last executing test programs: 2.364177893s ago: executing program 3 (id=12494): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="05f67f00c3040000b55c3d6100000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000040010000000000004000050000d5bea2784d005b17"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x7, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="070000000802004ea700b700000000000000", @ANYRES64=r1, @ANYRES64=r2/1000+60000, @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYBLOB="0300004001000000030000600500000046f183ee5f2b75a2"], 0x48}, 0x1, 0x0, 0x0, 0x440}, 0x800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}}, 0x8, 0xf1d0}, &(0x7f0000000240)=0x90) 2.36291123s ago: executing program 0 (id=12495): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x430, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x18, r2}, 0x10) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x4ca31, 0xffffffffffffffff, 0x42910000) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000040)=0xfff7) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x5220, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r9, {0xb, 0xffe0}, {0x7ff1}, {0x7, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @filter_kind_options=@f_matchall={{0xd}, {0x250c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x298, 0x2, [@m_ctinfo={0x120, 0x1, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x80000001, 0x0, 0x8, 0xaaa}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x7, 0x10000000, 0x7, 0x2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x200}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x5, 0x0, 0x5, 0x101}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}]}, {0x7c, 0x6, "003e20e6fbb86f6a3416c386f9d7c3b263d3fd27ed2abb3b049012b92fe8d91da0ec92d34a3a0ee2419a5de8cb929b8d919bb9c10f954a0bcf9f2c94d813a09658471faef6b89e43be1707119ce12ada4c3d980324411095e7b30ba343016d1adc8211bc0ceddb09ca8266965d25b20e6641f3d5b2db9594"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x174, 0x14, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x400, 0x8, 0x8}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd10, 0x4, 0x8, 0xd, 0x7}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x8, 0x10000005, 0x4, 0x7}, 0x6c}}]}, {0xf3, 0x6, "0a96476847a1338c90ccc6c084f70a522c5a276084672a0c7fe22adf96eb03788bb65034703ad45f296c1b396937ed9c10ce538bf412c54c258c4bc7b5e3d88421091e7caa3869ceaec87f007490299a49d3aa691fd4e2009619e8809c1d394a25e56c4e50da1577f04c48f55ce2ff4bb84a58890cbfe3a3fa688596eba330ce26f843d817460626ed210a5272ec0097baaa0a59b36d80289f29efd5ee9f975363d4c2e60d05d49899879752897089562b1be4b519012866f9018e417510e06d9470091cdc4383fe8a2a1fd51631687bbbe714131f3a229e9756b7566486e2fa798e8b8fe92185d6851a42534198ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x103c, 0x2, [@m_mpls={0x1038, 0x3, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x7}}}}]}, @TCA_MATCHALL_ACT={0x1214, 0x2, [@m_simple={0xa0, 0x15, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x2, 0x7, 0x9, 0x100}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xd, 0x5, 0x2, 0xc77}}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'multiq\x00'}]}, {0x21, 0x6, "c3e1ebc16b79ee6dccc3f2e8d2b443d9fa7e91aed14a1b7b8108dc1423"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xe8, 0x15, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x20000000, 0x2, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x1, 0x8, 0x0, 0x103f}, 0xfc00}}]}, {0x80, 0x6, "52da61f2b9804698a7af5d7a5f551de9b2915b1d3c0cbb166d448afb1bbb86df6009d8c28b1843521fb1f802de55c965ca1f06656708769d19f3a21a4aae030e13cfc489799eb48197706bb4a4314870455da03751b478b5ff0fede33670004421ca81ff96f94a370b6f7936732d352e06e093845d6a04a1aebaf114"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x1088, 0x3, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xffffffff, 0x4, 0x8, 0xbf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x400, 0x7, 0x10000000, 0x6, 0x4}}, @TCA_DEF_DATA={0x8, 0x3, '(+!\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'multiq\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x2cbc, 0x2, [@TCA_ROUTE4_ACT={0x27b4, 0x6, [@m_tunnel_key={0x90, 0x17, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x65}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x29, 0x6, "41041aef71cdf8cc1c3d558a4d5aea40b82bdfdd6592376f274e63c1b0674e8d95cd05c014"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x64, 0x7, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x2, 0x20000000, 0x2, 0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x16, 0x6, "0f5d6b5faa4286bd82a888cafc379dafc994"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xa0, 0x17, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe3e4f}, @TCA_MPLS_LABEL={0x8, 0x5, 0x304a5}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_TTL={0x5, 0x7, 0x10}]}, {0x43, 0x6, "e978116a64a9c91320fea9b5ad5c905fbf98cf3ddb1d166559c6f8b81ac588948f7dca08dca3f657753790ce70c6b1949ef3158343ec80f89c01c989cf91ae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x150, 0xa, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8001, 0x1, 0x0, 0x763}, @private=0xa010101, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xd, 0x10000000, 0xeff0, 0x9}, @local, @empty, 0xffffff00}}]}, {0xd8, 0x6, "5a3ac3b14016094cb85a6094f8ebf598baa8326e53d4c54d3f140c904400e5ca49b4acd798ca170642b75dc790ca9debf0e1219b1b2965fe3b15a9ad0b400b701d60a4673b2c0d00c2baca36ddf229fd226b68c384f07f00d7af318f32e42ceca594a6f94a261f70d96e0682a7342a9b8e41f4e80df9e4614f84dc94194b64030765e0e6d32afe98e45c277a2ab1e0b39a0f44065d243f1f08fc136c6fc6b299a918302fd528a40e2c5d30126a5e72369595da60dbb906347270fd20a19306d30b501416f253aa0d0a42a9c1580bcbcea3084b9d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x130, 0x17, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x335b3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1b}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0xb2, 0x6, "2a6625586435b7b20a0237ad07d302c4756e6c0eaaf9f429a74d92b8b7d9e949b0f0762c5b6cb7ea38d722c19b00fe447ca285bb26864a6034dc9c24e1a7095288bad8815b5978bad0be4202ab60805a679a02b2711cbe1bc8e0fa1f00b7cceeae33cd00dda5128e18f4d238442bde5bdb1392a3b57299db848b6493ed15a738afa0950f007e20d07bc437c048d38f1d6912f88a3c3766fd5a97c74a02ca97aa5936e3d13a9463a2b91ef3eccc0b"}, {0xc, 0x7, {0xfc16a9cdc0197f7d}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x10b4, 0x1e, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x20b3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x2, 0x1, 0x0, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x17, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16d4, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x8, 0x0, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x8, 0x9, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb8, 0xf, 0x2002392533205082, 0x8, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x98, 0xa, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x5, 0x0, 0x200, 0x800}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_LABELS={0x14, 0x7, "2dad7d18c02fe089d070117200225060"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "47bb82179724bc3cc6994f1d98af82e6"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}]}, {0x13, 0x6, "7206fc8b8a8028c48683b08fbafacb"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1250, 0x8, 0x0, 0x0, {{0xa}, {0x1198, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x140, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x9d1a3d0ff41e9c3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x400, 0x5, 0x5, 0xef27, 0x5}, 0x7f, 0xb, [{0x9c, 0x7b, 0x0, 0x2263, 0x1, 0x6}]}, [{0x400, 0x1, 0x6, 0x6, 0x8, 0x8}, {0x10000, 0x4, 0x0, 0x3, 0xfffffffe, 0x6}, {0x1, 0x8, 0xb, 0xc3, 0x4, 0x7fff}, {0x5, 0x7ff, 0x5, 0xfffffff9, 0x5, 0x3}, {0x9, 0x7, 0x8, 0x9, 0x80000000, 0x3}, {0x7fff, 0x2, 0x3, 0x200, 0x200, 0x9}, {0x78, 0x3, 0x2, 0x8, 0x7ff, 0x9}, {0x8, 0xfffff800, 0xabd9, 0x2, 0x8, 0x4}, {0xe, 0x7, 0x6af3, 0xffffffff, 0x81, 0x2}, {0x6d7, 0x9ee, 0x8, 0x7f, 0xfff, 0x1016}, {0x6, 0x5, 0x2, 0x7, 0x6, 0x4}, {0xde6d, 0x2, 0x0, 0x4, 0x6, 0x6}, {0xa, 0x3, 0x8, 0x1ff, 0xdc4}, {0x4, 0x3, 0xa13, 0x8, 0x7fff, 0xd30}, {0x1, 0xa0, 0x8001, 0xfffffffb, 0x1, 0x82}, {0xa, 0x40000, 0x9, 0x7a1, 0x3, 0x9}, {0x8, 0xa, 0xfff, 0x90c0, 0x2, 0x11}, {0x5634682b, 0xc, 0x7fffffff, 0x8001, 0x1, 0x4}, {0x2, 0x6, 0x4, 0x6, 0x7, 0x4}, {0x65ab, 0xa, 0x9, 0x7, 0x80000001, 0xfff}, {0x9, 0x2, 0x1bc04197, 0x10, 0x7ff}, {0x5, 0xd6c, 0x0, 0x9f0, 0x10, 0xffff0000}, {0x6e, 0x7fffffff, 0x1, 0x3, 0x8, 0x2}, {0xe, 0x6, 0x40, 0x1, 0x7ff, 0x1}, {0xd, 0x2a, 0xfffff000, 0x6, 0x9, 0x7be}, {0x1, 0xffffff6b, 0x2, 0x7ff, 0x2, 0x1}, {0x6, 0x81, 0x9c92, 0x7ed584fd, 0x335, 0x5}, {0x8, 0x8c8c, 0x8, 0x4d0, 0x0, 0x100}, {0x3ff, 0x7, 0x743e3d92, 0x5, 0xd7bb, 0x10}, {0x1, 0x7fffffff, 0x7, 0x0, 0x78, 0x7b4}, {0x0, 0x0, 0x2, 0x7, 0x6, 0x3}, {0xfffffffc, 0xffff, 0x5, 0x0, 0xfffffff8, 0x3}, {0x4, 0x3, 0x1, 0x4, 0x6, 0x5}, {0xffff, 0x7fff, 0x2, 0x3, 0x8, 0x9}, {0x4, 0x8, 0x8, 0xc, 0x0, 0x4}, {0x5, 0x2, 0x6, 0x4, 0x2, 0x1}, {0x0, 0x3, 0x2, 0x10, 0x9, 0x1ff}, {0x800, 0x1, 0x1, 0x28d000, 0x7, 0x4}, {0x50, 0x6, 0x8, 0x80000001, 0x5}, {0x0, 0x5, 0x81, 0x4, 0xb40d, 0x2}, {0x72, 0xffff, 0x0, 0xf, 0x6, 0x7fffffff}, {0x1, 0x4, 0x6, 0x6, 0x7, 0xb}, {0x800, 0x3, 0xfbee, 0x9, 0x2529, 0x9}, {0x0, 0x5, 0x437, 0x7000, 0x2, 0xfffffffd}, {0x5, 0x7, 0xffff8000, 0x7, 0x8000000, 0x3}, {0x4, 0x9, 0x3ff, 0xc0000000, 0xffffffff, 0x1}, {0xb, 0x9, 0x5, 0x7, 0x59, 0x80000001}, {0x1, 0x5, 0x5, 0xd22, 0x1ff, 0x81}, {0x7d9, 0x9, 0xcc, 0x80, 0x3, 0xffffffff}, {0x9, 0x5, 0x8, 0x0, 0x4f0, 0x4}, {0x8, 0x3ff, 0x80, 0x6, 0x2, 0xfffffffd}, {0x1ff, 0x5, 0x3, 0xcff6, 0x8000, 0x7}, {0x7, 0x8, 0xba3, 0x2, 0x7, 0x611}, {0x6977, 0x8f9, 0xfffffff8, 0x71d2, 0x9, 0x7fff}, {0x3, 0x4, 0x4, 0x6, 0x1b, 0x8}, {0x5, 0x3, 0x0, 0x0, 0x9, 0x5}, {0x6160, 0x6a, 0x2, 0x3, 0x2, 0x8001}, {0x5, 0x7ff, 0xfffffff9, 0x90000000, 0x7, 0x6}, {0x4, 0x7b8b, 0x7, 0x4, 0x3f8d, 0x86b}, {0x0, 0x4, 0x1, 0x9, 0x9, 0xffbc}, {0x10001, 0x1, 0x9, 0xff, 0xffff, 0x58}, {0x8000, 0x4, 0x3ff, 0x8, 0x1, 0x5}, {0x7, 0x10, 0x4, 0x5, 0x100, 0x400}, {0xc, 0x1000, 0x1, 0xfb, 0x6, 0x6}, {0x8000, 0x1, 0x3ff, 0x968, 0x8, 0x1}, {0xfffffffd, 0x3, 0x1, 0x1dc, 0x6}, {0x8, 0x11200, 0x81, 0x2, 0xd, 0x6ab}, {0x9, 0xc1b7, 0xffffffc0, 0x13e1, 0x8, 0xffff8001}, {0x0, 0x2, 0x2, 0xfffffff7, 0x0, 0xa60}, {0xa3d, 0x9, 0x2, 0x0, 0x1000, 0x6}, {0x0, 0x2, 0x7, 0xa, 0x6, 0x3}, {0x8da, 0x9c1, 0x5, 0xa73, 0xfffffff8, 0x3}, {0xffffffff, 0x5, 0x3, 0x100, 0x97f7, 0x7}, {0x3, 0x0, 0x2, 0x2, 0x80000001, 0x8}, {0xc2758b46, 0xd4f7, 0x2, 0x362, 0x80000001, 0x8000}, {0x7fff, 0xd1, 0x5, 0x4, 0xfffffeff, 0x9}, {0xd7, 0x5, 0x4, 0x945, 0xffffffff, 0x3}, {0x51, 0x6, 0x4, 0xb08, 0x6, 0xfffffff8}, {0x2, 0x9, 0x7, 0x7, 0x5, 0x1}, {0x6, 0x8, 0x200, 0xffff, 0x5, 0x7e}, {0xdd19, 0x6, 0xffffffff, 0x4, 0x3, 0xfffffffb}, {0x101, 0x2, 0x0, 0xfffffff8, 0x489, 0x2}, {0x80000001, 0x29, 0xfffffd1b, 0x4, 0xa, 0x30}, {0x7, 0xf3, 0x5, 0x4, 0x9, 0x9}, {0x0, 0x2, 0x1, 0x7, 0x1, 0x7}, {0x40, 0x5, 0x1ff, 0xcc, 0x3, 0x8cb1}, {0x3, 0x2, 0x200, 0x8, 0x0, 0x9}, {0x8, 0x80000000, 0xed79, 0x4729, 0x10001, 0x10}, {0x9, 0x1, 0x9, 0x6, 0x9, 0xd}, {0x9, 0xfff, 0x9, 0x7, 0x2, 0x1ff}, {0x3, 0x1, 0xff, 0xffffffff, 0x9, 0x5}, {0x0, 0x3, 0x4, 0x2, 0xfffffffd, 0x7}, {0x7, 0x8, 0x5, 0x80000000, 0x8, 0x2}, {0x7, 0x7, 0x9, 0x0, 0x3, 0x12c83b3d}, {0x6, 0x101, 0xffff, 0x168cb8ef, 0x8, 0x5}, {0x1, 0xe92d, 0xffffffff, 0x9, 0x2, 0x3}, {0xb, 0x9, 0x2, 0x853, 0x7, 0x5}, {0x4, 0x64bc0f91, 0x7, 0xffffffff, 0x6, 0x4}, {0xff, 0x8b, 0x3417254e, 0x4, 0x0, 0x310a}, {0x1fb4, 0xf, 0xfff, 0x1, 0xfffffff8, 0xe561}, {0xff, 0x401, 0xff, 0x5, 0xfcb, 0xac3c00}, {0x2, 0x5, 0x10001, 0x38, 0x80000000, 0x6}, {0x34c, 0x3, 0x10, 0x5, 0x7fffffff, 0x7}, {0x3, 0x3, 0x0, 0x3, 0x10, 0x1ff}, {0xafd27c07, 0xffffffff, 0x4, 0x5, 0x1, 0x8}, {0x4, 0x0, 0x8, 0x3ff, 0xfffff000}, {0x8, 0xc, 0x0, 0x5, 0x4, 0x7}, {0x0, 0x3, 0xfffffff9, 0x10, 0xd, 0x3}, {0x9, 0xffffd778, 0x1, 0x40, 0x291, 0x80000000}, {0x5515f513, 0xe, 0x5, 0x101, 0xfffffff8, 0x6}, {0xffff, 0x80000001, 0x0, 0xfffffff7, 0x1, 0x8}, {0x3, 0x1, 0x0, 0x6, 0x10, 0x1}, {0x9, 0x7fff, 0x6, 0x3, 0x401, 0x7}, {0xf1, 0x7005, 0x7fffffff, 0x4, 0xdd82, 0xfffff801}, {0x5, 0x8, 0x5, 0x3, 0x2, 0xfff}, {0x6, 0x7, 0xfffffff5, 0x6, 0x4, 0x7fffffff}, {0x7, 0x3, 0x4, 0x4, 0x0, 0x3}, {0x80000001, 0xb, 0x5, 0xe098, 0xaaf0, 0xabf6}, {0xe, 0x7, 0x6, 0x60, 0x8, 0x1}, {0x6, 0x1, 0x3, 0x8, 0x400, 0x3}, {0x4, 0x3, 0x9, 0xfffffff9, 0x2, 0x8}, {0x1, 0x3, 0xffffffff, 0x9, 0x1, 0x2}, {0xf2ac, 0x1, 0x3, 0xffffffff, 0xfffffc01, 0x7}, {0x1, 0xfffffff9, 0x8, 0x6, 0xffffffea, 0xffffffff}, {0x120, 0x400, 0x6d4, 0x1000, 0x9, 0xfe}, {0xb, 0xfffffffd, 0xb, 0xa, 0x5}, {0x0, 0xffff8001, 0x7, 0x4, 0x8, 0x7ff}, {0x5, 0x5082, 0x2, 0x8, 0x8000, 0x5}], [{}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1f5463f4758fb872}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x6}, {0x72e5a18c7a7111e, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {}, {}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x2}, {0x4}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x7, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x1f8, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xf9f6ce0a217818f1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x8e, 0x6, "97dd4ae0893200e3cb60cf8db709bd18670275085fbf88e1c8e0907be5887f95b01c39f448a1187afb31f16ddf338e0b48e0868240e40991c673dd24e2ee6ce3a80c5f4af738cee3de302787170538047382dd5f80a1ccfd6ad4e41075facdee4329b11ff847110244aac6f97b9c173860e5b8c99d0b9df735b1707f6a2efea5386f759acc01b45ad677"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xab}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf7}, @TCA_ROUTE4_ACT={0x4f4, 0x6, [@m_skbedit={0xd4, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x10}}]}, {0x8d, 0x6, "e1cd99dbb72b12d0c233346e00fc12a7fb0f61b83adcd3c1433d41a906142378437cc70c0bc5110909ee4b886f1bdc9b46eb81f0c758cf28d838155ab681f9bd303df6b8f397e60dfbadf57d180712ee557058fd316fe950766ef6c4c48c90047adc26f3911d6c737bb791ddb35ee8ca76a5adcdd828a51ec3692ad42973dd3faa1721c122d894e670"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x74, 0x12, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x2f, 0x6, "671ca590674e1f2a8f30e4bc6dca6404df29b46c4aaad1b1af1b8ca61a13243af38edee487e5599dd67169"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x90, 0x9, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x400}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xcd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x61}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x401}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xef7, 0x8, 0x1, 0x0, 0x44}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x12, 0x6, "7d6f051df445a31045788e7c7739"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_vlan={0xe8, 0x1f, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbf9}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x235}]}, {0x9c, 0x6, "3e6c3ce48e41fa19f3213b1f4138d9b8aa19222fef5f35c1fd1e618432310d3eaf6ec4dbdd843d8495cd1bb2e7dbf92e441c90edfac89f2bd096426a40e6ea2421f0ee64ea95f2b3c7349b89160e2f51d5fd2bd989866b547f17934f527f25c337ed9daa72df9fe1a4d947f7d219f203051b6e7bc288fc7040fa22ea1347fb58ed94667967eb24a6f06f2060a101f1bc4e47985f737b348e"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x154, 0xe, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4d9, 0x5, 0x2, 0xd, 0x8}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xcce, 0x9, 0x0, 0x3, 0x3ff}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x0, 0x10000000, 0x5, 0x3}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x7, 0x0, 0x8001, 0x6}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9d, 0x4, 0x6, 0x0, 0x7ff}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x1, 0x56b98182, 0xd}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xffffffc0, 0x1, 0x0, 0xe}, 0x50}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe3, 0x8, 0xffffffffffffffff, 0x1000000, 0x6}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0xfffff63c, 0x2, 0x4, 0xd5e3}, 0x46}}]}, {0x2b, 0x6, "7f726995a368f6ed536a5da28d4b37aaab91d28750dafc65ad75b9086342a41c8eb9182412dd9d"}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}, @m_sample={0xdc, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xa9a}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x10a0}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x59}]}, {0x86, 0x6, "56de9e9d61152d1bce4dcfa72a15e507457a846b8d2f3715ad621d550ee9be6569212d88548c42cae5ad9d85eb9934af4ce7e700dd974fd2bce23e976ce0f54cc2899435194a0bf6b48fd4a71bfa2a2b296f39b37ff42df1c420d2774a11fb9e1ef7ec9611223dae2e1ebd682449da8ab9fa82e57bb366307497233805ba82698a38"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x5220}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_LIST_IFACE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="010026bd7000ffdbdf251f0000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 2.227710816s ago: executing program 3 (id=12497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f600"/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = socket(0x23, 0x80805, 0x0) listen(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000300000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_j1939(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x1d, r7, 0x1, {0x1, 0xf0, 0x3}, 0x1}, 0x18, &(0x7f00000005c0)={&(0x7f0000000500)="30970c703fd7aabc4ebb18e6f71d4982aaf46888d441a97de92a6833206b186eb715a686a78e273735d6e1bce5dbddc4fe69a95978b41f67f7313a595d82a47b7d244cf9ef4e778ad9057110875a19fde68c81b3fa253fb7f293751f722f39350395d95b4732d4b9cd6158360ae993ca6f306741b5ec0fa8aab85179a7ba95936d7c45885136c20210303e74d9f37445d470bcce8f31d96ba4934efc6e07d0", 0x9f}, 0x1, 0x0, 0x0, 0x8040089}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x18000}, 0x4040045) socket$kcm(0xa, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r8, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) accept4$tipc(r3, 0x0, 0x0, 0x0) 2.222611243s ago: executing program 4 (id=12498): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r0}, 0x18) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f00000000c0)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x7b}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="06", 0x1}], 0x1}, 0x4000840) 2.029895445s ago: executing program 4 (id=12502): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) 1.918394169s ago: executing program 3 (id=12503): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000050000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000940)={{r0, &(0x7f0000000040)='(/{\x00', 0x440201, &(0x7f00000004c0)={@align=0x80, {0xa, 0x3, 0x5, 0x234}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x5}, 0x5, &(0x7f0000000880)=[{0x2, 0x7ff, &(0x7f0000000200)='\x00', &(0x7f0000000240)="bc20c1b67fb32d23ef27ed975039caa8eea900de438eb4c4f38996395b466a80934d8735a59a3e70a9f62f744f33834e27a7d106f6e58425bf35dfe7b2caefe1d187e6d73fe2bfe965f590f2136a1b1f83fb4ce54f084f31ce08b0837725fef0fb5a78ffe906fbfdf84c415eef2e320bd2445579fff69082b610c9f7d157f23bdee1adc6dd9a4aec2bc61baa989552630b44ec33d987fb926eac9619e1c59c34012e55e8fbdd", 0xa6, 0x20}, {0x2, 0x9, &(0x7f0000000300)='.#\x00', &(0x7f0000000340)="fe8bcc4b34f43febfb917d16cd90537d0a8f554a2974fa1f3d987906837acb1f2f744fb67b3477b488efe3f239e38636e48dcef86a26854dab55f9d5555192cfe66d4ca47e32d42dd012c33dc6f557b18776310de1c03fc7175fcbff136a7cc6c282a81e8318ba40db268a4fac84158f1f8d4e78df10813be787738175ae9bb2c9dd69cc56f961990a9d3964dbefd1e8ba0e005dd0c26ca207985e870442229a71f3e2f329717d6fd8d373302ac05c7c7678d093bed2e4977b9bcd61ea4c8970ab", 0xc1, 0x18}, {0x3, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000580)="fb75b4094b9c37ee2260480fa0065bf63ed75be8232c83425d989c2b4300c389e79f5163b581e118a4e379e0545c0536a22f0b9f52187c7c2bab4b74616ccb6b0a248c269e522766ed38ad4240da473bcc674beb196b3278f708d10167b9c3520192bc3c8becf25986f292da57facc337d614246b2e4be7e37ec548edb09e64ebd8d1278756ce87f328c3ac0632830632102021e", 0x94, 0x18}, {0x0, 0xd, &(0x7f0000000640)='\x00', &(0x7f0000000680)="25916f8516defe274b6812a66daf860887e286b14e35e76c8a62cdc3da5867c1b85f66f7bae621c6c23222181ac9c37433f1436ef4d114531c1bde58018653359f453f65b89e32e983c50882cf3c3194e1e1c5bd587c6b409f", 0x59, 0x8}, {0x2, 0x2, &(0x7f0000000740)='\\\x00', &(0x7f0000000780)="07df619f47f33738f2e19bb5d0d3903be6e4680da6ea3f444397d644e0c7c4770f583dfe132131c1d3fd061973de75db7591b463290975da62dbef0dd7c0ad19ba3181f5f2e618aa28d568e60d7d40e70b06012241d27f30f37277d7501f5820b3df110a1c08cbb711f42dac7759dd2fb3deec2132920ca70953be586cdc1fbc604861f27252667056551cc297ffb7b83df2275db2b34865d27cf938ac3b5bee204f7d43f7fb47ebe0e88a2f2a0638ae9a7204a94933f7546b8444a3a9e964a71346cdef8584095f00d7446e0a9f8e4b3823", 0xd2, 0x22}]}) (async, rerun: 64) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x801, 0x4) connect$can_j1939(r3, &(0x7f0000000400)={0x1d, r4, 0x0, {0x1, 0xff, 0x1}, 0xff}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, r2, 0x5, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000002600)}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd6300000000283afffe800000000000ea32a9959cc9d262aafe8000000000000000000000000000aa8900907800000000fc076521cc43ff0000ff020000000000000000000000000001753f2e66e47c8d72d495c586a2388c6c9a56172efc0983184730ef31c8d571153c5bb3b3b1f6bf40bec13da905ff274e65e69711ee6839323ef9044487a872e2524c378be6aefdff5fe1634db5f0381b901af1afdf76563576703aee"], 0x0) (async, rerun: 64) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000080)=0x1, 0x4) 1.815962695s ago: executing program 4 (id=12506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x400, @mcast1, 0x5}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0xf0ab39a5801d7c87, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x3c, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}}, 0x884) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x94, r8, 0x10, 0x70bd2b, 0x2, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000054}, 0x2400c001) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@delchain={0x4a0, 0x65, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xfff1, 0xc}, {0xfff2}, {0x10, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_u32={{0x8}, {0x42c, 0x2, [@TCA_U32_POLICE={0x428, 0x6, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x55b, 0x0, 0x1, 0x6, 0xe, 0x100, 0x7, 0x5d5, 0xd, 0x9, 0x0, 0xffffffff, 0x3d0b, 0x8, 0x1, 0x4, 0xf1b, 0x8, 0xffffffff, 0x80000001, 0x1, 0x9, 0xffffffff, 0x785, 0xfd, 0x548, 0x6, 0x0, 0x9, 0x100, 0x6, 0x4, 0x2, 0x8001, 0x2, 0x1, 0x1, 0x7, 0x200, 0xfffffe01, 0xfe79, 0x2, 0x8001, 0x535, 0xffffff81, 0x2c11, 0x4, 0x1, 0x24e3, 0x5, 0x9, 0x39d6b348, 0x8, 0x4, 0x5, 0x8b61, 0x200, 0x204, 0x8, 0xfffffffd, 0x9, 0x10, 0xfffffffe, 0x8, 0x3, 0x6, 0x1, 0x5, 0x8, 0xc1, 0x7, 0x2, 0x3, 0x7, 0x7d470, 0x3, 0x8247, 0x1, 0x7f, 0x1, 0x1, 0x6, 0x0, 0x3, 0xd, 0x80000000, 0x0, 0xe7a6, 0x5, 0x7, 0x10000, 0x54, 0x10001, 0x7630, 0xd7, 0x3, 0x8000, 0x2, 0x9, 0x400, 0xeed, 0x4, 0x8, 0xfffffff6, 0x0, 0xe354, 0x8, 0x1ff, 0x5, 0x81, 0x6, 0x0, 0x5, 0x9ff, 0x1, 0x7, 0x8000, 0x6, 0x10001, 0x1, 0x1, 0x4409f5c2, 0x200, 0x1, 0x5, 0x1, 0xcc, 0x187, 0x4, 0x6, 0x100, 0x4, 0xbff9, 0x6, 0x10, 0x7, 0x800, 0xb, 0x3792587d, 0x1, 0x8, 0x3, 0x81, 0x0, 0x10001, 0x6, 0xac1, 0x7ff, 0xb, 0x101, 0x5, 0x7, 0x7, 0x8f, 0x8, 0x3, 0x4, 0x1, 0x4, 0x5, 0x3, 0x0, 0x8, 0x8, 0xfff, 0x8001, 0x7ff, 0x7ff, 0x1, 0xe6e0, 0x5, 0x4, 0x6, 0x80000000, 0x0, 0x0, 0x4, 0x1, 0x40, 0x4, 0xb, 0x40, 0x8b23, 0x0, 0x9, 0xb2c, 0x8, 0x7, 0x2, 0xffff3785, 0x7, 0xd, 0xfffffff9, 0x20, 0x1, 0xd7, 0x9, 0x1, 0x6, 0x4, 0x5f10, 0x1, 0x0, 0xf, 0x8, 0x80000001, 0x4, 0x2, 0x13596971, 0x6, 0x10001, 0x4, 0x6ebf3e85, 0xa76, 0x8, 0x5, 0xa1, 0x1, 0x1, 0x86b, 0x80, 0x1, 0xfffffe01, 0x5, 0x3, 0xde8, 0xc, 0x6, 0x6, 0x4, 0x7fffffff, 0x4, 0x8, 0x1, 0x7, 0x2, 0x1, 0x9, 0xffffff62, 0x7, 0xe, 0x9, 0x5e2, 0x3, 0x8, 0x987, 0x1, 0x35, 0x11ca507b, 0x13, 0x800, 0x4, 0x8, 0x8, 0x80, 0x8f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x60d2e4bd}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x30}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.698694587s ago: executing program 3 (id=12508): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x3c, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x14c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa07}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xada4}]}, @CTA_NAT_SRC={0x50, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000140), 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth1_vlan\x00', 0x4003}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.564487383s ago: executing program 2 (id=12510): r0 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) (async, rerun: 64) splice(r2, 0x0, r5, 0x0, 0x400000008000f28, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "4ef99f49fcdb8f080c26a04883ad5c8c82b8b100", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x0, 0x10132, 0x0, 0x0) 1.563112253s ago: executing program 4 (id=12511): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r4, 0x111, 0x6, 0x0, &(0x7f0000000080)) (async) getsockopt(r4, 0x111, 0x6, 0x0, &(0x7f0000000080)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240), 0x4) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240), 0x4) 1.529582601s ago: executing program 1 (id=12512): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) r1 = socket$inet6(0xa, 0x80006, 0x6) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000080)={r1, 0x8}) readv(r1, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/119, 0x77}, {&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/92, 0x5c}, {&(0x7f0000001280)=""/126, 0x7e}, {&(0x7f0000001300)=""/37, 0x25}], 0x6) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000013c0), &(0x7f0000001400)=0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000001440)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000014c0), &(0x7f0000001500)=0x4) r4 = openat$cgroup_ro(r3, &(0x7f0000001540)='cpuacct.usage_percpu\x00', 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001580)={0x0, @in6={{0xa, 0x4e21, 0x22, @mcast1, 0x2}}, 0x685d, 0x9, 0x8, 0xfffffffd, 0x80, 0x8, 0x5}, &(0x7f0000001640)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001680)={r6, 0x7}, &(0x7f00000016c0)=0x8) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000001800)={0x1, 0x0, 0x1000, 0x73, &(0x7f0000001700)="62d6f5b8c9dc9b8f7b06b90126903e99f2bc0beedee5612caae8466aad662f7070977541c3468f334747f8fd3e40815a6dfbf987acdb5b9abbfbac8c4dcafc96dc7a57a0a46712049f0c200649e2da7643374cea56a5dc65875f90e5c313ea1ffcc5633938427d3b4e494a07004a4c16837022", 0x43, 0x0, &(0x7f0000001780)="8d16742541fc6f6119bf097f5e3a186586472f89e54d92905a95c50cffa5e5f0e57bc0c1ff69f5ffff13b8222099a849816a9a56a321b566645906746bd657cd217520"}) r8 = openat$cgroup_devices(r3, &(0x7f0000001880)='devices.deny\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f00000019c0)={r3, &(0x7f00000018c0)='\x00', 0x2000, &(0x7f0000001900)={@align=0x81, {0x7, 0x0, 0xffff7fff, 0xfffffffffffffff0}}, 0xf8, &(0x7f0000001940), &(0x7f0000001980)=0x7}) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000001a00)) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r10, 0x80105873, &(0x7f0000001a40)) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000001a80)={{r5}, "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"}) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(r3, &(0x7f0000002a80)={'c', ' *:* ', 'm\x00'}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002ac0)={{{@in=@remote, @in6=@private2}}, {{}, 0x0, @in6}}, &(0x7f0000002bc0)=0xe8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000002c00)={r7, 0x5, 0x39, "41684f7b93cd24f45f3ca8c3eb21b1c7830d883059657e403072696b57f40b10cbc63ceca364e3c50481737749c25f59ddb3b8ade8f65f2119"}, 0x41) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000002c80)={r7, 0xf, 0x4}, &(0x7f0000002cc0)=0x8) sendmsg$tipc(r9, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002d00)="f93a174c39a11dd35074637ebacee994ba48309a1befefcb35366ae6ee7ca237f7fe941cb283b121670e519c48eae7ebb989226b10a36665fd6dd0291e5c035f5d2c0b427e5adc033570320a3c6894d635047b4f5f3ad0a3eba6608fb50dea998aad54c9b9a754d40884896f171e86e2c40b0086e381e2281b16e6bc9dcdf15fa68c8563016e5fe2", 0x88}, {&(0x7f0000002dc0)="9694e21eb17f12bf45c16de3829a74e0ea43a378cc39788fd97ec494c94b23d6257f445b3df31914fa38fdb8636fd9722407dafac2ec8d8d96d3970097e9b7705c52e5d4f5e4861428936e3038d9fc30380972dddb368f9e699e0e9fbd2c7ec5010e5ba7cb6fcf85b28eda3c34e9ab6a163cd4dee21de6cba95f8b9669bb359120a68b78abbfee8f647b9e590a94fb1d1d2b0d041971d9f3cbe308de24a9fe779995bee45a2a002894bec0d8aff02bc631f34423c131d901d72ec0755ca7005f55ac9a3eaf6957", 0xc7}], 0x2, 0x0, 0x0, 0x800}, 0x24048044) ioctl$XFS_IOC_COMMIT_RANGE(r8, 0x40585883, &(0x7f0000002f40)={r2, 0x0, 0x0, 0x7fffffffffffffff, 0x2f, 0x2, [0x4, 0x4, 0x1c, 0x1000, 0x6, 0xd2]}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000002fc0)=0x80800020) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000031c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003180)={&(0x7f00000030c0)={0x8c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x7f}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x8c}}, 0x800) 1.495982965s ago: executing program 0 (id=12513): pipe(&(0x7f00000007c0)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000a80)={{r0}, 0x1, 0x1, 0x9}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x1, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x5}, {}, {0x2, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}, {0x2}, {0x1fdc}, {0xff, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {}, {0x9, 0x0, 0x1}, {0x5f5}, {0x7, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0xe}, {0xe2}, {0x1, 0x0, 0x1}, {0x2}, {0x101, 0x0, 0x1}, {0x1000}, {0xf30b}, {0xe1e3, 0x0, 0x1}, {0x1}, {0xffc00, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x2}, {0xf2e}, {0x5, 0x0, 0x1}]}]}, 0xa0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431903000000000014003500776c616e30000000000000000000000008800a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) sendmmsg$inet(r2, &(0x7f0000000980)=[{{&(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000050c0)=[{&(0x7f0000000340)="67d628c20f6a631cc757bf8ba77280b9fd947653342224dc68e90062253ae976713258107077b620d0d060bd4c54d64410821f564908cdcc6283bf4c8d4c47db9bbafdc06aa0b81f31bf13b423425d4c2a506f99065726b0e17e0fe0839709debf28f48ff83662659e6f8175fd75f396be396165f0abbbffd084a81249f309fbaf39c23e85a96e064f6cd00cc90301a2a4dc340670dc918a69af0d294ce464f4635695b0d79584bd6d36f5582fc85b5e9161d22ec476ea8a9c64242a8e961f802288fbdec89bb3b05d887a67ed554448c783d9f7fd094fa13bfc20ae486777082a0de515c308539abdd9395137cfc573543252cd98a1aef305d01903", 0xfc}, {&(0x7f00000004c0)="f2805ad7923bbe6645a4aa1078f27b3d9fc87faff2fb93a3ad4ee59b02676d23d93ad430470fd609b8f54ad2487821aebeb55cfcafbb0e6113cf0a90c44a7012f2695ffeccd736153ae5bf95dfc06da9855c88a12bdcca4140", 0x59}], 0x2}}, {{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="ced5368e432dc65b3ad8d4aebb78982796b9d8f4517e8f2de4bfb398a89dfea1f17777f3e20508f3ffc43ab67a449452aaf29dcb8f177be91f700f0653fb14db8852083c10c83d52e5c63873b3f020508165a76c16ddec2a6d6712ff1288ffa83955a0f20f50630de86c919c3d2ec28ffa6d98", 0x73}, {&(0x7f00000000c0)="bbf35f383f62031292896f344537b9d59409286fae92525bf4d6d1f493beb505fca0b92eb82e00bd6eb01eb84d621e846b3478b2a41ede44503e2e4ab9660ecbf916bbd178a2472b3f9005d05fd1ce79209420985816e03a7cb0f82b42cab2f1fa8a68fbbc977cdd2bf866098e0305b3c4481608f458d5854fb8e2efe2347ae2de733c88145a751c20bfe2fb961fddf71fb6edb5914caa5fccda96860e0f24e4c16d6cd30522b22beeef3a966aa648a0edee622961558c6a90454d1d0ce4b3417ec8ba7347d32f", 0xc7}, {&(0x7f00000001c0)="711752eb216423f10dace8bf7a399d78cba2e42aca64a7c8d988e8315569c5c7ecfd49522b60d4fb014adbea6c622f1555d56d96b6dc6d459f328399bfc05a1cd31c5c76e1ef3e8741e69de8d611d552e6f459545d2ef6d936fbe78d7d748d6dd309eeeab5b5736bb85c7dd12e7592116ba79ebfcc8177da2079fc4e56bfeb74ea4393fd0d38627f87edfaff987f49fdfb692e16b675a8327886ccac7d561f2b1c644e6257137f", 0xa7}, {&(0x7f00000002c0)="5a73263d3f1ca62a16ec3271815b9c92d0e0563f559f9672567dbf5c4bd509436780f1f44763c4b7", 0x28}], 0x4, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xa4, 0x3, 0x3, [{@private=0xa010101, 0x7}, {@multicast2, 0x3}, {@local, 0x9}]}, @end, @lsrr={0x83, 0xb, 0x87, [@dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x60, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @timestamp_addr={0x44, 0x1c, 0xe2, 0x1, 0x8, [{@empty, 0x86}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x951}]}, @generic={0x82, 0x4, "a6b0"}, @timestamp_addr={0x44, 0xc, 0xe5, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x6a, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x7}, {@multicast1, 0x2}]}]}}}], 0x140}}, {{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000700)="1e1eb665cc6cf0be71f8d7affd3011758b", 0x11}, {&(0x7f0000000800)="8a34bf09ef0e7cc6d39179b4be859e29e06021741b40a9b6a4b08fb932e8fbfb2e3284cf27c122ef06564ef230f7b06756703cdacede0e2559ead02496f59b40b61f56b7e4c6d5e7e382594e44118bb419878dd4e66ada931afa814f7748565af7c42405a92e98eec90a4d76aa6f0be03a3428556b40fe31ecc5ca7f2f465c517c9661928152c091e5bb07fa0af67799b8047bb18a2f8328d61343", 0x9b}], 0x2, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x10, 0x1, 0x3, [{@broadcast, 0x1}, {@local, 0x5000}, {@rand_addr=0x64010102, 0xfffffffc}, {@private=0xa010100, 0x4}, {@loopback, 0x2}, {@multicast1, 0x7}]}, @end]}}}], 0x80}}], 0x3, 0x5) 1.38005213s ago: executing program 3 (id=12514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x42, &(0x7f0000000040), 0x3b) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x3, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) 1.289277892s ago: executing program 4 (id=12515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x8000, 0xf, 0x8001, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={r2, 0x3, 0x6d, "c072c863b97c013a3bca71d0d97d4a9cca96fe37376e820decba59483911aedc4d6f7792f12a18bfeda4a083e3d5a53da6beba7d0f8928c2dd75efae9ff0cbb93a2ec3d6b7a40c31fe40a4221231b58dcf77bff0f51e2a93a9863330bf9aedf884dda76e1adf99e6e467896e46"}, 0x75) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x50000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1.259998255s ago: executing program 0 (id=12516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x3c, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x3c, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bind$x25(r1, &(0x7f0000000080), 0x12) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) (async) close(r1) (async) 1.211780632s ago: executing program 3 (id=12517): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000101010200000000000000000a000005300002802c00018014000300fc"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)={0x18, 0x24, 0x20, 0x70bd27, 0x25dfdbfb, "", [@nested={0x8, 0x24, 0x0, 0x1, [@nested={0x4, 0x124}]}]}, 0x18}], 0x1, 0x0, 0x0, 0x440c0}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in=@local, 0x4e24, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x7fffffffffffffc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x3507, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x508b5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00000000000000000000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="66d1233139000022e868a0ec9a85494f41f5d313d2423e50fd6320bc10036df97e7c9f90c672490fffabfb1e23b75128ed"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000019000100000000000000000023"], 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000300)={r2, &(0x7f0000000180)='\xff\xff', 0x78000, &(0x7f0000000200)={@_ha_fsid={[0x16, 0x8]}, {0xa, 0x1, 0x1, 0x9}}, 0x1000, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x2}) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r3}, 0x50) socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r4], 0x38}}, 0x10) 1.206583459s ago: executing program 1 (id=12518): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.179876555s ago: executing program 2 (id=12519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000000800024000000003080003400000000108000440ffffffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) 1.076598184s ago: executing program 0 (id=12520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0x4}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x24, 0x1, 0x70bd26, 0x2, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x9b639ffca15f133, 0x0, 0x3, 0x0, 0x0, {0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010102, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x1, 0x19, 0xffffff81, 0x7]}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0x4}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x24, 0x1, 0x70bd26, 0x2, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x9b639ffca15f133, 0x0, 0x3, 0x0, 0x0, {0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010102, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x1, 0x19, 0xffffff81, 0x7]}]}}}}}}}, 0x0) (async) 1.004149914s ago: executing program 2 (id=12521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x48195) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x3, 0x3, 0x405, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xbd1f}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x28}}, 0x1) (async) listen(r5, 0x0) (async) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="643f0e91", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0x2, 0x4, 0x68, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7800, 0x4, 0x21a8}}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000006c0)={0x3, {{0xa, 0x9, 0x7f, @mcast2, 0x2}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}}]}, 0x110) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r7, 0x30, 0x0, @void}, 0x10) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2420eae0fd37db567e2067a0aa86f097da0178b4cb9c0ec815a0adc702a87048b39ccb18901ebd6e4d72ad2a0f6a6c2f859e1a7fc9ab34afdfe9ecd6148033ebc7a38efbd0e225df8fddda5252bdf912a481a975e2011a02b4b637647dd35170a2f54afc0cf5c2d06aa513f904d100ef01a682e0383c2a0b3a907ff6d6728dd9d0e51561d4b642ced3333deea32d1a93678b00d0eb4cbe0d26039f62649a367bea6fa2f76ecc0f", @ANYRES16=r9, @ANYBLOB="040027bd7000fcdbdf250a00000005002e00000000000500350081000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x20000040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) 969.075717ms ago: executing program 1 (id=12523): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async) r2 = socket(0xf, 0x6, 0x4) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) ioctl$FIONCLEX(r0, 0x5450) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1d4, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_NAT_DST={0x4c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x410}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x220}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x901}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x12}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x92}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x40, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfff}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5c4}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x14}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000084) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 816.633886ms ago: executing program 1 (id=12524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x2, 0x3, 0x2, 0x2}}, 0x26) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) (async) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x2, "ac7817"}, 0x6) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x2, "ac7817"}, 0x6) socket$netlink(0x10, 0x3, 0xa) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140)={0x8, "23982f"}, 0x6) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x8000, @mcast1, 0xfffffff0}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x8000, @mcast1, 0xfffffff0}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1a, 0x4) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f00000002c0)='pim6reg\x00') r6 = accept(r3, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000380)=0x80) recvmmsg(r0, &(0x7f00000054c0)=[{{&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)=""/29, 0x1d}], 0x1, &(0x7f00000004c0)=""/151, 0x97}}, {{&(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/213, 0xd5}], 0x3, &(0x7f0000000840)=""/77, 0x4d}, 0x9}, {{&(0x7f00000008c0)=@xdp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/154, 0x9a}, {&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/64, 0x40}, {&(0x7f0000000ac0)=""/130, 0x82}, {&(0x7f0000000b80)=""/95, 0x5f}, {&(0x7f0000000c00)=""/112, 0x70}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/65, 0x41}], 0x8, &(0x7f0000000e80)=""/167, 0xa7}, 0xd}, {{&(0x7f0000000f40)=@can, 0x80, &(0x7f0000001180)=[{&(0x7f0000000fc0)=""/212, 0xd4}, {&(0x7f00000010c0)=""/123, 0x7b}, {&(0x7f0000001140)=""/48, 0x30}], 0x3, &(0x7f00000011c0)=""/86, 0x56}, 0x7}, {{&(0x7f0000001240)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000012c0)=""/170, 0xaa}, {&(0x7f0000001380)=""/215, 0xd7}, {&(0x7f0000001480)=""/51, 0x33}, {&(0x7f00000014c0)=""/69, 0x45}], 0x4, &(0x7f0000001580)=""/26, 0x1a}}, {{&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001640)=""/41, 0x29}, {&(0x7f0000001680)=""/159, 0x9f}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/19, 0x13}, {&(0x7f0000002780)=""/212, 0xd4}, {&(0x7f0000002880)=""/245, 0xf5}, {&(0x7f0000002980)=""/51, 0x33}, {&(0x7f00000029c0)=""/39, 0x27}, {&(0x7f0000002a00)=""/55, 0x37}], 0x9, &(0x7f0000002b00)=""/11, 0xb}, 0x6}, {{&(0x7f0000002b40)=@caif=@dbg, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002bc0)=""/116, 0x74}, {&(0x7f0000002c40)=""/31, 0x1f}, {&(0x7f0000002c80)=""/191, 0xbf}, {&(0x7f0000002d40)=""/148, 0x94}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x5, &(0x7f0000003e80)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000004e80)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000004f00)=""/166, 0xa6}, {&(0x7f0000004fc0)=""/68, 0x44}, {&(0x7f0000005040)=""/55, 0x37}, {&(0x7f0000005080)=""/90, 0x5a}, {&(0x7f0000005100)=""/107, 0x6b}, {&(0x7f0000005180)=""/27, 0x1b}, {&(0x7f00000051c0)}, {&(0x7f0000005200)=""/127, 0x7f}, {&(0x7f0000005280)=""/51, 0x33}, {&(0x7f00000052c0)=""/220, 0xdc}], 0xa, &(0x7f0000005480)=""/33, 0x21}, 0x4}], 0x8, 0x1, 0x0) (async) recvmmsg(r0, &(0x7f00000054c0)=[{{&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)=""/29, 0x1d}], 0x1, &(0x7f00000004c0)=""/151, 0x97}}, {{&(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/213, 0xd5}], 0x3, &(0x7f0000000840)=""/77, 0x4d}, 0x9}, {{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/154, 0x9a}, {&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/64, 0x40}, {&(0x7f0000000ac0)=""/130, 0x82}, {&(0x7f0000000b80)=""/95, 0x5f}, {&(0x7f0000000c00)=""/112, 0x70}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/65, 0x41}], 0x8, &(0x7f0000000e80)=""/167, 0xa7}, 0xd}, {{&(0x7f0000000f40)=@can, 0x80, &(0x7f0000001180)=[{&(0x7f0000000fc0)=""/212, 0xd4}, {&(0x7f00000010c0)=""/123, 0x7b}, {&(0x7f0000001140)=""/48, 0x30}], 0x3, &(0x7f00000011c0)=""/86, 0x56}, 0x7}, {{&(0x7f0000001240)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000012c0)=""/170, 0xaa}, {&(0x7f0000001380)=""/215, 0xd7}, {&(0x7f0000001480)=""/51, 0x33}, {&(0x7f00000014c0)=""/69, 0x45}], 0x4, &(0x7f0000001580)=""/26, 0x1a}}, {{&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001640)=""/41, 0x29}, {&(0x7f0000001680)=""/159, 0x9f}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/19, 0x13}, {&(0x7f0000002780)=""/212, 0xd4}, {&(0x7f0000002880)=""/245, 0xf5}, {&(0x7f0000002980)=""/51, 0x33}, {&(0x7f00000029c0)=""/39, 0x27}, {&(0x7f0000002a00)=""/55, 0x37}], 0x9, &(0x7f0000002b00)=""/11, 0xb}, 0x6}, {{&(0x7f0000002b40)=@caif=@dbg, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002bc0)=""/116, 0x74}, {&(0x7f0000002c40)=""/31, 0x1f}, {&(0x7f0000002c80)=""/191, 0xbf}, {&(0x7f0000002d40)=""/148, 0x94}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x5, &(0x7f0000003e80)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000004e80)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000004f00)=""/166, 0xa6}, {&(0x7f0000004fc0)=""/68, 0x44}, {&(0x7f0000005040)=""/55, 0x37}, {&(0x7f0000005080)=""/90, 0x5a}, {&(0x7f0000005100)=""/107, 0x6b}, {&(0x7f0000005180)=""/27, 0x1b}, {&(0x7f00000051c0)}, {&(0x7f0000005200)=""/127, 0x7f}, {&(0x7f0000005280)=""/51, 0x33}, {&(0x7f00000052c0)=""/220, 0xdc}], 0xa, &(0x7f0000005480)=""/33, 0x21}, 0x4}], 0x8, 0x1, 0x0) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f00000056c0)) sendmsg$key(r6, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000005700)={0x2, 0xe, 0x7, 0x5, 0x10, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d2, 0x5, 0x2, 0x8a, 0x3, 0x20000001}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2a, 0x3501}, @sadb_lifetime={0x4, 0x3, 0x3, 0x5, 0x3, 0x4}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x5, 0x7, 0x32, 0x20, 0x0, @in6={0xa, 0x4e20, 0x1e0, @empty, 0x101}}]}, 0x80}}, 0x1) (async) sendmsg$key(r6, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000005700)={0x2, 0xe, 0x7, 0x5, 0x10, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d2, 0x5, 0x2, 0x8a, 0x3, 0x20000001}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2a, 0x3501}, @sadb_lifetime={0x4, 0x3, 0x3, 0x5, 0x3, 0x4}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x5, 0x7, 0x32, 0x20, 0x0, @in6={0xa, 0x4e20, 0x1e0, @empty, 0x101}}]}, 0x80}}, 0x1) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000005800)={0x0, r6}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000005840)={0x0, r8}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000005840)={0x0, r8}, 0x8) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000005880), &(0x7f00000058c0)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000005900), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000005940)={r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000005940)={r2}) connect$bt_sco(r9, &(0x7f0000005980), 0x8) close(r5) sendmsg$nl_route_sched(r9, &(0x7f0000005ac0)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a00)=@deltclass={0x80, 0x29, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd, 0xc}, {0x5, 0x3}, {0xffe1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9f, 0xff}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x10}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xc0, 0x5}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_cake={0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x1000c000) (async) sendmsg$nl_route_sched(r9, &(0x7f0000005ac0)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a00)=@deltclass={0x80, 0x29, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd, 0xc}, {0x5, 0x3}, {0xffe1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9f, 0xff}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x10}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xc0, 0x5}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_cake={0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x1000c000) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000005b00)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000005b40)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000005b00)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000005b40)=0x2c) 764.570463ms ago: executing program 2 (id=12525): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 718.322599ms ago: executing program 0 (id=12526): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$x25(r2, 0x0, 0x0, 0x80000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x80000000, 0x2, 0x2, 0x3}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x9, 0x7, 0x8, 0x2}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 436.998796ms ago: executing program 1 (id=12527): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x4c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20e07f23b26c49e6}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) (async) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x4c}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20e07f23b26c49e6}, 0x4000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) (async) 348.394515ms ago: executing program 0 (id=12528): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f0000000140)=@ethtool_gfeatures}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000680)={0x18, 0x2, {0x0, @empty}}, 0x1e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) connect$unix(r3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000440), &(0x7f0000000140)=r3}, 0x20) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000540)={0x358, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6230}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2b6e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf4a4}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x401, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @remote, 0x8001}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd083}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x864}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "3f81abdc5f0b5151ce92e1a5a352d2b57af0794fece93a1a17"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9fb8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xcfa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x358}}, 0x80) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x59) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400f8b17d9ea92d2e55bafeb3", @ANYRES32=r9, @ANYBLOB="11980400419804002000128008000100736974001400028008000300ac1414aa06000f0001"], 0x40}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 346.968354ms ago: executing program 2 (id=12529): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x0, @remote, 0x9}, @in6={0xa, 0x4e21, 0x568a, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x5}], 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 237.9038ms ago: executing program 2 (id=12530): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x2000844}, 0x8004) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x2000844}, 0x8004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 140.689666ms ago: executing program 1 (id=12531): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xd, 0x7fe6, 0xffffffff, 0x42}, 0x48) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) r4 = socket(0x18, 0x0, 0x0) close(r4) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockname$packet(r4, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 0s ago: executing program 4 (id=12532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) kernel console output (not intermixed with test programs): _module (can-proto-0) failed. [ 1099.654832][T13129] veth1_macvtap: left promiscuous mode [ 1099.760430][T13140] FAULT_INJECTION: forcing a failure. [ 1099.760430][T13140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.780588][T13140] CPU: 0 UID: 0 PID: 13140 Comm: syz.2.10709 Not tainted syzkaller #0 PREEMPT(full) [ 1099.780611][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1099.780622][T13140] Call Trace: [ 1099.780630][T13140] [ 1099.780638][T13140] dump_stack_lvl+0xe8/0x150 [ 1099.780668][T13140] should_fail_ex+0x412/0x560 [ 1099.780700][T13140] _copy_from_user+0x2d/0xb0 [ 1099.780803][T13140] ___sys_sendmsg+0x1c6/0x360 [ 1099.780833][T13140] ? __lock_acquire+0x6b5/0x2cf0 [ 1099.780861][T13140] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.780921][T13140] ? __fget_files+0x2a/0x420 [ 1099.780945][T13140] ? __fget_files+0x3a0/0x420 [ 1099.780977][T13140] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1099.781008][T13140] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.781043][T13140] ? __pfx_ksys_write+0x10/0x10 [ 1099.781079][T13140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.781101][T13140] do_syscall_64+0x15f/0xf80 [ 1099.781121][T13140] ? trace_irq_disable+0x3b/0x140 [ 1099.781149][T13140] ? clear_bhb_loop+0x40/0x90 [ 1099.781172][T13140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.781191][T13140] RIP: 0033:0x7f77d559ce59 [ 1099.781210][T13140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.781227][T13140] RSP: 002b:00007f77d644f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.781250][T13140] RAX: ffffffffffffffda RBX: 00007f77d5815fa0 RCX: 00007f77d559ce59 [ 1099.781262][T13140] RDX: 0000000020000000 RSI: 0000200000000800 RDI: 0000000000000005 [ 1099.781275][T13140] RBP: 00007f77d644f090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.781295][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.781307][T13140] R13: 00007f77d5816038 R14: 00007f77d5815fa0 R15: 00007ffe6aafae68 [ 1099.781339][T13140] [ 1100.164228][T13157] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1100.182095][T13157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1100.630710][T13189] xt_nfacct: accounting object `syz1' does not exist [ 1100.691146][T13193] veth0: entered promiscuous mode [ 1100.927337][T13214] FAULT_INJECTION: forcing a failure. [ 1100.927337][T13214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.964644][T13214] CPU: 0 UID: 0 PID: 13214 Comm: syz.1.10735 Not tainted syzkaller #0 PREEMPT(full) [ 1100.964670][T13214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1100.964682][T13214] Call Trace: [ 1100.964690][T13214] [ 1100.964699][T13214] dump_stack_lvl+0xe8/0x150 [ 1100.964735][T13214] should_fail_ex+0x412/0x560 [ 1100.964766][T13214] _copy_from_iter+0x1d3/0x1670 [ 1100.964795][T13214] ? rcu_is_watching+0x15/0xb0 [ 1100.964823][T13214] ? __pfx__copy_from_iter+0x10/0x10 [ 1100.964855][T13214] ? netlink_sendmsg+0x650/0xb40 [ 1100.964880][T13214] ? skb_put+0x11b/0x210 [ 1100.964983][T13214] netlink_sendmsg+0x6c0/0xb40 [ 1100.965017][T13214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.965047][T13214] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1100.965076][T13214] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1100.965104][T13214] ____sys_sendmsg+0x972/0x9f0 [ 1100.965131][T13214] ? __might_fault+0xaf/0x130 [ 1100.965160][T13214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1100.965195][T13214] ? import_iovec+0x73/0xa0 [ 1100.965223][T13214] ___sys_sendmsg+0x2a5/0x360 [ 1100.965249][T13214] ? __lock_acquire+0x6b5/0x2cf0 [ 1100.965273][T13214] ? __pfx____sys_sendmsg+0x10/0x10 [ 1100.965332][T13214] ? __fget_files+0x2a/0x420 [ 1100.965353][T13214] ? __fget_files+0x3a0/0x420 [ 1100.965384][T13214] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1100.965414][T13214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1100.965449][T13214] ? __pfx_ksys_write+0x10/0x10 [ 1100.965483][T13214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.965505][T13214] do_syscall_64+0x15f/0xf80 [ 1100.965523][T13214] ? trace_irq_disable+0x3b/0x140 [ 1100.965550][T13214] ? clear_bhb_loop+0x40/0x90 [ 1100.965574][T13214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.965592][T13214] RIP: 0033:0x7f91fb79ce59 [ 1100.965611][T13214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.965627][T13214] RSP: 002b:00007f91fc65f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.965647][T13214] RAX: ffffffffffffffda RBX: 00007f91fba15fa0 RCX: 00007f91fb79ce59 [ 1100.965662][T13214] RDX: 0000000020000000 RSI: 0000200000000800 RDI: 0000000000000005 [ 1100.965674][T13214] RBP: 00007f91fc65f090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.965686][T13214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.965697][T13214] R13: 00007f91fba16038 R14: 00007f91fba15fa0 R15: 00007ffd26e645a8 [ 1100.965737][T13214] [ 1101.341349][T13223] Cannot find add_set index 65532 as target [ 1101.363595][T13221] vxcan1 speed is unknown, defaulting to 1000 [ 1101.412721][T13228] Cannot find add_set index 65532 as target [ 1101.660356][T13221] »»»»»» speed is unknown, defaulting to 1000 [ 1101.682895][T13221] lo speed is unknown, defaulting to 1000 [ 1101.871060][T13254] FAULT_INJECTION: forcing a failure. [ 1101.871060][T13254] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.906192][T13254] CPU: 1 UID: 0 PID: 13254 Comm: syz.3.10751 Not tainted syzkaller #0 PREEMPT(full) [ 1101.906218][T13254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1101.906231][T13254] Call Trace: [ 1101.906239][T13254] [ 1101.906247][T13254] dump_stack_lvl+0xe8/0x150 [ 1101.906275][T13254] should_fail_ex+0x412/0x560 [ 1101.906306][T13254] should_failslab+0xa8/0x100 [ 1101.906334][T13254] ? skb_clone+0x212/0x3a0 [ 1101.906425][T13254] kmem_cache_alloc_noprof+0x87/0x650 [ 1101.906451][T13254] ? __netlink_lookup+0xc6/0x8b0 [ 1101.906485][T13254] skb_clone+0x212/0x3a0 [ 1101.906507][T13254] __netlink_deliver_tap+0x404/0x850 [ 1101.906546][T13254] ? netlink_deliver_tap+0x2e/0x1b0 [ 1101.906573][T13254] netlink_deliver_tap+0x19c/0x1b0 [ 1101.906599][T13254] netlink_unicast+0x730/0x8e0 [ 1101.906641][T13254] netlink_sendmsg+0x813/0xb40 [ 1101.906678][T13254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1101.906709][T13254] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1101.906736][T13254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1101.906765][T13254] ____sys_sendmsg+0x972/0x9f0 [ 1101.906792][T13254] ? __might_fault+0xaf/0x130 [ 1101.906826][T13254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1101.906862][T13254] ? import_iovec+0x73/0xa0 [ 1101.906894][T13254] ___sys_sendmsg+0x2a5/0x360 [ 1101.906919][T13254] ? __lock_acquire+0x6b5/0x2cf0 [ 1101.906946][T13254] ? __pfx____sys_sendmsg+0x10/0x10 [ 1101.907010][T13254] ? __fget_files+0x2a/0x420 [ 1101.907032][T13254] ? __fget_files+0x3a0/0x420 [ 1101.907063][T13254] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1101.907093][T13254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1101.907128][T13254] ? __pfx_ksys_write+0x10/0x10 [ 1101.907164][T13254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.907185][T13254] do_syscall_64+0x15f/0xf80 [ 1101.907203][T13254] ? trace_irq_disable+0x3b/0x140 [ 1101.907231][T13254] ? clear_bhb_loop+0x40/0x90 [ 1101.907255][T13254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.907274][T13254] RIP: 0033:0x7f6687b9ce59 [ 1101.907293][T13254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.907309][T13254] RSP: 002b:00007f6688a50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1101.907330][T13254] RAX: ffffffffffffffda RBX: 00007f6687e15fa0 RCX: 00007f6687b9ce59 [ 1101.907344][T13254] RDX: 0000000020000000 RSI: 0000200000000800 RDI: 0000000000000005 [ 1101.907357][T13254] RBP: 00007f6688a50090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.907369][T13254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.907381][T13254] R13: 00007f6687e16038 R14: 00007f6687e15fa0 R15: 00007ffd67a6ab88 [ 1101.907414][T13254] [ 1102.294030][T17839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.341917][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.362443][T17839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.372853][T25124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.386249][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.548219][T13277] __nla_validate_parse: 10 callbacks suppressed [ 1102.548239][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10759'. [ 1102.584783][T13277] netlink: 'syz.3.10759': attribute type 29 has an invalid length. [ 1102.594779][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10759'. [ 1102.680500][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10759'. [ 1102.685244][T13289] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1102.697050][T13277] netlink: 'syz.3.10759': attribute type 29 has an invalid length. [ 1102.697070][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10759'. [ 1102.968965][T13303] tipc: Started in network mode [ 1102.980056][T13303] tipc: Node identity ac14140f, cluster identity 4711 [ 1102.997646][T13303] tipc: New replicast peer: 255.255.255.255 [ 1103.011792][T13303] tipc: Enabled bearer , priority 1 [ 1103.091274][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10765'. [ 1103.268080][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10768'. [ 1103.343766][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10768'. [ 1103.476305][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.551023][T13313] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1103.606339][T13313] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10768'. [ 1103.620734][T13313] team0: Caught tx_queue_len zero misconfig [ 1103.932931][T13343] bond6: option fail_over_mac: invalid value (16) [ 1103.944889][T13343] bond6 (unregistering): Released all slaves [ 1104.125392][ T29] tipc: Node number set to 2886997007 [ 1104.131055][T13354] xt_hashlimit: size too large, truncated to 1048576 [ 1104.148997][T13360] netlink: 'syz.1.10781': attribute type 1 has an invalid length. [ 1104.238299][T13360] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1104.276835][T11988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.488813][T13383] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10787'. [ 1104.536892][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.543202][T13388] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10788'. [ 1104.767962][T13402] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1104.772788][T13407] netlink: 'syz.0.10794': attribute type 1 has an invalid length. [ 1104.915432][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1104.946402][T13415] bond5: (slave geneve2): making interface the new active one [ 1104.977934][T13415] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1104.987568][T11988] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1104.999513][T11988] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1105.033471][T11988] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1105.065042][T11988] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1105.136316][T13425] syzkaller1: entered promiscuous mode [ 1105.143287][T13425] syzkaller1: entered allmulticast mode [ 1105.316271][T25124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.560020][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.568156][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.595660][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.478260][ T6443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.635630][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.115499][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.124769][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.136956][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.155986][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.515978][ T5744] net_ratelimit: 2 callbacks suppressed [ 1110.515998][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.682011][ T2113] block nbd9: Possible stuck request ffff888027930000: control (read@0,1024B). Runtime 120 seconds [ 1110.693021][ T2113] block nbd9: Possible stuck request ffff8880279301c0: control (read@1024,1024B). Runtime 120 seconds [ 1110.704711][ T2113] block nbd9: Possible stuck request ffff888027930380: control (read@2048,1024B). Runtime 120 seconds [ 1110.716418][ T2113] block nbd9: Possible stuck request ffff888027930540: control (read@3072,1024B). Runtime 120 seconds [ 1111.235750][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.277430][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.236152][ T6443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.316147][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.795765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.356061][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.085787][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.396057][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.799311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1115.805433][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.275554][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.436485][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.475361][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.516437][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.005816][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.556218][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.115767][ T6443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.275267][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1120.595869][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.635402][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.039117][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.675709][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.995657][ T5634] Bluetooth: hci5: command 0x0405 tx timeout [ 1123.715817][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.755920][ T9244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.764055][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.405775][T17839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.807855][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.836170][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.796876][T25124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.875822][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.915389][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.586025][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10804'. [ 1129.596719][T13441] netlink: 'syz.4.10804': attribute type 1 has an invalid length. [ 1129.604585][T13441] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10804'. [ 1129.712190][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10801'. [ 1129.911197][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10811'. [ 1129.965745][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.188702][T13479] netlink: 'syz.0.10816': attribute type 1 has an invalid length. [ 1130.206444][T13479] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10816'. [ 1130.230381][T13479] netlink: 'syz.0.10816': attribute type 10 has an invalid length. [ 1130.241151][T13479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1130.251872][T13479] team0: Port device netdevsim1 added [ 1130.270323][T13472] sctp: [Deprecated]: syz.4.10813 (pid 13472) Use of int in maxseg socket option. [ 1130.270323][T13472] Use struct sctp_assoc_value instead [ 1130.450375][T13490] netem: change failed [ 1130.522155][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.783018][T13514] Cannot find add_set index 1 as target [ 1130.867141][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10831'. [ 1130.977860][T13524] Unknown metaid 0 dlen 28 [ 1130.988638][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10834'. [ 1131.008735][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.123376][T13526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.131103][T13526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.135640][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10837'. [ 1131.147448][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10837'. [ 1131.158489][T17839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.171499][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10837'. [ 1131.208186][T13526] bridge_slave_0: left allmulticast mode [ 1131.214045][T13526] bridge_slave_0: left promiscuous mode [ 1131.222823][T13526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.240650][T13526] bridge_slave_1: left allmulticast mode [ 1131.246978][T13526] bridge_slave_1: left promiscuous mode [ 1131.252812][T13526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.269414][T13526] bond0: (slave bond_slave_0): Releasing backup interface [ 1131.277267][T13526] bond_slave_0: left promiscuous mode [ 1131.288659][T13526] bond0: (slave bond_slave_1): Releasing backup interface [ 1131.297005][T13526] bond_slave_1: left promiscuous mode [ 1131.310044][T13526] team0: Port device team_slave_0 removed [ 1131.334636][T13526] team0: Port device team_slave_1 removed [ 1131.344359][T13526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.356819][T13526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.382484][T13526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1131.410086][ T5729] lo speed is unknown, defaulting to 1000 [ 1131.438349][ T5729] syz0: Port: 1 Link DOWN [ 1131.624693][ T5729] lo speed is unknown, defaulting to 1000 [ 1132.048415][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.302279][ T30] audit: type=1800 audit(1779814476.295:30): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10847" name="memory.events" dev="tmpfs" ino=1049 res=0 errno=0 [ 1133.094394][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.572475][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.132887][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.860502][T13626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1134.861241][T13623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1134.952313][T13629] syzkaller0: entered promiscuous mode [ 1134.970154][T13629] syzkaller0: entered allmulticast mode [ 1135.157517][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.250427][T13647] __nla_validate_parse: 4 callbacks suppressed [ 1135.250447][T13647] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10863'. [ 1135.347618][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10867'. [ 1135.372460][T17843] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 1135.437153][T13658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1135.514687][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10867'. [ 1135.532406][T13665] bond4 (unregistering): Released all slaves [ 1136.195527][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.280293][T17839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.289107][ T6443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.246915][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.955370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.963770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.973686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.248060][T13649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1138.280721][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.359886][T13686] Bluetooth: hci4: command 0x0406 tx timeout [ 1138.377038][T13689] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.10874'. [ 1138.451998][T13696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10877'. [ 1138.523243][T13698] netlink: 'syz.2.10879': attribute type 58 has an invalid length. [ 1138.531710][T13698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10879'. [ 1138.561311][T13700] nft_compat: unsupported protocol 0 [ 1138.567913][T13702] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10880'. [ 1138.803223][T13722] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10886'. [ 1138.972176][T13729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.002879][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10891'. [ 1139.014132][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10891'. [ 1139.315971][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.324126][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.394223][T13759] bond6 (unregistering): Released all slaves [ 1139.586816][T13771] netlink: 'syz.2.10901': attribute type 7 has an invalid length. [ 1139.608636][T13769] syzkaller1: entered promiscuous mode [ 1139.622134][T13773] netlink: 'syz.1.10902': attribute type 1 has an invalid length. [ 1139.622300][T13771] netlink: 'syz.2.10901': attribute type 8 has an invalid length. [ 1139.641072][T13769] syzkaller1: entered allmulticast mode [ 1139.692644][T13773] bond10: entered promiscuous mode [ 1139.698308][T13773] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1139.724817][T13781] netlink: 'syz.4.10903': attribute type 8 has an invalid length. [ 1139.852925][T13788] pim6reg: entered allmulticast mode [ 1139.977246][T13795] tipc: Enabling of bearer rejected, failed to enable media [ 1140.129347][T13807] ±ÿ: entered allmulticast mode [ 1140.139079][T13804] ±ÿ: left allmulticast mode [ 1140.269151][T13819] nbd: must specify a device to reconfigure [ 1140.277865][T13819] Cannot find add_set index 2 as target [ 1140.315016][T13822] Cannot find del_set index 3 as target [ 1140.357100][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.463969][T13833] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1140.510559][T13838] __nla_validate_parse: 11 callbacks suppressed [ 1140.510577][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10923'. [ 1140.540347][T13840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.551964][T13840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.584223][T13840] netlink: 'syz.2.10924': attribute type 7 has an invalid length. [ 1140.598926][T13840] netlink: 'syz.2.10924': attribute type 8 has an invalid length. [ 1140.614355][T13840] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10924'. [ 1140.710519][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10927'. [ 1140.754227][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10929'. [ 1140.768148][ T2113] block nbd9: Possible stuck request ffff888027930000: control (read@0,1024B). Runtime 150 seconds [ 1140.779016][ T2113] block nbd9: Possible stuck request ffff8880279301c0: control (read@1024,1024B). Runtime 150 seconds [ 1140.786805][T13853] netlink: 'syz.4.10929': attribute type 11 has an invalid length. [ 1140.791540][ T2113] block nbd9: Possible stuck request ffff888027930380: control (read@2048,1024B). Runtime 150 seconds [ 1140.809836][ T2113] block nbd9: Possible stuck request ffff888027930540: control (read@3072,1024B). Runtime 150 seconds [ 1140.828610][T13853] netlink: 'syz.4.10929': attribute type 5 has an invalid length. [ 1140.839008][T13853] netlink: 6548 bytes leftover after parsing attributes in process `syz.4.10929'. [ 1140.904508][T13861] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10932'. [ 1140.930405][T13861] nbd: couldn't find a device at index 0 [ 1141.170713][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10938'. [ 1141.190398][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10938'. [ 1141.300713][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10942'. [ 1141.311711][T13888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10942'. [ 1141.600819][T13899] netlink: 'syz.1.10947': attribute type 23 has an invalid length. [ 1142.206124][T13686] Bluetooth: hci1: command 0x0405 tx timeout [ 1142.218587][T13924] vlan0: entered promiscuous mode [ 1142.245765][T13924] hsr0: entered promiscuous mode [ 1142.263597][T13924] vlan0: entered allmulticast mode [ 1142.282405][T13924] hsr0: entered allmulticast mode [ 1142.293311][T13924] hsr_slave_0: entered allmulticast mode [ 1142.302267][T13932] netlink: 'syz.2.10958': attribute type 11 has an invalid length. [ 1142.338173][T13932] netlink: 'syz.2.10958': attribute type 11 has an invalid length. [ 1142.447907][ T29] net_ratelimit: 9 callbacks suppressed [ 1142.447924][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.552167][T13933] netlink: 'syz.2.10958': attribute type 11 has an invalid length. [ 1142.599205][T13933] netlink: 'syz.2.10958': attribute type 11 has an invalid length. [ 1143.297856][T13951] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.476349][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.435587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.444159][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.516044][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.556660][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.927140][T13998] __nla_validate_parse: 8 callbacks suppressed [ 1145.927159][T13998] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10972'. [ 1146.083589][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10974'. [ 1146.216366][T14015] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1146.230486][T14010] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10975'. [ 1146.253035][T14015] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1146.352640][T14010] batman_adv: batadv0: Interface deactivated: dummy0 [ 1146.380122][T14010] batman_adv: batadv0: Removing interface: dummy0 [ 1146.464604][T14030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10979'. [ 1146.596134][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.614236][T14037] netlink: 'syz.1.10980': attribute type 1 has an invalid length. [ 1146.636103][T14037] netlink: 'syz.1.10980': attribute type 2 has an invalid length. [ 1146.671946][T14040] IPv6: sit2: Disabled Multicast RS [ 1146.683836][T14040] sit2: entered allmulticast mode [ 1146.960970][T14057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10986'. [ 1147.083182][T14064] netlink: 'syz.3.10988': attribute type 1 has an invalid length. [ 1147.125916][T14066] netlink: 'syz.2.10989': attribute type 1 has an invalid length. [ 1147.163974][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.440144][T14089] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1150.995339][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1154.595958][T30062] IPVS: ip_vs_send_async error -1 [ 1168.423786][T14092] netlink: 'syz.1.10998': attribute type 64 has an invalid length. [ 1168.423986][T14093] netlink: 'syz.1.10998': attribute type 64 has an invalid length. [ 1168.451256][T14100] syzkaller0: entered promiscuous mode [ 1168.453340][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11000'. [ 1168.467733][T14100] syzkaller0: entered allmulticast mode [ 1168.470021][T14092] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10998'. [ 1168.488963][T14093] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10998'. [ 1168.499669][T14103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11000'. [ 1168.514258][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10999'. [ 1168.771233][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11005'. [ 1169.074995][T14145] Cannot find del_set index 3 as target [ 1169.172469][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11013'. [ 1169.319613][T14153] syz_tun: entered allmulticast mode [ 1169.327480][T14153] syz_tun: left allmulticast mode [ 1169.422979][T14160] bond2: Unable to set up delay as MII monitoring is disabled [ 1169.479091][T14160] bond2 (unregistering): Released all slaves [ 1169.703074][T14157] syzkaller0: entered promiscuous mode [ 1169.716659][T14157] syzkaller0: entered allmulticast mode [ 1170.835438][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 1170.837552][T14121] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1170.848869][ T2113] block nbd9: Possible stuck request ffff888027930000: control (read@0,1024B). Runtime 180 seconds [ 1170.859730][ T2113] block nbd9: Possible stuck request ffff8880279301c0: control (read@1024,1024B). Runtime 180 seconds [ 1170.871582][ T2113] block nbd9: Possible stuck request ffff888027930380: control (read@2048,1024B). Runtime 180 seconds [ 1170.882847][ T2113] block nbd9: Possible stuck request ffff888027930540: control (read@3072,1024B). Runtime 180 seconds [ 1170.899629][T14121] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1171.833095][ T4992] udevd[4992]: worker [7757] /devices/virtual/block/nbd9 timeout; kill it [ 1171.842812][ T4992] udevd[4992]: seq 42437 '/devices/virtual/block/nbd9' killed [ 1172.254169][T14168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11018'. [ 1173.439918][T14190] netlink: 'syz.3.11024': attribute type 64 has an invalid length. [ 1173.449736][T14190] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11024'. [ 1174.518081][T14121] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1174.537861][T14121] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1174.559008][T14121] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1174.564929][T14121] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1174.602742][T14121] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1174.627742][T14121] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1174.681514][T14121] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1174.688202][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11025'. [ 1174.707948][T14203] nbd: must specify at least one socket [ 1174.718056][T14121] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1174.870870][T14210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11030'. [ 1174.932544][T14212] netlink: 'syz.3.11029': attribute type 3 has an invalid length. [ 1175.019918][T14212] : entered promiscuous mode [ 1175.073510][T14225] netlink: zone id is out of range [ 1175.104606][T14225] netlink: zone id is out of range [ 1175.145236][T14225] netlink: zone id is out of range [ 1175.159049][T14228] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11035'. [ 1175.180610][T14225] netlink: zone id is out of range [ 1175.181615][T14222] netlink: 'syz.1.11032': attribute type 3 has an invalid length. [ 1175.198682][T14225] netlink: zone id is out of range [ 1175.229430][ T9244] tipc: Subscription rejected, illegal request [ 1175.246450][T14225] netlink: zone id is out of range [ 1175.266193][T14225] netlink: zone id is out of range [ 1175.283542][T14225] netlink: set zone limit has 4 unknown bytes [ 1175.430447][T14243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1175.499692][T14242] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1175.630584][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11046'. [ 1175.689285][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11046'. [ 1175.941388][T14281] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 32 [ 1175.971397][T14282] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 32 [ 1176.081368][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11059'. [ 1176.194093][T14291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1176.224896][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11059'. [ 1176.463628][T14326] wireguard: wg0: Could not create IPv4 socket [ 1176.583901][T14338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11072'. [ 1177.072202][T14378] netlink: 'syz.4.11084': attribute type 23 has an invalid length. [ 1177.138213][T14385] netlink: 'syz.2.11088': attribute type 1 has an invalid length. [ 1177.162760][T14385] macvlan0: entered promiscuous mode [ 1177.197078][T14387] bond2: option resend_igmp: invalid value (32767) [ 1177.203758][T14387] bond2: option resend_igmp: allowed values 0 - 255 [ 1177.213140][T14387] bond2 (unregistering): Released all slaves [ 1177.239136][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.246644][T14391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11088'. [ 1177.437823][T14401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.458478][T14405] syzkaller1: entered promiscuous mode [ 1177.468889][T14405] syzkaller1: entered allmulticast mode [ 1177.496385][T14405] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11094'. [ 1177.657052][T14418] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1177.756240][T14422] syzkaller0: entered allmulticast mode [ 1177.797076][T14426] netlink: 'syz.0.11103': attribute type 17 has an invalid length. [ 1177.809513][T14426] erspan0: entered promiscuous mode [ 1177.818107][T14426] erspan0: left promiscuous mode [ 1178.000251][T14438] netlink: 'syz.3.11107': attribute type 1 has an invalid length. [ 1178.122760][T14443] bond2: (slave bridge36): Enslaving as a backup interface with an up link [ 1178.149422][T14438] macvlan0: entered promiscuous mode [ 1178.154886][T14438] macvlan0: entered allmulticast mode [ 1178.161101][T14438] bond2: entered promiscuous mode [ 1178.166750][T14438] bridge36: entered promiscuous mode [ 1178.175627][T14438] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1178.191533][T14438] bond2: left promiscuous mode [ 1178.203387][T14438] bridge36: left promiscuous mode [ 1178.473234][T14472] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:32789 [ 1178.634761][T14489] netlink: 'syz.1.11120': attribute type 1 has an invalid length. [ 1178.850467][T14502] netlink: 'syz.4.11124': attribute type 4 has an invalid length. [ 1178.852202][T14503] netlink: 'syz.4.11124': attribute type 4 has an invalid length. [ 1178.950540][T14509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1178.978754][T14509] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1179.014660][T14519] netlink: 'syz.4.11129': attribute type 23 has an invalid length. [ 1179.222415][T14524] geneve3: entered promiscuous mode [ 1179.230427][T14524] geneve3: entered allmulticast mode [ 1179.391567][T14533] IPVS: set_ctl: invalid protocol: 2 172.20.20.17:20003 [ 1179.451464][T14543] netlink: 'syz.4.11136': attribute type 3 has an invalid length. [ 1179.639579][T14555] netlink: 'syz.3.11140': attribute type 2 has an invalid length. [ 1179.911405][T14562] __nla_validate_parse: 15 callbacks suppressed [ 1179.911426][T14562] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.11142'. [ 1179.991933][T14571] xt_hashlimit: size too large, truncated to 1048576 [ 1180.086121][T14574] –: renamed from vxcan1 [ 1180.355965][T14591] netlink: 'syz.3.11152': attribute type 10 has an invalid length. [ 1180.398244][T14590] syzkaller0: entered promiscuous mode [ 1180.405388][T14590] syzkaller0: entered allmulticast mode [ 1180.550288][T14598] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1180.664781][T14604] veth1: default FDB implementation only supports local addresses [ 1180.710810][T14594] netlink: 'syz.4.11153': attribute type 39 has an invalid length. [ 1180.778701][T14611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11158'. [ 1180.794736][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11158'. [ 1180.889098][T14611] syzkaller1: entered promiscuous mode [ 1180.900849][T14611] syzkaller1: entered allmulticast mode [ 1180.966388][T14622] bond11: entered allmulticast mode [ 1180.972622][T14626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11161'. [ 1181.023137][T14622] bond11 (unregistering): Released all slaves [ 1181.367295][T14645] IPv6: sit2: Disabled Multicast RS [ 1181.396243][T14645] sit2: entered allmulticast mode [ 1181.698252][T14667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11170'. [ 1181.854913][T14671] netlink: 'syz.1.11172': attribute type 2 has an invalid length. [ 1181.866143][T14671] netlink: 'syz.1.11172': attribute type 11 has an invalid length. [ 1181.874766][T14671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11172'. [ 1181.875722][T14673] sctp: [Deprecated]: syz.3.11173 (pid 14673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1181.875722][T14673] Use struct sctp_sack_info instead [ 1182.207491][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11177'. [ 1182.235002][T14689] erspan0: entered promiscuous mode [ 1182.574335][T14717] Bluetooth: MGMT ver 1.23 [ 1183.124528][T14757] IPVS: Scheduler module ip_vs_sip not found [ 1183.140473][T14769] netlink: 277 bytes leftover after parsing attributes in process `syz.3.11197'. [ 1183.349752][T14782] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1183.468823][T14793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11205'. [ 1183.857668][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11208'. [ 1184.208096][T14829] netlink: 'syz.0.11216': attribute type 9 has an invalid length. [ 1184.280940][T14831] geneve3: entered promiscuous mode [ 1184.296240][T14831] geneve3: entered allmulticast mode [ 1184.316053][T11990] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1184.329318][T11990] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1184.341152][T11990] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1184.374762][T14834] bond3: option xmit_hash_policy: invalid value (64) [ 1184.397974][T14834] bond3 (unregistering): Released all slaves [ 1184.427247][T11990] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1184.429496][T14840] ipt_ECN: cannot use operation on non-tcp rule [ 1184.495361][T14840] netlink: 'syz.2.11220': attribute type 29 has an invalid length. [ 1184.680679][T14847] syzkaller0: entered promiscuous mode [ 1184.687167][T14847] syzkaller0: entered allmulticast mode [ 1184.694364][T14849] veth0: entered promiscuous mode [ 1184.714543][T14848] veth0: left promiscuous mode [ 1187.424419][T14878] syzkaller0: entered promiscuous mode [ 1187.445162][T14878] syzkaller0: entered allmulticast mode [ 1187.543345][T14890] __nla_validate_parse: 3 callbacks suppressed [ 1187.543362][T14890] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11231'. [ 1190.066869][T14910] net_ratelimit: 3 callbacks suppressed [ 1190.066887][T14910] batadv_slave_1: mtu less than device minimum [ 1190.206507][T14918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11239'. [ 1190.230996][T14923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.379018][T14935] netlink: 'syz.3.11244': attribute type 2 has an invalid length. [ 1190.577868][T14950] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1190.767623][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11253'. [ 1190.810949][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11253'. [ 1190.813217][T14964] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11254'. [ 1190.832517][T14964] xt_policy: neither incoming nor outgoing policy selected [ 1190.872422][T14970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11255'. [ 1190.943064][T14974] syzkaller1: entered promiscuous mode [ 1190.948906][T14974] syzkaller1: entered allmulticast mode [ 1191.186458][T14992] x_tables: unsorted underflow at hook 1 [ 1191.334016][T15004] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11267'. [ 1191.352236][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11268'. [ 1191.390762][T15007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11269'. [ 1191.408985][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11268'. [ 1192.037842][T15036] netlink: 'syz.4.11279': attribute type 12 has an invalid length. [ 1192.159480][T15052] netlink: 'syz.3.11283': attribute type 11 has an invalid length. [ 1192.190600][T15052] netlink: 'syz.3.11283': attribute type 4 has an invalid length. [ 1192.257731][ T30] audit: type=1107 audit(1779814536.255:31): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1192.611420][T15080] __nla_validate_parse: 8 callbacks suppressed [ 1192.611440][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11288'. [ 1192.696704][T15082] pim6reg: entered allmulticast mode [ 1192.753173][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11291'. [ 1192.771112][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11291'. [ 1192.781675][T15084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11291'. [ 1192.791812][T15087] pim6reg: left allmulticast mode [ 1192.813694][T15077] netlink: 'syz.0.11288': attribute type 10 has an invalid length. [ 1192.880571][T15077] team0: Port device netdevsim1 removed [ 1192.912772][T15077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1192.928573][T15077] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1192.937696][T15077] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1193.098235][T15106] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11297'. [ 1193.120082][T15106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.183578][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11298'. [ 1193.270289][T15115] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1193.650240][T15147] netlink: 'syz.1.11308': attribute type 20 has an invalid length. [ 1193.650240][T15148] netlink: 'syz.1.11308': attribute type 20 has an invalid length. [ 1193.650263][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11308'. [ 1193.690119][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11308'. [ 1193.699154][T15148] netlink: 'syz.1.11308': attribute type 20 has an invalid length. [ 1193.699173][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11308'. [ 1193.722283][T11988] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.747034][T11988] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.767559][T11988] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.777435][T11988] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.947187][T15169] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1194.092853][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11318'. [ 1194.106932][T15180] netlink: 'syz.1.11318': attribute type 3 has an invalid length. [ 1194.255821][T15187] veth0_to_bridge: entered promiscuous mode [ 1194.269130][T15186] veth0_to_bridge: left promiscuous mode [ 1194.332590][T15193] netlink: 'syz.3.11324': attribute type 5 has an invalid length. [ 1194.366464][T15193] vlan1: entered allmulticast mode [ 1194.371736][T15193] bond0: entered allmulticast mode [ 1194.406567][T15198] netlink: 'syz.1.11327': attribute type 1 has an invalid length. [ 1194.453991][T15198] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1194.702280][T15220] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 1195.039035][T15236] syzkaller0: entered promiscuous mode [ 1195.048164][T15236] syzkaller0: entered allmulticast mode [ 1195.777985][T15274] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1195.878149][T15273] IPVS: Error connecting to the multicast addr [ 1195.974640][T15283] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1196.119000][T15289] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 1196.180818][T15298] validate_nla: 3 callbacks suppressed [ 1196.180836][T15298] netlink: 'syz.2.11354': attribute type 12 has an invalid length. [ 1196.233796][T15305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1196.408237][T15318] netlink: 'syz.3.11362': attribute type 1 has an invalid length. [ 1196.426781][T15324] netlink: 'syz.3.11362': attribute type 1 has an invalid length. [ 1196.508788][T15328] x_tables: duplicate underflow at hook 2 [ 1196.673737][T15339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1197.072043][T15376] netlink: 'syz.4.11380': attribute type 1 has an invalid length. [ 1197.166188][T15384] veth0_to_batadv: mtu greater than device maximum [ 1197.693302][T15417] IPv6: sit2: Disabled Multicast RS [ 1197.753245][T15421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1197.773301][T15424] __nla_validate_parse: 54 callbacks suppressed [ 1197.773319][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11394'. [ 1197.849666][T15428] netlink: 'syz.2.11395': attribute type 2 has an invalid length. [ 1198.009313][T15434] veth1: entered allmulticast mode [ 1198.217950][T15446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11400'. [ 1198.363500][T15464] netlink: 'syz.1.11403': attribute type 12 has an invalid length. [ 1198.398591][T15464] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.11403'. [ 1198.591313][T15476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11408'. [ 1198.697553][T15481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11410'. [ 1198.699109][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11410'. [ 1198.779508][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11413'. [ 1198.790059][T15483] netlink: 'syz.2.11411': attribute type 1 has an invalid length. [ 1198.799357][T15483] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.11411'. [ 1198.800191][T15489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1198.879434][T15493] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.11415'. [ 1198.961052][T15502] netlink: 'syz.2.11418': attribute type 11 has an invalid length. [ 1198.971188][T15502] netlink: 'syz.2.11418': attribute type 11 has an invalid length. [ 1198.982019][T15502] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11418'. [ 1198.993342][T15505] netlink: 'syz.3.11419': attribute type 21 has an invalid length. [ 1199.416418][T15535] netlink: 'syz.1.11424': attribute type 1 has an invalid length. [ 1199.430903][T15535] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1199.683910][T15557] tipc: Enabling of bearer rejected, already enabled [ 1199.959764][T15566] bond12: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1199.977819][T15566] bond12 (unregistering): Released all slaves [ 1200.046320][T15574] netlink: 'syz.1.11431': attribute type 21 has an invalid length. [ 1200.073367][T15571] vxcan1 speed is unknown, defaulting to 1000 [ 1200.508061][T15598] vcan0: entered allmulticast mode [ 1200.573249][T15571] »»»»»» speed is unknown, defaulting to 1000 [ 1200.600334][T15571] lo speed is unknown, defaulting to 1000 [ 1200.918935][ T2113] block nbd9: Possible stuck request ffff888027930000: control (read@0,1024B). Runtime 210 seconds [ 1200.930152][ T2113] block nbd9: Possible stuck request ffff8880279301c0: control (read@1024,1024B). Runtime 210 seconds [ 1200.943039][ T2113] block nbd9: Possible stuck request ffff888027930380: control (read@2048,1024B). Runtime 210 seconds [ 1200.954325][ T2113] block nbd9: Possible stuck request ffff888027930540: control (read@3072,1024B). Runtime 210 seconds [ 1201.136525][T15624] IPVS: set_ctl: invalid protocol: 22 172.20.20.62:20000 [ 1201.262475][T15632] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1201.389953][T15632] macvlan3: entered promiscuous mode [ 1201.407145][T15632] macvlan3: entered allmulticast mode [ 1201.417470][T15632] bond7: entered promiscuous mode [ 1201.428408][T15632] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1201.450713][T15632] bond7: left promiscuous mode [ 1202.090527][T15672] syzkaller0: entered promiscuous mode [ 1202.097878][T15672] syzkaller0: entered allmulticast mode [ 1202.173796][T15677] bond3: entered promiscuous mode [ 1202.189678][T15677] bond3: entered allmulticast mode [ 1202.387720][T15686] syzkaller0: entered promiscuous mode [ 1202.393336][T15686] syzkaller0: entered allmulticast mode [ 1202.459675][T15691] vlan1: entered allmulticast mode [ 1202.474085][T15691] gretap0: entered allmulticast mode [ 1205.141355][T15728] __nla_validate_parse: 17 callbacks suppressed [ 1205.141373][T15728] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11475'. [ 1205.191584][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11475'. [ 1205.219205][T15728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11475'. [ 1205.261770][T15739] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11480'. [ 1205.440069][T15750] netlink: 'syz.4.11483': attribute type 11 has an invalid length. [ 1205.449743][T15750] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11483'. [ 1205.486900][T15751] validate_nla: 1 callbacks suppressed [ 1205.486926][T15751] netlink: 'syz.3.11484': attribute type 1 has an invalid length. [ 1205.603007][T15751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1205.636930][T15758] bond4: (slave veth0_to_bond): making interface the new active one [ 1205.687748][T15758] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1205.781255][T15768] macvlan1: entered promiscuous mode [ 1205.800709][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11491'. [ 1205.803912][T15768] macvlan1: entered allmulticast mode [ 1205.819129][T15768] bond4: entered promiscuous mode [ 1205.826436][T15768] veth0_to_bond: entered promiscuous mode [ 1205.832836][T15768] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1205.844143][T15768] bond4: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1205.857244][T15768] bond4: left promiscuous mode [ 1205.862031][T15768] veth0_to_bond: left promiscuous mode [ 1205.885405][T15772] : entered promiscuous mode [ 1205.961060][T15780] Cannot find del_set index 3 as target [ 1205.994412][T15772] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11490'. [ 1206.058166][T15787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11493'. [ 1206.106367][T15787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11493'. [ 1206.554481][T15811] tipc: Enabling not permitted [ 1206.577620][T15811] tipc: Enabling of bearer rejected, failed to enable media [ 1206.623620][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11508'. [ 1206.703593][T15815] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1206.747424][T15827] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1207.104870][T15854] openvswitch: netlink: Key type 30 is not supported [ 1207.120348][T15856] openvswitch: netlink: Key type 30 is not supported [ 1207.184882][T15856] syzkaller1: entered promiscuous mode [ 1207.192556][T15856] syzkaller1: entered allmulticast mode [ 1207.328969][T15868] netlink: 'syz.0.11521': attribute type 1 has an invalid length. [ 1207.779044][T15894] netlink: 'syz.4.11528': attribute type 21 has an invalid length. [ 1207.797623][T15894] IPv6: NLM_F_CREATE should be specified when creating new route [ 1207.807078][T15894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1207.814330][T15894] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.821661][T15894] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.828912][T15894] IPv6: NLM_F_CREATE should be set when creating new route [ 1208.634224][T15921] xt_ipcomp: unknown flags 1D [ 1208.810970][T15941] netlink: 'syz.4.11543': attribute type 24 has an invalid length. [ 1208.820825][T15942] netlink: 'syz.0.11542': attribute type 1 has an invalid length. [ 1208.963833][T15950] bond8: (slave geneve4): making interface the new active one [ 1208.974267][T15950] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1208.983835][T15952] ip6gre0: Master is either lo or non-ether device [ 1208.991223][T11990] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1209.014212][T11990] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1209.047114][T15945] syzkaller0: entered promiscuous mode [ 1209.063408][T15945] syzkaller0: entered allmulticast mode [ 1209.087803][T11990] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1209.110494][T11990] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1209.140334][T15963] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1209.341562][T15968] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1209.369056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1209.557545][T15986] netlink: 'syz.0.11556': attribute type 1 has an invalid length. [ 1209.627077][T15986] bond9: entered promiscuous mode [ 1209.632635][T15986] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1209.725399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1210.442401][T16032] __nla_validate_parse: 16 callbacks suppressed [ 1210.442421][T16032] netlink: 830 bytes leftover after parsing attributes in process `syz.4.11567'. [ 1210.478523][T16032] netlink: 'syz.4.11567': attribute type 29 has an invalid length. [ 1210.594345][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11569'. [ 1210.644198][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11569'. [ 1210.787604][T16052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11572'. [ 1210.799756][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11572'. [ 1210.818663][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11572'. [ 1210.887359][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11574'. [ 1210.990969][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11572'. [ 1211.065758][T16052] team0 (unregistering): Port device team_slave_0 removed [ 1211.093950][T16052] team0 (unregistering): Port device team_slave_1 removed [ 1211.164004][T16051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1211.388844][T16086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11580'. [ 1211.504914][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11579'. [ 1211.574484][T16090] openvswitch: netlink: IP tunnel dst address not specified [ 1212.088987][T16117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1212.264005][T16129] ieee802154 phy1 wpan1: encryption failed: -126 [ 1212.302419][T16131] netlink: 'syz.0.11597': attribute type 1 has an invalid length. [ 1212.327097][T16136] netlink: 'syz.3.11598': attribute type 32 has an invalid length. [ 1212.386395][T16136] bond5: option coupled_control: invalid value (192) [ 1212.395783][T16136] bond5 (unregistering): Released all slaves [ 1212.478978][T16131] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1212.531370][T16140] veth11: entered promiscuous mode [ 1212.548864][T16140] bond10: (slave veth11): Enslaving as a backup interface with a down link [ 1212.562316][T16142] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1212.573788][ T9244] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1212.606700][T16145] »»»»»»: entered promiscuous mode [ 1212.612376][T16145] tunl0: entered promiscuous mode [ 1212.618655][T16145] gre0: entered promiscuous mode [ 1212.646660][T16145] gretap0: entered promiscuous mode [ 1212.705752][T11990] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1212.778507][T16145] ip_vti0: entered promiscuous mode [ 1212.793004][T25124] »»»»»» speed is unknown, defaulting to 1000 [ 1213.075545][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1213.356641][T16192] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1213.472910][T16204] lo: entered promiscuous mode [ 1213.492052][T16204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1213.633487][T16218] netlink: 'syz.2.11622': attribute type 21 has an invalid length. [ 1213.656851][T16218] netlink: 'syz.2.11622': attribute type 1 has an invalid length. [ 1213.924836][T16236] netlink: 'syz.1.11628': attribute type 29 has an invalid length. [ 1214.022589][T16245] netlink: 'syz.0.11629': attribute type 1 has an invalid length. [ 1214.131367][T16252] ip6gretap2: entered promiscuous mode [ 1214.167258][T16252] ip6gretap2: entered allmulticast mode [ 1214.220219][T16252] bond11: (slave ip6gretap2): making interface the new active one [ 1214.241359][T16252] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1214.252659][T16252] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1214.262756][T16252] bond11: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1214.277907][T11990] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.443538][T16275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1214.655097][T16291] tap0: tun_chr_ioctl cmd 1074025676 [ 1214.663411][T16288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1214.673385][T16291] tap0: owner set to 0 [ 1214.974650][T16318] xt_policy: output policy not valid in PREROUTING and INPUT [ 1215.217647][T16332] pim6reg: entered allmulticast mode [ 1215.533844][T16349] __nla_validate_parse: 45 callbacks suppressed [ 1215.533862][T16349] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11662'. [ 1215.683827][T16356] netlink: 'syz.4.11663': attribute type 1 has an invalid length. [ 1215.837541][T16356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1215.883099][T16371] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11665'. [ 1215.969144][T16374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11667'. [ 1216.008286][T16374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11667'. [ 1216.042671][T16371] netlink: 33 bytes leftover after parsing attributes in process `syz.2.11665'. [ 1216.089065][T16371] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11665'. [ 1216.253538][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11671'. [ 1216.383799][T16402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11673'. [ 1216.446411][T16403] gtp0: entered allmulticast mode [ 1216.467590][T16403] team0: Device gtp0 is of different type [ 1217.204655][ T5729] IPVS: starting estimator thread 0... [ 1217.306542][T16468] IPVS: using max 32 ests per chain, 76800 per kthread [ 1217.439391][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11693'. [ 1217.596847][T16489] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.11697'. [ 1217.787024][T16491] bond12: option xmit_hash_policy: invalid value (64) [ 1217.814458][T16491] bond12 (unregistering): Released all slaves [ 1217.891572][T16493] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1218.074419][T16514] netlink: 'syz.3.11703': attribute type 1 has an invalid length. [ 1218.398306][T16538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.590711][T16547] netlink: 'syz.3.11715': attribute type 1 has an invalid length. [ 1218.610084][T16551] netlink: 'syz.3.11715': attribute type 1 has an invalid length. [ 1218.666815][T13686] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1218.684090][T13686] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1218.692594][T13686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1218.702250][T13686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1218.724195][T13686] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1218.784372][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1218.793106][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1218.801478][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1218.814554][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1218.851650][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1218.861186][T16565] netlink: 'syz.3.11719': attribute type 2 has an invalid length. [ 1218.880748][T16565] netlink: 'syz.3.11719': attribute type 11 has an invalid length. [ 1218.903179][T16566] netlink: 'syz.2.11718': attribute type 1 has an invalid length. [ 1218.972997][T16571] tipc: Enabling of bearer rejected, failed to enable media [ 1219.143117][T16566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1219.215714][T16577] netlink: 'syz.3.11721': attribute type 33 has an invalid length. [ 1219.524788][T16577] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1219.552206][T16577] bond5 (unregistering): Released all slaves [ 1220.000057][T16552] vxcan1 speed is unknown, defaulting to 1000 [ 1220.146991][T16642] SET target dimension over the limit! [ 1220.162696][T16642] SET target dimension over the limit! [ 1220.180019][T16642] SET target dimension over the limit! [ 1220.191677][T16642] SET target dimension over the limit! [ 1220.202635][T16642] SET target dimension over the limit! [ 1220.217097][T16642] SET target dimension over the limit! [ 1220.226730][T16642] SET target dimension over the limit! [ 1220.239910][T16642] SET target dimension over the limit! [ 1220.268466][T16642] SET target dimension over the limit! [ 1220.289656][T16642] SET target dimension over the limit! [ 1220.446132][T16552] »»»»»» speed is unknown, defaulting to 1000 [ 1220.461138][T16552] lo speed is unknown, defaulting to 1000 [ 1220.473492][T16665] ipt_ECN: cannot use operation on non-tcp rule [ 1220.607303][T16667] __nla_validate_parse: 12 callbacks suppressed [ 1220.607324][T16667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11742'. [ 1220.671905][T16672] Bluetooth: MGMT ver 1.23 [ 1220.688160][T16672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11744'. [ 1220.918097][ T5634] Bluetooth: hci0: command tx timeout [ 1221.118842][T16699] netlink: 'syz.2.11751': attribute type 5 has an invalid length. [ 1221.150128][T16699] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11751'. [ 1221.207701][T16699] syzkaller1: entered promiscuous mode [ 1221.231875][T16699] syzkaller1: entered allmulticast mode [ 1221.284058][T16707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1221.378851][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11756'. [ 1221.468427][T16723] netlink: 'syz.0.11758': attribute type 21 has an invalid length. [ 1221.502524][T16723] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11758'. [ 1221.514021][T16726] netlink: 284 bytes leftover after parsing attributes in process `syz.4.11757'. [ 1221.554783][T16723] netlink: 'syz.0.11758': attribute type 5 has an invalid length. [ 1221.564090][T16723] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11758'. [ 1221.709956][T16552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.721436][T16552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.729337][T16552] bridge_slave_0: entered allmulticast mode [ 1221.742801][T16552] bridge_slave_0: entered promiscuous mode [ 1221.762567][T16748] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11764'. [ 1221.774208][T16552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.791077][T16552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.806297][T16552] bridge_slave_1: entered allmulticast mode [ 1221.814471][T16552] bridge_slave_1: entered promiscuous mode [ 1221.831937][T16751] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11766'. [ 1221.843266][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11765'. [ 1221.874427][T16749] veth0_macvtap: left promiscuous mode [ 1221.953357][T16552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.973541][T16552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.057160][T16552] team0: Port device team_slave_0 added [ 1222.078467][T16552] team0: Port device team_slave_1 added [ 1222.132726][T16552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.140744][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.176575][T16552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.193798][T16552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.203599][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.270745][T16552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.367841][T16774] bond9: invalid ARP target 0.0.0.0 specified for addition [ 1222.392045][T16774] bond9: option arp_ip_target: invalid value (0) [ 1222.411081][T16774] bond9 (unregistering): Released all slaves [ 1222.486538][T16552] hsr_slave_0: entered promiscuous mode [ 1222.493372][T16552] hsr_slave_1: entered promiscuous mode [ 1222.517003][T16552] debugfs: 'hsr0' already exists in 'hsr' [ 1222.535532][T16552] Cannot create hsr debugfs directory [ 1222.683181][T16803] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1222.695351][T16803] bond9 (unregistering): Released all slaves [ 1222.942989][T16552] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1222.958438][T16552] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.969446][T16552] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1222.996559][T16815] netdevsim0: renamed from gretap0 (while UP) [ 1223.169405][T16552] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.182643][T16552] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.182969][ T5744] IPVS: starting estimator thread 0... [ 1223.193095][T16552] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1223.292720][T16552] team0: Port device netdevsim1 removed [ 1223.324185][T16552] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.336078][T16828] IPVS: using max 32 ests per chain, 76800 per kthread [ 1223.351031][T16552] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.362968][T16552] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1223.558231][T16552] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.582530][T16552] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.606301][T16552] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1224.230674][T16552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1224.265777][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1224.286301][T16552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1224.307798][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1224.337635][T16552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1224.370581][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1224.379450][T16552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1224.394438][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.543652][T16552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.569400][T16552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.628872][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.636098][ T9244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.657177][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.664344][ T9244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.633668][T16927] __nla_validate_parse: 15 callbacks suppressed [ 1225.633688][T16927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11813'. [ 1225.850696][T16552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.959325][T16552] veth0_vlan: entered promiscuous mode [ 1225.999401][T16552] veth1_vlan: entered promiscuous mode [ 1226.047641][T16552] veth0_macvtap: entered promiscuous mode [ 1226.063280][T16552] veth1_macvtap: entered promiscuous mode [ 1226.090123][T16552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.110202][T16552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.140945][T17843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.161871][T17843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.186698][T17843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.216726][T17843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.383560][T16833] Set syz1 is full, maxelem 65536 reached [ 1226.384397][T16942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11816'. [ 1226.452517][T17839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.468209][T17839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.549828][T16953] netlink: 288 bytes leftover after parsing attributes in process `syz.2.11819'. [ 1226.583098][T17843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.591329][T17843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.797603][T16975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11821'. [ 1227.003540][T16996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1227.145960][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11829'. [ 1229.383496][T16946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1229.634463][T17010] syzkaller0: entered promiscuous mode [ 1229.651078][T17010] syzkaller0: entered allmulticast mode [ 1229.936408][T17028] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 1229.951461][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11839'. [ 1230.124617][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11846'. [ 1230.171473][T17048] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11848'. [ 1230.291433][T17056] netlink: 'syz.1.11850': attribute type 1 has an invalid length. [ 1230.536048][T17080] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.11856'. [ 1230.702883][T17089] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1230.816011][T17102] netlink: 'syz.3.11864': attribute type 1 has an invalid length. [ 1230.873041][T17105] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1230.912355][T17102] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1231.006447][ T2113] block nbd9: Possible stuck request ffff888027930000: control (read@0,1024B). Runtime 240 seconds [ 1231.017761][ T2113] block nbd9: Possible stuck request ffff8880279301c0: control (read@1024,1024B). Runtime 240 seconds [ 1231.029760][ T2113] block nbd9: Possible stuck request ffff888027930380: control (read@2048,1024B). Runtime 240 seconds [ 1231.041556][ T2113] block nbd9: Possible stuck request ffff888027930540: control (read@3072,1024B). Runtime 240 seconds [ 1231.101255][T17120] tipc: Started in network mode [ 1231.107645][T17120] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 1231.117866][T17120] tipc: Enabled bearer , priority 14 [ 1231.193579][T17126] netlink: 'syz.3.11871': attribute type 30 has an invalid length. [ 1231.329031][T17139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11873'. [ 1231.527390][T17160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11876'. [ 1231.574126][T17164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11879'. [ 1231.589162][T17166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11879'. [ 1231.640245][T17169] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11880'. [ 1231.650528][T17169] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11880'. [ 1232.245651][ T5729] tipc: Node number set to 10463914 [ 1234.093052][T17120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1234.105475][T17155] netlink: 220 bytes leftover after parsing attributes in process `syz.4.11876'. [ 1234.240708][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11881'. [ 1234.266105][T17174] netlink: 'syz.3.11881': attribute type 6 has an invalid length. [ 1234.286706][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11881'. [ 1234.316885][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11881'. [ 1234.350158][T17174] netlink: 'syz.3.11881': attribute type 6 has an invalid length. [ 1234.477234][T17185] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1234.731767][T17209] netlink: 'syz.4.11889': attribute type 1 has an invalid length. [ 1234.767166][T17211] geneve1: entered promiscuous mode [ 1234.937844][T17223] syzkaller0: entered promiscuous mode [ 1234.969762][T17223] syzkaller0: entered allmulticast mode [ 1235.430825][ T5288] veth0_vlan: left promiscuous mode [ 1235.448230][ T5288] veth0_vlan: entered promiscuous mode [ 1237.754394][T17215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1238.114262][T17283] __nla_validate_parse: 2 callbacks suppressed [ 1238.114282][T17283] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11904'. [ 1238.172910][T17283] vlan0: entered promiscuous mode [ 1238.579040][T17314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11905'. [ 1238.592246][T17317] netlink: 'syz.1.11913': attribute type 12 has an invalid length. [ 1238.615969][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11905'. [ 1238.688751][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.708672][T17321] gretap2: entered promiscuous mode [ 1238.760008][T17321] batman_adv: batadv0: Adding interface: gretap2 [ 1238.769343][T17321] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.822564][T17321] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1239.401441][T17351] syzkaller0: entered promiscuous mode [ 1239.431791][T17351] syzkaller0: entered allmulticast mode [ 1239.469953][T17351] 0: reclassify loop, rule prio 0, protocol 800 [ 1239.599070][T17372] netlink: 'syz.0.11926': attribute type 10 has an invalid length. [ 1239.869476][T17384] syzkaller0: entered promiscuous mode [ 1239.881777][T17384] syzkaller0: entered allmulticast mode [ 1239.962848][T17393] FAULT_INJECTION: forcing a failure. [ 1239.962848][T17393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.997342][T17393] CPU: 0 UID: 0 PID: 17393 Comm: syz.4.11934 Not tainted syzkaller #0 PREEMPT(full) [ 1239.997368][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1239.997380][T17393] Call Trace: [ 1239.997388][T17393] [ 1239.997396][T17393] dump_stack_lvl+0xe8/0x150 [ 1239.997427][T17393] should_fail_ex+0x412/0x560 [ 1239.997461][T17393] _copy_from_user+0x2d/0xb0 [ 1239.997490][T17393] ___sys_sendmsg+0x1c6/0x360 [ 1239.997519][T17393] ? __lock_acquire+0x6b5/0x2cf0 [ 1239.997545][T17393] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.997594][T17393] ? __fget_files+0x2a/0x420 [ 1239.997613][T17393] ? __fget_files+0x3a0/0x420 [ 1239.997636][T17393] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1239.997659][T17393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1239.997687][T17393] ? __pfx_ksys_write+0x10/0x10 [ 1239.997714][T17393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.997730][T17393] do_syscall_64+0x15f/0xf80 [ 1239.997746][T17393] ? trace_irq_disable+0x3b/0x140 [ 1239.997769][T17393] ? clear_bhb_loop+0x40/0x90 [ 1239.997787][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.997802][T17393] RIP: 0033:0x7face5b9ce59 [ 1239.997820][T17393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.997835][T17393] RSP: 002b:00007face6a7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1239.997852][T17393] RAX: ffffffffffffffda RBX: 00007face5e15fa0 RCX: 00007face5b9ce59 [ 1239.997863][T17393] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1239.997872][T17393] RBP: 00007face6a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.997881][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.997890][T17393] R13: 00007face5e16038 R14: 00007face5e15fa0 R15: 00007ffec94dcf78 [ 1239.997914][T17393] [ 1240.366303][T17412] netlink: zone id is out of range [ 1240.368089][T17408] veth1_macvtap: left promiscuous mode [ 1240.371493][T17412] netlink: zone id is out of range [ 1240.384378][T17408] macsec0: entered promiscuous mode [ 1240.385570][T17412] netlink: zone id is out of range [ 1240.395494][T17412] netlink: zone id is out of range [ 1240.400638][T17412] netlink: zone id is out of range [ 1240.404890][T17408] macsec0: entered allmulticast mode [ 1240.406162][T17412] netlink: zone id is out of range [ 1240.416290][T17412] netlink: zone id is out of range [ 1240.421763][T17412] netlink: zone id is out of range [ 1240.428376][T17412] netlink: zone id is out of range [ 1240.433945][T17412] netlink: zone id is out of range [ 1242.780110][T17384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1243.149799][T17449] netlink: 664 bytes leftover after parsing attributes in process `syz.0.11948'. [ 1243.214027][T17449] gretap3: entered promiscuous mode [ 1243.224571][T17449] batman_adv: batadv0: Adding interface: gretap3 [ 1243.232245][T17449] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.271547][T17449] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 1243.284268][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11952'. [ 1243.297658][T17458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11952'. [ 1243.320853][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11952'. [ 1243.345464][T17458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11952'. [ 1244.059806][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11965'. [ 1244.176604][T17500] Cannot find set identified by id 65534 to match [ 1244.220645][T17504] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11967'. [ 1244.241857][T17504] netlink: 'syz.1.11967': attribute type 1 has an invalid length. [ 1244.516827][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11971'. [ 1244.541043][T17520] netlink: 'syz.1.11969': attribute type 1 has an invalid length. [ 1244.587876][T17520] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11969'. [ 1244.652679][T17520] netlink: 658 bytes leftover after parsing attributes in process `syz.1.11969'. [ 1244.735528][T17518] bond11 (unregistering): Released all slaves [ 1244.766971][T17536] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1244.784624][T17534] netlink: 'syz.3.11974': attribute type 1 has an invalid length. [ 1244.903910][T17542] netlink: 'syz.1.11977': attribute type 2 has an invalid length. [ 1245.173440][T17562] tunl0: Caught tx_queue_len zero misconfig [ 1259.157449][ C0] net_ratelimit: 51 callbacks suppressed [ 1259.157471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1261.079851][ T2113] block nbd9: Possible stuck request ffff888027930000: control (read@0,1024B). Runtime 270 seconds [ 1261.090662][ T2113] block nbd9: Possible stuck request ffff8880279301c0: control (read@1024,1024B). Runtime 270 seconds [ 1261.102656][ T2113] block nbd9: Possible stuck request ffff888027930380: control (read@2048,1024B). Runtime 270 seconds [ 1261.113949][ T2113] block nbd9: Possible stuck request ffff888027930540: control (read@3072,1024B). Runtime 270 seconds [ 1264.584214][T17617] netlink: 'syz.3.11989': attribute type 5 has an invalid length. [ 1264.618168][T17620] __nla_validate_parse: 9 callbacks suppressed [ 1264.618186][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11990'. [ 1264.638964][T17617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11989'. [ 1264.682662][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11991'. [ 1264.933579][T17640] netlink: 408 bytes leftover after parsing attributes in process `syz.0.11994'. [ 1264.967613][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11994'. [ 1265.051095][T17647] ipvlan1: Caught tx_queue_len zero misconfig [ 1265.472796][T17680] netlink: 'syz.1.12005': attribute type 4 has an invalid length. [ 1265.533073][T17679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1265.583994][T17688] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1265.642915][T17692] bond6: entered promiscuous mode [ 1265.704847][T17699] netlink: 'syz.4.12011': attribute type 64 has an invalid length. [ 1265.725799][T17699] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12011'. [ 1265.782416][T17702] x_tables: duplicate underflow at hook 1 [ 1265.790893][T25124] IPVS: starting estimator thread 0... [ 1265.895141][T17706] IPVS: using max 31 ests per chain, 74400 per kthread [ 1265.976954][T17717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12012'. [ 1266.152254][T17721] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1266.190993][T17839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.198204][T17839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.257299][T17726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12018'. [ 1266.594520][T17743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12025'. [ 1266.702912][T17749] xt_hashlimit: overflow, rate too high: 0 [ 1266.743530][T17750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12028'. [ 1266.773656][T17754] netlink: 'syz.2.12030': attribute type 10 has an invalid length. [ 1267.174837][ T9752] udevd[9752]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1267.319705][T17780] netlink: 'syz.4.12036': attribute type 18 has an invalid length. [ 1267.380425][T17843] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.403781][T17843] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.428988][T17843] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.501223][T17785] netlink: 'syz.4.12038': attribute type 1 has an invalid length. [ 1267.518349][T17785] netlink: 'syz.4.12038': attribute type 1 has an invalid length. [ 1268.226975][T17821] netlink: 'syz.4.12049': attribute type 1 has an invalid length. [ 1268.289813][T17819] hsr_slave_1 (unregistering): left promiscuous mode [ 1268.376211][T13686] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1268.389877][T13686] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1268.398543][T13686] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1268.418066][T13686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1268.430033][T13686] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1268.491245][T17837] netlink: 'syz.3.12052': attribute type 1 has an invalid length. [ 1269.059797][T17871] sctp: [Deprecated]: syz.2.12060 (pid 17871) Use of int in maxseg socket option. [ 1269.059797][T17871] Use struct sctp_assoc_value instead [ 1269.083895][T17826] vxcan1 speed is unknown, defaulting to 1000 [ 1269.114348][T17877] netlink: 'syz.3.12059': attribute type 30 has an invalid length. [ 1269.639092][T17826] »»»»»» speed is unknown, defaulting to 1000 [ 1269.647074][T17826] lo speed is unknown, defaulting to 1000 [ 1269.998372][T17928] __nla_validate_parse: 7 callbacks suppressed [ 1269.998390][T17928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12071'. [ 1270.111897][T17932] validate_nla: 1 callbacks suppressed [ 1270.111915][T17932] netlink: 'syz.4.12071': attribute type 1 has an invalid length. [ 1270.145546][T17932] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12071'. [ 1270.158689][T17933] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1270.182829][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12071'. [ 1270.183007][T17933] ieee802154 phy1 wpan1: encryption failed: -22 [ 1270.322913][T17937] bond1: entered promiscuous mode [ 1270.329097][T17937] bond1: entered allmulticast mode [ 1270.334887][T17937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1270.403379][T17940] netlink: 'syz.1.12074': attribute type 2 has an invalid length. [ 1270.413585][T17940] netlink: 'syz.1.12074': attribute type 11 has an invalid length. [ 1270.428913][T17940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12074'. [ 1270.515486][T13686] Bluetooth: hci2: command tx timeout [ 1270.523843][T25129] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1270.532140][T25129] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1270.892971][T17953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12077'. [ 1270.952850][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12077'. [ 1271.236692][T17964] bond7: option resend_igmp: invalid value (32767) [ 1271.254905][T17964] bond7: option resend_igmp: allowed values 0 - 255 [ 1271.277574][T17964] bond7 (unregistering): Released all slaves [ 1271.489433][T17967] syzkaller0: entered promiscuous mode [ 1271.499059][T17967] syzkaller0: entered allmulticast mode [ 1271.627229][T18000] IPv6: NLM_F_CREATE should be specified when creating new route [ 1271.636294][T18000] IPv6: Can't replace route, no match found [ 1271.674290][T18002] netlink: 'syz.4.12089': attribute type 1 has an invalid length. [ 1271.697598][T18002] netlink: 184 bytes leftover after parsing attributes in process `syz.4.12089'. [ 1271.708518][T18002] netlink: 'syz.4.12089': attribute type 1 has an invalid length. [ 1271.717177][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12089'. [ 1273.918415][T17826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.936820][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.951974][T17826] bridge_slave_0: entered allmulticast mode [ 1273.980812][T17826] bridge_slave_0: entered promiscuous mode [ 1274.012084][T17826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.030470][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.040827][T17826] bridge_slave_1: entered allmulticast mode [ 1274.052458][T18013] netlink: 'syz.1.12093': attribute type 13 has an invalid length. [ 1274.062696][T17826] bridge_slave_1: entered promiscuous mode [ 1274.078582][T18013] veth1_macvtap: left promiscuous mode [ 1274.084206][T18013] macsec0: entered allmulticast mode [ 1274.192281][T18019] syzkaller0: entered promiscuous mode [ 1274.207856][T18019] syzkaller0: entered allmulticast mode [ 1274.231111][T17826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.257176][T17826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.343863][T17826] team0: Port device team_slave_0 added [ 1274.358495][T17826] team0: Port device team_slave_1 added [ 1274.487780][T17826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.506646][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.584370][T17826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.638741][T17826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.665874][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.725810][T17826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.854204][T17826] hsr_slave_0: entered promiscuous mode [ 1274.873476][T17826] hsr_slave_1: entered promiscuous mode [ 1274.894057][T17826] debugfs: 'hsr0' already exists in 'hsr' [ 1274.931586][T17826] Cannot create hsr debugfs directory [ 1275.008287][T18066] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.12110'. [ 1275.084650][T18063] syzkaller1: entered promiscuous mode [ 1275.093953][T18077] Cannot find add_set index 65532 as target [ 1275.102514][T18063] syzkaller1: entered allmulticast mode [ 1275.127200][T18077] syzkaller1: entered promiscuous mode [ 1275.132817][T18077] syzkaller1: entered allmulticast mode [ 1275.202871][T18085] syzkaller1: left promiscuous mode [ 1275.208267][T18085] syzkaller1: left allmulticast mode [ 1275.262568][T18087] xt_nat: multiple ranges no longer supported [ 1275.664571][T17826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.700155][T17826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1275.725168][T17826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1275.984108][T17826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.005882][T17826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1276.022009][T17826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1276.052179][T18117] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 1276.219923][T17826] bond0: (slave netdevsim1): Releasing backup interface [ 1276.260479][T17826] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 1276.278143][T18131] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12123'. [ 1276.302577][T17826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.327309][T17826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1276.357172][T17826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1276.400595][T18131] netem: change failed [ 1276.578115][T17826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.612571][T17826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1276.642988][T17826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1277.204496][T18179] netlink: 'syz.2.12132': attribute type 1 has an invalid length. [ 1277.229954][T18169] netlink: 'syz.4.12130': attribute type 21 has an invalid length. [ 1277.252805][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12132'. [ 1277.273497][T18169] netlink: 'syz.4.12130': attribute type 6 has an invalid length. [ 1277.289683][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12132'. [ 1277.291670][T18169] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12130'. [ 1277.383904][T18177] vxcan1 speed is unknown, defaulting to 1000 [ 1277.483063][T17826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1277.511041][T17826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1277.526575][T17826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1277.569398][T17826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1277.587248][T17826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1277.607855][T17826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1277.626122][T17826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1277.647097][T17826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1277.838378][T17826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.903060][T17826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.932785][T17834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.939998][T17834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.958806][T17834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.966001][T17834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.037252][T18177] »»»»»» speed is unknown, defaulting to 1000 [ 1278.068053][T18177] lo speed is unknown, defaulting to 1000 [ 1278.190790][T18236] netlink: 'syz.2.12145': attribute type 3 has an invalid length. [ 1278.214128][T18236] netlink: 666 bytes leftover after parsing attributes in process `syz.2.12145'. [ 1278.225539][T18233] block nbd1: server does not support multiple connections per device. [ 1278.237985][T18233] block nbd1: shutting down sockets [ 1278.248576][T18241] netlink: 'syz.2.12145': attribute type 3 has an invalid length. [ 1278.268568][T18241] netlink: 666 bytes leftover after parsing attributes in process `syz.2.12145'. [ 1278.347711][T18232] block nbd1: server does not support multiple connections per device. [ 1278.377019][T18232] block nbd1: shutting down sockets [ 1278.705297][T18264] xt_hashlimit: size too large, truncated to 1048576 [ 1278.808373][T18270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12152'. [ 1278.840238][T17826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.012809][T18275] pim6reg: entered allmulticast mode [ 1279.023709][T18275] pim6reg: left allmulticast mode [ 1279.036181][T18275] vcan0: left allmulticast mode [ 1279.170179][T17826] veth0_vlan: entered promiscuous mode [ 1279.201084][T17826] veth1_vlan: entered promiscuous mode [ 1279.212742][T18283] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20002 [ 1279.272919][T17826] veth0_macvtap: entered promiscuous mode [ 1279.283171][T18290] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12157'. [ 1279.303302][T18291] netlink: 'syz.3.12156': attribute type 1 has an invalid length. [ 1279.307851][T17826] veth1_macvtap: entered promiscuous mode [ 1279.494915][T18291] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1279.673021][T18295] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1279.685886][T18295] bond8 (unregistering): Released all slaves [ 1279.858090][T17826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.914017][T17826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.950988][T17843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.980580][T17843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.007252][T17843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.026830][T17843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.072934][T18321] netlink: 'syz.3.12163': attribute type 8 has an invalid length. [ 1280.144383][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1280.215620][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1280.251829][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1280.329757][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1280.407967][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1280.424934][ T9244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.452229][ T9244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.488948][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1280.527100][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1280.543005][ T9244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.552288][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1280.566534][ T9244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.580535][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1280.622941][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1281.044825][T18359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1281.148791][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1281.172170][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1281.184259][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1281.204741][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1281.212574][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1281.864105][ T6914] syz_tun (unregistering): left allmulticast mode [ 1282.002498][T17834] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.046428][T17834] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.070084][T18362] vxcan1 speed is unknown, defaulting to 1000 [ 1282.079101][T17834] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.100049][T17834] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.227588][T18410] sctp: [Deprecated]: syz.0.12186 (pid 18410) Use of int in maxseg socket option. [ 1282.227588][T18410] Use struct sctp_assoc_value instead [ 1282.232655][T18408] syzkaller0: entered promiscuous mode [ 1282.260897][T18408] syzkaller0: entered allmulticast mode [ 1282.494576][T18422] netlink: 'syz.4.12191': attribute type 14 has an invalid length. [ 1282.522741][T18428] netlink: Conntrack attr has 3 unknown bytes [ 1282.674045][T18362] »»»»»» speed is unknown, defaulting to 1000 [ 1282.764295][T18362] lo speed is unknown, defaulting to 1000 [ 1282.968091][T18438] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1283.237589][ T5634] Bluetooth: hci5: command tx timeout [ 1283.243521][T18455] netlink: 'syz.4.12200': attribute type 14 has an invalid length. [ 1283.243540][T18455] netlink: 'syz.4.12200': attribute type 13 has an invalid length. [ 1283.355868][T18452] syzkaller0: entered promiscuous mode [ 1283.362647][T18452] syzkaller0: entered allmulticast mode [ 1285.315693][ T5634] Bluetooth: hci5: command tx timeout [ 1286.104834][T18503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1286.112156][T18503] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.119456][T18503] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.132676][T18498] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 1286.151806][T18501] netlink: 'syz.4.12206': attribute type 1 has an invalid length. [ 1286.153182][T18503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1286.161797][T18498] bond2 (unregistering): Released all slaves [ 1286.413926][T18362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.421822][T18362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.431303][T18362] bridge_slave_0: entered allmulticast mode [ 1286.446594][T18362] bridge_slave_0: entered promiscuous mode [ 1286.456006][T18362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.463335][T18362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.471454][T18362] bridge_slave_1: entered allmulticast mode [ 1286.480436][T18362] bridge_slave_1: entered promiscuous mode [ 1286.548501][T18362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.566949][T18362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.616812][T18518] __nla_validate_parse: 101 callbacks suppressed [ 1286.616832][T18518] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12213'. [ 1286.623543][T18362] team0: Port device team_slave_0 added [ 1286.628157][T18362] team0: Port device team_slave_1 added [ 1286.698711][T18362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.706552][T18362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.753411][T18362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.771285][T18487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.790254][T18362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.804584][T18362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.834578][T18362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.849027][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1286.883294][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1286.941469][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1287.008330][T18532] bond1 (unregistering): Released all slaves [ 1287.051675][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1287.070404][T18362] hsr_slave_0: entered promiscuous mode [ 1287.082302][T18543] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.12219'. [ 1287.085712][T18362] hsr_slave_1: entered promiscuous mode [ 1287.107277][T18362] debugfs: 'hsr0' already exists in 'hsr' [ 1287.113059][T18362] Cannot create hsr debugfs directory [ 1287.120247][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1287.180051][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1287.254525][T18532] bond1 (unregistering): Released all slaves [ 1287.396201][ T5634] Bluetooth: hci5: command tx timeout [ 1287.448145][T18532] bond1 (unregistering): Released all slaves [ 1287.458814][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12222'. [ 1287.496901][T18528] validate_nla: 6 callbacks suppressed [ 1287.496916][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1287.522495][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1287.545818][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1287.597628][T18528] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1287.697436][T18532] bond1 (unregistering): Released all slaves [ 1288.022288][T18582] bond2: option all_slaves_active: invalid value (222) [ 1288.044952][T18582] bond2 (unregistering): Released all slaves [ 1288.113028][T18575] macvlan0: entered promiscuous mode [ 1288.122679][T18575] team0: entered promiscuous mode [ 1288.128536][T18575] team_slave_0: entered promiscuous mode [ 1288.134639][T18575] team_slave_1: entered promiscuous mode [ 1288.146399][T18575] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1288.204621][T18603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12230'. [ 1288.258005][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12231'. [ 1288.264905][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12230'. [ 1288.334414][T18362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1288.360105][T18362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.494849][T18362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1288.520301][T18362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.581854][T18362] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1288.594314][T18362] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.475205][ T5634] Bluetooth: hci5: command tx timeout [ 1291.086288][T18608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1291.121816][T18362] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1291.162460][ T2113] block nbd9: Possible stuck request ffff888027930000: control (read@0,1024B). Runtime 300 seconds [ 1291.173733][ T2113] block nbd9: Possible stuck request ffff8880279301c0: control (read@1024,1024B). Runtime 300 seconds [ 1291.189583][ T2113] block nbd9: Possible stuck request ffff888027930380: control (read@2048,1024B). Runtime 300 seconds [ 1291.201009][ T2113] block nbd9: Possible stuck request ffff888027930540: control (read@3072,1024B). Runtime 300 seconds [ 1291.250429][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1291.258631][T18362] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1291.289873][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1291.305979][T18362] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1291.333948][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1291.345592][T18362] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1291.381955][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1291.398788][T18643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12238'. [ 1291.401661][T18641] netem: change failed [ 1291.643245][T18362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.652794][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12240'. [ 1291.686596][T18659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12240'. [ 1291.702542][T18362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.722559][T11990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.729763][T11990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.771039][T17834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.778221][T17834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.786717][T18674] ip6t_srh: unknown srh invflags 4000 [ 1291.978098][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12245'. [ 1292.082607][T18694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12249'. [ 1292.736352][T18731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12257'. [ 1293.002138][T18362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.232450][T18362] veth0_vlan: entered promiscuous mode [ 1293.286258][T18362] veth1_vlan: entered promiscuous mode [ 1293.374464][T18763] : entered promiscuous mode [ 1293.462368][T18362] veth0_macvtap: entered promiscuous mode [ 1293.537593][T18362] veth1_macvtap: entered promiscuous mode [ 1293.547025][T18779] openvswitch: netlink: IPv4 tun info is not correct [ 1293.627350][T18362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.731796][T18362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.786810][T11988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.806086][T11988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.840190][T11988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.865799][T11988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.061000][T18808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12275'. [ 1294.077957][T18806] netlink: 'syz.4.12272': attribute type 1 has an invalid length. [ 1294.177357][T18811] netlink: 'syz.1.12277': attribute type 13 has an invalid length. [ 1294.187138][T18811] netlink: 'syz.1.12277': attribute type 58 has an invalid length. [ 1294.199244][T18811] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1294.291878][T18817] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 1294.532574][T18831] netlink: 'syz.4.12281': attribute type 1 has an invalid length. [ 1294.553694][T18831] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.12281'. [ 1294.563729][T17834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.581239][T17834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.610825][T18825] netlink: 'syz.1.12280': attribute type 7 has an invalid length. [ 1294.680467][T17839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.692800][T17839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.059167][T18855] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.12287'. [ 1295.082379][T18855] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1295.111253][T18857] syzkaller0: entered promiscuous mode [ 1295.125540][T18857] syzkaller0: entered allmulticast mode [ 1295.154601][T18857] 0: reclassify loop, rule prio 0, protocol 800 [ 1295.162022][T18859] 0: reclassify loop, rule prio 0, protocol 800 [ 1295.292520][T18873] Cannot find del_set index 4 as target [ 1295.339518][T18873] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12291'. [ 1295.352704][T18870] can: request_module (can-proto-0) failed. [ 1295.711436][T18890] bond1: entered promiscuous mode [ 1295.718275][T18890] bond1: entered allmulticast mode [ 1295.723861][T18890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1295.782630][T18900] netlink: 'syz.1.12295': attribute type 1 has an invalid length. [ 1295.866238][T18906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.201226][T18928] netlink: 'syz.4.12308': attribute type 1 has an invalid length. [ 1296.989061][T18983] netlink: 'syz.3.12321': attribute type 1 has an invalid length. [ 1297.070231][T18987] __nla_validate_parse: 11 callbacks suppressed [ 1297.070251][T18987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12321'. [ 1297.187102][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12321'. [ 1297.236222][T18989] pim6reg527: entered allmulticast mode [ 1297.368007][T18997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12324'. [ 1297.419993][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12326'. [ 1297.430613][T19000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12326'. [ 1297.442464][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12326'. [ 1297.449553][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12325'. [ 1297.456207][T19000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12326'. [ 1298.051403][T19045] netlink: 'syz.2.12339': attribute type 1 has an invalid length. [ 1298.288870][T19050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12341'. [ 1298.387941][T19005] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1298.581422][T19060] syzkaller0: entered promiscuous mode [ 1298.596983][T19060] syzkaller0: entered allmulticast mode [ 1298.653871][ T30] audit: type=1804 audit(1779814642.645:32): pid=19053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12342" name="/newroot/496/cgroup.controllers" dev="tmpfs" ino=2546 res=1 errno=0 [ 1298.731411][ T30] audit: type=1800 audit(1779814642.645:33): pid=19053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12342" name="cgroup.controllers" dev="tmpfs" ino=2546 res=0 errno=0 [ 1300.120921][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.293672][T19083] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1301.460282][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12353'. [ 1301.505668][T19100] bridge0: port 3(batadv1) entered blocking state [ 1301.518160][T19100] bridge0: port 3(batadv1) entered disabled state [ 1301.547341][T19100] batadv1: entered allmulticast mode [ 1301.570271][T19100] batadv1: entered promiscuous mode [ 1301.611761][T19110] sctp: [Deprecated]: syz.0.12357 (pid 19110) Use of int in max_burst socket option. [ 1301.611761][T19110] Use struct sctp_assoc_value instead [ 1301.742661][T19116] netlink: 'syz.4.12358': attribute type 1 has an invalid length. [ 1301.944310][T19133] xt_NFQUEUE: number of total queues is 0 [ 1301.958165][T19134] netlink: 'syz.0.12363': attribute type 1 has an invalid length. [ 1301.995649][T17834] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1302.004905][T17834] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1302.076163][T19140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.090254][T19140] __nla_validate_parse: 3 callbacks suppressed [ 1302.090271][T19140] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12366'. [ 1302.270799][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12369'. [ 1302.418807][T19160] netlink: 'syz.4.12374': attribute type 4 has an invalid length. [ 1302.430381][T19163] netlink: zone id is out of range [ 1302.436546][T19163] netlink: del zone limit has 4 unknown bytes [ 1302.558366][ T6443] batman_adv: batadv1: IGMP Querier appeared [ 1302.564443][ T6443] batman_adv: batadv1: MLD Querier appeared [ 1302.668599][T19174] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12378'. [ 1302.734605][T19178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12380'. [ 1302.866741][T19189] x_tables: duplicate underflow at hook 3 [ 1302.962917][T19196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.578739][T19236] netlink: 'syz.0.12397': attribute type 10 has an invalid length. [ 1303.699937][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12401'. [ 1304.162192][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12404'. [ 1304.339428][T19265] syzkaller0: entered promiscuous mode [ 1304.362005][T19265] syzkaller0: entered allmulticast mode [ 1304.514328][T19286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12408'. [ 1304.711290][T19293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12410'. [ 1304.816398][T19299] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12410'. [ 1305.482519][T19315] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12417'. [ 1308.001693][T19293] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1308.175762][T19322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12419'. [ 1308.234157][T19322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12419'. [ 1308.258879][T19324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12419'. [ 1308.279373][T19324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12419'. [ 1308.483805][T19348] bridge45: entered allmulticast mode [ 1308.507819][T19344] ipt_rpfilter: unknown options [ 1308.537742][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12428'. [ 1308.727547][T19362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12431'. [ 1308.755178][T19362] netlink: 'syz.0.12431': attribute type 7 has an invalid length. [ 1308.773265][T19362] netlink: 'syz.0.12431': attribute type 8 has an invalid length. [ 1308.792392][T19362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12431'. [ 1308.840604][T19362] batadv0: entered promiscuous mode [ 1308.860016][T19362] batadv0: left promiscuous mode [ 1308.968329][T19339] netlink: 'syz.4.12425': attribute type 16 has an invalid length. [ 1308.976619][T19339] netlink: 'syz.4.12425': attribute type 17 has an invalid length. [ 1309.009005][T19339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.054209][T19339] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1309.113008][T19382] netlink: 'syz.0.12435': attribute type 1 has an invalid length. [ 1309.232700][T19382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1309.277516][T19392] bond2: (slave veth0_to_bond): making interface the new active one [ 1309.289361][T19392] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1309.641009][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1309.808707][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12443'. [ 1310.566255][T19458] netlink: 'syz.1.12452': attribute type 1 has an invalid length. [ 1310.566789][T19462] netlink: 'syz.3.12454': attribute type 33 has an invalid length. [ 1310.612856][T19464] netlink: 'syz.3.12454': attribute type 33 has an invalid length. [ 1310.770295][T19462] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1310.845713][T19462] bond8 (unregistering): Released all slaves [ 1311.007114][T19464] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1311.033231][T19464] bond8 (unregistering): Released all slaves [ 1311.265383][T19496] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.12461'. [ 1311.479998][T19507] erspan0: entered promiscuous mode [ 1311.722581][T19516] bond1: entered promiscuous mode [ 1311.753886][T19516] bond1: entered allmulticast mode [ 1311.771524][T19516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1311.910730][T19516] netlink: 'syz.2.12468': attribute type 4 has an invalid length. [ 1311.924374][T19539] vlan3: entered allmulticast mode [ 1311.934862][T19539] bond0: entered allmulticast mode [ 1311.943826][T19539] bond_slave_0: entered allmulticast mode [ 1311.950422][T19539] bond_slave_1: entered allmulticast mode [ 1312.146281][T17843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.161533][T17843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.534874][T19575] netlink: 'syz.3.12484': attribute type 1 has an invalid length. [ 1312.623489][T19575] bond8: entered promiscuous mode [ 1312.635797][T19575] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1312.782043][T19590] syzkaller1: entered promiscuous mode [ 1312.788256][T19590] syzkaller1: entered allmulticast mode [ 1313.044681][T19598] syzkaller0: entered promiscuous mode [ 1313.053215][T19598] syzkaller0: entered allmulticast mode [ 1313.093542][T19601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1313.338184][ T30] audit: type=1800 audit(1779814657.335:34): pid=19621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12497" name="memory.events" dev="tmpfs" ino=3045 res=0 errno=0 [ 1313.401160][ T30] audit: type=1804 audit(1779814657.355:35): pid=19621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.12497" name="/newroot/595/memory.events" dev="tmpfs" ino=3045 res=1 errno=0 [ 1313.535298][T19631] __nla_validate_parse: 5 callbacks suppressed [ 1313.535316][T19631] netlink: 2 bytes leftover after parsing attributes in process `syz.4.12502'. [ 1314.016622][T19660] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1314.068025][T19661] sctp: [Deprecated]: syz.4.12511 (pid 19661) Use of int in max_burst socket option deprecated. [ 1314.068025][T19661] Use struct sctp_assoc_value instead [ 1314.097309][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12513'. [ 1314.109314][T19660] sctp: [Deprecated]: syz.4.12511 (pid 19660) Use of int in max_burst socket option deprecated. [ 1314.109314][T19660] Use struct sctp_assoc_value instead [ 1314.117687][T19667] mac80211_hwsim hwsim128 wlan0: entered promiscuous mode [ 1314.324449][T19677] Cannot find del_set index 0 as target [ 1314.521998][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12520'. [ 1314.557352][T19691] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12520'. [ 1314.594935][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12520'. [ 1314.839029][T13686] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1314.858831][T13686] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1314.868621][T13686] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1314.884863][T13686] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1314.895385][T13686] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1315.411672][T19742] validate_nla: 2 callbacks suppressed [ 1315.411692][T19742] netlink: 'syz.1.12531': attribute type 1 has an invalid length. [ 1315.478194][ T31] INFO: task udevd:7757 blocked in I/O wait for more than 143 seconds. [ 1315.497539][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1315.518411][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1315.528135][ T31] task:udevd state:D stack:22424 pid:7757 tgid:7757 ppid:4992 task_flags:0x400140 flags:0x00080002 [ 1315.543775][ T31] Call Trace: [ 1315.560946][ T31] [ 1315.596664][ T31] __schedule+0x1821/0x5740 [ 1315.606060][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1315.633609][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1315.651192][ T31] ? __pfx___schedule+0x10/0x10 [ 1315.656313][ T31] ? schedule+0x90/0x360 [ 1315.660664][ T31] schedule+0x164/0x360 [ 1315.664862][ T31] io_schedule+0x7f/0xd0 [ 1315.669769][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1315.675168][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 1315.680238][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1315.687360][ T31] ? filemap_read_folio+0x23e/0x3b0 [ 1315.692616][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1315.709429][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1315.719847][ T31] do_read_cache_folio+0x1ad/0x590 [ 1315.737204][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1315.746190][ T31] read_part_sector+0xb6/0x2b0 [ 1315.752605][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1315.758465][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1315.764845][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1315.770786][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1315.777000][ T31] bdev_disk_changed+0x817/0x1770 [ 1315.782098][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1315.789124][ T31] blkdev_get_whole+0x380/0x510 [ 1315.794101][ T31] bdev_open+0x31e/0xd30 [ 1315.801063][ T31] blkdev_open+0x470/0x610 [ 1315.805898][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1315.811950][ T31] do_dentry_open+0x785/0x14e0 [ 1315.817241][ T31] vfs_open+0x3b/0x340 [ 1315.821396][ T31] ? path_openat+0x2df0/0x3860 [ 1315.826537][ T31] path_openat+0x2e08/0x3860 [ 1315.831179][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1315.836733][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1315.842298][ T31] ? __pfx_path_openat+0x10/0x10 [ 1315.847909][ T31] ? __x64_sys_openat+0x138/0x170 [ 1315.853004][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1315.859201][ T31] do_file_open+0x23e/0x4a0 [ 1315.863781][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1315.870145][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1315.877510][ T31] ? alloc_fd+0x64b/0x6c0 [ 1315.881912][ T31] do_sys_openat2+0x113/0x200 [ 1315.887010][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1315.894395][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1315.899845][ T31] ? rcu_is_watching+0x15/0xb0 [ 1315.904654][ T31] __x64_sys_openat+0x138/0x170 [ 1315.910331][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.917525][ T31] do_syscall_64+0x15f/0xf80 [ 1315.922153][ T31] ? clear_bhb_loop+0x40/0x90 [ 1315.928867][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.935492][ T31] RIP: 0033:0x7fd81b6a7407 [ 1315.940298][ T31] RSP: 002b:00007ffc4c02ac40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1315.949131][ T31] RAX: ffffffffffffffda RBX: 00007fd81bdf8880 RCX: 00007fd81b6a7407 [ 1315.960765][ T31] RDX: 00000000000a0800 RSI: 000055a93f6210f0 RDI: ffffffffffffff9c [ 1315.969935][ T31] RBP: 000055a93f609910 R08: 0000000000000000 R09: 0000000000000000 [ 1315.978305][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a93f609500 [ 1315.986703][ T31] R13: 000055a93f617190 R14: 0000000000000000 R15: 000055a93f609500 [ 1315.996745][ T31] [ 1315.999940][ T31] [ 1315.999940][ T31] Showing all locks held in the system: [ 1316.015663][ T31] 1 lock held by khungtaskd/31: [ 1316.020585][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1316.033640][ T31] 2 locks held by klogd/4981: [ 1316.040401][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1316.053218][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1316.062603][ T31] 2 locks held by getty/5379: [ 1316.067867][ T31] #0: ffff8880370090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1316.078659][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1316.090722][ T31] 3 locks held by kworker/1:6/5820: [ 1316.097609][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1316.109025][ T31] #1: ffffc900047afc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1316.120444][ T31] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1316.133936][ T31] 3 locks held by kworker/u8:42/17843: [ 1316.140719][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1316.155254][ T31] #1: ffffc900045a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1316.166352][ T31] #2: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1316.176151][ T31] 1 lock held by udevd/7757: [ 1316.180774][ T31] #0: ffff8880278e2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1316.190929][ T31] 2 locks held by syz-executor/8755: [ 1316.197610][ T31] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1316.208182][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1316.219943][ T31] 1 lock held by syz-executor/19711: [ 1316.225335][ T31] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1316.238946][ T31] 2 locks held by syz.1.12531/19742: [ 1316.244257][ T31] #0: ffffffff90310e80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1316.253985][ T31] #1: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1316.264388][ T31] 1 lock held by syz.1.12531/19743: [ 1316.269910][ T31] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_add_ifaddr+0x14d/0x3e0 [ 1316.280033][ T31] 2 locks held by syz.1.12531/19745: [ 1316.286103][ T31] #0: ffffffff9032c8a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1316.296531][ T31] #1: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1316.307084][ T31] 1 lock held by syz.4.12532/19747: [ 1316.312320][ T31] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1316.322206][ T31] 1 lock held by dhcpcd/19752: [ 1316.327381][ T31] #0: ffff888077474440 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1316.337954][ T31] 1 lock held by dhcpcd/19753: [ 1316.342740][ T31] #0: ffff88806105a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1316.367328][ T31] [ 1316.369738][ T31] ============================================= [ 1316.369738][ T31] [ 1316.399688][ T31] NMI backtrace for cpu 0 [ 1316.399704][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1316.399725][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1316.399737][ T31] Call Trace: [ 1316.399744][ T31] [ 1316.399750][ T31] dump_stack_lvl+0xe8/0x150 [ 1316.399777][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1316.399863][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1316.399894][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1316.399920][ T31] sys_info+0x135/0x170 [ 1316.399939][ T31] watchdog+0xfd3/0x1030 [ 1316.399977][ T31] ? watchdog+0x1c9/0x1030 [ 1316.400008][ T31] kthread+0x389/0x470 [ 1316.400030][ T31] ? __pfx_watchdog+0x10/0x10 [ 1316.400053][ T31] ? __pfx_kthread+0x10/0x10 [ 1316.400076][ T31] ret_from_fork+0x514/0xb70 [ 1316.400112][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.400131][ T31] ? __switch_to+0xc79/0x1410 [ 1316.400156][ T31] ? __pfx_kthread+0x10/0x10 [ 1316.400178][ T31] ret_from_fork_asm+0x1a/0x30 [ 1316.400211][ T31] [ 1316.400219][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1316.515629][ C1] NMI backtrace for cpu 1 [ 1316.515646][ C1] CPU: 1 UID: 0 PID: 5729 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1316.515672][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1316.515684][ C1] Workqueue: events drain_vmap_area_work [ 1316.515714][ C1] RIP: 0010:unwind_next_frame+0x484/0x2550 [ 1316.515757][ C1] Code: d2 84 c0 48 0f 45 d1 48 89 15 c8 fb c8 11 48 85 d2 0f 84 3b 02 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 c2 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 1316.515772][ C1] RSP: 0018:ffffc90000a08738 EFLAGS: 00000806 [ 1316.515785][ C1] RAX: 0000000000000000 RBX: ffffffff90b908d4 RCX: ffffffff90b908dc [ 1316.515798][ C1] RDX: ffffffff916cae84 RSI: ffffffff916cae6c RDI: ffffffff8c28b600 [ 1316.515811][ C1] RBP: dffffc0000000000 R08: 000000000000000e R09: ffffffff8e95cca0 [ 1316.515823][ C1] R10: ffffc90000a08858 R11: ffffffff81b0f020 R12: ffffffff916cae88 [ 1316.515835][ C1] R13: ffffffff916cae89 R14: ffffc90000a08808 R15: ffffffff90b908d8 [ 1316.515848][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 1316.515863][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1316.515874][ C1] CR2: 000055c2b35b5168 CR3: 00000000358f0000 CR4: 00000000003526f0 [ 1316.515889][ C1] Call Trace: [ 1316.515896][ C1] [ 1316.515906][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1316.515927][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1316.515952][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1316.515977][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1316.516002][ C1] arch_stack_walk+0x11b/0x150 [ 1316.516025][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1316.516051][ C1] stack_trace_save+0xa9/0x100 [ 1316.516075][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1316.516104][ C1] kasan_save_stack+0x3e/0x60 [ 1316.516125][ C1] ? kasan_save_stack+0x3e/0x60 [ 1316.516145][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1316.516163][ C1] ? insert_work+0x3d/0x330 [ 1316.516177][ C1] ? __queue_work+0xcef/0x1040 [ 1316.516195][ C1] ? call_timer_fn+0x192/0x5e0 [ 1316.516213][ C1] ? __run_timer_base+0x67e/0x8b0 [ 1316.516228][ C1] ? run_timer_softirq+0xb7/0x170 [ 1316.516244][ C1] ? handle_softirqs+0x22a/0x840 [ 1316.516260][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1316.516276][ C1] ? irq_exit_rcu+0x9/0x30 [ 1316.516290][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1316.516336][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1316.516354][ C1] insert_work+0x3d/0x330 [ 1316.516371][ C1] __queue_work+0xcef/0x1040 [ 1316.516391][ C1] ? __queue_work+0x1ae/0x1040 [ 1316.516411][ C1] call_timer_fn+0x192/0x5e0 [ 1316.516429][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1316.516447][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1316.516468][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1316.516491][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1316.516515][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1316.516534][ C1] __run_timer_base+0x67e/0x8b0 [ 1316.516551][ C1] ? ktime_get+0x45/0x220 [ 1316.516580][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1316.516605][ C1] run_timer_softirq+0xb7/0x170 [ 1316.516622][ C1] handle_softirqs+0x22a/0x840 [ 1316.516640][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1316.516660][ C1] __irq_exit_rcu+0xca/0x220 [ 1316.516684][ C1] irq_exit_rcu+0x9/0x30 [ 1316.516698][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1316.516722][ C1] [ 1316.516728][ C1] [ 1316.516734][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1316.516752][ C1] RIP: 0010:smp_call_function_many_cond+0xfcf/0x13d0 [ 1316.516770][ C1] Code: 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 7a 06 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 25 02 0c 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 0a 02 0c [ 1316.516784][ C1] RSP: 0018:ffffc9000418f8a0 EFLAGS: 00000293 [ 1316.516797][ C1] RAX: ffffffff81b9c2b6 RBX: ffff8880b873c148 RCX: ffff8880268f0000 [ 1316.516810][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1316.516820][ C1] RBP: ffffc9000418f9d8 R08: ffffffff9030d4f7 R09: 1ffffffff2061a9e [ 1316.516832][ C1] R10: dffffc0000000000 R11: fffffbfff2061a9f R12: 1ffff110170c8589 [ 1316.516845][ C1] R13: dffffc0000000000 R14: ffff8880b8642c48 R15: 0000000000000000 [ 1316.516861][ C1] ? smp_call_function_many_cond+0xfe6/0x13d0 [ 1316.516885][ C1] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 1316.516913][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1316.516935][ C1] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 1316.516959][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1316.516976][ C1] flush_tlb_kernel_range+0x44f/0x460 [ 1316.517003][ C1] __purge_vmap_area_lazy+0x4a3/0xb40 [ 1316.517029][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1316.517047][ C1] drain_vmap_area_work+0x27/0x40 [ 1316.517070][ C1] process_scheduled_works+0xb5d/0x1860 [ 1316.517102][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1316.517123][ C1] ? assign_work+0x3d5/0x5e0 [ 1316.517142][ C1] worker_thread+0xa53/0xfc0 [ 1316.517172][ C1] kthread+0x389/0x470 [ 1316.517193][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1316.517209][ C1] ? __pfx_kthread+0x10/0x10 [ 1316.517230][ C1] ret_from_fork+0x514/0xb70 [ 1316.517249][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.517266][ C1] ? __switch_to+0xc79/0x1410 [ 1316.517291][ C1] ? __pfx_kthread+0x10/0x10 [ 1316.517312][ C1] ret_from_fork_asm+0x1a/0x30 [ 1316.517340][ C1] [ 1316.923865][ T5634] Bluetooth: hci3: command tx timeout [ 1316.939000][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1317.061461][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1317.070559][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1317.080602][ T31] Call Trace: [ 1317.083872][ T31] [ 1317.086789][ T31] vpanic+0x56c/0xa60 [ 1317.090765][ T31] ? __pfx___schedule+0x10/0x10 [ 1317.095610][ T31] ? __pfx_vpanic+0x10/0x10 [ 1317.100133][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1317.106281][ T31] panic+0xc5/0xd0 [ 1317.109992][ T31] ? __pfx_panic+0x10/0x10 [ 1317.114398][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1317.119767][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1317.125919][ T31] watchdog+0x102c/0x1030 [ 1317.130250][ T31] ? watchdog+0x1c9/0x1030 [ 1317.134663][ T31] kthread+0x389/0x470 [ 1317.138722][ T31] ? __pfx_watchdog+0x10/0x10 [ 1317.143392][ T31] ? __pfx_kthread+0x10/0x10 [ 1317.147975][ T31] ret_from_fork+0x514/0xb70 [ 1317.152558][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1317.157654][ T31] ? __switch_to+0xc79/0x1410 [ 1317.162323][ T31] ? __pfx_kthread+0x10/0x10 [ 1317.166905][ T31] ret_from_fork_asm+0x1a/0x30 [ 1317.171670][ T31] [ 1317.175193][ T31] Kernel Offset: disabled [ 1317.179504][ T31] Rebooting in 86400 seconds..