x4, 0xfffffc01, 0x3}, {0x5, 0xde0, 0x200, 0x8, 0x4, 0x1}, {0x8f8, 0x8, 0x3, 0x3, 0x0, 0x8001}, {0x1, 0xaa4, 0x2, 0x48000, 0x8d9d, 0xd9de}, {0xd379, 0x6, 0x2, 0x7, 0x0, 0x7}, {0x6426ee9c, 0x7, 0xdce, 0x3b2, 0x1}, {0x7, 0x5, 0xffff, 0x0, 0x8, 0x5}, {0x9, 0xd, 0x414, 0x862, 0x8000, 0x7}, {0x9, 0x4, 0x1, 0x7, 0x10000, 0xff}, {0x101, 0x6, 0x80000000, 0x8, 0x1, 0x189}, {0x2, 0x8, 0x166, 0x4, 0xd8, 0x7}, {0x72, 0x6, 0x6, 0x4, 0x6, 0x3}, {0x3, 0x3, 0xffffffff, 0x8, 0xfffffffc}, {0x6, 0x9549, 0x7f, 0x401, 0xc, 0x2b1}, {0x4, 0x0, 0x8, 0x6, 0x7, 0x5}, {0x2000000, 0xfffffffd, 0x0, 0x0, 0x8f91}, {0x0, 0x5, 0x9, 0x3, 0x61, 0x1}, {0x1, 0x837b, 0xe4, 0x2, 0x6, 0xfff}, {0x1d4, 0x8000, 0x1, 0xfffffffd, 0x1000, 0x1000}, {0x2, 0xa, 0x4, 0x1, 0x9, 0x8}, {0x1000, 0x2, 0x4, 0x2, 0x7fffffff, 0xb215}, {0x2, 0x0, 0x3, 0x2, 0x40, 0x5}, {0x1, 0x1, 0x1, 0x6, 0xfffffffd, 0x81}, {0x70752a0, 0x7fff, 0xffffff8f, 0x9, 0x4, 0x877f}, {0x7, 0x7, 0x8, 0x8, 0x1, 0xfe23}, {0x5, 0xdd38, 0xfff, 0x0, 0x6, 0x1}, {0x8, 0x2, 0xe472, 0xc8e00000, 0x1, 0x7624}, {0x7, 0x5, 0x10001, 0x1, 0xf, 0x7}, {0x2, 0x7, 0x2, 0x4, 0x3, 0x4}, {0xd63, 0x9, 0x400, 0x1, 0x2, 0x4}, {0x81, 0x5, 0x3, 0x9, 0x60, 0xfff}, {0x6, 0x1, 0x9, 0x0, 0x1, 0xffffffff}, {0x0, 0x9, 0xc5a63b3, 0x3, 0xffffffff, 0x4000}, {0x0, 0x5, 0x0, 0x10001, 0xfffffff7, 0x5}, {0x2, 0x5, 0xffffdd4a, 0x0, 0x80, 0x8001}, {0x2, 0x0, 0x9, 0x10000, 0x5, 0x5}, {0x289, 0x8, 0x6, 0x1, 0xb, 0x40}, {0xfffffffd, 0x1, 0x5, 0x2, 0x0, 0x9cf}, {0x9, 0x1, 0x101, 0x6, 0x8, 0x38}, {0x4, 0x8, 0x6, 0x9, 0x400, 0x80}, {0x4, 0x1, 0x1, 0x3, 0x7, 0x3}, {0xffffff06, 0xbc2c, 0x9, 0x4, 0x3, 0x5}, {0x7, 0x1, 0x127d0e47, 0x3, 0x3, 0x6}, {0x2, 0x3, 0x5, 0x9, 0x4, 0xf}, {0x8, 0x800, 0xa86, 0x2bb9df78, 0xffffff85, 0x6}, {0x80, 0x4, 0x716c9b4a, 0x6, 0x3, 0x8}, {0xd928, 0x0, 0x7, 0xc3, 0x9, 0x81}, {0x6, 0x6, 0x7a, 0x3, 0x3846, 0x2f2}, {0x3, 0x35, 0x1, 0x9, 0x5, 0x4}, {0x9, 0xfffffffd, 0x0, 0x3, 0x9, 0x32}, {0x1, 0x1, 0x7, 0x2, 0x0, 0x7}, {0x8, 0x318a, 0x8000, 0x8001, 0x0, 0x10}, {0xa7fc, 0x6, 0x6, 0x4, 0x791, 0x2027}, {0x9, 0x10001, 0x8000, 0x4, 0x8, 0x7fff}, {0x7, 0x6, 0x9, 0x0, 0x9, 0xff}, {0x2, 0x1, 0x1, 0x2, 0x10000, 0x6}, {0x401, 0xfffffffc, 0x8, 0x5, 0x0, 0xf}, {0x3, 0x2, 0x4, 0x7, 0x7, 0x4}, {0x37, 0x3, 0x2, 0x2, 0x6, 0x3}, {0x2, 0x3, 0x2, 0xffffebd0, 0x1000, 0x7f}, {0x6, 0x3ff, 0x7, 0xffffffff, 0x1, 0x7}, {0x3c17, 0xb743, 0x4, 0x9615, 0x295, 0x3ff}, {0x4, 0x8, 0xb4c8, 0x4, 0x200, 0x7091}, {0x1, 0x9a, 0x6, 0x10, 0x0, 0x3}, {0xfffffbff, 0x1000, 0x0, 0x1ff, 0x4000000, 0x2}, {0x7, 0x0, 0xfffffffb, 0x727, 0x0, 0x3}, {0x3, 0x1cbe, 0x0, 0x4, 0xb7, 0x6}, {0x3ff, 0x5d, 0x736, 0x1ff, 0x66de, 0x6}, {0x3, 0x0, 0xfffff375, 0x7, 0x7, 0x9}, {0x8, 0x0, 0x9, 0x2, 0x10000, 0x6}, {0x9, 0x6, 0xa, 0x4a, 0x3, 0x8}, {0x3, 0x80, 0x1, 0xfff, 0xc1, 0x8}, {0x3, 0xb58, 0x31e7, 0xc, 0x80000001, 0xb}, {0x1, 0x7, 0x4, 0x4, 0x80, 0x542}, {0x6, 0x2, 0x0, 0xfffffffd, 0x3, 0x3}, {0xffffffff, 0x3, 0x2, 0x8, 0x2, 0x3}, {0x572, 0x19, 0xfffffff9, 0x4, 0x4, 0xfffffffd}, {0x3f2, 0x2, 0x4, 0xbf, 0x5, 0x7}, {0x8, 0x9, 0xffff, 0x800, 0x10, 0xfffffffd}, {0x4, 0x400, 0x66, 0xffff7fff, 0x3, 0x8}, {0x7, 0x8, 0x3, 0x2, 0x8, 0x2}, {0x7fffffff, 0x4, 0x0, 0x9, 0x9, 0x4}, {0xfffffff8, 0x7f, 0x2, 0x1000, 0xaddc, 0x9}, {0x8001, 0x5, 0xf1ba, 0xfffffffd, 0xe74e, 0x6}, {0x10001, 0x6, 0x6, 0x9, 0xffff, 0x2}, {0xfffffff9, 0x1, 0xfffffff7, 0x4, 0x3, 0x7fffffff}, {0x4, 0x8000, 0x7, 0x0, 0x7, 0x6}, {0x10, 0x2, 0xffffff47, 0x9, 0x2f62a2fa, 0xaee5}, {0x7, 0x2, 0x5, 0x4, 0x9, 0x8}, {0x65b1, 0x7, 0x7, 0x200, 0xcc, 0x10000}, {0x1, 0x0, 0xc, 0x10, 0x5075, 0x13e}, {0xffff, 0x5, 0x2, 0x5, 0x4, 0x7}, {0xa, 0x9, 0xffffffff, 0x2d23, 0x8, 0x1f86fa45}, {0x4, 0x36da3e83, 0x2, 0x7, 0x7, 0x8}, {0x8, 0x0, 0xffff, 0x4, 0x600000, 0x1}, {0x2, 0x18000000, 0x3ff, 0x3f5, 0x4, 0xc5f}, {0x7, 0x6, 0x200, 0x5, 0x7, 0x5}, {0x2, 0x6, 0xffffffff, 0xf5, 0x5, 0x8}, {0x3, 0x8, 0x38906d1b, 0x3, 0x55a5, 0x8}, {0x59f, 0x2, 0x0, 0x9, 0x5, 0x200}, {0x98, 0x4f57, 0x7fff, 0x8, 0xb, 0xfffffff7}, {0x9, 0x10000, 0xff, 0x10, 0x10000}, {0xffffffff, 0xffff6db8, 0x21c4, 0xffffffff, 0x417fae7b, 0x6}, {0x0, 0x80000000, 0x2, 0x2, 0xd, 0x6e50}, {0x200, 0x8, 0x7, 0x2, 0x100, 0x1}, {0xcea3, 0xff, 0x7fff, 0x580, 0x3ff, 0x6}, {0x9, 0x81, 0x2, 0xe3, 0x9}, {0x6ff, 0x4, 0x7f, 0xffff60b7, 0x7f, 0x9}, {0x5, 0x7fffffff, 0x9, 0x4, 0xfff, 0xcc06}, {0x7, 0x3, 0x42af, 0x0, 0x4, 0xa3}, {0x9, 0xfffffffd, 0x8, 0x5, 0x7, 0x401}, {0x79af, 0x4, 0x5, 0x0, 0x1ff, 0x670}, {0xe, 0x6809, 0x101, 0x8, 0x2, 0x1}, {0x0, 0x6, 0xac31, 0x79dd, 0x0, 0x3}, {0x9, 0xfffffffc, 0x6, 0x6, 0x100}, {0xffffffff, 0xfc9, 0x7, 0xced, 0x6, 0x8}, {0x7, 0x200, 0x1, 0x703b, 0x3, 0x8}, {0x1ce9, 0xa, 0x4ff2, 0x7, 0x1894d832, 0xffffffff}, {0x0, 0x2, 0x1000, 0x8000, 0x83, 0x6}, {0x5, 0x7, 0x400, 0x4, 0xc, 0x2}, {0x6, 0x1, 0x7, 0x3, 0x3, 0x8}, {0x3, 0x0, 0x1000, 0x0, 0x5e, 0x2}, {0x8001, 0x4, 0x9, 0x10000, 0x7e, 0x6}, {0x3, 0x78, 0x2, 0x1, 0x11d1, 0x2}], [{0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {}, {0x8, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {}, {0x5}, {0x5, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0xad000f3149bc000d, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {}, {0x2}, {0x4}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x8abd23eb298b5d8c, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x2}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x80000001, 0x8, 0x4, 0x4, 0x80000000}, 0x8, 0x1, [{0x95c, 0x8, 0x0, 0x5, 0x1, 0x1}, {0x41, 0xc, 0x7ff, 0x8, 0x101, 0x101}, {0x3ff, 0x9, 0x80000001, 0x3844, 0xcc5, 0x7fffffff}, {0xfffffffe, 0x5, 0x8, 0x9, 0x6, 0x8}, {0xc168, 0xa837, 0x8000, 0x8, 0x9, 0x71}, {0x5, 0xa, 0x5, 0x5, 0x0, 0xfffeffff}, {0x8000, 0x6, 0x8, 0x4, 0x1, 0x1}, {0x8, 0xda, 0x5, 0xb, 0x6, 0x2}]}, [{0x8, 0xdbd, 0x7, 0xe, 0xab02, 0x3346}, {0x9, 0xf, 0x0, 0x10, 0x9, 0x4}, {0x6, 0x40, 0xbe1, 0x2, 0x2, 0x2}, {0x7, 0x6, 0x10001, 0x2, 0x0, 0x9}, {0x80, 0xffffffff, 0x5, 0x2, 0x7, 0x200}, {0xc9d3, 0x80000000, 0x2, 0xfffffffa, 0x0, 0x27}, {0xff, 0x6, 0x1000, 0x81, 0x0, 0x7}, {0x1, 0x4, 0x2, 0x7a6, 0x6, 0x3}, {0x6, 0x6271, 0x7ff, 0xffffff3f, 0x40, 0x1}, {0x1, 0x7fffffff, 0x0, 0x6, 0x0, 0x2}, {0x8000, 0x96a9, 0x9, 0x8000, 0x0, 0x3}, {0x0, 0x3, 0x1, 0x61, 0x8, 0x2}, {0xfff, 0x6, 0x7fffffff, 0x9, 0x8000000}, {0x6, 0x18, 0x8, 0xb0, 0x1, 0xfffffbff}, {0x5, 0xc845, 0x91b, 0xfff, 0x1, 0x1}, {0x8, 0x4, 0x200, 0xfff, 0x5, 0x2}, {0x5, 0x4, 0x7, 0x2, 0x40, 0x1}, {0x0, 0x2, 0x2, 0x40}, {0xd8000000, 0xb, 0x2, 0xa6, 0x1, 0x3}, {0x59, 0x8, 0x8001, 0x0, 0x7, 0xffff0001}, {0x10001, 0x5, 0x5, 0x6ea4fea, 0x200}, {0x0, 0x8, 0x9f8, 0xfffffffe, 0x3, 0x5}, {0x81, 0x400, 0x4, 0x7, 0x1bf0, 0x4}, {0x6, 0x7fff, 0x9, 0x2c, 0x2}, {0x0, 0x32d, 0x4, 0x0, 0x6d, 0xe}, {0x9, 0x6, 0x200, 0x84dd, 0x8, 0x4d8d}, {0x82f, 0x9, 0x3, 0x6, 0x9, 0xffffe7e0}, {0x9, 0xfffffff2, 0x49b, 0xc0, 0xffffffff, 0x8a8}, {0x3, 0x5, 0x8, 0x3, 0x8001, 0x800000}, {0x0, 0x4, 0x3, 0x1, 0x8, 0x5}, {0x7, 0xffff1be0, 0xa314, 0x9, 0x6, 0x6}, {0xfff, 0x4, 0x7ff, 0x40, 0xe5, 0x7}, {0x3, 0x2, 0x5, 0x28, 0x5107, 0x81}, {0x2, 0x4, 0x80000000, 0x9, 0x0, 0x8}, {0x0, 0x6, 0xfffffff7, 0x2, 0x10, 0x29a}, {0x1, 0x4, 0x3, 0x1545, 0x4, 0x1000}, {0x9, 0x8, 0x1000, 0x8000, 0x9, 0x9e}, {0x1ff, 0xc614, 0x2, 0x3ff, 0x7fffffff, 0x1}, {0x5, 0x2, 0xd21c, 0x3d70, 0x5, 0x6}, {0x1, 0xe86, 0x6, 0xa, 0x4, 0x10}, {0xfffffffa, 0xc000000, 0xa, 0x400, 0x1, 0x46}, {0x3, 0x0, 0x3, 0x9, 0x8, 0xd}, {0x7629, 0x7, 0xaa, 0x1, 0x5, 0xfffffffb}, {0x1, 0x5, 0x9, 0x1, 0x9f, 0x8}, {0xa, 0x14000, 0x8, 0x1, 0x8, 0x1}, {0x3, 0xffff8001, 0x3, 0x9, 0x7, 0x4}, {0x1, 0x9, 0x2, 0xfffffc01, 0x2, 0x80000001}, {0xc, 0x3, 0x2, 0x401, 0x800, 0x6}, {0x10001, 0x401, 0x1ff, 0x1ff, 0x0, 0xc5}, {0x2, 0xa, 0x7, 0x9d, 0x4, 0x80000001}, {0x1, 0x3, 0x0, 0x4, 0x8, 0x3}, {0xfffffffb, 0x401, 0x7, 0x9, 0xff, 0x1}, {0xbb33, 0x9, 0x400, 0x8a01, 0x3, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x8, 0x7}, {0xf6, 0x7, 0x1, 0x81, 0x0, 0x7ff}, {0x1ff, 0x8000, 0x800000, 0x101, 0x5, 0x7}, {0x9, 0xef, 0x1, 0x800, 0x7fff, 0x8}, {0x81, 0x2, 0x3, 0x6d1, 0x5, 0x42fecc14}, {0x9, 0xd, 0x6, 0x3, 0x14, 0x9}, {0x9, 0xfffffff7, 0x5, 0x79bd, 0x3, 0xfff}, {0x101, 0x8, 0x635, 0x1, 0x6, 0x9}, {0x5, 0x7, 0x4, 0x0, 0xffffffc0, 0x7}, {0x6, 0xfffffff7, 0x3, 0x2, 0x0, 0x3}, {0x6, 0x6, 0x40, 0xffff6838, 0x6, 0x3b57}, {0x7, 0x7, 0x7b, 0x200, 0xd2fd, 0x3}, {0x3, 0xfffffff9, 0x6, 0x6, 0x8000, 0x1}, {0xfffffff8, 0x401, 0x157e, 0xedd, 0x0, 0x100}, {0x0, 0xf3c3, 0x4, 0x9, 0x7, 0x7a162812}, {0x9, 0xffff, 0x1, 0x6, 0x146, 0x5}, {0xc, 0xd5d0, 0x6, 0xae64, 0x4, 0x8}, {0x8, 0xc8f0, 0x6, 0x7f, 0x9, 0x9}, {0xf4, 0x3, 0x3e, 0x8d2, 0x2331f8c3, 0xc0c}, {0x6, 0x2, 0x4, 0x800, 0x6, 0xfffffffc}, {0x2, 0x7, 0x6, 0x1, 0x7, 0x8}, {0x4, 0x1, 0xf, 0x3, 0x8, 0x3}, {0x0, 0x5, 0xc1, 0x1, 0x7, 0x1}, {0xffff18cd, 0x7, 0x8, 0x100000, 0x80, 0x5}, {0x80000000, 0x1, 0x80, 0x7, 0x4, 0x8}, {0x3, 0x6, 0x7f, 0x10, 0x9, 0x6}, {0x6, 0x1ff, 0x1000, 0x6, 0xffffffae, 0x3722}, {0x3, 0x2, 0x4, 0x4c0c, 0x511, 0x5}, {0x5544, 0x62, 0x200, 0x5, 0x9, 0x5}, {0x847, 0x2f8e, 0xf6, 0x10, 0x5, 0xd35}, {0x0, 0x5, 0x5, 0x9, 0x6, 0xfffffffc}, {0x10, 0x2, 0x1, 0x4, 0x2336, 0x4}, {0x1, 0x2, 0x401, 0x40, 0xa6dd, 0xa}, {0x1, 0x0, 0x4, 0xdd, 0x3, 0xfff}, {0x2, 0x401, 0x9, 0x9, 0x7, 0x8}, {0x10000, 0x6bb3, 0x5, 0xe6, 0x81, 0x6}, {0x7, 0x1, 0x80000001, 0x128, 0xfff, 0x6}, {0x5, 0x1, 0x7, 0x8, 0x20, 0xf}, {0x7, 0x9, 0x8, 0x5, 0x9, 0x7f}, {0x80, 0x6, 0x1d9, 0x7, 0x1, 0x7}, {0xfffffffc, 0x4, 0xc0, 0x4, 0x7, 0x7}, {0x2, 0x4, 0xbb28, 0x80000001, 0x3, 0x3bf9}, {0x8, 0x4, 0x1, 0x9, 0x4, 0x1}, {0x0, 0x1, 0x18da, 0x0, 0x43d4, 0x6}, {0x8, 0x2, 0x4519e868, 0x9, 0x7f, 0x5}, {0x22, 0x2, 0x58, 0x2, 0x10, 0x10}, {0x3, 0x7, 0x10001, 0xf, 0x5, 0xb}, {0x9, 0x5, 0x100, 0xf, 0x1000, 0x9}, {0xfff, 0x9, 0x7, 0x3ff, 0x9, 0x5}, {0xffff, 0x7, 0x7, 0x55f4, 0x3, 0x9}, {0x3, 0x6, 0xffffffff, 0x2, 0x9, 0x7}, {0x6, 0x1, 0xa51b, 0x7ff, 0xd06d}, {0xa, 0x5, 0x8, 0x3, 0xffff, 0x144c0}, {0x5, 0x3, 0x41c, 0x1, 0x5, 0x1}, {0x100, 0x40, 0x7c2c, 0x80, 0xcc, 0x9}, {0x4, 0x7, 0x8001, 0x100, 0xffffffff}, {0x6, 0x101, 0x2, 0x8, 0x6, 0x9}, {0x80000, 0x7, 0x9, 0xc, 0x7, 0x2}, {0x7, 0xbe5, 0x7, 0x40, 0x3, 0xb9}, {0xd, 0x7fffffff, 0xbb117b6, 0x2a, 0x4, 0xc1}, {0x2, 0x1, 0xc355, 0x4, 0x7, 0xef0}, {0x0, 0x7f, 0x6, 0x6, 0x7, 0x3}, {0x4e8, 0x6, 0x7fffffff, 0x1, 0x6, 0x8}, {0x6, 0x9, 0x21, 0x1, 0x2, 0x9}, {0x4, 0x5, 0x5, 0x6, 0x2, 0xcf}, {0x401, 0x2, 0x8, 0x3, 0x4, 0xf05}, {0x8, 0x8, 0x31bd, 0x8, 0x3, 0x74}, {0x7, 0x2, 0x7, 0x0, 0x9, 0x200}, {0x2ff, 0xfd, 0x1, 0x7, 0x101, 0x7}, {0x6, 0x64, 0x5, 0x6, 0x0, 0x8}, {0x8, 0xfffffbff, 0x5, 0xa6b, 0x0, 0xd}, {0x7, 0x8, 0x1000, 0x9, 0x4, 0x2}, {0x1, 0xef3, 0x0, 0x2, 0x2}, {0xf998, 0x4, 0x2, 0x2, 0x4, 0xfffffff9}, {0x80000001, 0x0, 0x8, 0x1, 0x6af1, 0x8}], [{}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0xce8a0ed6b7fb2aca}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {}, {}, {0x5}, {0x3}, {0x2}, {0x2}, {}, {0x5}, {0x0, 0x1}, {}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {}, {0x3}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4, 0x48c12ef76554dd2e}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x3}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x1}, {}, {0x5}, {0x0, 0x1}], 0x1}}]}, {0x17, 0x6, "bf7358271acb4da68c78f723bf0aff4e00eb97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x194, 0x1a, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x2, 0x9, 0x6}, @broadcast, @private=0xa010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7000, 0xfffffffffffffffb, 0x9, 0x2}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x32}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2, 0x1, 0x10001, 0x10}, @loopback, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x1, 0x7, 0x9}, @empty, @loopback, 0xff000000}}]}, {0xcb, 0x6, "50d173862c06097aea9fa0a89b98a13444097dc67d5e208c353e7bc0a7d947e165fc2b49d9116612118d52135f2aa5b0e4fa940ef33f7b0ae984223860d85ddf555bed49a894b3d87a56cd161f42fa647f3854f4953ad90640ea797e4de568fa12ddbccd17c6813ae98f5a06fcf9b4558f23daca8ebb8cd1383cd471efe9bcab384fbc25008bf274a5c939f5c648b9cc1830bd5ad04e8ea8051f3ffa4b6603613ff698c12b537a73b0ed6b6c47421be0d908ace3c938bcc92d12d48f64b85700799b238c0aa502"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x138, 0x4, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_TTL={0x5, 0x7, 0xda}]}, {0xda, 0x6, "503b228c4c9542acef6259d8b3c82552381fb65cb83f691b60a1d0ae7f2521e2450d43020563cd383f8cb87e9f8d2d86e915b9f85ab83166b925b859fceab7855127b592faf54d5a6ab4229dfb29006053f309160448a0a0dd295bc2afb8372f494e102e06ec1b1af92fb5350560d1a098f6b9e9f800373f95a1c518922bd188663e102ec1076679033a5133c58d04753b7dc4df25d81448656691ed8e6f21820bc850a46595d329128a8a936021c9d2507be1f2bbf3ab1c3984d5cddaa79c229794e05f181ae82bebbdc010305ee82e9ee93e26ef7a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x3f94}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="3c000000400007012bbd7000fedbdf25037c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0x0, @ANYBLOB="04000800080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0x4, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1406, 0x200, 0x70bd25, 0x25dfdc03, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffe0f, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x84) 3.236852732s ago: executing program 3 (id=3662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='veth1_to_bond\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9d, 0x66}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b90ec3a0318f"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x5, 0x49d, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80, 0x700, 0x4, 0x5}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @broadcast, @private}, &(0x7f0000000580)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000005c0)={'wg2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0xfffffffa, 0x5, {{0x16, 0x4, 0x0, 0x3, 0x58, 0x68, 0x0, 0xe8, 0x0, 0x0, @multicast1, @remote, {[@generic={0x94, 0xd, "ee2c4c07034b4c296d75b2"}, @end, @timestamp={0x44, 0x28, 0x1f, 0x0, 0x2, [0x29d5aeb9, 0xd4, 0xdcb, 0x0, 0xf, 0x4, 0x8, 0x9b7, 0x3]}, @rr={0x7, 0x7, 0xd6, [@local]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x1, 0x700, 0xb7, 0xe1, {{0x38, 0x4, 0x2, 0x8, 0xe0, 0x65, 0x0, 0x8, 0x4, 0x0, @local, @local, {[@timestamp={0x44, 0x8, 0xc6, 0x0, 0xd, [0x1ff]}, @cipso={0x86, 0x33, 0x3, [{0x7, 0x4, "2bf4"}, {0x6, 0xc, "f8cd32de228072048255"}, {0x7, 0xb, "1ee9923018c40e7c39"}, {0x7, 0x12, "50c43f207fd39851916eda0f6a8c031c"}]}, @noop, @lsrr={0x83, 0x1f, 0xdf, [@remote, @private=0xa010101, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101]}, @timestamp_prespec={0x44, 0x1c, 0x74, 0x3, 0x5, [{@empty, 0xfaed}, {@broadcast, 0x3}, {@local, 0x100400}]}, @rr={0x7, 0x1f, 0x73, [@dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @multicast1, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp_addr={0x44, 0x34, 0x21, 0x1, 0x9, [{@multicast2, 0x6}, {@remote, 0xf}, {@remote, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x9}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x8000, 0x10, 0x1, 0x7ff, {{0x1d, 0x4, 0x2, 0x8, 0x74, 0x67, 0x0, 0x2, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, {[@timestamp={0x44, 0x14, 0xa5, 0x0, 0x0, [0xc9, 0x0, 0x2, 0x1]}, @timestamp_addr={0x44, 0x1c, 0x3b, 0x1, 0xc, [{@rand_addr=0x64010102, 0xfffffffd}, {@multicast2, 0x7}, {@loopback, 0x307}]}, @cipso={0x86, 0x2d, 0x2, [{0x0, 0x3, '`'}, {0x7, 0x7, "15d52e1ab7"}, {0x5, 0xe, "94c384de94d97a90f6802b9c"}, {0x2, 0xf, "750667ef8b7f970c20397bb0f0"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000c40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000940)={0x294, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r13 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000c80), &(0x7f0000000cc0)=0x10, 0x80000) getsockopt$PNPIPE_ENCAP(r13, 0x113, 0x1, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d80)={'wlan0\x00'}) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r14, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffb}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000844}, 0x20000806) (async) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r15, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4410}, 0x4045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000030c0)={0xffffffffffffffff, 0x0, 0x41, 0x24, &(0x7f0000001000)="cffd59cf0af7510b9ef14289643b05cd517a39c61fe5218cfc7713d9f3bc401217e195eb32e9129e4b441dfd439c69c741dd5815bb6341dff38d6786222c399343", &(0x7f0000001080)=""/36, 0xc, 0x0, 0x1000, 0x1000, &(0x7f00000010c0)="1fa78d5be1c4f1ea18fdb4b9fa79dbf2fe30a8ab5d8f6e62ef93af64d3a0fcbd848e4e660ba894d84cb3fe4ea1e9abbd6406622c2be996be7864b8c717bb098c2469ad04dd2347549a00621c4bc58fdb5c4ebe57bcad74c3125a12257ac99c56cc451da6e9f2cd73cbe235b2083cc8fa31c1fa6a95f0209416195f518b0c6b2f009070a3b4c1c3de0b8a507d9d6275b11b081eefa7897d48534a1863c03cf93a7acc32f720a4a727d07faddca117b871a7983c4398464fa66a3eaf85f199153715ad6dbc7feee1fe1eef2e6dabfa542fb6e52b8d7c6dc3f978f35f31b9cee1b7634b8ebe1ec0b419578fa5b8a512e9153650fc7450ac9d8adb4a7f976f9af70e5b463eaf6cfe51e0bd4fc532c471fa601d42a09f3b41633070db2c4f1dad7526db28df770240dc594ed96bc7260c64827c5740e0195b38289378739b74af7de748ed87e3eaac439e77a4c41e862905971222ef3a387eeefdec01544d95df6dec17a703989ddbf064c3929ffcb8c4ac810e61b961ecdde99682d6569603e3bac529d47f26b8496a1870f1c2c9d0ab3b491e03abeab5e4faf3abff848b249f0b47b51639b98c302a0eaa8495facdebbdce649e014f7a57fc688ea0877b13f9aad7102034936bc533f52cd8e83598ec4d01ad6fe2a4c2f81f8643e479381c50e61fed4b93c61401986cfb05858173164d481b1b3c17d1830c55325bb62c7a968ee449aba283bd04cf6732f94c8d2c0ea384439d153c093c084831c9eeb6744ed53565ea931bd802604952fcd7a463f7a13266ed40c10ced73c56bed24afe4234f01ec43991e392f179b69726c0002fad1a920db30d4230ee0fd22bc09c2a22229253fa07dd0fe2a6807fba0bb4ec671d16b1dc05261270c3edff772f7739db481310f5dc8c50980b5364a8125f880afa01fcc8b00aa104f08e37c28b8d985da385fb3cc07890dfc3895f30e1bd050b47b6896746df66700f43c69bca910c3694189148145ea4248cbc74ac3538fb7dbf4dc980a8bca838b594a0e8b2a7441041b4e911e13966686d62a109461179a920201280b3b3a4f924aecb6136946be6d51c7144e125dbb79aaddd4e03758433207357c86ef3ac90dab39a6e27f3e274245b931b159952aea3a27375f3799b1c97d8b1b917810899bfbd93cb12e907245ae047df4ab5e82c107ca5410a5cac2cd388651e8b8e9cad7b9f2e5e909db9bfa092def5f8b9cd374ef9e4de8efce339c824767df3fb912625ad9e327f0d8fc3c97ac94fd3755a103658db862391d7f0237fe88503de12042a848aebd1c9aa7fd96e80c536eea5753ee7f8741473e028b714a82a2064007fcfa2597475cb0afbea1930f990c0bd15764b7ce09b861d46fea50ebcee231c72bde4e9ea15a577271a11eb118314414eea4c93bd055fb207c4d3a513c09c87b61798229951f86b6a6d9b81861c5c76a7aa1f4704c0e36317b3bb566169e8db5b8e1387d5b5b4b52ee0a1856b1195a00fd02d8128f17172a7543f32913561c8d49717e0bb19854ea97e86ad7ae578d122107f7dec133a2a7bf8dca1fba0b7de18e1639250b3c206050b28231f46c75ee993eebec327736e93f7f4dca059b95d9dcbd21673b9e631c08d2e832fbfb18bb72abadd6bacc53cf9d6ffd9ad4bf444315c9d07add121d40cf032441226e771037dd12bb1bbe1f9579a6b7c43c2892f93851113c9004e9612cb0b0ea0073056a7004f5c652962222812abf5362fa341710365c2ac57c561655a0faadb393ecb27d6228cfc399db0612906da9b2c241941cd120f1f3aadad558dc010659c617c5b3f66d904565703a320e6f2c86572dc85eb60ab0195cd19f73055036ac01e0d580802cfcd0ea132746caa322e27c9de6594711633c03591b46c3d4113caabca2647482126dc833e6ec99117612e8a71f5c0dbe0b4708f20ff887a2183217c7f78c6beb195d63805268862f09212e35839ad3e4cd6b709f792ff8b0ff249ac5801303f5819fd44f2c9994ed79aa0b84b3b74be75f044b3e987ea2ecf2463341054adf1de020a7d4eb7955550cfa0b384ec92ac2fcc5f6591a9fa6961650d9fb07e9d69ef92b5e3786e37317902aba8567c54ae71db62a935fb92ebebd8bb79c387c9deebf63e3fc584e54294aea94b32e5bc611e5ec5e41d89dfb9dc1189c1a94829c58623932ac6547a25ea40d9acd13c0d88eb5ecf6152fdcc51e09399129842d168414697a30418ac3f01e19ddc90cb3ce1ecd57285c84c8647bbb5326908b8b2283e2b93723d5698115111a05251d1ce69e1731f37fd9c0a4b1733cda5321c0517d0a197e3a6d4baeeeb8b6bfcc7fd8c5e94675a8b56e5c80dce0237b2f338572e573e5829b14bc2221c35540280ff1910ea619f3bee715046b9cd1381da5bbae2aa993a7f3fe2648c1a7fdc315d01c8305291d4008259dfc87497870fad28cb516f573fce09899ec719bb1e5b3d7c50a3ed9978f7a4058cca5128b4275f8127220a1e90afa30ceb7c8927ccffab1014c18cbd18123cb5c72964bb961a5eb0b6e822ca30cf3ba7f55c0dae9ab9652e693d8e9662293d915f78d5f1813053e17b59ee04b0f1896599b1880046da83abb89404a90bf9186e28470a4b10590466fdc9ee267322e6f15360e2e7d95baad5dac14778c930d7cb26a886fd731cad9148977e37ca22eb1e82fd138cb69a3b1d8cb029766ea1dad739be49ab997954dff05c2ba3188cffc38ffa3bf5dc162887b97d622773e9ee1d891335e6e12e38d8473a47c6f4dd9ab80277b7e8479577ab379b972b185b6ec86c861f3bfc4bba13c079d638d9d9270abcc06a878aef394a57183816512750f9149eb96367765c6daba8bddaee7bc14d44645501d0ff52d44fad225ed28a379d2bba90fc5bed545911f2d3873a66d9d21b17f9057f2b06e15ce6a4822fd269261156b10b4e4b27f29848c04479ea9774c2d88b7199e7aca89fed3550bdf6ed1c51758a438a1a624d7a948a42d8d18e0da0bcf5b396534eb0d80c28b40a80bcc6bb3f726cb982a3c49b50e4da939f9541e110f9509a5458ab2a23e63d992d10a7706390ac9f5eed0c85ddf6b12972ca87164bafe7882a3491c1ed319e28e0d9861b4bbf7e5ed4dedabfe798f5a9a140763eda34e639330ff74228bd66fee279a50329ab759d79b18cb3184d2f1ebf3019a748017b38b449367264e120c430beff188ad2924a7e278068be5680300273231b20d41d75f875658e960a5d16cced11840e217883bb5b1dc6fa465cce027c9c29463a7d3da8ff1c997484a787bcb0b9aa8faf80051c43d232bc3de440295c07ed3b01df667bc788a685e2493c2de0243f24013f98f968d3da9a0bd5f06103d888da9d5733252a771f0751a2651597452705689bdde503f598fac659733638a212c8de1d161eb10d0229e74703c120f4cac7027a80ee45c4051828a72f1282aa690863d78712fa95909a7702ba31d0e2de2086c0308c91225ba003a4c11fe23cf6fe2388ca09aaa99c07506236716c672eb5d7b802d6d4589eb0608789ea00fc9216a6521fc8973e3cdc8eabd0f99669d7f0f3aae48d943992ae07f9bdc3f44ef94470beb872f5d0fddad5ca7a1e2ffc465117c54baec0bcafd65cff3ab184ff894be6790e0b5692b96e255ea83ccad912387226c8e7ccbf866fad5e80beb77d8a05172a7f3e56aaea7ac29f0ba11260a6a69e7945b2e963215460c0b4fd6b34989425e23efbcdb880fcf8de6037fe3f9329c6f934878e4c69f28e9c193ef7a25d201ae7c6d4c650ec3d7cf62bec6c49f8c3c42c684e114955c26e6131ab45f3dd46389c523d96d5b14a68e69e1c3ed41ff34bede1e960753a2add5fd4383f819fd3e42d137f4d693e74540e357dd69d6c696add1b6dde460a80e1f3f1dbb35d881806620c5b81fe7c74ee09a4aa81815032c335a0fcc52d0c239db82eab70bcb577d88bc5291f5616c44c30da874a1f8aa8b2df83875db5b896c07f7bba945ed67b3740f84ba602e55d3d5be1a456881934c173f2bf8819aaf69d341dd846722113a3baeb022e4f246790619f3fbddff86ca7519896cecf5940fb02a18ec43d918ac40461bb2878092bb1779da21eff32ba0cb99d9a1984b2c759b6e0dcc41775dd9704a233a417b0eeaa0648d9e892320ca01ff40aa7091d2a11cd1f87e449750a932aa82fd6b7df381b9a8f11cf7517de85d185cb01717fbd10694791f4c7bebd4a8f131c608f7c8bcd42756b7d6697086fb2022774d663f4ddd7446e2fe9664a8680fbcc6ad06fe1d7e5c512c08e248a929750522f8706a52c1d1c3744fa89b41a5a589b9265b7833647f9ff8e4edd4c380908665b7b062a790d40ccb4410dbe318cd93e20e9bd18f906e0e821b304ae233a27dc9444b345d4b735f290f8aebf86d14c99edc4e639a26e2db4422e6324ce98387f4bb0ed2c614e35837ea724691b5fc49e77cc9a2f0b6520c17b1a8ea9401fb32277c84e662aec291291a83b29331ab4f42cc2e2e815f1f3bbb5d64ff7f45fec7ef33a876e4d2ac50047729749272f5e4aa59173efb92d6e31e88af00373e8ed8192f81c3ff8d097ea5658094db0c4dd5383826e689b70a135c197e185b68f069168ca71fb27e6816d1dda96a1e02696d8886113e0eb09b3a0b828bd3a66eecf1d15c0a2ce5309910b169dd45d26e4c4e737d0d17f8bba395b0b64fdc5a1fc43c900cc9094d30a7039712e22b1695b8855df89ff6a38be8b276a20ba689b5ceab7742b7a9f1cead2a445a9db1b103f95b9cb10c9a14f7961c773f12b61f537de01c6f9f873f1c119ae6107a63ba083c157d55285296d4bd58f93095fd738aed7125430636a9e872fc5205185c5fa485b69355d257bb20c807faabadcfcad35ca4d0dd7b9702c33da3a2dd6f9f3a2ef620ace17a227dfdc5a72d03fdf3eaacfb62d09fed27ee26aac327f8a05c417e5a406099c23ddb79672a6e9991215f74e5ee6d83649c82f8c5d655d3765788a68c2bab919b92c0160b069ff4fd736c1e4314de1958b35be0a8197fa2d2350550f0e95c4e4f8ce68d22b50802e7c5a3ebcafd658a79de1e8d34c3e12ca223844b518a4488d586dd75875ed90083682737b72fd3c338edd317d2cab00c06b30e997195597e41d4284d20da3326a346da26081b540d1c5e5ce6ba0a6b1fda535cc4dc370777e7d2ebbebb097fd4e43ee44b8fa2cd2db8d0e36ae0899c0a0c7916411dd080c01495c618f6f4178350fb8f02214ffadf8a2fa32e80f2178596a63dde9cfb801f4115bee49e82c6890fbb89beb5eadcbab440376056fd929f4a8ea8e7f6e2df9a42dede4132c274cfe3345d3db081bde47f24eb9d0b9145f14b25520bc327ba9cb1e6fca1338034bad3f69d876d7b5e530880646c660f7dc8698fe66202ee6ef657544632c4c7a22fa30a7394290919de124f19f00cc71a8897c2d1f0c002368c71029628a091dc5f45fd8c75b56716eca88704458b583c826ba26b91a43fb5e402469d6e52dd4d3cdfad21fb8a42f163aa2705c15dd244106c75b527757b9861251519ff7b6bc1bbfb347320006d43d081350393c1531c6100fbd39cd0ec9b6c245b5bcb1c562ba7b0962ee4ec9512386a056474433b4eb53401fe885dbe01067a9f27394bf731293bb5f9bbbeb86b20a78031cf7f859340edcac4c6d43340040d4a14f4b8502e279dbe1896591b25e5d1ecc7503d85c88d2b43d9e3f344d78f3c3b45b4a5063cf2c115f8afb094043534b3aa3a45d65ea45a0d2493a7195cd876857e2a1494137bbc543c", &(0x7f00000020c0)="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", 0x0, 0x0, 0x7f}, 0x50) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r14, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x40, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x40}}, 0x80) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r13, 0x8982, &(0x7f0000003240)={0x6, 'batadv_slave_0\x00', {0x7}, 0x81}) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000032c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r14, &(0x7f0000003540)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003500)={&(0x7f0000003300)={0x1d0, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xe63, 0x140]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff12fc}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x23b}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x401, 0x9, 0x2, 0xa8, 0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffff5c9}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0xfc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x64}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x101}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe392}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x6, 0x1, 0x7fffffff, 0x7, 0xffffffff, 0x5, 0x800, 0x2ef]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x31b}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xce37}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x186}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x23c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x400}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x5, 0x4, 0x3, 0xb39, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1ff]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7c5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x0, 0xfffff001, 0x6, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5a1}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x1, 0x4, 0xce, 0x4, 0x5, 0x2, 0x1, 0x4, 0x9]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)=@getneightbl={0x14, 0x42, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4044000) 3.013151372s ago: executing program 3 (id=3666): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x101, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2c, 0x2, 0x2) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="000030f60180c20000030180c200000e88a8000081"], 0x36) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.213529382s ago: executing program 0 (id=3667): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22}, 0x50) 2.149500866s ago: executing program 4 (id=3668): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) write$cgroup_subtree(r2, 0x0, 0xfe33) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000100)=0x6, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4e, 0x7ff, 0x7ff, 0x1, 0xc, 0x6}}, {0x2f}}]}, @qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_fq_pie={{}, {0x0, 0x2, [@TCA_FQ_PIE_ECN_PROB={0x0, 0x9, 0x20}, @TCA_FQ_PIE_LIMIT={0x0, 0x1, 0x1}, @TCA_FQ_PIE_LIMIT={0x0, 0x1, 0x7fff}, @TCA_FQ_PIE_ALPHA={0x0, 0x5, 0x17}, @TCA_FQ_PIE_BETA={0x0, 0x6, 0xf}, @TCA_FQ_PIE_ALPHA={0x0, 0x5, 0x1c}, @TCA_FQ_PIE_ECN_PROB={0x0, 0x9, 0x11}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x6) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @null, @bpq0, 0x6, 'syz0\x00', @default, 0x8001, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x428653f7fea2dd1d, 0x0, 0x7}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x16, 0x6, "07e924a21bd04f208522bddb397a97c5c2d3"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x3f0, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3bc, 0x3, 0x0, 0x1, [{0x3b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x214, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "50b63f7187dd70e73633314165ae665f87d25860957e5bbf46b57091d0af07163433ca1a98347b1726b1d1fadd26f12e7637711543eead3d737da28d28596cda26506b47179f54f2561706dbc5f098ab52ed894ec654458c90f1b0909584f360823115d34e75ac12c4202504b7c24be64da74508ce32c4f74996222e6eedfa7d8c6753576a7568e4f142e7738e3d1bf289886efa0ca3dbe6d2d1c4ce644e435593bc471fa9b48e5a2c54b57ce96faa6acd94824bd38879c0ca5f3aec296e0e"}, @NFTA_DATA_VALUE={0xd2, 0x1, "167214e5cc2f9395d2e362175dd468faf0836cf9add2a37efa0bc72c40727d665a220e40db33594a594a91dc2c1850d98d8ddcb3bbd93ed5578f736e932751bf6fcc54e791cd5d20860f4c389bb0c04b46ebcaf07cb1f41db9728ccc782a035af27f1ff916a21d3ee8e5341d2bad4a718a9b87f4d74d0073ec270ce2aff4dc065ded775863726311027c7f9342a2682482fb44238d7f38b70122affd0126d1c77862e56862d433dbdc9b227c859028560df59ef8f9bc865ee6b83b8a9774d914947d8a610dd58cdb0ae255525932"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x89, 0x6, 0x1, 0x0, "b518ad38220586f0ebb7d96be1e122adc004f59d9b3e6a6db99ac8cc8f708d5aafd03b3a11f9d40300df24f8a6c8034bb092152645ac39aefcec131df9d00aa6ddc0f7b9557cdd85eaf9977d7a8b3a5bc5493302fd6af79693c2cc35d3b42946946a327755cee4e61e60aa815561bb502237a99ad9f3a4e3e2f3cf5546a0285cd2241b50c9"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "039afee647e509a5bda049dcbf23b8e351bb52b1e3ee74b2adb75a6f0b130fbd8e8bec1209d36299c4656792e04b1eb8e24e32c8c2824708b64395789e377b34552ed679f4bd898236b2317e8070d451a28a89f43d1424ab4494fb0d4bc9e7f74d9861416cf74ba248c681ecce94a422f642883e880086c7e602107a8375e30d720f2ef5ff6615627463af391fd4eac1cc2fd43c511cb126a1f76b7dde1cc9e80db578ce0ec80b656a232f5e6dbfd2f0599ff693f88ec93f364aa99734b974b392935134155e682ba4cc4baa271a31c5d05b8a7ea5e0fb67e693006f325f5aaf294aeb9d58aa2c22ab59bcaed04231c03df6318cc91710"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xe5, 0x6, "e500dd1a86f5cab23da3636ad63c009990287e8c4b2cf2807c28545fafe1f297b819843ceceec9490cc7790baf1db7cc033ac844186eac8ad873eeaf406d996ba9fd4eec7d7ca2d3ebafa46d40e568776d77a42e79dc340acc0d37ef73f0136e6f7a5052806bd97169a233795ee93b28be71fd3fc42ffd4b00716d59360b7b9d14467090b37e1441d694d0a10b7b8b546535a548bc7d81958852498e99a3cf0d0c0f14fd2cb071088c345919fce6319c2309c951c565eece82fe50de85972f0d6e3015b9bb8ab4e6449ace65969cd5366d3cedb7a6836e6a4223f8da06641e333d"}, @NFTA_TABLE_USERDATA={0x49, 0x6, "0424a57a882856fd114b79fe2d7b9d7f235afafcabf080328b45778e0bfb2037df1119b3187afbf22c46414a11d1971378bf9032fe7a5ff6dc1966068cd1f4d9828ca3d7d5"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6d8}, 0x1, 0x0, 0x0, 0x24004144}, 0x4000) 1.978818052s ago: executing program 0 (id=3670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x100, 0xfdfffc80, 0x0, 0x6, 0x4, 0x0, 0x73a, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0xffffffff, 0x0, 0x1ff, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffff7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400004, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10000, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10000000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0xffffffff, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x71280dd2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 1.912733733s ago: executing program 3 (id=3672): ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) (async) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x0, [{{r1}, 0xe3dc}, {{r2}, 0xfffffffffffffffe}]}) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f00000013c0)={&(0x7f0000001340)=[{&(0x7f0000000140)="794f615120edd2db7f8f7862813139991b7424403d9e5f43522be2683e76fd4567cf96b1c6c796ac7e99bc2984fa0d7fbec72c4803aff30eb868bd9432c6e2140bc3aba4a4b3c74f81511681027e05968500ad672dc1bbb63dc7c2b016d7f46d59f7435011a7", 0x66}, {&(0x7f00000001c0)="35a93a51d8b34832a495b7c9663aae22c95c18a0b696c41f17ee666951c08f4e6d76191d73efc7f4db1bcf14969cbadc481e73032fbb76e862b1b58898ccccebfb17a669c7e95398ff50b3592f2f37eaa53e9fbc2faa0a0d486c", 0x5a}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="cb4eea1f760ce107c6b54f5c811975f20d6cf9f9a5e387e27b7bd1bf9173bf33a560ab5fbfb5f369edf69392f4850f77f904a650f3e61f4ff81309a9a3fe05e68ec7f2ae7770d4bf7d16c483fde846e1f2144bf0d6fa55617609", 0x5a}, {&(0x7f00000012c0)="96ecfab4c4bc94c5c21d0e2b81d360e67e5a1a1be07adf69209465ff969b17c61000ef259579a141751cef1e329d31dfe2e2750319c027d02af2892f47a36cc5489847a0e917ff1f2a7dac3269f42c6f43085302cbb340cd590331f772971b1c54570c1c7d6498ab", 0x68}], 0x5, 0x4, 0x0, 0x7, 0x6, 0xfffffffffffffffa, 0x8}) (async) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f00000013c0)={&(0x7f0000001340)=[{&(0x7f0000000140)="794f615120edd2db7f8f7862813139991b7424403d9e5f43522be2683e76fd4567cf96b1c6c796ac7e99bc2984fa0d7fbec72c4803aff30eb868bd9432c6e2140bc3aba4a4b3c74f81511681027e05968500ad672dc1bbb63dc7c2b016d7f46d59f7435011a7", 0x66}, {&(0x7f00000001c0)="35a93a51d8b34832a495b7c9663aae22c95c18a0b696c41f17ee666951c08f4e6d76191d73efc7f4db1bcf14969cbadc481e73032fbb76e862b1b58898ccccebfb17a669c7e95398ff50b3592f2f37eaa53e9fbc2faa0a0d486c", 0x5a}, {&(0x7f0000000240)="b0f03bc95d5e7de9ca31f6ce786697778427d01c257b055b00fad50744cc3cb2b2dab56deaec7aef7bd9a07a8a14d5cc121651617342f59ac573467054ac0cb30c6ab61b5db0b6e0cd6959b396c69996f1b67d52fcc4886a5348a1824bf7d0ec89bdd223bd53bc32ee1d98fb141d3d71d815e48d03ba7d74a21dfb7e539a5afddcbd3f33f1d59a3a10a2fc0487b1d1dad37a076d384cd2744699bdfe4c3866afea2ac5043c24cdf79e0cef4a2541aa298cdccc19d7616aee1da88295a260869c7c70192f1badcbe20106fa88c36edddbd95b878a09b21ec67e8a36d57849ff0f79c7f10af76c0aa91c59733f66d665f2004910e4caf24e715f734a75737ead83474b9f11c30c99fd5dfcd08bf51a5b6cd8848eaad758994db279a14a94f7c74d127b3b2a899e1711aeaf5d75d864a0ead4a58cbfda207b7137ab07b41b8d4e191ad1fddf1e0e0d8429db0958066bf7bf06905f3067d53b49878f52210782da933c24ee184d069df98f97ca716eeb44dc0162ac67eb378d04119c351e848d6715ae130a54f0052a71a37e2d893cda61a09c132afe40abe235a08af15d55a89fa3b5520a80d0ba7e0c0e620de13e8ad7c5f33d55a86c7b9aca3c05db86fbec0941d50b7688435c5b786edb70aedea60f79aa34d8d6c34d74aef70dcaa62c6821a52a5aac9d0c0c31245d048be43ca60bbac6b78eb4bb0e44fe177550b690777ebcd65b7fba1e1ccb02b99118df2c3de5e8326914fb2a64c330c17d14bff25f6b1cfb27f105c3f4cb8815a655bd19a88d6307efc45a9d8dcdd28797120f2b60fd6cb6c0a1a46543e865c4d0aa576875bd7e5104773b7fda3eb88e3724764974d5a8b04159bd8fe4be057a7e5eca889ef95ebb0d40149352619df4659f0e3eab9ef6b6b6d09654652709ddb116c0335a597a2c00747d96e5a0f0e5eaef8136488e6e0a522e88aff68bb09efa3e8824ee3e905a32a406455824d254afe459d90e766083c56012fc29ad89e8d400f0a4395ee156b9987943c0d0fe956a59c34838a3ec36ea67caac5d888550f4115257fe43f51f31c8e5eade8077bd1a02d81ca255f6e58bbbcbd88805e20b07c075f83ba10a99a275571b890be8ab3b27bb40b3da61584b9930a9f647c436bc05d82dcf3a457783b2fbb7e2bb4a134b7bce0719b8062bf9fabbc6a736ea2cfbd678e59152feb6c6a46c97b4b547d90f451ed615f804c9f0163a4819d89bb45fc21990a5e0ae2c3eec31152932707f1bc9f2c14feb0cdaf737cab2ab640f4d51db7773df95739c4376aab6cfd65fb5e565324e8173734b2adf938ba469caccee43f5ed2d0894fe6983965deb3f1340f01b450afe827bb4494bf20ce251b4691e2153451deb77c3302c4c4a8a2ebf251ef3857d0b4f0cf5610d887f6d32747dc2f3969da9d8400061e8a7758f92290f425267faf6a2f84729b1989f68ea8fd9cafc4162f36848333b342747735341e7e78dbc62017c76150f2bb8b377017ac41bea05614f2c849530225c7e1da43ed1016232414f74649f2420bf07e806184e9f2fb87412d37ebdbaadb5c90ba64d607cb167f0634d29593581c38963b66ed9f1ef725cbcfe2a6edeec419e0b499a18c91eb478fcc1dcd51e43af26e1b24717d5d9e39b4fb3f3fc9e51d557807eeca65f6107d8714c4b343ee8dbee9e359b2f5f3dcea70bffc578c2665e6dca5cf701f0658d6ac3d6b8d65827137a1cf1b9919ebba4e3045d3e88f55ddf446d804619092d60fee313a22e93c680b272940c703cdf26dfd6857b0c69dea46e205e175e6c4429df2b17e3922fe9989d013f31234eca76563987fc2bec2ff6f0c43b3f3fbe24d550d954ec0e944d3051f5fc3c16e8d731f5c0e3d330ae896e79847597e41dde323e053c626efdfbceba06a2f533e353ba308444939667090b9e8860c33351774c5bca08b90a7885853eceedb15520f2aaa2916ee7cbcf8d9c4d954b61aa01ac2f25361e5676080e9637e5d080561ea24c83b34138608819fa92e12cc69393a3e0fc5455deecf659187c8e6baae77dd747982a6f0312d9aa7f90a3e60eaa757e13e3a010c9b58efdaf7746651156c40af5324a7103f6c28a3d3cad8d70d55a907cf3cf113735bfbf108aa97dcd98f580a1409356b0e6a43e7d5089d249f1d66f2da85249d1a6ecfc6a48d7eb2a06a2623257e7c0164d16c54783dc1480223f94d575d8b43b4577de3cd94278a45e611269f23c51181c3ae198ba80b4225b096d543c44ccd8343e3709dbacf8f259d7b37bdc17453cc457a4705d4d30b237854b4eb1d37d8bbc4800a8738817398e2f93da40c3133cf43ea0cdf8920fd599e2dd54ac1f0884f7f78840134f0f107c95060d7f52bab48798658cb3dc24a281b950e39bf818e15d804721e298fa7b65c24c18f3d0d2139899ac222323dccb2799e5c8aae654c939939c34e24612bfff9ae8dbd0e1cb7fa7a2cf9cbac0e07eda757983f2f32747223a72b01eeef5a545ae3d2ccca6c20dd6869417910995242cf9fc58138cdf8aeece802d1c852402a92ea41739a818c1930d4a6a34a4ceed1b6b2fccf52da0976f74293f647496a51edde378d9d2173d31a25623a9598892ad8cc2104d06de7face3bb930b4f8c245f3a304c2bc2c0d94213e2a5293ac4575e9d0192a7f4fad86baeef42729d7e530101fca18738cfa978eb3ff06cafc857f8b204e3b495b021d1426ff2c2f5ce26bd7014d21490f23932806502c589e6f32d5ac84513bbb529b182671f9356d15886d4738168df8bae49668be5a9425b2dccdd0fa7e2fb89dd8c1e1febf110d431ec1943885919cd2099c62feac92ea8bdc0acc90e11ee384187b53807828b40369c7dc1fd36342c87cf3b3404914bb48839e88e39802185ae042f9e11a5fcb47ca2044094838290f164994e10d10293cf78274287b74a71cd5091bcc2b09ab525b12561621766319759f9b165edf1e56b00af5ad647ea0a4cfdf1b3e1cc272620872e2e02a4a4b6c424ea600b1cde987eface67d99f749366c53f7d2b7c1464cafac0cf587a680b48ee30f5731f861ea09295d7717a3c74152056271832e55327b80b1cf71f05adcc5cb2db2a72761729302ac55117e1692777698941aebe7b3fcbe1d6a45c58f7798056f3c56cc30908ddd1232454e66b47f7490eff6ec07ce95c5fb74f6af6387d1c2dec187e01e56e14c96df0a7629dc41721064339d83e2552c7ba4860cca2bfdaec42ece3a62dc2efed605df54e158908175c179c8bc61a4a8500820a53351e48b152c13481c8db1688cceb7bd74bc98400cd3057e4c2936a6002126982c91970202d77829019909b2aa953553eae53d1ccaad054e2962a193ddb267d09f8e0d2920844eb614c531a8386418f832fa593a4187c9041e141ad9ee5a181b73627730faab2cf4b027f36298dc5861bff7bbc18705ae8b52c3c7e760db0449179a5b8777ad172bb7701b37a1b6afdfe8559b01746e779ff9b77646076f013d7baab3a5a0fb37b7315daddcc747e995731632770986563eb160b0ad973aa5c248fe333363a7bae3717759c61436ce41b1709bf8b1fae0d4d27a2de289c82809a9bcf457c24cccc1fcb6c801b0ccd0415f55342410cd543b4ffb397636fc93c80fd5ff094fc0659f8b992f75a2ce37e9331c13d689c43d209b3b4f45a10260448f8e58fb3eb965fffa2823f336f1400a2c451cea827af02c3c7b60d5c28df8882c67e8f05d13c1b086acf13a8775c4803b8fc1071a3ae419fdeef575a180ac31f74933ee1b5e97e24115a68ef269debf38587b930d15a4c8571b3a5978ba42bb8b259756e7d5d4bcd202cebd84d559b4fde76966b5846f999dcfe2fe27cc00eb4c3aa44102262c5117d9645cc391665a73e80ebb8858cc8e03d109bad25efe6a5a020931de4b8ec818ca9a0e14beee6d139b03a5b4f6d60025ed080b958637291e874bc9ab69225257657cda479b363e9c11339cebed38a475f964d57c06926fb8e76aa360779984dbddc84ba87c3afa8c8f5a9fe946bc6d6e115f2afa997d9b6114dee29801a44b777c77e624ab789a20d0f0696f6246f9d24f54af97ccfe0a3629e3e11950b562f85b7a36eba1d2e9e0ccf95ec1c6dc7e223b554142a82b07d2101ad6332d830097af477244693e20fe8f8940c120cce41b77bbb6b02901fb50cf5a7e6a754eb65150cde4febe1e2da0b84251f3fd13fe2f83969c7fecb5e9430b0089fb043a846ecf681b6230c433e5a564e5c8cb3a4a7522a352b6dbbcd9bcfb28f956a55d7ca6074392872ac0ae5205c380477cc6d18bd0a1fae92907f5f76f127b42dc228d704124a9c235661f7eb988b02812f91c09cdbb844948d8a1e95fc6d48823a46a0223d63c2d559c1575fb6e7429c6a65af58c7b6f864e4e83f8cfc2ce37a43a2de4b7e76351b8eb2f1c0d1d90ed88e676c5a56ef1ae4ca512472528c2a62c3443b0aa51057c780e4d6f7a5e04ae6d8bf55e21c1a1337f79e2cfdfc6392f2766681741a0f81f8a815e13e5f694aa604e2e3bd6f4f874a4bdbdaf478ac7fa3710c70c3f7af2a7f0333e407db9ecf96a918b31c2369062f7364a9589a8af65b5bdaaab20ce2e12447ce17914021ac4df1e2863543519ac1e72bb8d2993804460bd7b601bb1a5bc859ae532388e261f0b7da497e060bc5cc9e64bd3f95cbb561c39a8d44a9e36c032ddf5ed60d5d80fb275b05d534f4c75c320b24a12fa8ae6547410e57e2a7f25af935c99e80b4f3d44a1a84b0bdeb88b1bcfe6177f2d3cbfb88ecf158f9a902e64bb521efc7587c50da4500afcc37cf998d209a657d6c8fa0fdb3dec427fa69cd47b41338ab214afdec0aa4d158fcd0c1ed7c734da1dbe8c47e257d3267d7a2d6e69f6721a6fbf8fdb94c489667c9b818d25f272e2c88ea65ebbc59ab3cd1993fd4ede8e9fb0ea3a4120f31650ef02bf960a6958245ec33daecd99d6ac09123245d117078ed86a764233dfd5f07200c63d4c4f0183fa354847dfa5d7bad68982da3f714b066a54a10144c8e31bd271cece80fba48cb6f8ab6db1df0555c55f6a6af79704264b40b87a1a592c7ae71e23762c20f0edeac0dc3a36d47fc57ea18d3a071657bf08b35610aef94398c0e14ad2895057b2d151e48ac157af8e9e55e34bca11fbeaff64b9868a0aafc78a83b9266ab2c13177b863e79b24a13f9685b25fa850b32f17feebf31be50b97c6c8ff75865490fa5f4a384448d2ce1351ad1298344db2934e47752292e7d45e95f3b86bf252c644d8a753b9f9898c60d9de547cac31ff9083a6078cc5817b09b56b66491f85f3b75267066e84d19d67665b8abde379d3a6390d20b9a42bcba85d3c91bc28a0f6ddc7f781ecaa4b2186f8819b479b5024f82894a596661b8cdca35b3e3097dec8c5de648bc1d851085e1e7a7201fcc1695e69a0534ce8f3913bf63846a0a58d10acc5b0f67624b589ea9909529067a5350308afafea62aa38b4df2ab00ff5843feb3f4d14138c0f15053e8d66e5c7bb88d5e8f05d523f5938003afb2fc997ae1b48a65580e32f5e553dfe5ab6971c48139709776ad997e887e08c0c58e301f263adb9fe53600401533606fc6882c2103c9c399c9ee9ec83deaccbdcc8d28e4bccefd00dfff3e1b8677eeeb46863ce115f3bdc9da50819f4765fedd36726764299d6597db5e2cab1c3fab0423fe18a5300a5cc0245d718c1f72d24627a52752843e154b5451301775239127aaafba2aacb568d57c316a123b1ae128a0eb14a1e42fd86cee3616c00cf49f647487d0f266e89a", 0x1000}, {&(0x7f0000001240)="cb4eea1f760ce107c6b54f5c811975f20d6cf9f9a5e387e27b7bd1bf9173bf33a560ab5fbfb5f369edf69392f4850f77f904a650f3e61f4ff81309a9a3fe05e68ec7f2ae7770d4bf7d16c483fde846e1f2144bf0d6fa55617609", 0x5a}, {&(0x7f00000012c0)="96ecfab4c4bc94c5c21d0e2b81d360e67e5a1a1be07adf69209465ff969b17c61000ef259579a141751cef1e329d31dfe2e2750319c027d02af2892f47a36cc5489847a0e917ff1f2a7dac3269f42c6f43085302cbb340cd590331f772971b1c54570c1c7d6498ab", 0x68}], 0x5, 0x4, 0x0, 0x7, 0x6, 0xfffffffffffffffa, 0x8}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000001440)=0x1aa5, 0x8) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001480)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r3 = accept4(r2, &(0x7f00000014c0)=@caif=@util, &(0x7f0000001540)=0x80, 0x800) write$bt_hci(r3, &(0x7f0000001580)={0x1, @accept_conn_req={{0x409, 0x7}, {@any, 0x6}}}, 0xb) (async) write$bt_hci(r3, &(0x7f0000001580)={0x1, @accept_conn_req={{0x409, 0x7}, {@any, 0x6}}}, 0xb) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f00000015c0)) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000001600), 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000001640), &(0x7f0000001680)=0x4) (async) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000001640), &(0x7f0000001680)=0x4) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001700), r3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x20, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x14) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000001880)={0x3, 0x6f87, 0x70, &(0x7f0000001800)=""/112}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x18, 0x1406, 0x0, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x45) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r6, &(0x7f00000019c0)={0x2, 0x4e24, @loopback}, 0x10) getsockname$packet(r3, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) sendto(r3, &(0x7f0000001a80)="a55628aaedb9a6761eb97518405183bb3bfc9c12725a4388c47e0e031f1e820a75f536e6a770d5fa2d991a33cd3b671a46867156bec3e0762657a9daf02ec594f5", 0x41, 0x40, &(0x7f0000001b00)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x100}, 0x80) (async) sendto(r3, &(0x7f0000001a80)="a55628aaedb9a6761eb97518405183bb3bfc9c12725a4388c47e0e031f1e820a75f536e6a770d5fa2d991a33cd3b671a46867156bec3e0762657a9daf02ec594f5", 0x41, 0x40, &(0x7f0000001b00)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x100}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r3) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001f00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x270, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x254, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x2}, {0x3, 0x8}, {0x5, 0xa}, {0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x1}, {0x6, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x9}, {0x1}, {0x0, 0x5}, {0x7, 0x1}, {0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0x7}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x9}, {0x5, 0x1}, {0x4, 0x7}, {0x5, 0x7}, {0x3, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0x5}, {0x4, 0x4}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x3}, {0x0, 0x7}, {0x2, 0x3}, {0x2, 0x7}, {0x5, 0x6}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x5}, {0x1, 0x4}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0x3}, {0x3, 0x6}, {0x3, 0x8}, {0x2}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x2}, {0x5}, {0x0, 0x8}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x1, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x4, 0x4, 0x8, 0x6, 0xfffb, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x9e0, 0x1, 0x1, 0x7, 0x101, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0xff, 0x9, 0x8001, 0xffff, 0x9, 0x9]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xc05, 0x1000, 0x80, 0x7f, 0xf, 0x8001, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x76}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x4a1a990c4b95c74e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3c}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x10}, 0x4002) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r9, &(0x7f0000001f40)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80) (async) connect(r9, &(0x7f0000001f40)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001fc0)={0x0, 0x400}, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000002000)={0x0, 0x5, 0x1, [0x5, 0x80000001, 0x5, 0x5, 0xffffffffffffffff], [0x8, 0x7, 0x0, 0x37, 0x0, 0x3, 0xfff, 0x80000000, 0xffffffffffffffff, 0x9, 0xa, 0x1000000000000000, 0xd7, 0x5, 0x9, 0x6, 0x6, 0x6, 0xc1, 0x4670, 0x6e8f3e5b, 0x4, 0x100000000, 0x7, 0x4, 0x48, 0xf1d1, 0x0, 0x100, 0x9, 0x3, 0x5, 0x5, 0x485d6470, 0x4, 0x9, 0x5, 0x4, 0x1c, 0x7, 0x5, 0x60ea, 0x0, 0x0, 0x6, 0x4, 0x7, 0x5, 0x2, 0x7fff, 0x5, 0x4, 0x0, 0x14b0, 0x4, 0x8, 0x7f, 0x1, 0x80000001, 0x2, 0xa, 0x1, 0x4, 0x0, 0x1, 0x6, 0x4, 0x7ff, 0x0, 0x4, 0x5, 0x8, 0x1000, 0x8fc7, 0x0, 0xcd, 0x28000000000000, 0x5, 0x3ff, 0xd0d2, 0x3, 0x100000001, 0x0, 0x8, 0x6, 0x55a, 0x93, 0xb, 0x6, 0x9, 0x0, 0x1, 0x5, 0x5, 0x9, 0x6, 0x8000000000000001, 0x9, 0x80000000, 0xfffffffffffffffd, 0x7f, 0x9, 0xf, 0x100, 0x6, 0x3, 0x1f, 0x1, 0x2a6, 0x1, 0x8, 0xffffffffffffffff, 0x2, 0x6, 0x2, 0x8, 0x5, 0x7, 0x4b, 0x10000, 0x18]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000002000)={0x0, 0x5, 0x1, [0x5, 0x80000001, 0x5, 0x5, 0xffffffffffffffff], [0x8, 0x7, 0x0, 0x37, 0x0, 0x3, 0xfff, 0x80000000, 0xffffffffffffffff, 0x9, 0xa, 0x1000000000000000, 0xd7, 0x5, 0x9, 0x6, 0x6, 0x6, 0xc1, 0x4670, 0x6e8f3e5b, 0x4, 0x100000000, 0x7, 0x4, 0x48, 0xf1d1, 0x0, 0x100, 0x9, 0x3, 0x5, 0x5, 0x485d6470, 0x4, 0x9, 0x5, 0x4, 0x1c, 0x7, 0x5, 0x60ea, 0x0, 0x0, 0x6, 0x4, 0x7, 0x5, 0x2, 0x7fff, 0x5, 0x4, 0x0, 0x14b0, 0x4, 0x8, 0x7f, 0x1, 0x80000001, 0x2, 0xa, 0x1, 0x4, 0x0, 0x1, 0x6, 0x4, 0x7ff, 0x0, 0x4, 0x5, 0x8, 0x1000, 0x8fc7, 0x0, 0xcd, 0x28000000000000, 0x5, 0x3ff, 0xd0d2, 0x3, 0x100000001, 0x0, 0x8, 0x6, 0x55a, 0x93, 0xb, 0x6, 0x9, 0x0, 0x1, 0x5, 0x5, 0x9, 0x6, 0x8000000000000001, 0x9, 0x80000000, 0xfffffffffffffffd, 0x7f, 0x9, 0xf, 0x100, 0x6, 0x3, 0x1f, 0x1, 0x2a6, 0x1, 0x8, 0xffffffffffffffff, 0x2, 0x6, 0x2, 0x8, 0x5, 0x7, 0x4b, 0x10000, 0x18]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000002440)={r10, 0x1, 0x1, [0xffffffffffffffff, 0x401, 0x6, 0xe7, 0x8000000000000001], [0x0, 0x52, 0x7fffffffffffffff, 0x9, 0x7, 0x3, 0xf00d, 0x6896, 0x7, 0x0, 0x2, 0xfe1, 0x6, 0x1, 0x10001, 0x8, 0x8001, 0xffffffff, 0x6, 0x5, 0x101, 0x7, 0xff, 0x400, 0x9, 0x1, 0x3, 0x6, 0x3, 0x5, 0x6, 0x6, 0x6, 0xfffffffffffffffe, 0x5, 0x672a, 0x8000000000000000, 0x10000, 0x3, 0x8, 0x1, 0x100000001, 0x6, 0x3ad9, 0xfffffffffffffdd0, 0x800, 0x4, 0x8000, 0x2c0, 0xffffffffc4566a56, 0x3, 0x9, 0x27710a2d, 0x8000000000000000, 0x1000, 0x40, 0x3, 0x8, 0x3ff, 0x3, 0x3, 0xdd, 0xfffffffffffffffb, 0x0, 0x4, 0xfffffffffffffffa, 0x0, 0x2, 0x1, 0x8, 0x1ff, 0x5, 0x1, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x8000000000000000, 0x6, 0x8, 0x400, 0x9, 0xfffffffffffffffc, 0x6, 0x8, 0x2, 0xfffffffffffffff9, 0xf, 0x7, 0x1, 0x3, 0x80, 0x3, 0x7f, 0x5, 0xefdb, 0x9, 0xffffffffffffffc0, 0x2, 0xbeb, 0x6dd8, 0x6, 0xff, 0x3, 0xfffffffffffffffd, 0x4, 0x96a, 0xb8b, 0x6, 0x7, 0x9, 0x6, 0x9, 0x6, 0x2000000000000, 0xf0e, 0x3, 0x9, 0x2, 0xb]}) 1.912484724s ago: executing program 4 (id=3673): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x68, r1, 0x703, 0x70bd66, 0x4, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x66, &(0x7f0000000540)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {}, {}, {0x8, 0x88be, 0x8000000}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x4}}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0x4}}, 0x22, 0x80}, &(0x7f0000000040)=0x90) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r5, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="efff1a0009000000197a17df8a9624e075b09aad705e16524ff76882710413052148d96eb1f5"], 0x44}}, 0x0) 1.854011494s ago: executing program 2 (id=3674): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41414, 0x54c1f}, [@IFLA_MTU={0x8, 0x4, 0x4}]}, 0x28}}, 0x20040000) 1.782794035s ago: executing program 3 (id=3675): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000000fff00", 0x58}], 0x1) 1.705832977s ago: executing program 0 (id=3676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r4, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x18, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c30000f58703ffd2a0402651cf5dcd9e07c7"], 0xfdef) 1.670064971s ago: executing program 2 (id=3677): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$sock(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000380)="610a5db2842be22b2c9c799761cf0df39232e16c7cd3d7377fededd498e8ede126c3f054d546ec3a035bb0f9d3dda68a6841913b2dbf3aee356689d5c7709237dcb7ab818265e6e58b6b2681bc", 0x4d}], 0x1}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc", 0x1f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8", 0xa4}], 0x4}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.652184931s ago: executing program 4 (id=3678): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x671, 0x0, 0x20}, {0xc00004, 0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xe8) shutdown(r0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000390429bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="0198000000000000380012800b000100697036746e6c00002800028014000300200100000000000000000000000000000500040009000000080008003f"], 0x58}, 0x1, 0x0, 0x0, 0x24008007}, 0x4048004) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00', @ANYRES16=r8, @ANYRES64=0x0, @ANYRES32=r9, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x28044) r10 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000080)) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) getpeername$ax25(r2, &(0x7f0000000400)={{}, [@default, @default, @null, @bcast, @default, @rose, @netrom, @default]}, &(0x7f0000000180)=0x48) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'syzkaller0\x00', 0x3}) close(r5) write(r4, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200007800000000000000626f0000850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa10800000016007f49582b6182cdf2b702000008000000b70300003f000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) 1.452676182s ago: executing program 2 (id=3679): r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600000076657468315f6d616376746170080000080001400000000514000000110001"], 0xe8}}, 0x20000882) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x400, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x34}}, 0x2000000) close(0x4) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140004800802e8400000000408000140000000050b00070066696c7465720000140000001100010000000000000000000100000a"], 0xe8}}, 0x0) 1.452481382s ago: executing program 0 (id=3680): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22}, 0x50) 1.165647759s ago: executing program 0 (id=3681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000100)={0x7, 'ipvlan1\x00', {0x5944}, 0x4}) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'macvlan1\x00', {0xff}, {}, 0x29, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x19}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x5], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r3 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) 1.128137382s ago: executing program 4 (id=3682): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="6c0100001700010000ebffffffffffff7e000001000000000000000900000000000000fbfffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000fc00000000000000000000000000000000000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff0000000000000000000000004e2300004e2300000a00800000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ff00000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000200030000000000f9ffffff0000400000000000000000004400050020010000000000000000000000000001000004d432"], 0x16c}}, 0x0) 980.972264ms ago: executing program 4 (id=3683): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xe}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x0) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x8) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x100, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r5, 0x50487, 0x80c4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @empty}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtclass={0x24, 0x28, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffff}, {0x6, 0xfff3}, {0x6, 0x8}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', @random="0200073bcd1e"}) 975.354403ms ago: executing program 2 (id=3684): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040040) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x600) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e24, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x3e, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x40000}, 0x1, {[0x5, 0x2, 0xe, 0x7f, 0x62, 0x4, 0x8, 0x5]}}, 0x5c) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 889.247311ms ago: executing program 0 (id=3685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffffe50c"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007280), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x24, r4, 0x9, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0bf9519f", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf253f0000000c0099009a0000007c000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f00000001c0)={&(0x7f0000000180)=[{&(0x7f0000000000)="df032ed8c9551445daf02163196d4152492f094836bb301e9dc9ad82e6eb536ef95b761878215f896aebfd3a162502162c9ce98f3d0b6c419d722c46327c8f4f34d478309ef33577e86518572fe7aa", 0x4f}, {&(0x7f0000000080)="c2eb64ba58417218212cc60d0ac01f8f13a3f2f70053a1538f10aab8be5667ad5913f212a471a6a6fb2e9639719bd5d7942e661ee161ffabd77ce5ee41b873db520ff5765665e7789d2d312065806219b1f9c35fd0c4b279743a21a9a810f1ac638ab849e71a28a01e7e2b0e052f92c5163d3acaa4a1bb257b86a912ddc3685b671784a37b1afdc2f1d2ab5d850134881aaaa483fd3ce443a75f5426ff78ddf6", 0xa0}, {&(0x7f0000000500)="f9e57c95848a9f1db30175793a858f01553aa3052022a72fe96e5a1154278994187033fa22e153ef95472a0b39e079fa79e74649a71a6d76cf97ea3447bfb0829b47c4d0db61d5dc2dc05ae5ce2efa206e1be6f049bfaad685be201267d0ab210e6d599e8e31833f141d3e62d070355b44e46cb8647249524cb40fb96f9703fc8ebe02962ad53d64fcfb10d4b7e3fa18f15a9b7096c516c0a594d1d128e6c91c39bfabbcab4d3ae29aa3e4f608eade605ffebb2ec9c8bc142264fb6c07ae8fab86a6aa5fd2523dc8b11fe0cb", 0xcc}], 0x3, 0x7, 0x0, 0x6, 0x6e5f5b50, 0x0, 0x7, 0xfe0000}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) 606.703414ms ago: executing program 2 (id=3686): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x130, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1f0, 0x1f0, 0x200, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x1, 0x5}, 0x10001, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r2, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async, rerun: 64) r3 = accept(r1, 0x0, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) (async) clock_gettime(0x2, &(0x7f0000000280)) 104.547355ms ago: executing program 2 (id=3687): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0xfc, 0x0}, 0x80}]}]}}}}}}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0001009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000e00)={0x48, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x48}}, 0x20000040) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x80, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, 'q$\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '[&$-+\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x54) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x13, 0xa, 0x0, 0x6}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d00000080", 0x5}], 0x2, &(0x7f0000000100)=ANY=[], 0xd}, 0x20000810) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="24005a8020000180140003000000000000001400010000000000000004000200040001"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xa0, 0x0, [{@empty}, {}, {@multicast2}, {}, {@private}, {@broadcast}, {@empty}, {@dev}, {@dev}, {@dev}]}}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400080003010101000000000000000007000007"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000030000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 4 (id=3688): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r6, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x14, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x18}}], 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x4c, r0, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r13 = socket$nl_crypto(0x10, 0x3, 0x15) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', r4, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r15 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r16 = accept(r13, &(0x7f00000002c0)=@caif=@dgm, &(0x7f0000000180)=0x80) sendmsg$IPCTNL_MSG_CT_NEW(r16, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001980)={0x170, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_TUPLE_REPLY={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_NAT_DST={0xd8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x101}]}, 0x170}, 0x1, 0x0, 0x0, 0x84}, 0x880) sendmsg$netlink(r13, &(0x7f0000001700)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000001740)=ANY=[@ANYBLOB="010000800000000027bd7000fedbdf250c001d000c08c4944d9ad0b8872064dc70250009000000091400b10000000000d369e34bbbcba9308208b519c240a1a652a797a29200c4ab5c2adf5c8f8413a8287c3f8c6d537568f27159db99a66c37fd6771dfef63af97df0157e68f1ed9fa701db3ae13ffc6566534f1b3d25408bac54ebae576ecf4bf2122a7921a09c4561568df889f1aedf82164f688e496a1a4873942d9bf2bd554833a5bb126a6f432a75350bf8a12b42f1d0dfd3d0d06f2fac298da3510adc05f70c7416ab61db45ec3fea0c32dff443572a3d9dc72747cf96510c72f7a7e3d8b340c86"], 0x30}, {&(0x7f0000000480)={0x1024, 0x2d, 0x1, 0x70bd26, 0x25dfdbfd, "", [@typed={0x14, 0x112, 0x0, 0x0, @ipv6=@mcast2}, @generic, @generic="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"]}, 0x1024}, {&(0x7f0000001840)={0x138, 0x1a, 0xc00, 0x70bd27, 0x25dfdbfc, "", [@generic="779c25f0719eb0bf4b96606533803c5707fcac327093168e8edfec3e047dd93d31038c2c62e32fec", @generic="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"]}, 0x138}], 0x3, &(0x7f0000001640)=[@rights={{0x28, 0x1, 0x1, [r10, r10, r14, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r10, 0xffffffffffffffff, r15, 0xffffffffffffffff, r10]}}, @rights={{0x1c, 0x1, 0x1, [r10, r14, r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x90, 0x400c000}, 0x80) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) kernel console output (not intermixed with test programs): 425.711780][T15011] ___sys_sendmsg+0x2a5/0x360 [ 425.711802][T15011] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.711848][T15011] ? __fget_files+0x2a/0x420 [ 425.711872][T15011] ? __fget_files+0x3a0/0x420 [ 425.711905][T15011] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.711923][T15011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.711948][T15011] ? __pfx_ksys_write+0x10/0x10 [ 425.711976][T15011] do_syscall_64+0x14d/0xf80 [ 425.711992][T15011] ? trace_irq_disable+0x3b/0x150 [ 425.712016][T15011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.712032][T15011] ? clear_bhb_loop+0x40/0x90 [ 425.712052][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.712069][T15011] RIP: 0033:0x7f0c3ad9c799 [ 425.712094][T15011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.712109][T15011] RSP: 002b:00007f0c3bd2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.712128][T15011] RAX: ffffffffffffffda RBX: 00007f0c3b015fa0 RCX: 00007f0c3ad9c799 [ 425.712140][T15011] RDX: 0000000024008084 RSI: 0000200000000300 RDI: 0000000000000003 [ 425.712151][T15011] RBP: 00007f0c3bd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 425.712161][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.712171][T15011] R13: 00007f0c3b016038 R14: 00007f0c3b015fa0 R15: 00007ffdaabd0808 [ 425.712198][T15011] [ 425.994954][T15016] netem: change failed [ 426.229512][T15022] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 426.301169][T15039] wg1: entered promiscuous mode [ 426.366583][T15039] wg1: entered allmulticast mode [ 426.389975][T15027] lo speed is unknown, defaulting to 1000 [ 426.664143][T15060] bond8: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 426.688013][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'. [ 426.720560][T15060] bond8 (unregistering): Released all slaves [ 426.757797][ T128] net_ratelimit: 3 callbacks suppressed [ 426.757880][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.772265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.781159][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.789519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.185773][T15027] lo speed is unknown, defaulting to 1000 [ 427.608738][T15090] lo speed is unknown, defaulting to 1000 [ 427.838299][T15100] Cannot find del_set index 4 as target [ 428.090635][T15090] lo speed is unknown, defaulting to 1000 [ 428.144510][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.177700][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.207936][T15105] netlink: 'syz.0.2531': attribute type 13 has an invalid length. [ 428.219229][T15105] netlink: 'syz.0.2531': attribute type 17 has an invalid length. [ 428.228783][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.239260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.297330][T15105] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 428.402651][T15108] bond0: Caught tx_queue_len zero misconfig [ 428.950337][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2534'. [ 429.371237][T15134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2535'. [ 429.573087][ T25] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 330 seconds [ 429.584699][ T25] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 330 seconds [ 429.601218][ T25] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 330 seconds [ 429.612722][ T25] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 330 seconds [ 429.792365][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2539'. [ 429.816067][T15145] siw: device registration error -23 [ 429.951298][T15151] Cannot find del_set index 4 as target [ 429.965223][T15154] ip6erspan0: entered allmulticast mode [ 430.038641][T15156] netlink: 'syz.4.2544': attribute type 1 has an invalid length. [ 430.089431][T15161] netlink: 'syz.3.2545': attribute type 12 has an invalid length. [ 430.098655][T15161] netlink: 'syz.3.2545': attribute type 29 has an invalid length. [ 430.111975][T15161] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2545'. [ 430.124440][T15161] netlink: 'syz.3.2545': attribute type 2 has an invalid length. [ 430.132777][T15161] netlink: 'syz.3.2545': attribute type 3 has an invalid length. [ 430.147196][T15161] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2545'. [ 430.148526][T15156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2544'. [ 430.181154][T15165] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2547'. [ 430.216013][T15162] bond12: (slave geneve3): making interface the new active one [ 430.230327][T15162] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 430.238146][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2549'. [ 430.242230][ T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 430.258934][T15156] 8021q: adding VLAN 0 to HW filter on device bond12 [ 430.268900][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 430.278426][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 430.287538][ T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 430.392310][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 430.418286][T15179] tipc: Enabling of bearer rejected, failed to enable media [ 430.653888][T15194] Cannot find del_set index 4 as target [ 430.752586][T15196] syzkaller0: entered promiscuous mode [ 430.758225][T15196] syzkaller0: entered allmulticast mode [ 430.809929][T15199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2558'. [ 430.814385][T15203] netlink: 'syz.3.2559': attribute type 12 has an invalid length. [ 430.827390][T15203] netlink: 'syz.3.2559': attribute type 29 has an invalid length. [ 430.837298][T15203] netlink: 'syz.3.2559': attribute type 2 has an invalid length. [ 431.248527][T15212] bond8: (slave bridge5): making interface the new active one [ 431.277605][T15212] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 431.681256][T15256] syzkaller0: entered promiscuous mode [ 431.690868][T15256] syzkaller0: entered allmulticast mode [ 431.862408][ T165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.870865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.914121][T15269] tipc: Enabling of bearer rejected, failed to enable media [ 431.969556][T15272] rdma_rxe: rxe_newlink: failed to add lo [ 432.210844][T15288] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 432.481030][T15297] bridge0: port 3(team0) entered disabled state [ 432.488514][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.496290][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.612847][T15297] wg1: left promiscuous mode [ 432.629805][T15297] wg1: left allmulticast mode [ 432.750890][T15297] vlan0: left promiscuous mode [ 432.779384][T15297] gretap1: left promiscuous mode [ 432.784500][T15297] gretap1: left allmulticast mode [ 432.791892][T15297] vlan2: left promiscuous mode [ 432.797548][T15297] bridge0: left promiscuous mode [ 432.820104][T15297] vlan3: left promiscuous mode [ 432.824925][T15297] geneve1: left promiscuous mode [ 432.832089][T15297] geneve3: left promiscuous mode [ 432.838875][T15297] ipvlan3: left allmulticast mode [ 432.843919][T15297] batadv_slave_1: left allmulticast mode [ 432.855136][T15297] bond3: left promiscuous mode [ 432.860537][T15297] bond3: left allmulticast mode [ 432.876734][T15297] bond6: left promiscuous mode [ 432.881843][T15297] bond7: left promiscuous mode [ 432.887718][T15297] erspan1: left promiscuous mode [ 432.892874][T15297] bond7: left allmulticast mode [ 432.900276][T15297] erspan1: left allmulticast mode [ 432.911786][T15303] tipc: Enabled bearer , priority 10 [ 432.928275][ T5924] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 432.957838][ T5924] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 432.986611][ T5924] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.015967][ T5924] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 433.027821][ T5924] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 433.038703][ T5924] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.063816][ T5924] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 433.081154][ T5924] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 433.128347][ T5924] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.176588][ T5924] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 433.185095][ T5924] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 433.234913][ T5924] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.550724][T15351] validate_nla: 12 callbacks suppressed [ 433.550746][T15351] netlink: 'syz.3.2600': attribute type 12 has an invalid length. [ 433.576987][T15351] netlink: 'syz.3.2600': attribute type 29 has an invalid length. [ 433.585357][T15351] netlink: 'syz.3.2600': attribute type 2 has an invalid length. [ 433.594774][T15351] netlink: 'syz.3.2600': attribute type 3 has an invalid length. [ 433.663969][T15358] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 433.701584][T15358] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 433.738563][T15355] netlink: 'syz.0.2601': attribute type 7 has an invalid length. [ 433.858791][T15366] lo speed is unknown, defaulting to 1000 [ 433.892259][T15367] lo: Caught tx_queue_len zero misconfig [ 434.036550][T12222] tipc: Node number set to 505394325 [ 434.139988][T15366] lo speed is unknown, defaulting to 1000 [ 434.717882][T15388] __nla_validate_parse: 17 callbacks suppressed [ 434.717908][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2612'. [ 434.778716][T15391] netlink: 'syz.4.2613': attribute type 12 has an invalid length. [ 434.786788][T15391] netlink: 'syz.4.2613': attribute type 29 has an invalid length. [ 434.794658][T15391] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2613'. [ 434.804554][T15391] netlink: 'syz.4.2613': attribute type 2 has an invalid length. [ 434.812907][T15391] netlink: 'syz.4.2613': attribute type 3 has an invalid length. [ 434.820899][T15391] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2613'. [ 435.250444][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 435.259568][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 435.286179][T15402] macsec2: entered promiscuous mode [ 435.291809][T15402] macsec2: entered allmulticast mode [ 436.106562][T15322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.338480][ T11] block nbd1: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 300 seconds [ 436.349454][ T11] block nbd1: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 300 seconds [ 436.360887][ T11] block nbd1: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 300 seconds [ 436.372043][ T11] block nbd1: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 300 seconds [ 436.509932][T15440] smc: removing ib device syz0 [ 436.701120][T15446] Cannot find del_set index 4 as target [ 437.232240][T15462] macsec3: entered promiscuous mode [ 437.466030][T15469] netlink: 'syz.3.2636': attribute type 13 has an invalid length. [ 438.072184][T15490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2639'. [ 438.216100][T15494] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 438.374551][T15509] Cannot find del_set index 4 as target [ 438.562746][T15499] lo speed is unknown, defaulting to 1000 [ 438.614617][T15520] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2646'. [ 439.054947][T15534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2650'. [ 439.172037][T15533] lo speed is unknown, defaulting to 1000 [ 439.284867][T15530] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 439.311061][T15534] xfrm1: entered allmulticast mode [ 439.377574][T15539] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.385610][T15539] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 439.412319][T15546] netlink: 65173 bytes leftover after parsing attributes in process `syz.1.2653'. [ 439.479563][T15551] netlink: 616 bytes leftover after parsing attributes in process `syz.2.2652'. [ 439.532090][T15553] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 439.739843][T15556] lo speed is unknown, defaulting to 1000 [ 439.745665][T15560] Cannot find del_set index 4 as target [ 439.882915][T15564] __nla_validate_parse: 1 callbacks suppressed [ 439.882936][T15564] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2657'. [ 439.901296][T15564] netlink: 245 bytes leftover after parsing attributes in process `syz.4.2657'. [ 439.968702][T15572] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2660'. [ 440.319947][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 440.333220][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 440.348091][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 440.360397][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 440.364379][T15593] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 440.376954][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 440.392634][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2664'. [ 440.399866][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 440.412965][T15593] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 440.534975][T15593] 8021q: adding VLAN 0 to HW filter on device bond14 [ 440.560640][T15596] bond14: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 440.774552][T15603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.844705][T15603] x_tables: duplicate underflow at hook 3 [ 440.852587][T15605] lo speed is unknown, defaulting to 1000 [ 441.031864][T15613] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 441.050867][T15613] syzkaller1: linktype set to 825 [ 441.067215][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 441.115209][T15615] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 441.143282][T15615] bond9 (unregistering): Released all slaves [ 441.447337][T15633] netlink: 'syz.0.2673': attribute type 2 has an invalid length. [ 441.507902][T15630] geneve4: entered promiscuous mode [ 441.518589][ T1104] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.546931][ T1104] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.559812][ T1104] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.569108][ T1104] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.739041][T15645] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 441.858198][T15650] IPv6: Can't replace route, no match found [ 441.889163][T15645] bond15: entered promiscuous mode [ 441.895013][T15650] IPv6: Can't replace route, no match found [ 441.916992][T15645] 8021q: adding VLAN 0 to HW filter on device bond15 [ 441.969183][T15647] 8021q: adding VLAN 0 to HW filter on device bond15 [ 441.978248][T15647] bond15: (slave wireguard0): The slave device specified does not support setting the MAC address [ 441.992036][T15647] bond15: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 442.008210][T15647] bond15: (slave wireguard0): making interface the new active one [ 442.016654][T15647] wireguard0: entered promiscuous mode [ 442.024111][T15647] bond15: (slave wireguard0): Enslaving as an active interface with an up link [ 442.258448][T15627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.556140][T15674] bond8 (unregistering): Released all slaves [ 443.139927][T15705] openvswitch: netlink: Message has 4 unknown bytes. [ 443.147218][T15705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.544847][T15710] wg1: entered promiscuous mode [ 443.552648][T15710] wg1: entered allmulticast mode [ 443.689310][T15694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.693159][T15721] x_tables: duplicate underflow at hook 3 [ 443.912289][T15731] netlink: 'syz.3.2704': attribute type 1 has an invalid length. [ 443.938096][T15731] netlink: 'syz.3.2704': attribute type 1 has an invalid length. [ 443.964104][T15738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.142638][T15744] tipc: Started in network mode [ 444.158045][T15744] tipc: Node identity 5eab4f8026a8, cluster identity 4711 [ 444.165529][T15744] tipc: Enabled bearer , priority 0 [ 444.262812][T15744] syzkaller0: entered promiscuous mode [ 444.277368][T15744] syzkaller0: entered allmulticast mode [ 444.297406][T15744] tipc: Resetting bearer [ 444.325115][T15743] tipc: Resetting bearer [ 444.427163][T15755] Cannot find del_set index 4 as target [ 445.875209][T15743] tipc: Disabling bearer [ 445.898766][T15764] __nla_validate_parse: 121 callbacks suppressed [ 445.898787][T15764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2710'. [ 445.923754][ T5914] tipc: Node number set to 2013482880 [ 446.008634][T15769] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2712'. [ 446.191788][T15785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.208991][T15785] hsr0: entered promiscuous mode [ 446.225075][T15785] hsr0: entered allmulticast mode [ 446.237185][T15785] hsr_slave_1: entered allmulticast mode [ 446.244789][T15776] lo speed is unknown, defaulting to 1000 [ 446.748090][T15798] netlink: 'syz.2.2719': attribute type 10 has an invalid length. [ 446.768942][T15798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.788526][T15798] team0: Port device bond0 added [ 446.807486][T15769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.177468][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2725'. [ 447.406333][T15831] bridge4: entered promiscuous mode [ 447.422760][T15831] bridge4: entered allmulticast mode [ 447.472531][T15831] team0: Port device bridge4 added [ 447.493025][T15836] bridge0: port 3(team0) entered blocking state [ 447.515162][T15836] bridge0: port 3(team0) entered disabled state [ 447.549671][T15836] team0: entered allmulticast mode [ 447.570472][T15836] team_slave_0: entered allmulticast mode [ 447.593550][T15836] team_slave_1: entered allmulticast mode [ 447.615051][T15836] bond0: entered allmulticast mode [ 447.632335][T15836] bond_slave_0: entered allmulticast mode [ 447.652159][T15836] bond_slave_1: entered allmulticast mode [ 447.685008][T15836] team0: left allmulticast mode [ 447.690686][T15836] team_slave_0: left allmulticast mode [ 447.734379][T15836] team_slave_1: left allmulticast mode [ 447.740356][T15836] bond0: left allmulticast mode [ 447.745354][T15836] bond_slave_0: left allmulticast mode [ 447.751475][T15836] bond_slave_1: left allmulticast mode [ 447.768440][T15847] hsr0: Caught tx_queue_len zero misconfig [ 447.795333][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2733'. [ 447.813544][T15839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2732'. [ 448.551912][T15910] netlink: 'syz.1.2747': attribute type 61 has an invalid length. [ 448.586040][T15910] bond11: option fail_over_mac: invalid value (127) [ 448.614569][T15910] bond11 (unregistering): Released all slaves [ 448.748230][ T29] audit: type=1800 audit(1773320992.690:10): pid=15900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2744" name="memory.events" dev="tmpfs" ino=2795 res=0 errno=0 [ 448.753609][T15919] geneve4: entered promiscuous mode [ 448.813183][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.829948][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.854381][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.870993][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.985416][T15932] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 449.053900][T15935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 449.091074][T15928] lo speed is unknown, defaulting to 1000 [ 449.802656][T15972] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 449.879105][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2765'. [ 450.125357][T15982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'. [ 450.193678][T15972] infiniband syz0: set down [ 450.198610][T15972] infiniband syz0: added bond_slave_0 [ 450.198913][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 450.291496][T15972] RDS/IB: syz0: added [ 450.296624][T15972] smc: adding ib device syz0 with port count 1 [ 450.304407][T15972] smc: ib device syz0 port 1 has no pnetid [ 450.367204][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2772'. [ 450.808788][T16007] netlink: 'syz.1.2775': attribute type 1 has an invalid length. [ 450.898472][T16007] bond11: (slave geneve2): making interface the new active one [ 450.993491][T16007] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 451.024074][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.033102][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.053594][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.072973][T16007] __nla_validate_parse: 2 callbacks suppressed [ 451.072992][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2775'. [ 451.096521][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.117273][T16013] netlink: 'syz.2.2776': attribute type 1 has an invalid length. [ 451.126124][T16007] 8021q: adding VLAN 0 to HW filter on device bond11 [ 451.184774][T16015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.202503][T16013] bond7: entered promiscuous mode [ 451.215620][T16013] 8021q: adding VLAN 0 to HW filter on device bond7 [ 451.325693][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2779'. [ 451.382018][T16013] bond7: (slave bridge5): making interface the new active one [ 451.401394][T16013] bridge5: entered promiscuous mode [ 451.419557][T16013] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 451.700772][T16036] netlink: 'syz.1.2784': attribute type 1 has an invalid length. [ 451.778756][T16036] bond12: entered promiscuous mode [ 451.784222][T16036] 8021q: adding VLAN 0 to HW filter on device bond12 [ 451.860214][T16037] tipc: Resetting bearer [ 451.891384][ T5914] lo speed is unknown, defaulting to 1000 [ 451.913749][T16046] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 452.276754][T16060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.431981][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.442317][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.459539][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.477680][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.485920][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.639814][T16069] lo speed is unknown, defaulting to 1000 [ 452.648493][T16072] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2792'. [ 452.692419][T16076] lo speed is unknown, defaulting to 1000 [ 452.774176][T16077] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 453.192226][T16088] netlink: 'syz.3.2796': attribute type 10 has an invalid length. [ 453.310933][T16091] netlink: 'syz.3.2797': attribute type 1 has an invalid length. [ 453.319843][T16091] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2797'. [ 453.329999][T16093] netlink: 'syz.3.2797': attribute type 1 has an invalid length. [ 453.341999][T16093] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2797'. [ 453.434685][T16069] chnl_net:caif_netlink_parms(): no params data found [ 453.763571][T16069] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.771131][T16069] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.781247][T16069] bridge_slave_0: entered allmulticast mode [ 453.793663][T16069] bridge_slave_0: entered promiscuous mode [ 453.800172][T16107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2800'. [ 453.824327][T16069] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.832019][T16069] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.839595][T16069] bridge_slave_1: entered allmulticast mode [ 453.902571][T16069] bridge_slave_1: entered promiscuous mode [ 454.085553][T16069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.118751][T16069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.138350][T16119] netlink: 'syz.4.2803': attribute type 1 has an invalid length. [ 454.176715][T16119] bond16: entered promiscuous mode [ 454.182369][T16119] 8021q: adding VLAN 0 to HW filter on device bond16 [ 454.203568][T16069] team0: Port device team_slave_0 added [ 454.234819][T16119] bond16: (slave bridge9): making interface the new active one [ 454.243370][T16119] bridge9: entered promiscuous mode [ 454.250428][T16119] bond16: (slave bridge9): Enslaving as an active interface with an up link [ 454.304467][T16069] team0: Port device team_slave_1 added [ 454.422995][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'. [ 454.434957][T16069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.447012][T16069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.516579][T16069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.561599][T16069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.574001][T16069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.603504][ T5847] Bluetooth: hci5: command tx timeout [ 454.610603][T16069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.648246][T16130] vlan0: entered promiscuous mode [ 454.718407][T16126] lo speed is unknown, defaulting to 1000 [ 454.735253][T16069] hsr_slave_0: entered promiscuous mode [ 454.754962][T16069] hsr_slave_1: entered promiscuous mode [ 454.767374][T16069] debugfs: 'hsr0' already exists in 'hsr' [ 454.774552][T16069] Cannot create hsr debugfs directory [ 454.880479][T16135] lo speed is unknown, defaulting to 1000 [ 455.053836][T16148] lo speed is unknown, defaulting to 1000 [ 455.165796][T16153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2811'. [ 455.225570][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 455.251549][T16153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2811'. [ 455.725642][T16160] lo speed is unknown, defaulting to 1000 [ 455.828773][T16166] syzkaller1: entered promiscuous mode [ 455.834337][T16166] syzkaller1: entered allmulticast mode [ 456.187852][T16069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 456.201111][T16069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 456.221770][T16069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 456.235104][T16069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 456.455920][T16069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.481416][T16069] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.494765][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.502065][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.525517][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.532793][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.658081][ T5847] Bluetooth: hci5: command tx timeout [ 457.326166][T16069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.500407][T16069] veth0_vlan: entered promiscuous mode [ 457.525938][T16069] veth1_vlan: entered promiscuous mode [ 457.693572][T16069] veth0_macvtap: entered promiscuous mode [ 457.769905][T16069] veth1_macvtap: entered promiscuous mode [ 457.833281][T16069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.860109][T16069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.884339][ T1104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.907629][ T1104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.926438][ T1104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.958826][ T1104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.150849][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.181005][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.240636][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.255767][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.762324][T16229] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 458.765567][ T5847] Bluetooth: hci5: command tx timeout [ 458.801843][T16229] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002 [ 459.131926][T16246] __nla_validate_parse: 130 callbacks suppressed [ 459.131948][T16246] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2833'. [ 459.467993][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'. [ 459.542624][T16272] FAULT_INJECTION: forcing a failure. [ 459.542624][T16272] name failslab, interval 1, probability 0, space 0, times 0 [ 459.555810][T16272] CPU: 0 UID: 0 PID: 16272 Comm: syz.4.2841 Not tainted syzkaller #0 PREEMPT(full) [ 459.555840][T16272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 459.555853][T16272] Call Trace: [ 459.555862][T16272] [ 459.555870][T16272] dump_stack_lvl+0xe8/0x150 [ 459.555909][T16272] should_fail_ex+0x412/0x560 [ 459.555945][T16272] should_failslab+0xa8/0x100 [ 459.555974][T16272] __kmalloc_cache_noprof+0x88/0x660 [ 459.555995][T16272] ? tipc_net+0x45/0x270 [ 459.556110][T16272] ? tipc_nametbl_lookup_group+0x793/0xc20 [ 459.556138][T16272] tipc_nametbl_lookup_group+0x793/0xc20 [ 459.556169][T16272] ? tipc_nametbl_lookup_group+0xac/0xc20 [ 459.556194][T16272] __tipc_sendmsg+0x108d/0x2bf0 [ 459.556295][T16272] ? __pfx___tipc_sendmsg+0x10/0x10 [ 459.556319][T16272] ? tomoyo_check_open_permission+0x1d3/0x470 [ 459.556415][T16272] ? aa_label_sk_perm+0x532/0x6e0 [ 459.556469][T16272] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 459.556493][T16272] ? __lock_acquire+0x6b5/0x2cf0 [ 459.556536][T16272] ? __lock_acquire+0x6b5/0x2cf0 [ 459.556612][T16272] ? tipc_sendmsg+0x47/0x70 [ 459.556650][T16272] ? __local_bh_enable_ip+0xd0/0x130 [ 459.556681][T16272] tipc_sendmsg+0x55/0x70 [ 459.556710][T16272] ____sys_sendmsg+0x972/0x9f0 [ 459.556743][T16272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.556773][T16272] ? import_iovec+0x73/0xa0 [ 459.556808][T16272] ___sys_sendmsg+0x2a5/0x360 [ 459.556834][T16272] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.556896][T16272] ? __fget_files+0x2a/0x420 [ 459.556923][T16272] ? __fget_files+0x3a0/0x420 [ 459.556963][T16272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 459.556986][T16272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.557018][T16272] ? __pfx_ksys_write+0x10/0x10 [ 459.557053][T16272] do_syscall_64+0x14d/0xf80 [ 459.557073][T16272] ? trace_irq_disable+0x3b/0x150 [ 459.557101][T16272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.557122][T16272] ? clear_bhb_loop+0x40/0x90 [ 459.557146][T16272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.557166][T16272] RIP: 0033:0x7f6eda19c799 [ 459.557186][T16272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.557202][T16272] RSP: 002b:00007f6ed83ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.557225][T16272] RAX: ffffffffffffffda RBX: 00007f6eda415fa0 RCX: 00007f6eda19c799 [ 459.557239][T16272] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 459.557252][T16272] RBP: 00007f6ed83ee090 R08: 0000000000000000 R09: 0000000000000000 [ 459.557264][T16272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.557276][T16272] R13: 00007f6eda416038 R14: 00007f6eda415fa0 R15: 00007fff8dac6ac8 [ 459.557311][T16272] [ 459.580173][T16273] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 460.024724][ T25] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 360 seconds [ 460.037353][ T25] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 360 seconds [ 460.048518][ T25] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 360 seconds [ 460.060118][ T25] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 360 seconds [ 460.415207][T16302] syzkaller0: entered promiscuous mode [ 460.447218][T16302] syzkaller0: entered allmulticast mode [ 460.496091][T16317] FAULT_INJECTION: forcing a failure. [ 460.496091][T16317] name failslab, interval 1, probability 0, space 0, times 0 [ 460.509874][T16317] CPU: 0 UID: 0 PID: 16317 Comm: syz.0.2852 Not tainted syzkaller #0 PREEMPT(full) [ 460.509903][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 460.509915][T16317] Call Trace: [ 460.509924][T16317] [ 460.509933][T16317] dump_stack_lvl+0xe8/0x150 [ 460.509968][T16317] should_fail_ex+0x412/0x560 [ 460.510002][T16317] should_failslab+0xa8/0x100 [ 460.510032][T16317] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 460.510054][T16317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.510076][T16317] ? __alloc_skb+0x1d0/0x7d0 [ 460.510111][T16317] __alloc_skb+0x1d0/0x7d0 [ 460.510146][T16317] tipc_msg_create+0x51/0x4d0 [ 460.510253][T16317] tipc_group_proto_xmit+0xce/0x790 [ 460.510282][T16317] tipc_group_cong+0x4dc/0x5e0 [ 460.510306][T16317] ? __pfx_tipc_group_cong+0x10/0x10 [ 460.510324][T16317] ? lockdep_hardirqs_on+0x7a/0x110 [ 460.510371][T16317] ? tipc_dest_pop+0x19c/0x230 [ 460.510398][T16317] __tipc_sendmsg+0x1046/0x2bf0 [ 460.510448][T16317] ? __pfx___tipc_sendmsg+0x10/0x10 [ 460.510473][T16317] ? tomoyo_check_open_permission+0x1d3/0x470 [ 460.510498][T16317] ? aa_label_sk_perm+0x532/0x6e0 [ 460.510534][T16317] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 460.510559][T16317] ? __lock_acquire+0x6b5/0x2cf0 [ 460.510588][T16317] ? __lock_acquire+0x6b5/0x2cf0 [ 460.510665][T16317] ? tipc_sendmsg+0x47/0x70 [ 460.510697][T16317] ? __local_bh_enable_ip+0xd0/0x130 [ 460.510729][T16317] tipc_sendmsg+0x55/0x70 [ 460.510767][T16317] ____sys_sendmsg+0x972/0x9f0 [ 460.510799][T16317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.510830][T16317] ? import_iovec+0x73/0xa0 [ 460.510866][T16317] ___sys_sendmsg+0x2a5/0x360 [ 460.510893][T16317] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.510955][T16317] ? __fget_files+0x2a/0x420 [ 460.510984][T16317] ? __fget_files+0x3a0/0x420 [ 460.511025][T16317] __x64_sys_sendmsg+0x1bd/0x2a0 [ 460.511049][T16317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.511080][T16317] ? __pfx_ksys_write+0x10/0x10 [ 460.511117][T16317] do_syscall_64+0x14d/0xf80 [ 460.511136][T16317] ? trace_irq_disable+0x3b/0x150 [ 460.511163][T16317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.511184][T16317] ? clear_bhb_loop+0x40/0x90 [ 460.511210][T16317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.511230][T16317] RIP: 0033:0x7f30ddb9c799 [ 460.511251][T16317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.511267][T16317] RSP: 002b:00007f30dbdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.511290][T16317] RAX: ffffffffffffffda RBX: 00007f30dde15fa0 RCX: 00007f30ddb9c799 [ 460.511305][T16317] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 460.511318][T16317] RBP: 00007f30dbdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 460.511330][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.511342][T16317] R13: 00007f30dde16038 R14: 00007f30dde15fa0 R15: 00007ffc0f898458 [ 460.511376][T16317] [ 460.816837][ T5847] Bluetooth: hci5: command tx timeout [ 460.849211][T16313] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2851'. [ 460.858445][T16313] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2851'. [ 461.213720][T16344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2858'. [ 462.654909][T16330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2857'. [ 462.827053][T16359] nbd: must specify an index to disconnect [ 463.014398][T16376] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.2870'. [ 463.450272][T16378] vlan2: entered promiscuous mode [ 463.464530][T16378] bridge0: entered promiscuous mode [ 463.641388][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'. [ 463.729204][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'. [ 463.786327][T16400] netlink: 'syz.4.2877': attribute type 12 has an invalid length. [ 463.819773][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'. [ 463.934230][T16412] netlink: 'syz.3.2878': attribute type 13 has an invalid length. [ 464.225979][T16433] lo speed is unknown, defaulting to 1000 [ 464.871501][T16460] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 464.962100][T16462] netlink: 'syz.1.2893': attribute type 1 has an invalid length. [ 465.024543][T16462] netlink: 'syz.1.2893': attribute type 15 has an invalid length. [ 465.034993][T16462] __nla_validate_parse: 2 callbacks suppressed [ 465.035011][T16462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2893'. [ 465.124517][T16462] bond13: (slave bridge6): making interface the new active one [ 465.133228][T16462] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 465.149365][T16464] macvlan2: entered promiscuous mode [ 465.154774][T16464] macvlan2: entered allmulticast mode [ 465.163845][T16464] bond13: entered promiscuous mode [ 465.169411][T16464] bridge6: entered promiscuous mode [ 465.175368][T16464] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 465.183574][T16464] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 465.199871][T16464] bond13: left promiscuous mode [ 465.205148][T16464] bridge6: left promiscuous mode [ 465.462438][T16473] bpq0: left promiscuous mode [ 465.467450][T16473] bpq0: left allmulticast mode [ 466.426735][ T11] block nbd1: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 330 seconds [ 466.442834][ T11] block nbd1: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 330 seconds [ 466.454035][ T11] block nbd1: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 330 seconds [ 466.465144][ T11] block nbd1: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 330 seconds [ 466.510656][T16485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2898'. [ 466.772778][T16401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.935502][T16488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2899'. [ 466.974629][T16490] netlink: 'syz.2.2900': attribute type 1 has an invalid length. [ 467.228869][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 467.238475][T16513] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 467.246239][T16513] netlink: 'syz.2.2907': attribute type 2 has an invalid length. [ 467.324617][T16522] netlink: 'syz.4.2909': attribute type 21 has an invalid length. [ 467.332687][T16522] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2909'. [ 467.367140][T16522] netlink: 'syz.4.2909': attribute type 4 has an invalid length. [ 467.377672][T16522] netlink: 'syz.4.2909': attribute type 3 has an invalid length. [ 467.385623][T16522] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2909'. [ 467.411650][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'. [ 467.473257][T16524] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.481071][T16524] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.595443][T16524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.615696][T16524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.724474][T16524] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 467.759633][T16524] vlan2: left promiscuous mode [ 467.764627][T16524] bridge0: left promiscuous mode [ 467.880920][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.907213][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.916241][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.991605][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.290591][T16559] tipc: Can't bind to reserved service type 2 [ 468.341659][ T5914] IPVS: starting estimator thread 0... [ 468.347898][T16559] netlink: 6856 bytes leftover after parsing attributes in process `syz.0.2922'. [ 468.377000][T16559] netlink: 6856 bytes leftover after parsing attributes in process `syz.0.2922'. [ 468.447117][T16561] IPVS: using max 28 ests per chain, 67200 per kthread [ 468.681772][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 468.949135][T16593] validate_nla: 1 callbacks suppressed [ 468.949224][T16593] netlink: 'syz.3.2930': attribute type 1 has an invalid length. [ 469.186956][T16570] 1ªX¹¦À: left allmulticast mode [ 469.302704][T16570] wg1: left promiscuous mode [ 469.308490][T16570] wg1: left allmulticast mode [ 469.323594][T16570] bond3: left promiscuous mode [ 469.331769][T16570] bond3: left allmulticast mode [ 469.338537][T16570] sit4: left allmulticast mode [ 469.344029][T16570] bond5: left promiscuous mode [ 469.349414][T16570] bond5: left allmulticast mode [ 469.355300][T16570] bond7: left promiscuous mode [ 469.361102][T16570] bridge7: left promiscuous mode [ 469.366788][T16570] bridge7: left allmulticast mode [ 469.372256][T16570] sit5: left promiscuous mode [ 469.411590][T16570] veth9: left promiscuous mode [ 469.426941][T16570] geneve2: left promiscuous mode [ 469.431951][T16570] geneve2: left allmulticast mode [ 469.717283][T16570] geneve4: left promiscuous mode [ 469.734231][T16570] bond15: left promiscuous mode [ 469.739303][T16570] wireguard0: left promiscuous mode [ 469.761122][T16570] bond16: left promiscuous mode [ 469.766010][T16570] bridge9: left promiscuous mode [ 469.835752][T16593] 8021q: adding VLAN 0 to HW filter on device bond9 [ 469.864801][T16595] bond9: (slave gretap2): making interface the new active one [ 469.890874][T16595] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 469.987136][T16597] bond9 (unregistering): (slave gretap2): Releasing active interface [ 470.055695][T16597] bond9 (unregistering): Released all slaves [ 470.087490][ T60] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.095932][ T60] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 470.126452][ T60] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 470.167561][T16604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.226798][T16601] syzkaller1: entered promiscuous mode [ 470.239922][T16601] syzkaller1: entered allmulticast mode [ 470.344715][T16625] veth1: entered allmulticast mode [ 470.355212][ T60] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.364439][ T60] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 470.378503][ T60] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 470.399758][ T60] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.413793][ T60] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 470.427412][ T60] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 470.436111][ T60] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.444898][ T60] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 470.453729][ T60] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 470.494932][T16637] lo speed is unknown, defaulting to 1000 [ 470.629593][T16647] xt_l2tp: wrong L2TP version: 0 [ 470.642722][T16647] __nla_validate_parse: 5 callbacks suppressed [ 470.642743][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 470.675563][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 470.930987][T16658] syzkaller1: entered promiscuous mode [ 470.936889][T16658] syzkaller1: entered allmulticast mode [ 471.265930][T16674] bridge10: entered allmulticast mode [ 471.651997][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2957'. [ 471.877203][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2962'. [ 472.002608][T16714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2965'. [ 472.306243][T16735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2968'. [ 472.334468][T16735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2968'. [ 472.628491][T16753] wg2: Caught tx_queue_len zero misconfig [ 472.670867][T16754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2971'. [ 472.751704][T16752] macvlan1: entered promiscuous mode [ 472.757512][T16752] macvlan1: entered allmulticast mode [ 472.763551][T16752] veth1_vlan: entered allmulticast mode [ 473.153050][T16769] bridge10: left allmulticast mode [ 474.034725][T16780] netlink: 'syz.0.2981': attribute type 9 has an invalid length. [ 474.049511][T16781] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2979'. [ 474.086832][T16781] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 474.141739][T16781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2979'. [ 474.166254][T16784] syzkaller0: entered promiscuous mode [ 474.177595][T16784] syzkaller0: entered allmulticast mode [ 474.197838][T16781] tipc: Enabled bearer , priority 0 [ 474.389383][T16779] tipc: Resetting bearer [ 474.448501][T16779] tipc: Disabling bearer [ 474.604552][T16800] Cannot find set identified by id 65534 to match [ 474.761134][T16804] netlink: 'syz.1.2990': attribute type 1 has an invalid length. [ 474.906093][T16804] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 474.997679][T16804] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 475.054335][T16812] bond14: (slave bridge8): Enslaving as an active interface with a down link [ 475.122774][T16816] bond14: (slave bridge9): Enslaving as an active interface with a down link [ 475.254941][T16804] macvlan2: entered promiscuous mode [ 475.286641][T16804] macvlan2: entered allmulticast mode [ 475.580133][T16830] batadv_slave_0: entered promiscuous mode [ 475.589775][T16829] batadv_slave_0: left promiscuous mode [ 475.840612][T16838] __nla_validate_parse: 6 callbacks suppressed [ 475.840634][T16838] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3001'. [ 475.856161][T16838] netlink: 'syz.0.3001': attribute type 9 has an invalid length. [ 475.869156][T16838] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3001'. [ 475.897421][T16838] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3001'. [ 476.099272][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3007'. [ 476.718051][T16876] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 476.751973][T16877] erspan0: entered promiscuous mode [ 476.757498][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3014'. [ 476.965079][T16892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3020'. [ 476.984215][T16893] netlink: 'syz.4.3019': attribute type 9 has an invalid length. [ 477.012074][T16893] netlink: 'syz.4.3019': attribute type 10 has an invalid length. [ 477.080421][T16897] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 477.166183][T16903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3024'. [ 477.380807][T16914] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 477.517288][T16917] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 477.669482][T16922] dummy0: mtu less than device minimum [ 477.722136][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3030'. [ 477.741803][T16922] netlink: 121 bytes leftover after parsing attributes in process `syz.1.3030'. [ 477.753899][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 477.771402][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 477.774570][T16924] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 477.800201][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 477.825692][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 477.834013][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 477.991176][T16934] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3033'. [ 477.991458][T16928] lo speed is unknown, defaulting to 1000 [ 478.006584][T16934] 0ªX¹¦À: renamed from caif0 [ 478.024003][T16934] 0ªX¹¦À: entered allmulticast mode [ 478.048525][T16934] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 478.249531][T16944] netlink: 'syz.0.3036': attribute type 1 has an invalid length. [ 478.432687][T16944] bond1: (slave veth5): Enslaving as an active interface with a down link [ 478.491023][T16950] bond1: (slave dummy0): making interface the new active one [ 478.508326][T16950] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 478.565087][T16953] bond1: (slave dummy0): Releasing active interface [ 478.774021][T16961] batman_adv: batadv0: Adding interface: wlan1 [ 478.781210][T16961] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.810706][T16961] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 478.879124][T16964] syzkaller0: entered promiscuous mode [ 478.895094][T16964] syzkaller0: entered allmulticast mode [ 479.261755][T16928] chnl_net:caif_netlink_parms(): no params data found [ 479.412972][T16994] xt_hashlimit: size too large, truncated to 1048576 [ 479.506435][T16928] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.516499][T16928] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.523816][T16928] bridge_slave_0: entered allmulticast mode [ 479.548456][T16928] bridge_slave_0: entered promiscuous mode [ 479.568711][T16928] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.577600][T16928] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.585280][T16928] bridge_slave_1: entered allmulticast mode [ 479.608482][T16928] bridge_slave_1: entered promiscuous mode [ 479.627232][T17002] xt_hashlimit: size too large, truncated to 1048576 [ 479.714981][T16928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.787655][T16928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.862337][ T5847] Bluetooth: hci3: command tx timeout [ 479.869820][T16999] ¾x9ÿ: renamed from bridge_slave_0 [ 479.986121][T16928] team0: Port device team_slave_0 added [ 480.010052][T16928] team0: Port device team_slave_1 added [ 480.100870][T16928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.111654][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.146736][T16928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.177623][T17013] Cannot find del_set index 4 as target [ 480.188332][T16928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.195356][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.222265][T16928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.358111][T16928] hsr_slave_0: entered promiscuous mode [ 480.358203][T17021] FAULT_INJECTION: forcing a failure. [ 480.358203][T17021] name failslab, interval 1, probability 0, space 0, times 0 [ 480.364829][T16928] hsr_slave_1: entered promiscuous mode [ 480.395828][T17021] CPU: 0 UID: 0 PID: 17021 Comm: syz.0.3054 Not tainted syzkaller #0 PREEMPT(full) [ 480.395857][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 480.395870][T17021] Call Trace: [ 480.395878][T17021] [ 480.395886][T17021] dump_stack_lvl+0xe8/0x150 [ 480.395920][T17021] should_fail_ex+0x412/0x560 [ 480.395963][T17021] should_failslab+0xa8/0x100 [ 480.395992][T17021] __kmalloc_noprof+0xe8/0x760 [ 480.396015][T17021] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 480.396052][T17021] tomoyo_realpath_from_path+0xe3/0x5d0 [ 480.396092][T17021] ? tomoyo_path_number_perm+0x219/0x630 [ 480.396117][T17021] tomoyo_path_number_perm+0x246/0x630 [ 480.396144][T17021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 480.396172][T17021] ? __lock_acquire+0x6b5/0x2cf0 [ 480.396212][T17021] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 480.396259][T17021] ? __fget_files+0x2a/0x420 [ 480.396292][T17021] ? __fget_files+0x2a/0x420 [ 480.396319][T17021] ? __fget_files+0x3a0/0x420 [ 480.396350][T17021] ? __fget_files+0x2a/0x420 [ 480.396383][T17021] security_file_ioctl+0xc3/0x2a0 [ 480.396470][T17021] __se_sys_ioctl+0x47/0x170 [ 480.396509][T17021] do_syscall_64+0x14d/0xf80 [ 480.396528][T17021] ? trace_irq_disable+0x3b/0x150 [ 480.396557][T17021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.396578][T17021] ? clear_bhb_loop+0x40/0x90 [ 480.396602][T17021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.396620][T17021] RIP: 0033:0x7f30ddb9c799 [ 480.396639][T17021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.396656][T17021] RSP: 002b:00007f30dbdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.396679][T17021] RAX: ffffffffffffffda RBX: 00007f30dde15fa0 RCX: 00007f30ddb9c799 [ 480.396694][T17021] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 480.396707][T17021] RBP: 00007f30dbdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 480.396720][T17021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.396732][T17021] R13: 00007f30dde16038 R14: 00007f30dde15fa0 R15: 00007ffc0f898458 [ 480.396767][T17021] [ 480.402693][T16928] debugfs: 'hsr0' already exists in 'hsr' [ 480.430674][T17021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.499657][T16928] Cannot create hsr debugfs directory [ 480.745054][T17023] bond17: entered promiscuous mode [ 480.750812][T17023] bond17: entered allmulticast mode [ 480.757066][T17023] 8021q: adding VLAN 0 to HW filter on device bond17 [ 481.034636][T17042] __nla_validate_parse: 3 callbacks suppressed [ 481.034658][T17042] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3057'. [ 481.321775][T17058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'. [ 481.370291][T17060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3061'. [ 481.468550][T17063] Cannot find del_set index 4 as target [ 481.541930][T17069] siw: device registration error -23 [ 481.548334][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3065'. [ 481.722175][T17072] netlink: 'syz.3.3067': attribute type 6 has an invalid length. [ 481.939929][ T5847] Bluetooth: hci3: command tx timeout [ 482.034273][T16928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.065194][T16928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.066708][T17072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3067'. [ 482.088459][T16928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.114567][T16928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.127880][T17080] delete_channel: no stack [ 482.483651][T16928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.518301][T17101] Cannot find del_set index 4 as target [ 482.545480][T16928] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.573655][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.580907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.630420][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.637657][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.704903][T17105] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 482.822623][T17105] bond15: entered promiscuous mode [ 482.868914][T17105] 8021q: adding VLAN 0 to HW filter on device bond15 [ 483.332325][T16928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.429687][T16928] veth0_vlan: entered promiscuous mode [ 483.468156][T16928] veth1_vlan: entered promiscuous mode [ 483.523884][T17138] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3085'. [ 483.597778][T16928] veth0_macvtap: entered promiscuous mode [ 483.615637][T17138] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3085'. [ 483.656269][T17138] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3085'. [ 483.675097][T16928] veth1_macvtap: entered promiscuous mode [ 483.723010][T16928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.772676][T16928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.869799][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.880496][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.906256][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.951587][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.989587][T17148] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3090'. [ 484.024789][ T5847] Bluetooth: hci3: command tx timeout [ 484.259022][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.292226][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.347734][T17161] tipc: Enabled bearer , priority 0 [ 484.366526][T17161] syzkaller0: entered promiscuous mode [ 484.372047][T17161] syzkaller0: entered allmulticast mode [ 484.406309][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.435521][T17161] tipc: Resetting bearer [ 484.464911][T17160] tipc: Resetting bearer [ 484.479884][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.544304][T17160] tipc: Disabling bearer [ 484.669115][T17170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3097'. [ 484.913576][T17179] bond8: (slave bond0): Releasing active interface [ 484.997407][T17179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.019047][T17179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.097185][T17179] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 485.127592][T17179] bond0 (unregistering): Released all slaves [ 485.203665][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.226800][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.236826][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.254217][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.268073][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.432328][T17183] lo speed is unknown, defaulting to 1000 [ 485.464341][T17187] FAULT_INJECTION: forcing a failure. [ 485.464341][T17187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.497306][T17187] CPU: 1 UID: 0 PID: 17187 Comm: syz.1.3100 Not tainted syzkaller #0 PREEMPT(full) [ 485.497334][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 485.497356][T17187] Call Trace: [ 485.497364][T17187] [ 485.497373][T17187] dump_stack_lvl+0xe8/0x150 [ 485.497408][T17187] should_fail_ex+0x412/0x560 [ 485.497440][T17187] _copy_from_user+0x2d/0xb0 [ 485.497473][T17187] sock_do_ioctl+0x195/0x320 [ 485.497501][T17187] ? __pfx_sock_do_ioctl+0x10/0x10 [ 485.497523][T17187] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 485.497563][T17187] sock_ioctl+0x5c6/0x7f0 [ 485.497588][T17187] ? __pfx_sock_ioctl+0x10/0x10 [ 485.497612][T17187] ? __fget_files+0x2a/0x420 [ 485.497640][T17187] ? __fget_files+0x3a0/0x420 [ 485.497667][T17187] ? __fget_files+0x2a/0x420 [ 485.497699][T17187] ? bpf_lsm_file_ioctl+0x9/0x20 [ 485.497727][T17187] ? __pfx_sock_ioctl+0x10/0x10 [ 485.497749][T17187] __se_sys_ioctl+0xfc/0x170 [ 485.497777][T17187] do_syscall_64+0x14d/0xf80 [ 485.497796][T17187] ? trace_irq_disable+0x3b/0x150 [ 485.497825][T17187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.497846][T17187] ? clear_bhb_loop+0x40/0x90 [ 485.497871][T17187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.497892][T17187] RIP: 0033:0x7f0c3ad9c799 [ 485.497912][T17187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.497930][T17187] RSP: 002b:00007f0c3bd2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.497953][T17187] RAX: ffffffffffffffda RBX: 00007f0c3b015fa0 RCX: 00007f0c3ad9c799 [ 485.497968][T17187] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 485.497981][T17187] RBP: 00007f0c3bd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 485.497994][T17187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.498006][T17187] R13: 00007f0c3b016038 R14: 00007f0c3b015fa0 R15: 00007ffdaabd0808 [ 485.498041][T17187] [ 485.967651][T17192] netlink: 'syz.1.3103': attribute type 12 has an invalid length. [ 485.975510][T17192] netlink: 'syz.1.3103': attribute type 29 has an invalid length. [ 486.021367][T17192] netlink: 'syz.1.3103': attribute type 2 has an invalid length. [ 486.036660][T17192] netlink: 'syz.1.3103': attribute type 3 has an invalid length. [ 486.045001][T17192] __nla_validate_parse: 2 callbacks suppressed [ 486.045020][T17192] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3103'. [ 486.084152][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3104'. [ 486.096755][ T5847] Bluetooth: hci3: command tx timeout [ 486.104442][T17194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3104'. [ 486.186678][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3105'. [ 486.476763][T17212] netlink: 'syz.1.3106': attribute type 3 has an invalid length. [ 486.748208][T17183] chnl_net:caif_netlink_parms(): no params data found [ 486.935878][T17183] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.943517][T17183] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.951176][T17183] bridge_slave_0: entered allmulticast mode [ 486.959576][T17183] bridge_slave_0: entered promiscuous mode [ 486.969436][T17183] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.977293][T17183] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.984682][T17183] bridge_slave_1: entered allmulticast mode [ 486.993208][T17183] bridge_slave_1: entered promiscuous mode [ 487.084955][T17183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.107131][T17183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.155690][T17183] team0: Port device team_slave_0 added [ 487.161553][T17232] lo speed is unknown, defaulting to 1000 [ 487.164616][T17183] team0: Port device team_slave_1 added [ 487.214360][T17183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.221973][T17183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.248508][T17183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.264664][T17183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.272296][T17183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.379020][ T5847] Bluetooth: hci0: command tx timeout [ 487.442178][T17183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.585651][T17183] hsr_slave_0: entered promiscuous mode [ 487.597346][T17183] hsr_slave_1: entered promiscuous mode [ 487.617912][T17183] debugfs: 'hsr0' already exists in 'hsr' [ 487.627802][T17183] Cannot create hsr debugfs directory [ 487.922552][T17183] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.114294][T17183] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.176319][T17183] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.232952][T17183] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.230398][T17203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.254689][T17183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.358995][T17183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.406783][T17183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.440847][T17183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.459508][ T5847] Bluetooth: hci0: command tx timeout [ 489.489939][T17246] bridge0: port 2(syz_tun) entered blocking state [ 489.502028][T17246] bridge0: port 2(syz_tun) entered disabled state [ 489.520204][T17246] syz_tun: entered allmulticast mode [ 489.538706][T17246] syz_tun: entered promiscuous mode [ 489.552742][T17251] siw: device registration error -23 [ 489.672268][T17253] netlink: 'syz.0.3118': attribute type 4 has an invalid length. [ 489.699365][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'. [ 489.769427][T17262] team_slave_0 (unregistering): left allmulticast mode [ 489.790312][T17262] team0: Port device team_slave_0 removed [ 489.823724][T17257] batman_adv: batadv0: Adding interface: ipvlan2 [ 489.843785][T17257] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.899007][T17257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.934893][T17257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.973728][T17257] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 490.019214][T17280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3120'. [ 490.137715][T17183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.168896][T17183] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.183621][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.190890][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.259901][ T25] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 390 seconds [ 490.273216][ T25] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 390 seconds [ 490.289104][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.296267][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.304348][ T25] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 390 seconds [ 490.315817][ T25] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 390 seconds [ 490.393295][T17282] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3124'. [ 490.561029][T17287] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 490.572836][T17287] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 490.605175][T17289] netlink: 'syz.1.3126': attribute type 2 has an invalid length. [ 490.910846][T17298] tipc: Enabled bearer , priority 0 [ 490.922687][T17298] syzkaller0: entered promiscuous mode [ 490.933013][T17298] syzkaller0: entered allmulticast mode [ 490.971031][T17298] tipc: Resetting bearer [ 491.171463][T17183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.292928][T17304] ip6gre0: Caught tx_queue_len zero misconfig [ 491.306878][T17304] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 491.359696][T17183] veth0_vlan: entered promiscuous mode [ 491.430524][T17183] veth1_vlan: entered promiscuous mode [ 491.538367][ T5847] Bluetooth: hci0: command tx timeout [ 491.576211][T17309] netlink: 'syz.4.3133': attribute type 11 has an invalid length. [ 491.666536][T17309] netlink: 'syz.4.3133': attribute type 23 has an invalid length. [ 491.680510][T17183] veth0_macvtap: entered promiscuous mode [ 491.687426][T17309] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3133'. [ 491.728624][T17315] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3134'. [ 491.768805][T17183] veth1_macvtap: entered promiscuous mode [ 491.891440][T17183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.989595][T17183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.062728][ T128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.088686][ T128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.124669][ T128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.154647][ T128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.174519][T17333] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3139'. [ 492.186231][T17333] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3139'. [ 492.238726][T17333] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3139'. [ 492.258804][T17335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3139'. [ 492.476421][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.484310][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.609550][T17337] syzkaller0: left promiscuous mode [ 492.615051][T17337] syzkaller0: left allmulticast mode [ 492.644227][T17344] xt_ecn: cannot match TCP bits for non-tcp packets [ 492.689456][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.707045][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.719110][T17344] netlink: 'syz.0.3143': attribute type 21 has an invalid length. [ 492.955801][T17355] lo speed is unknown, defaulting to 1000 [ 493.005975][T17356] lo speed is unknown, defaulting to 1000 [ 493.069297][T17362] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3098'. [ 493.091681][T17360] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3098'. [ 493.197556][T17360] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3098'. [ 493.247356][T17360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.283502][T17360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.296178][T17360] bond0 (unregistering): Released all slaves [ 493.556895][T17369] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3147'. [ 493.618974][ T5847] Bluetooth: hci0: command tx timeout [ 493.767735][T17369] syzkaller0: entered promiscuous mode [ 493.773374][T17369] syzkaller0: entered allmulticast mode [ 494.107663][T17381] netlink: 'syz.0.3150': attribute type 1 has an invalid length. [ 494.216255][T17384] netlink: 'syz.3.3151': attribute type 11 has an invalid length. [ 494.241216][T17386] bond2: (slave bridge4): making interface the new active one [ 494.292651][T17386] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 494.444064][T17381] bond2: (slave bridge5): Enslaving as an active interface with a down link [ 494.580880][T17386] macvlan2: entered promiscuous mode [ 494.586255][T17386] macvlan2: entered allmulticast mode [ 495.820100][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 495.840869][ T5827] syz_tun (unregistering): left allmulticast mode [ 495.840908][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 495.854613][ T5827] syz_tun (unregistering): left promiscuous mode [ 495.868916][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 495.877801][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 495.879702][ T5827] bridge0: port 2(syz_tun) entered disabled state [ 495.903534][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 496.009993][T17418] lo speed is unknown, defaulting to 1000 [ 496.507908][ T11] block nbd1: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 360 seconds [ 496.519462][ T11] block nbd1: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 360 seconds [ 496.531005][ T11] block nbd1: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 360 seconds [ 496.544169][ T11] block nbd1: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 360 seconds [ 497.132017][T17463] FAULT_INJECTION: forcing a failure. [ 497.132017][T17463] name failslab, interval 1, probability 0, space 0, times 0 [ 497.158328][T17463] CPU: 0 UID: 0 PID: 17463 Comm: syz.3.3174 Not tainted syzkaller #0 PREEMPT(full) [ 497.158358][T17463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 497.158370][T17463] Call Trace: [ 497.158379][T17463] [ 497.158387][T17463] dump_stack_lvl+0xe8/0x150 [ 497.158421][T17463] should_fail_ex+0x412/0x560 [ 497.158453][T17463] should_failslab+0xa8/0x100 [ 497.158481][T17463] __kmalloc_noprof+0xe8/0x760 [ 497.158505][T17463] ? ioctl_standard_iw_point+0x516/0xd90 [ 497.158645][T17463] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 497.158736][T17463] ioctl_standard_iw_point+0x516/0xd90 [ 497.158783][T17463] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 497.158812][T17463] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 497.158843][T17463] ? __pfx___mutex_lock+0x10/0x10 [ 497.158876][T17463] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 497.158905][T17463] ioctl_standard_call+0xaf/0x1b0 [ 497.158938][T17463] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 497.158964][T17463] wext_ioctl_dispatch+0xee/0x410 [ 497.158991][T17463] ? __pfx_ioctl_standard_call+0x10/0x10 [ 497.159025][T17463] wext_handle_ioctl+0x10f/0x1d0 [ 497.159058][T17463] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 497.159084][T17463] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 497.159125][T17463] sock_ioctl+0x159/0x7f0 [ 497.159153][T17463] ? __pfx_sock_ioctl+0x10/0x10 [ 497.159177][T17463] ? __fget_files+0x2a/0x420 [ 497.159204][T17463] ? __fget_files+0x3a0/0x420 [ 497.159230][T17463] ? __fget_files+0x2a/0x420 [ 497.159263][T17463] ? bpf_lsm_file_ioctl+0x9/0x20 [ 497.159289][T17463] ? __pfx_sock_ioctl+0x10/0x10 [ 497.159318][T17463] __se_sys_ioctl+0xfc/0x170 [ 497.159345][T17463] do_syscall_64+0x14d/0xf80 [ 497.159365][T17463] ? trace_irq_disable+0x3b/0x150 [ 497.159393][T17463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.159413][T17463] ? clear_bhb_loop+0x40/0x90 [ 497.159439][T17463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.159460][T17463] RIP: 0033:0x7f2ec1b9c799 [ 497.159481][T17463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.159499][T17463] RSP: 002b:00007f2ec299c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.159523][T17463] RAX: ffffffffffffffda RBX: 00007f2ec1e15fa0 RCX: 00007f2ec1b9c799 [ 497.159538][T17463] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 497.159551][T17463] RBP: 00007f2ec299c090 R08: 0000000000000000 R09: 0000000000000000 [ 497.159563][T17463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.159574][T17463] R13: 00007f2ec1e16038 R14: 00007f2ec1e15fa0 R15: 00007fff192f2a98 [ 497.159611][T17463] [ 497.700331][T17418] chnl_net:caif_netlink_parms(): no params data found [ 497.947186][ T5847] Bluetooth: hci2: command tx timeout [ 498.190292][T17418] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.198278][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.218561][T17418] bridge_slave_0: entered allmulticast mode [ 498.248811][T17418] bridge_slave_0: entered promiscuous mode [ 498.391771][T17418] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.399407][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.413894][T17418] bridge_slave_1: entered allmulticast mode [ 498.428883][T17418] bridge_slave_1: entered promiscuous mode [ 498.570860][T17418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.585088][T17504] __nla_validate_parse: 8 callbacks suppressed [ 498.585108][T17504] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3183'. [ 498.616879][T17418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.678384][T17503] tipc: Enabling of bearer rejected, already enabled [ 498.708284][T17503] syzkaller0: entered promiscuous mode [ 498.713815][T17503] syzkaller0: entered allmulticast mode [ 498.761084][T17418] team0: Port device team_slave_0 added [ 498.771554][T17418] team0: Port device team_slave_1 added [ 498.841241][T17511] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 498.912380][T17418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.966461][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.021681][T17418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.051445][T17418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.071104][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.073018][T17523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3189'. [ 499.098346][T17418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.254385][T17528] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.262197][T17528] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.361304][T17538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3191'. [ 499.365702][T17528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.385782][T17528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.576393][T17532] netlink: 'syz.2.3189': attribute type 29 has an invalid length. [ 499.586015][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.595843][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.614489][T17418] hsr_slave_0: entered promiscuous mode [ 499.623404][T17418] hsr_slave_1: entered promiscuous mode [ 499.631190][T17418] debugfs: 'hsr0' already exists in 'hsr' [ 499.637430][T17418] Cannot create hsr debugfs directory [ 499.643042][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.693224][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.933033][T17547] netlink: 'syz.1.3196': attribute type 29 has an invalid length. [ 499.966906][T17549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3197'. [ 500.018760][ T5847] Bluetooth: hci2: command tx timeout [ 500.250731][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 500.413833][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 500.674878][T17581] sch_tbf: burst 256 is lower than device syzkaller0 mtu (313) ! [ 500.724236][T17418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 500.751570][T17418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 500.782228][T17418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 500.810178][T17418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 500.817381][ T5847] Bluetooth: hci0: command 0x080f tx timeout [ 500.856529][T17578] lo speed is unknown, defaulting to 1000 [ 501.032542][T17418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.072796][T17418] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.100153][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.107417][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.146286][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.153666][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.407794][T17596] FAULT_INJECTION: forcing a failure. [ 501.407794][T17596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.424365][T17596] CPU: 1 UID: 0 PID: 17596 Comm: syz.2.3210 Not tainted syzkaller #0 PREEMPT(full) [ 501.424395][T17596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 501.424407][T17596] Call Trace: [ 501.424415][T17596] [ 501.424424][T17596] dump_stack_lvl+0xe8/0x150 [ 501.424459][T17596] should_fail_ex+0x412/0x560 [ 501.424490][T17596] _copy_from_iter+0x4ff/0x1670 [ 501.424532][T17596] ? __pfx__copy_from_iter+0x10/0x10 [ 501.424568][T17596] ? netlink_sendmsg+0x650/0xb40 [ 501.424595][T17596] ? skb_put+0x11b/0x210 [ 501.424694][T17596] netlink_sendmsg+0x6c0/0xb40 [ 501.424743][T17596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.424774][T17596] ? aa_sock_msg_perm+0xf1/0x1b0 [ 501.424802][T17596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.424828][T17596] ____sys_sendmsg+0x972/0x9f0 [ 501.424857][T17596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.424888][T17596] ? import_iovec+0x73/0xa0 [ 501.424921][T17596] ___sys_sendmsg+0x2a5/0x360 [ 501.424948][T17596] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.425006][T17596] ? __fget_files+0x2a/0x420 [ 501.425035][T17596] ? __fget_files+0x3a0/0x420 [ 501.425074][T17596] __x64_sys_sendmsg+0x1bd/0x2a0 [ 501.425097][T17596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.425127][T17596] ? __pfx_ksys_write+0x10/0x10 [ 501.425161][T17596] do_syscall_64+0x14d/0xf80 [ 501.425181][T17596] ? trace_irq_disable+0x3b/0x150 [ 501.425208][T17596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.425229][T17596] ? clear_bhb_loop+0x40/0x90 [ 501.425254][T17596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.425273][T17596] RIP: 0033:0x7f91b059c799 [ 501.425293][T17596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.425310][T17596] RSP: 002b:00007f91b149d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.425334][T17596] RAX: ffffffffffffffda RBX: 00007f91b0815fa0 RCX: 00007f91b059c799 [ 501.425348][T17596] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 501.425361][T17596] RBP: 00007f91b149d090 R08: 0000000000000000 R09: 0000000000000000 [ 501.425373][T17596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.425385][T17596] R13: 00007f91b0816038 R14: 00007f91b0815fa0 R15: 00007ffec22b50d8 [ 501.425417][T17596] [ 502.035765][T12223] IPVS: starting estimator thread 0... [ 502.097308][ T5847] Bluetooth: hci2: command tx timeout [ 502.136536][T17609] IPVS: using max 27 ests per chain, 64800 per kthread [ 502.192989][T17418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.569851][T17626] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 502.872561][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3222'. [ 502.874611][T17418] veth0_vlan: entered promiscuous mode [ 502.928703][T17637] netlink: 'syz.2.3222': attribute type 13 has an invalid length. [ 502.962496][T17637] netlink: 'syz.2.3222': attribute type 17 has an invalid length. [ 502.974877][T17418] veth1_vlan: entered promiscuous mode [ 503.061984][T17637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.179771][T17418] veth0_macvtap: entered promiscuous mode [ 503.193939][T17418] veth1_macvtap: entered promiscuous mode [ 503.260066][T17418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.291088][T17418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.336885][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.356025][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.377602][T17649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3226'. [ 503.388760][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.421874][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.586292][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.615276][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.678341][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.689863][T17658] tipc: Started in network mode [ 503.695171][T17658] tipc: Node identity 3e56017bd24, cluster identity 4711 [ 503.708253][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.715864][T17658] tipc: Enabled bearer , priority 0 [ 503.738114][T17658] syzkaller0: entered promiscuous mode [ 503.751505][T17658] syzkaller0: entered allmulticast mode [ 503.839608][T17658] tipc: Resetting bearer [ 503.869260][T17657] tipc: Resetting bearer [ 503.924100][T17657] tipc: Disabling bearer [ 504.176679][ T5847] Bluetooth: hci2: command tx timeout [ 504.179377][T17674] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 504.266500][T17674] netlink: 'syz.4.3234': attribute type 2 has an invalid length. [ 504.349980][T17674] netlink: 'syz.4.3234': attribute type 3 has an invalid length. [ 504.377789][T17679] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3237'. [ 504.667752][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.669916][T17688] lo speed is unknown, defaulting to 1000 [ 504.686815][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 504.695197][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 504.732549][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 504.735929][T17690] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3240'. [ 504.751140][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 504.998324][T17699] netlink: 'syz.4.3241': attribute type 4 has an invalid length. [ 505.012899][T17698] lo speed is unknown, defaulting to 1000 [ 505.041105][T17689] lo speed is unknown, defaulting to 1000 [ 505.077349][T17700] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3242'. [ 505.086767][T17700] netlink: 'syz.2.3242': attribute type 9 has an invalid length. [ 505.094526][T17700] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3242'. [ 505.126572][T17700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3242'. [ 506.150203][T17712] netlink: 'syz.2.3245': attribute type 1 has an invalid length. [ 506.232504][T17712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.269430][T17689] chnl_net:caif_netlink_parms(): no params data found [ 506.816890][ T5842] Bluetooth: hci4: command tx timeout [ 506.829640][T17689] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.849244][T17689] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.857545][T17689] bridge_slave_0: entered allmulticast mode [ 506.864875][T17689] bridge_slave_0: entered promiscuous mode [ 506.873439][T17689] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.887511][T17689] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.894828][T17689] bridge_slave_1: entered allmulticast mode [ 506.921436][T17689] bridge_slave_1: entered promiscuous mode [ 507.080234][T17689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.119163][T17689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.222795][T17689] team0: Port device team_slave_0 added [ 507.233990][T17689] team0: Port device team_slave_1 added [ 507.298780][T17735] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3250'. [ 507.308470][T17689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.315774][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.344240][T17689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.357411][T17689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.364386][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.408289][T17689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.496850][T17689] hsr_slave_0: entered promiscuous mode [ 507.505154][T17689] hsr_slave_1: entered promiscuous mode [ 507.512339][T17689] debugfs: 'hsr0' already exists in 'hsr' [ 507.542550][T17689] Cannot create hsr debugfs directory [ 507.578182][T17748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3254'. [ 507.644082][T17751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3254'. [ 507.848387][T17758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3255'. [ 507.918435][T17689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 508.054324][T17689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 508.084024][T17764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3258'. [ 508.185279][T17689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 508.376977][T17689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 508.441201][T17769] lo speed is unknown, defaulting to 1000 [ 508.780221][T17689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 508.815929][T17689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 508.842081][T17689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 508.864564][T17689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 508.897662][ T5842] Bluetooth: hci4: command tx timeout [ 509.045044][T17786] syzkaller0: entered promiscuous mode [ 509.050820][T17786] syzkaller0: entered allmulticast mode [ 509.067341][T17786] simple: basic_22 [ 509.071438][T17786] simple: basic_44 [ 509.075185][T17786] simple: basic_66 [ 509.078999][T17786] simple: basic_88 [ 509.082761][T17786] simple: basic_110 [ 509.086740][T17786] simple: basic_132 [ 509.090576][T17786] simple: basic_154 [ 509.094423][T17786] simple: basic_176 [ 509.098311][T17786] simple: basic_198 [ 509.102239][T17786] simple: basic_220 [ 509.106077][T17786] simple: basic_242 [ 509.110077][T17786] simple: basic_264 [ 509.113912][T17786] simple: basic_286 [ 509.117828][T17786] simple: basic_308 [ 509.121664][T17786] simple: basic_330 [ 509.125499][T17786] simple: basic_352 [ 509.129393][T17786] simple: basic_374 [ 509.133233][T17786] 0: reclassify loop, rule prio 0, protocol 800 [ 509.233604][T17689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.292627][T17689] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.325587][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.332918][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.375658][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.382925][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.883075][T17807] __nla_validate_parse: 1 callbacks suppressed [ 509.883098][T17807] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3270'. [ 509.956989][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3271'. [ 510.060426][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3272'. [ 510.069754][T17813] netem: incorrect ge model size [ 510.075132][T17813] netem: change failed [ 510.106925][T17689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.571626][T17827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3276'. [ 510.649351][T17689] veth0_vlan: entered promiscuous mode [ 510.675915][T17689] veth1_vlan: entered promiscuous mode [ 510.793102][T17689] veth0_macvtap: entered promiscuous mode [ 510.849967][T17689] veth1_macvtap: entered promiscuous mode [ 510.978622][ T5842] Bluetooth: hci4: command tx timeout [ 510.995178][T17689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.008024][T17839] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.023492][T17839] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.030432][T17839] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.037544][T17839] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.044403][T17839] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.051320][T17839] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.058170][T17839] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.065008][T17839] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.071913][T17839] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.129108][T17842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 511.190285][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 511.217661][T17843] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3278'. [ 511.268216][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 511.286508][T17843] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3278'. [ 511.295748][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 511.362339][T17689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.408360][T17842] bridge_slave_1: left allmulticast mode [ 511.414170][T17842] bridge_slave_1: left promiscuous mode [ 511.459577][T17842] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.820178][T17842] bridge_slave_0: left allmulticast mode [ 511.826107][T17842] bridge_slave_0: left promiscuous mode [ 511.836194][T17842] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.976162][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.985216][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.023294][T17846] bridge1: entered promiscuous mode [ 512.029123][T17846] bridge1: entered allmulticast mode [ 512.038392][T17846] team0: Port device bridge1 added [ 512.044084][T17849] bridge0: port 3(team0) entered blocking state [ 512.053521][T17849] bridge0: port 3(team0) entered disabled state [ 512.061629][T17849] team0: entered allmulticast mode [ 512.067806][T17849] team_slave_0: entered allmulticast mode [ 512.073643][T17849] team_slave_1: entered allmulticast mode [ 512.082146][T17849] team0: entered promiscuous mode [ 512.087542][T17849] team_slave_0: entered promiscuous mode [ 512.093452][T17849] team_slave_1: entered promiscuous mode [ 512.113841][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.156934][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.178608][ T5842] Bluetooth: hci2: command tx timeout [ 512.359954][T17853] gtp0: entered promiscuous mode [ 512.372794][T17853] gtp0: entered allmulticast mode [ 512.411241][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.437508][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.486036][T17853] netlink: 'syz.3.3280': attribute type 1 has an invalid length. [ 512.500491][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.516372][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.056781][ T5842] Bluetooth: hci4: command tx timeout [ 513.408203][T17894] x_tables: duplicate underflow at hook 4 [ 513.598063][T17898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.606830][T17904] netlink: 'syz.1.3291': attribute type 21 has an invalid length. [ 513.621803][T17904] netlink: 'syz.1.3291': attribute type 4 has an invalid length. [ 513.631281][T17904] netlink: 'syz.1.3291': attribute type 5 has an invalid length. [ 514.668056][T17923] Cannot find del_set index 0 as target [ 514.814026][T17927] netlink: 'syz.3.3300': attribute type 10 has an invalid length. [ 514.906930][T17935] pimreg: tun_chr_ioctl cmd 35108 [ 514.931207][T17937] __nla_validate_parse: 9 callbacks suppressed [ 514.931229][T17937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3304'. [ 515.240362][T17950] netlink: 'syz.1.3308': attribute type 29 has an invalid length. [ 515.355516][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 515.370498][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 515.388061][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 515.461501][T17953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.479881][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 515.522642][T17956] bond2: (slave batadv1): Opening slave failed [ 515.565657][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 515.590280][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 515.613165][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 515.642049][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 515.651815][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 516.135424][T17981] syzkaller0: entered promiscuous mode [ 516.157179][T17981] syzkaller0: entered allmulticast mode [ 516.715452][ T5942] IPVS: starting estimator thread 0... [ 516.721715][T18005] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 516.806559][T18007] IPVS: using max 33 ests per chain, 79200 per kthread [ 518.925134][T18016] xt_TCPMSS: Only works on TCP SYN packets [ 519.196745][T18033] netlink: 'syz.1.3331': attribute type 1 has an invalid length. [ 519.631293][T18047] lo speed is unknown, defaulting to 1000 [ 520.471676][ T5942] IPVS: starting estimator thread 0... [ 520.566687][T18063] IPVS: using max 24 ests per chain, 57600 per kthread [ 520.739227][T18071] net_ratelimit: 761 callbacks suppressed [ 520.739251][T18071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.820439][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.830684][ T25] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 420 seconds [ 520.841958][ T25] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 420 seconds [ 520.853340][ T25] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 420 seconds [ 520.865461][ T25] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 420 seconds [ 520.882420][T18071] __nla_validate_parse: 61 callbacks suppressed [ 520.882445][T18071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3341'. [ 521.525935][T18090] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3348'. [ 521.541026][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3347'. [ 521.573831][T18090] syzkaller1: entered promiscuous mode [ 521.583114][T18090] syzkaller1: entered allmulticast mode [ 522.041795][T18107] openvswitch: netlink: Flow actions attr not present in new flow. [ 522.137069][T18114] netlink: 'syz.2.3354': attribute type 1 has an invalid length. [ 522.233312][T18114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.291880][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3354'. [ 522.371387][T18116] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 522.415705][T18116] bond3: (slave batadv1): making interface the new active one [ 522.470545][T18116] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 522.501652][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 522.540536][T18119] bond3 (unregistering): (slave batadv1): Releasing active interface [ 522.621519][T18119] bond3 (unregistering): Released all slaves [ 522.722205][T18141] lo speed is unknown, defaulting to 1000 [ 522.822130][T18153] openvswitch: netlink: IP tunnel dst address not specified [ 522.918683][T18148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.951728][T18160] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3364'. [ 523.001298][T18160] bridge_slave_1: left allmulticast mode [ 523.009673][T18160] bridge_slave_1: left promiscuous mode [ 523.015821][T18160] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.063150][T18160] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 523.270165][T18168] netlink: 'syz.1.3368': attribute type 10 has an invalid length. [ 523.718295][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3376'. [ 523.751815][T18210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3372'. [ 523.871014][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3376'. [ 523.882936][T18202] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3376'. [ 524.143302][T18223] netlink: 'syz.2.3381': attribute type 1 has an invalid length. [ 524.181132][T18223] bond3: entered promiscuous mode [ 524.187961][T18223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.806143][T18243] netlink: 'syz.2.3387': attribute type 1 has an invalid length. [ 524.821849][T18243] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 525.138924][T18264] netlink: 'syz.0.3392': attribute type 15 has an invalid length. [ 526.092393][T18311] __nla_validate_parse: 8 callbacks suppressed [ 526.092415][T18311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3409'. [ 526.597039][ T11] block nbd1: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 390 seconds [ 526.612101][ T11] block nbd1: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 390 seconds [ 526.623302][ T11] block nbd1: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 390 seconds [ 526.634777][ T11] block nbd1: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 390 seconds [ 526.714788][T18342] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3417'. [ 526.755410][T18343] netlink: 'syz.2.3418': attribute type 10 has an invalid length. [ 526.954369][T18350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3420'. [ 526.975152][T18350] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3420'. [ 527.069024][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3421'. [ 527.078752][T18352] netlink: 580 bytes leftover after parsing attributes in process `syz.2.3421'. [ 527.767010][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'. [ 527.799518][T18388] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 528.107262][T18398] lo speed is unknown, defaulting to 1000 [ 528.279043][T18413] netlink: 'syz.2.3440': attribute type 83 has an invalid length. [ 528.864579][T18429] netlink: 'syz.1.3446': attribute type 13 has an invalid length. [ 528.886568][T18429] netlink: 'syz.1.3446': attribute type 17 has an invalid length. [ 528.942146][T18432] sit1: entered promiscuous mode [ 529.066253][T18429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.515868][T18445] netlink: 'syz.4.3450': attribute type 1 has an invalid length. [ 529.556882][T18445] netlink: 'syz.4.3450': attribute type 2 has an invalid length. [ 529.592912][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3451'. [ 529.617228][T18445] netlink: 'syz.4.3450': attribute type 3 has an invalid length. [ 529.794424][T18454] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 529.818084][T18454] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 529.846785][T18459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3453'. [ 529.898515][T18459] ip6tnl1: entered promiscuous mode [ 529.914092][T18459] ip6tnl1: entered allmulticast mode [ 529.961470][T18462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 529.986812][T18463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3455'. [ 530.224916][T18469] geneve2: entered promiscuous mode [ 530.541905][T18500] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 530.625177][T18499] lo speed is unknown, defaulting to 1000 [ 531.205159][T18525] netlink: 'syz.3.3473': attribute type 13 has an invalid length. [ 531.231120][T18525] netlink: 'syz.3.3473': attribute type 17 has an invalid length. [ 531.406998][T18525] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.425994][T18537] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 531.437116][T18525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.495924][T18535] __nla_validate_parse: 5 callbacks suppressed [ 531.495948][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3477'. [ 531.663077][T18540] tipc: Enabled bearer , priority 0 [ 532.712127][T18579] siw: device registration error -23 [ 532.715463][T18580] sit1: entered promiscuous mode [ 532.768333][T18583] FAULT_INJECTION: forcing a failure. [ 532.768333][T18583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.781672][T12222] tipc: Node number set to 3960865147 [ 532.787820][T18583] CPU: 0 UID: 0 PID: 18583 Comm: syz.0.3495 Not tainted syzkaller #0 PREEMPT(full) [ 532.787848][T18583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 532.787861][T18583] Call Trace: [ 532.787870][T18583] [ 532.787879][T18583] dump_stack_lvl+0xe8/0x150 [ 532.787915][T18583] should_fail_ex+0x412/0x560 [ 532.787948][T18583] _copy_from_user+0x2d/0xb0 [ 532.787981][T18583] __sys_sendto+0x2b0/0x710 [ 532.788069][T18583] ? __pfx___sys_sendto+0x10/0x10 [ 532.788096][T18583] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 532.788131][T18583] ? __fget_files+0x3a0/0x420 [ 532.788172][T18583] ? ksys_write+0x242/0x270 [ 532.788198][T18583] ? __pfx_ksys_write+0x10/0x10 [ 532.788225][T18583] __x64_sys_sendto+0xde/0x100 [ 532.788259][T18583] do_syscall_64+0x14d/0xf80 [ 532.788277][T18583] ? trace_irq_disable+0x3b/0x150 [ 532.788306][T18583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.788336][T18583] ? clear_bhb_loop+0x40/0x90 [ 532.788362][T18583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.788381][T18583] RIP: 0033:0x7f30ddb9c799 [ 532.788406][T18583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.788423][T18583] RSP: 002b:00007f30dbdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 532.788447][T18583] RAX: ffffffffffffffda RBX: 00007f30dde15fa0 RCX: 00007f30ddb9c799 [ 532.788462][T18583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 532.788474][T18583] RBP: 00007f30dbdf6090 R08: 0000200000000080 R09: 0000000000000014 [ 532.788486][T18583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.788498][T18583] R13: 00007f30dde16038 R14: 00007f30dde15fa0 R15: 00007ffc0f898458 [ 532.788532][T18583] [ 533.012800][T18587] Cannot find set identified by id 2 to match [ 533.028541][T18587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3496'. [ 533.277287][T18591] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 533.310234][T18595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3500'. [ 533.461999][T18605] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3501'. [ 533.742732][T18611] lo speed is unknown, defaulting to 1000 [ 533.747945][T18613] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 533.855061][T18613] syzkaller1: entered promiscuous mode [ 533.880539][T18613] syzkaller1: entered allmulticast mode [ 533.912040][T18615] bridge1: entered allmulticast mode [ 534.583125][T18623] lo speed is unknown, defaulting to 1000 [ 535.022249][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3514'. [ 535.043141][T18639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3514'. [ 535.112522][T18639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.205996][T18642] bond0: (slave batadv1): Opening slave failed [ 536.145919][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3518'. [ 536.160235][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3518'. [ 536.171445][T18658] netlink: 'syz.0.3519': attribute type 12 has an invalid length. [ 536.280549][T18661] netlink: 'syz.2.3517': attribute type 11 has an invalid length. [ 536.306699][T18661] netlink: 'syz.2.3517': attribute type 11 has an invalid length. [ 536.322602][T18661] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3517'. [ 536.350079][T18665] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 536.533061][T18667] lo speed is unknown, defaulting to 1000 [ 536.553733][T18671] netlink: 'syz.3.3524': attribute type 1 has an invalid length. [ 536.597156][T18671] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3524'. [ 537.443792][T18709] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 537.444299][T18708] lo speed is unknown, defaulting to 1000 [ 537.665815][T18714] netlink: 'syz.3.3538': attribute type 8 has an invalid length. [ 537.707008][T18718] netlink: 'syz.2.3539': attribute type 2 has an invalid length. [ 537.760850][T18718] : entered promiscuous mode [ 538.498351][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3522'. [ 538.516506][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3522'. [ 538.617095][T18745] lo speed is unknown, defaulting to 1000 [ 538.678157][T18747] syzkaller1: entered promiscuous mode [ 538.696946][T18747] syzkaller1: entered allmulticast mode [ 539.414053][T18757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3549'. [ 539.454780][T18754] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 539.610329][T18763] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 539.640891][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'. [ 539.945269][T18777] Cannot find del_set index 4 as target [ 540.144065][T18759] lo speed is unknown, defaulting to 1000 [ 540.152581][T18776] syzkaller1: entered promiscuous mode [ 540.170240][T18776] syzkaller1: entered allmulticast mode [ 540.539264][T18796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3556'. [ 540.945042][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3561'. [ 541.154548][T18802] ip6gre1: entered promiscuous mode [ 541.221688][T18808] netlink: 'syz.2.3562': attribute type 1 has an invalid length. [ 541.613489][T18817] Cannot find del_set index 4 as target [ 542.302226][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3569'. [ 542.479175][T18839] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 542.583717][T18840] lo speed is unknown, defaulting to 1000 [ 542.910541][T18848] lo speed is unknown, defaulting to 1000 [ 542.913742][T18853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3574'. [ 542.962384][T18856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3576'. [ 542.975479][T18858] Cannot find del_set index 4 as target [ 545.118547][T18867] lo speed is unknown, defaulting to 1000 [ 545.139816][T18869] netlink: 'syz.1.3579': attribute type 4 has an invalid length. [ 545.190480][T18872] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3581'. [ 545.242723][T18870] tipc: Started in network mode [ 545.267434][T18870] tipc: Node identity fac4f1f36742, cluster identity 4711 [ 545.285167][T18870] tipc: Enabled bearer , priority 0 [ 545.400799][T18870] syzkaller0: entered promiscuous mode [ 545.406834][T18870] syzkaller0: entered allmulticast mode [ 545.413274][T18870] tipc: Resetting bearer [ 545.446874][T18875] macsec2: entered promiscuous mode [ 545.457040][T18875] team0: entered promiscuous mode [ 545.462204][T18875] team_slave_0: entered promiscuous mode [ 545.468307][T18875] team_slave_1: entered promiscuous mode [ 545.474974][T18875] team0: Device macsec2 is already an upper device of the team interface [ 545.493429][T18875] team0: left promiscuous mode [ 545.499641][T18875] team_slave_0: left promiscuous mode [ 545.505700][T18875] team_slave_1: left promiscuous mode [ 545.521893][T18868] tipc: Resetting bearer [ 547.636138][T18868] tipc: Disabling bearer [ 547.674167][ T5914] tipc: Node number set to 2642866675 [ 547.897433][T18925] netlink: 'syz.4.3591': attribute type 10 has an invalid length. [ 547.959575][T18925] syz_tun: entered promiscuous mode [ 548.051303][T18930] Cannot find add_set index 0 as target [ 548.057751][T18925] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 548.427688][T18948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3596'. [ 548.603736][T18958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 548.846579][T18973] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3604'. [ 548.876895][T18974] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3604'. [ 548.991704][T18977] tipc: Started in network mode [ 549.008144][T18977] tipc: Node identity , cluster identity 4711 [ 549.021219][T18977] tipc: Failed to obtain node identity [ 549.033663][T18977] tipc: Enabling of bearer rejected, failed to enable media [ 549.060516][T18984] Cannot find del_set index 4 as target [ 549.093100][T18985] bridge_slave_1: entered allmulticast mode [ 549.740220][T18988] netlink: 'syz.0.3608': attribute type 29 has an invalid length. [ 550.034890][T18999] lo speed is unknown, defaulting to 1000 [ 550.079256][T18994] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3609'. [ 550.894756][T19026] Cannot find del_set index 4 as target [ 550.906978][T19024] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 550.907663][ T25] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 450 seconds [ 550.927676][ T25] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 450 seconds [ 550.940154][ T25] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 450 seconds [ 550.951585][ T25] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 450 seconds [ 551.044173][T19030] syzkaller0: entered promiscuous mode [ 551.070120][T19030] syzkaller0: entered allmulticast mode [ 551.084080][T19035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3620'. [ 551.142451][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 553.249137][T19040] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 553.868269][T19070] Cannot find del_set index 4 as target [ 553.961177][ T29] audit: type=1804 audit(1773321097.900:11): pid=19074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3632" name="/newroot/170/memory.events" dev="tmpfs" ino=880 res=1 errno=0 [ 553.989998][T19072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3631'. [ 554.072253][T19080] ip6tnl1: entered allmulticast mode [ 554.185536][T19085] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 554.202369][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3627'. [ 554.279690][T19062] macvtap0: entered promiscuous mode [ 554.285053][T19062] virtio_net virtio1 eth0: entered promiscuous mode [ 554.331949][T19062] macvtap0: entered allmulticast mode [ 554.347390][T19062] virtio_net virtio1 eth0: entered allmulticast mode [ 554.436013][T19090] netlink: 'syz.0.3636': attribute type 29 has an invalid length. [ 554.657032][T19103] netlink: 'syz.0.3639': attribute type 1 has an invalid length. [ 554.678860][T19104] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20000 [ 554.717393][T19104] block nbd4: not configured, cannot reconfigure [ 554.886126][T19103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3639'. [ 554.934117][T19109] veth9: entered promiscuous mode [ 554.985990][T19103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.239537][T19126] Cannot find add_set index 0 as target [ 555.261987][T19126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3643'. [ 555.327946][T19134] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3645'. [ 555.350458][T19134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3645'. [ 555.373247][T19134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3645'. [ 555.594674][T19144] bond1: entered promiscuous mode [ 555.646415][T19144] bond1: entered allmulticast mode [ 555.654801][T19144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.675509][T19149] netlink: 'syz.0.3649': attribute type 29 has an invalid length. [ 555.788926][T19157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3650'. [ 555.911493][T19163] veth5: entered promiscuous mode [ 555.919552][T19163] veth5: entered allmulticast mode [ 555.933314][T19163] team0: Port device veth5 added [ 555.954072][T19167] bridge3: entered promiscuous mode [ 555.975089][T19170] macsec0: entered promiscuous mode [ 556.136762][T19163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3653'. [ 556.262243][T19181] Cannot find del_set index 4 as target [ 556.269655][T19181] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3656'. [ 556.341419][T19163] macsec0: left promiscuous mode [ 556.521265][T19189] C: renamed from team_slave_0 (while UP) [ 556.534521][T19189] netlink: 'syz.4.3659': attribute type 8 has an invalid length. [ 556.557488][T19189] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 556.608758][T19193] netlink: 'syz.4.3659': attribute type 8 has an invalid length. [ 556.638493][T19193] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 556.665100][ T11] block nbd1: Possible stuck request ffff888026228000: control (read@0,1024B). Runtime 420 seconds [ 556.676957][ T11] block nbd1: Possible stuck request ffff888026228200: control (read@1024,1024B). Runtime 420 seconds [ 556.688077][ T11] block nbd1: Possible stuck request ffff888026228400: control (read@2048,1024B). Runtime 420 seconds [ 556.699477][ T11] block nbd1: Possible stuck request ffff888026228600: control (read@3072,1024B). Runtime 420 seconds [ 556.915265][T19205] netlink: 'syz.4.3665': attribute type 12 has an invalid length. [ 557.453653][T19205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.476164][T19205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.669967][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.682156][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.722355][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.884932][T19230] Cannot find del_set index 4 as target [ 558.075835][T19239] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 558.337556][T19251] netlink: 'syz.0.3676': attribute type 3 has an invalid length. [ 558.414040][T19253] lo speed is unknown, defaulting to 1000 [ 558.902269][T19275] Cannot find del_set index 4 as target [ 559.113308][T19281] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 559.146398][T19281] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 559.170719][T19281] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 559.181372][T19286] __nla_validate_parse: 9 callbacks suppressed [ 559.181393][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3685'. [ 560.158790][T19296] bond0: entered promiscuous mode [ 560.163988][T19296] bond_slave_0: entered promiscuous mode [ 560.186220][T19296] bond_slave_1: entered promiscuous mode [ 560.209809][T19296] batadv0: entered promiscuous mode [ 560.227518][T19296] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 560.250207][T19294] [ 560.252600][T19294] ====================================================== [ 560.259634][T19294] WARNING: possible circular locking dependency detected [ 560.266469][T19296] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 560.266750][T19294] syzkaller #0 Not tainted [ 560.281106][T19294] ------------------------------------------------------ [ 560.288144][T19294] syz.2.3687/19294 is trying to acquire lock: [ 560.294214][T19294] ffffffff8e85f168 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 560.304007][T19294] [ 560.304007][T19294] but task is already holding lock: [ 560.311372][T19294] ffff88802559a680 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 560.321793][T19294] [ 560.321793][T19294] which lock already depends on the new lock. [ 560.321793][T19294] [ 560.332286][T19294] [ 560.332286][T19294] the existing dependency chain (in reverse order) is: [ 560.341308][T19294] [ 560.341308][T19294] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 560.350002][T19294] blk_alloc_queue+0x546/0x680 [ 560.355346][T19294] __blk_mq_alloc_disk+0x197/0x390 [ 560.361108][T19294] nbd_dev_add+0x499/0xb50 [ 560.366060][T19294] nbd_init+0x168/0x1f0 [ 560.370923][T19294] do_one_initcall+0x250/0x8d0 [ 560.376220][T19294] do_initcall_level+0x104/0x190 [ 560.381731][T19294] do_initcalls+0x59/0xa0 [ 560.386589][T19294] kernel_init_freeable+0x2a6/0x3e0 [ 560.392333][T19294] kernel_init+0x1d/0x1d0 [ 560.397363][T19294] ret_from_fork+0x51e/0xb90 [ 560.402498][T19294] ret_from_fork_asm+0x1a/0x30 [ 560.407799][T19294] [ 560.407799][T19294] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 560.415045][T19294] fs_reclaim_acquire+0x71/0x100 [ 560.420529][T19294] prepare_alloc_pages+0x152/0x650 [ 560.426516][T19294] __alloc_frozen_pages_noprof+0x12f/0x380 [ 560.432944][T19294] __alloc_pages_noprof+0xa/0x30 [ 560.438414][T19294] pcpu_populate_chunk+0x182/0xb30 [ 560.444061][T19294] pcpu_alloc_noprof+0xc6c/0x19c0 [ 560.449620][T19294] xt_percpu_counter_alloc+0x161/0x220 [ 560.455651][T19294] translate_table+0x1332/0x20b0 [ 560.461161][T19294] ip6t_register_table+0x11b/0x800 [ 560.466805][T19294] ip6table_security_table_init+0x41/0x70 [ 560.473057][T19294] xt_find_table_lock+0x30c/0x3e0 [ 560.478674][T19294] xt_request_find_table_lock+0x26/0x100 [ 560.484930][T19294] do_ip6t_get_ctl+0x716/0x1230 [ 560.490343][T19294] nf_getsockopt+0x26e/0x290 [ 560.495618][T19294] ipv6_getsockopt+0x1fd/0x2b0 [ 560.500982][T19294] do_sock_getsockopt+0x2d3/0x3f0 [ 560.506543][T19294] __x64_sys_getsockopt+0x1a4/0x240 [ 560.512280][T19294] do_syscall_64+0x14d/0xf80 [ 560.517401][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.523821][T19294] [ 560.523821][T19294] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 560.531567][T19294] __lock_acquire+0x15a5/0x2cf0 [ 560.536948][T19294] lock_acquire+0xf0/0x2e0 [ 560.541909][T19294] __mutex_lock+0x19f/0x1300 [ 560.547112][T19294] pcpu_alloc_noprof+0x218/0x19c0 [ 560.552667][T19294] sbitmap_init_node+0x1e1/0x640 [ 560.558185][T19294] sbitmap_queue_init_node+0x3e/0x4d0 [ 560.564109][T19294] blk_mq_init_tags+0x15c/0x2d0 [ 560.569582][T19294] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 560.575585][T19294] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 560.582027][T19294] nbd_start_device+0x17f/0xb10 [ 560.587435][T19294] nbd_genl_connect+0x165b/0x1cf0 [ 560.592995][T19294] genl_family_rcv_msg_doit+0x22a/0x330 [ 560.599065][T19294] genl_rcv_msg+0x61c/0x7a0 [ 560.604092][T19294] netlink_rcv_skb+0x232/0x4b0 [ 560.609383][T19294] genl_rcv+0x28/0x40 [ 560.613888][T19294] netlink_unicast+0x80f/0x9b0 [ 560.619181][T19294] netlink_sendmsg+0x813/0xb40 [ 560.624476][T19294] ____sys_sendmsg+0x972/0x9f0 [ 560.629782][T19294] ___sys_sendmsg+0x2a5/0x360 [ 560.635101][T19294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 560.640558][T19294] do_syscall_64+0x14d/0xf80 [ 560.645672][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.652096][T19294] [ 560.652096][T19294] other info that might help us debug this: [ 560.652096][T19294] [ 560.662495][T19294] Chain exists of: [ 560.662495][T19294] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 560.662495][T19294] [ 560.676170][T19294] Possible unsafe locking scenario: [ 560.676170][T19294] [ 560.683686][T19294] CPU0 CPU1 [ 560.689051][T19294] ---- ---- [ 560.694412][T19294] lock(&q->q_usage_counter(io)#53); [ 560.699885][T19294] lock(fs_reclaim); [ 560.706394][T19294] lock(&q->q_usage_counter(io)#53); [ 560.714300][T19294] lock(pcpu_alloc_mutex); [ 560.718809][T19294] [ 560.718809][T19294] *** DEADLOCK *** [ 560.718809][T19294] [ 560.726954][T19294] 6 locks held by syz.2.3687/19294: [ 560.732267][T19294] #0: ffffffff8fc35870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 560.740461][T19294] #1: ffffffff8fc35688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 560.749454][T19294] #2: ffff8880260c91d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 560.760900][T19294] #3: ffff8880260c90d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 560.771885][T19294] #4: ffff88802559a680 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 560.782697][T19294] #5: ffff88802559a6b8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 560.793680][T19294] [ 560.793680][T19294] stack backtrace: [ 560.799592][T19294] CPU: 0 UID: 0 PID: 19294 Comm: syz.2.3687 Not tainted syzkaller #0 PREEMPT(full) [ 560.799612][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 560.799622][T19294] Call Trace: [ 560.799629][T19294] [ 560.799638][T19294] dump_stack_lvl+0xe8/0x150 [ 560.799662][T19294] print_circular_bug+0x2e1/0x300 [ 560.799688][T19294] check_noncircular+0x12e/0x150 [ 560.799714][T19294] __lock_acquire+0x15a5/0x2cf0 [ 560.799743][T19294] lock_acquire+0xf0/0x2e0 [ 560.799762][T19294] ? pcpu_alloc_noprof+0x218/0x19c0 [ 560.799784][T19294] __mutex_lock+0x19f/0x1300 [ 560.799799][T19294] ? pcpu_alloc_noprof+0x218/0x19c0 [ 560.799816][T19294] ? stack_depot_save_flags+0x3f3/0x810 [ 560.799839][T19294] ? kasan_save_track+0x4f/0x80 [ 560.799855][T19294] ? kasan_save_track+0x3e/0x80 [ 560.799870][T19294] ? pcpu_alloc_noprof+0x218/0x19c0 [ 560.799885][T19294] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 560.799903][T19294] ? blk_mq_init_tags+0x83/0x2d0 [ 560.799923][T19294] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 560.799939][T19294] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 560.799958][T19294] ? __pfx___mutex_lock+0x10/0x10 [ 560.799973][T19294] ? genl_rcv+0x28/0x40 [ 560.799987][T19294] ? ____sys_sendmsg+0x972/0x9f0 [ 560.800001][T19294] ? ___sys_sendmsg+0x2a5/0x360 [ 560.800020][T19294] pcpu_alloc_noprof+0x218/0x19c0 [ 560.800044][T19294] sbitmap_init_node+0x1e1/0x640 [ 560.800070][T19294] sbitmap_queue_init_node+0x3e/0x4d0 [ 560.800097][T19294] blk_mq_init_tags+0x15c/0x2d0 [ 560.800119][T19294] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 560.800139][T19294] ? kfree+0x1c1/0x630 [ 560.800152][T19294] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 560.800172][T19294] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 560.800197][T19294] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 560.800219][T19294] ? sysfs_add_file_mode_ns+0x259/0x300 [ 560.800244][T19294] nbd_start_device+0x17f/0xb10 [ 560.800269][T19294] ? device_create_file+0xf4/0x1b0 [ 560.800345][T19294] nbd_genl_connect+0x165b/0x1cf0 [ 560.800373][T19294] ? __pfx_nbd_genl_connect+0x10/0x10 [ 560.800397][T19294] ? rcu_is_watching+0x15/0xb0 [ 560.800429][T19294] ? __nla_parse+0x40/0x60 [ 560.800454][T19294] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 560.800481][T19294] genl_family_rcv_msg_doit+0x22a/0x330 [ 560.800500][T19294] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 560.800522][T19294] ? __lock_acquire+0x6b5/0x2cf0 [ 560.800543][T19294] genl_rcv_msg+0x61c/0x7a0 [ 560.800560][T19294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 560.800576][T19294] ? __pfx_nbd_genl_connect+0x10/0x10 [ 560.800598][T19294] ? __lock_acquire+0x6b5/0x2cf0 [ 560.800622][T19294] netlink_rcv_skb+0x232/0x4b0 [ 560.800643][T19294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 560.800658][T19294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 560.800685][T19294] ? down_read+0x272/0x2e0 [ 560.800701][T19294] ? genl_rcv+0xd/0x40 [ 560.800715][T19294] genl_rcv+0x28/0x40 [ 560.800729][T19294] netlink_unicast+0x80f/0x9b0 [ 560.800750][T19294] ? __pfx_netlink_unicast+0x10/0x10 [ 560.800769][T19294] ? netlink_sendmsg+0x650/0xb40 [ 560.800789][T19294] ? skb_put+0x11b/0x210 [ 560.800813][T19294] netlink_sendmsg+0x813/0xb40 [ 560.800837][T19294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.800860][T19294] ? aa_sock_msg_perm+0xf1/0x1b0 [ 560.800881][T19294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 560.800900][T19294] ____sys_sendmsg+0x972/0x9f0 [ 560.800914][T19294] ? futex_unqueue+0x211/0x240 [ 560.800949][T19294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.800968][T19294] ? import_iovec+0x73/0xa0 [ 560.800994][T19294] ___sys_sendmsg+0x2a5/0x360 [ 560.801011][T19294] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.801028][T19294] ? futex_wait+0x29a/0x380 [ 560.801061][T19294] ? __fget_files+0x2a/0x420 [ 560.801084][T19294] ? __fget_files+0x3a0/0x420 [ 560.801111][T19294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 560.801127][T19294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 560.801146][T19294] ? rcu_is_watching+0x15/0xb0 [ 560.801171][T19294] do_syscall_64+0x14d/0xf80 [ 560.801187][T19294] ? trace_irq_disable+0x3b/0x150 [ 560.801210][T19294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.801227][T19294] ? clear_bhb_loop+0x40/0x90 [ 560.801245][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.801261][T19294] RIP: 0033:0x7f91b059c799 [ 560.801277][T19294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.801292][T19294] RSP: 002b:00007f91b149d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.801310][T19294] RAX: ffffffffffffffda RBX: 00007f91b0815fa0 RCX: 00007f91b059c799 [ 560.801322][T19294] RDX: 0000000020000040 RSI: 0000200000000e80 RDI: 0000000000000008 [ 560.801333][T19294] RBP: 00007f91b0632c99 R08: 0000000000000000 R09: 0000000000000000 [ 560.801344][T19294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.801355][T19294] R13: 00007f91b0816038 R14: 00007f91b0815fa0 R15: 00007ffec22b50d8 [ 560.801373][T19294] [ 560.806388][T19296] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 560.867767][T19283] syz.0.3685 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 560.917145][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3687'. [ 560.920788][T19283] CPU: 0 UID: 0 PID: 19283 Comm: syz.0.3685 Not tainted syzkaller #0 PREEMPT(full) [ 560.920814][T19283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 560.920825][T19283] Call Trace: [ 560.920832][T19283] [ 560.920839][T19283] dump_stack_lvl+0xe8/0x150 [ 560.920868][T19283] dump_header+0xd3/0x4c0 [ 560.920924][T19283] oom_kill_process+0x3ab/0x970 [ 560.920952][T19283] out_of_memory+0x106c/0x1410 [ 560.920970][T19283] ? percpu_ref_put+0x19/0x180 [ 560.921001][T19283] ? __pfx___mutex_lock+0x10/0x10 [ 560.921022][T19283] ? __pfx_out_of_memory+0x10/0x10 [ 560.921038][T19283] ? do_raw_spin_unlock+0xf5/0x210 [ 560.921060][T19283] try_charge_memcg+0xc53/0x1560 [ 560.921085][T19283] ? __pfx_try_charge_memcg+0x10/0x10 [ 560.921103][T19283] ? xa_load+0x60/0x210 [ 560.921170][T19283] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 560.921188][T19283] ? rcu_is_watching+0x15/0xb0 [ 560.921211][T19283] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 560.921229][T19283] ? lock_release+0x4b/0x3d0 [ 560.921252][T19283] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 560.921273][T19283] __swap_cache_prepare_and_add+0x52a/0x700 [ 560.921306][T19283] swap_cache_alloc_folio+0xf1/0x240 [ 560.921332][T19283] swap_cluster_readahead+0x369/0x690 [ 560.921360][T19283] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 560.921390][T19283] ? get_vma_policy+0x27b/0x3c0 [ 560.921411][T19283] swapin_readahead+0x196/0xc50 [ 560.921437][T19283] ? rcu_is_watching+0x15/0xb0 [ 560.921462][T19283] ? __pfx_swapin_readahead+0x10/0x10 [ 560.921488][T19283] ? swap_table_get+0x1e/0x260 [ 560.921511][T19283] ? swap_table_get+0x1e/0x260 [ 560.921532][T19283] ? swap_table_get+0x1e/0x260 [ 560.921555][T19283] ? swap_table_get+0x216/0x260 [ 560.921578][T19283] ? swap_cache_get_folio+0x513/0x520 [ 560.921604][T19283] do_swap_page+0x54f/0x58d0 [ 560.921627][T19283] ? __lock_acquire+0x6b5/0x2cf0 [ 560.921655][T19283] ? do_swap_page+0x12c/0x58d0 [ 560.921677][T19283] ? __pfx_do_swap_page+0x10/0x10 [ 560.921698][T19283] ? __pte_offset_map+0x1ae/0x240 [ 560.921724][T19283] ? pte_offset_map_rw_nolock+0xea/0x160 [ 560.921751][T19283] handle_mm_fault+0x12d2/0x3310 [ 560.921781][T19283] ? handle_mm_fault+0xee/0x3310 [ 560.921808][T19283] ? __pfx_handle_mm_fault+0x10/0x10 [ 560.921832][T19283] ? lock_vma_under_rcu+0x45a/0x500 [ 560.921849][T19283] ? ktime_get+0x1d2/0x200 [ 560.921870][T19283] ? kvm_sched_clock_read+0x11/0x20 [ 560.921898][T19283] do_user_addr_fault+0xa73/0x1340 [ 560.921932][T19283] ? rcu_is_watching+0x15/0xb0 [ 560.921955][T19283] ? trace_page_fault_user+0x84/0x210 [ 560.921986][T19283] exc_page_fault+0x6a/0xc0 [ 560.922011][T19283] asm_exc_page_fault+0x26/0x30 [ 560.922028][T19283] RIP: 0033:0x7f30dda71590 [ 560.922045][T19283] Code: 49 89 f5 41 54 55 53 48 89 fb 48 83 ec 18 4c 8b 76 38 4c 03 76 18 80 3d 4f 41 ed 00 00 8b 6e 04 4c 89 34 24 0f 85 73 02 00 00 <80> 7b 60 00 8b 53 50 89 e8 0f 85 1b 04 00 00 85 d2 0f 85 0e 04 00 [ 560.922061][T19283] RSP: 002b:00007ffc0f898500 EFLAGS: 00010206 [ 560.922079][T19283] RAX: 00007f30dd5ff008 RBX: 00007f30de945720 RCX: ffffffff8baa84fb [ 560.922093][T19283] RDX: 0000000000000958 RSI: ffffffff8133ac7e RDI: 00007f30dd5ff008 [ 560.922105][T19283] RBP: 000000000000012b R08: 00007f30dde00000 R09: 00007f30dde16038 [ 560.922117][T19283] R10: 0000000000000001 R11: 0000000000000002 R12: 00007f30dd9ff000 [ 560.922128][T19283] R13: 00007f30dde16038 R14: 00007f30dd5ff008 R15: 0000000000000001 [ 560.922144][T19283] ? timerqueue_del+0x7b/0x100 [ 560.922192][T19283] ? in_gate_area_no_mm+0xe/0x60 [ 560.922220][T19283] [ 560.922227][T19283] memory: usage 307200kB, limit 307200kB, failcnt 776 [ 561.674029][T19296] bond0: left promiscuous mode [ 561.682726][T19296] bond_slave_0: left promiscuous mode [ 561.689090][T19296] bond_slave_1: left promiscuous mode [ 561.723563][T19283] memory+swap: usage 216116kB, limit 9007199254740988kB, failcnt 0 [ 561.738622][ T5842] block nbd4: Receive control failed (result -32) [ 561.745217][ T5842] block nbd4: Receive control failed (result -32) [ 561.811555][T19296] batadv0: left promiscuous mode [ 561.874313][T19283] kmem: usage 185676kB, limit 9007199254740988kB, failcnt 0 [ 561.899876][T19283] Memory cgroup stats for /syz0: [ 561.900025][T19283] cache 0 [ 561.910021][T19283] rss 0 [ 561.916509][T19283] rss_huge 0 [ 561.956951][T19283] shmem 0 [ 561.959992][T19283] mapped_file 0 [ 561.999738][T19283] dirty 0 [ 562.003075][T19283] writeback 0 [ 562.013293][T19283] workingset_refault_anon 46 [ 562.038698][T19283] workingset_refault_file 64 [ 562.054511][T19283] swap 712704 [ 562.061314][T19283] swapcached 741376 [ 562.070353][T19283] pgpgin 115639 [ 562.079564][T19283] pgpgout 115632 [ 562.088867][T19283] pgfault 205043 [ 562.096602][T19283] pgmajfault 21 [ 562.103436][T19283] inactive_anon 28672 [ 562.112021][T19283] active_anon 0 [ 562.119930][T19283] inactive_file 0 [ 562.132762][T19283] active_file 0 [ 562.140886][T19283] unevictable 0 [ 562.150295][T19283] hierarchical_memory_limit 314572800 [ 562.161207][T19283] hierarchical_memsw_limit 9223372036854771712 [ 562.174162][T19283] total_cache 0 [ 562.182469][T19283] total_rss 0 [ 562.190199][T19283] total_rss_huge 0 [ 562.197277][T19283] total_shmem 0 [ 562.205185][T19283] total_mapped_file 0 [ 562.213811][T19283] total_dirty 0 [ 562.220783][T19283] total_writeback 0 [ 562.229054][T19283] total_workingset_refault_anon 46 [ 562.239727][T19283] total_workingset_refault_file 64 [ 562.250373][T19283] total_swap 712704 [ 562.258726][T19283] total_swapcached 741376 [ 562.268635][T19283] total_pgpgin 115639 [ 562.276399][T19283] total_pgpgout 115632 [ 562.284917][T19283] total_pgfault 205043 [ 562.293570][T19283] total_pgmajfault 21 [ 562.302222][T19283] total_inactive_anon 28672 [ 562.311341][T19283] total_active_anon 0 [ 562.315413][T19283] total_inactive_file 0 [ 562.320551][T19283] total_active_file 0 [ 562.324616][T19283] total_unevictable 0 [ 562.329290][T19283] anon_cost 0 [ 562.332869][T19283] file_cost 0 [ 562.336218][T19283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3685,pid=19283,uid=0 [ 562.355755][T19283] Memory cgroup out of memory: Killed process 19283 (syz.0.3685) total-vm:104336kB, anon-rss:1240kB, file-rss:22936kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000