last executing test programs: 1.770277613s ago: executing program 2 (id=2498): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r1 = socket$kcm(0x23, 0x5, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="020029bd7000fddbdf25070000000600030056020000080011000100000006001d00010400002fff2000ff010000000000000000000000000001050006000c000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (rerun: 64) listen(r1, 0x800) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) r6 = socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x6, &(0x7f0000000000)=0x2, 0x4) (async) getsockopt$inet_tcp_int(r8, 0x6, 0x6, 0x0, &(0x7f0000000080)) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) (async, rerun: 32) r9 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1.361045834s ago: executing program 2 (id=2507): ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffffd, 0x1, 0xfffffff7, 0x1}) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300, 0x0, 0x0, 0x40845}, 0x0) 1.235335884s ago: executing program 2 (id=2509): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095000000000000000401a1aa2be96bb7a940267fb0e31a4fed479be0fd210d7c71e6c736494cd84d69020c373cd41a5d74601b62fc0c54b654dc32376badea6bf174"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010109}, 0x48) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r5, &(0x7f0000000180)={0x27}, 0x6) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x5, 0xfff, 0x8}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) bind$bt_hci(r8, &(0x7f0000000180)={0x1f, 0x1, 0x3}, 0x6) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r10 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0xfcf6, &(0x7f0000000100)=0x2000000000009) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0xffffff88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) 1.234590307s ago: executing program 0 (id=2510): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$rxrpc(0x21, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1.071609604s ago: executing program 1 (id=2513): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r1, 0x16, 0x0, 0x8a, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=r1, r1, 0x13, 0x17, r1, @void, @value=r1, @void, @void, r3}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 998.762297ms ago: executing program 0 (id=2514): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=@delchain={0x3728, 0x65, 0x205, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0x5, 0x2}, {0x2, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xae0, 0x2, [@TCA_MATCHALL_ACT={0x568, 0x2, [@m_ife={0xcc, 0x4, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x8d, 0x7, 0xe1e, 0x8000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x355, 0x8, 0x80000001, 0x5}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffff0000, 0x0, 0x6, 0x1, 0xfffffff9}, 0x1}}]}, {0x3b, 0x6, "44c89daca6a7c524124c10091902ff5118b95ba9131dd631857a6a4e34d37cc99f38f39812ee71814bde295d673872be98884674a843a0"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xe4, 0x12, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12bd}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1903, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x0, 0x4, 0x10001}}]}, {0x87, 0x6, "047eb7381c52e352cf4f3f5e851524bff14f2215767812f649456e2d83b8a1288c93f20fc2844cb730486917c757ec415c28333413f6864828d8f52a17f42a969a2dbc5ea9fc4cb332325a1d139397f1c31baef8a6f5d8148f21c08ea536a9e0ed7f638a22ef266af4f4e02203e6198f02ba80c28cd41acffd5260b0639e10e540c51c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0xac, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="1c2d1135b672"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4628bff7, 0x20000010, 0x6, 0x6}, 0x1}}]}, {0x59, 0x6, "447d466f82a9531ed75760edc5074570c8b72ec2a1ae5116319397d8a0caa9aca3ccc1893dfd0551fc9ba7c0b7abd8d1871ec15117d44216789f730d60add4965fb03e397ef2555317f85aeeab0acfc1ab5cc6f36c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x170, 0xb, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffff, 0x10, 0x1, 0x1, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x200, 0x20000000, 0xfffffffc, 0x3}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8001, 0x7, 0x8, 0x7, 0x9}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0xf3, 0x6, "853cd3befdb26a47e5d2197c35f3cb3d85e68216a39668767cb2681a354ffe77a4c868d21f6f9c060987641690b1138749ed324fda353addb402c6bae15bab0605015765a049e58f7e8de71178e6453805449289ef2e39314812c19f6e8016a9eca6430bbf274091617a28803c60facaa7b30a1daaae2e8ab9dedd3015ef5eb31869c15ab001c94958dca329de59ec783d9b752c388e3b1ca79e731fc7b108aee35957c59cdf7f26b9741e3bbafcc922617d9842b4800a747b1133603fd04587e9c51365036953e15637efee733a6aabb24696882e5f0d1e0c67c87931a7918f9c6041b0f49c3bca32da609aa1842f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x70, 0x6, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0x29, 0x6, "6d49da036b8d318ef712510313abfcaf050459623468824503cce50dcca88092dd4c9390ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x128, 0xc, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0xffff, 0x2, 0x3, 0x1}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7a3, 0x10001, 0x5, 0x1ff, 0x4}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8c44, 0xfffffffe, 0xffffffffffffffff, 0x9, 0x9}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9a05, 0x7, 0x20000000, 0xa6, 0x8}, 0x2a}}]}, {0x8a, 0x6, "9f314ed78612c6b768f4e346f3d652d35a8215d7e1f8b57f819ed4eb8c961f3afa3f7c7db7cacbd14eb67ef2e2821e808e56ffa6072b86e288a3341ffc454666c8dffd390198670343f91647db1c144e62398188b12c6ebf456e1a2a118268a553cfb4bcbf09b722d6ccc97d7d5c8267ef312ece0a09dc4ea966b682ab90f3c0ac6743d14c84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x564, 0x2, [@m_skbedit={0x50, 0x19, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x184, 0x9, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x5, 0x6, 0xdc7, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x0, 0x75, 0x6, 0x5}, {0x1, 0x7, 0x9, 0x656}, {0xfc1e, 0x9, 0x7, 0x6}, {0x0, 0x5c, 0x5, 0x81}, {0x5000, 0x8, 0x2, 0xae0c}, {0x5, 0x80, 0x1, 0x7}, {0x200, 0xa, 0x2, 0x6}, {0x8000, 0x5, 0x6, 0xffffffff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10, 0xd, 0x0, 0x1, 0xfffffc00}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0xc4, 0x6, "c386fc97245a4ed6417526f2df818622627f26a971f576db2f48ce9ba3cfd89599be22068b1ffcd9c68124b7b3467aff6bf84ac1c8df74e2f596ee0d90f67e862036353603fde358fa05479530b6f7f26608459bd9f44ecc5563a6cc171dabc6ae492bf178816a17f2716b822305ed7f93c56d053f14622f9011de3753ec291a3c78234a76b9c0ac4d271fd995be6820ea95006a3e1fd282464d4acaf4ba5d6fd8d70187c007bc800adbd110da8d8f34cf0bd671eb40cafaa9e93a36e5ec8360"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x140, 0x17, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf19, 0x5, 0x6, 0xfffffffe, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x800}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000006, 0x80000000, 0x5}}}]}, {0xbe, 0x6, "83dc7920f6432418216255ffe875c44b8993b1cd88234224c5fb6cac5524f7202e6a9f9f0e4796bcbb6fa3b4ee41de324b95498eb226244db859866a4e465b3ac52b1ec9e241545165bb467386859b21603625b6780478a6e380742e91f9c9e7bc141bda1aa7f9408ef26bea8867d75da1183e6f084d2ce573c52f58723ee890e39bc701a26ce799451baf557c09c676fc08b3d90186d027d188880815e34c673261a7a5e027041763e9dc096a6876ed2c198fcb7bb62a4aeb8e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x74, 0x1e, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x36, 0x6, "3b26f377ce78d08b509a9a9ccd97929319753842fdce4415fb28d623a0280bc588ffaa1749eb2298a8f0029a62b5ee9fb58a"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x8c, 0x1c, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x8, 0x7, 0x10000}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x5, 0x6, 0x5}, 0x24}}]}, {0x26, 0x6, "f61422969b9c3a7ef8d2002fda00369795addfc6870dbcd8a71ad2b3f4083a30cb1b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x14c, 0x2, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x101, 0x5, 0x10, 0xfffffffe}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0xc, 0x7, 0x2, 0x9}, 0xd1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x6, 0x4, 0x4, 0x80000000}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xffff, 0x3, 0x7, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x85c, 0x93, 0x8, 0x1ff, 0x2}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2, 0xffffffffffffffff, 0x80, 0x4d}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x228, 0x3, 0x2, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3da6, 0x6, 0x5, 0x0, 0x2}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x20000000, 0x4, 0x8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x163, 0x659, 0x0, 0x9, 0x7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x60}}, @filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x8, 0x7d32}}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x23}, @TCA_U32_INDEV={0x14, 0x8, 'ipvlan0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0xd}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x94, 0x9}}, @filter_kind_options=@f_fw={{0x7}, {0x14f8, 0x2, [@TCA_FW_ACT={0x14f4, 0x4, [@m_nat={0x120, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x23, 0x1, 0x8, 0x1, 0x72b}, @loopback, @rand_addr=0x64010100, 0xff}}]}, {0xd0, 0x6, "53d36c33b314ae9a406f5d31bc13c2612a7ebdc4eced17246e34d07b1433db05a5ec268c44fd3049c9624425da86b4db5d6ddfbd2c53ba16da4e3f824551282e0c1527036b432755d4fc06c049c61d1ba6ece2cfd45a154abcd5656e30481c3404454b03cabd2f7a212b177865468cec81bc0aec9880d2a6257271133d982608960c7731e2f5d1fe75ff3e0642a646e408aa7a4b275a8d576e4c4fdbbe11f71e9bd3f2641937745e5d7cdcc71bc6c4e41c41e90ba5deabc5e59156d5803a72277f2b4826dc9462813702ad9a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xac, 0x1f, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "84a5e11751c32887254ff344095a09f3"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x2e, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "68afe2307290cf1c75e10ee2a5c99601"}]}, {0x3f, 0x6, "48f45532a05db7bce6d2803aa48ebf9173459454eb1b3a8d5653334dd00ce279abb4fe95561e499b881850c72e2b21d76c24a8cceb984220fbacc6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x148, 0x1c, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x20000000, 0x9, 0xffff2481}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000}}]}, {0xf8, 0x6, "7cdfc95c40a5405edbe40a0d79ab81e8e2d7586fc5de81704e9d3ca2412f6d2f66d7384dc5d8467d800e3af0f103b3ef39b5f692187e529b8391dd95df50a105adf3bcce42b7831b13cabde5d8a2f6d55c6f2be69f86737b0021b5df8bc588ee537c66a7f4a7986169635942b4e83535798f1cae886ffb0904cce1cc14eea3e5439bce0d7d565f32ac7959500a096a860e5275f90805f0b12fde20808dc1639e05a28b990195987762e2c6e682a241fdefe41c95f9fa6b4489e25119a95a71c610ea981e791dfb92e7997988bfd72af3c0473eaedec0140e173dceb1a1710e58635e9c9aa4c33d2803a01b2a05018411642abd87"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_vlan={0xc8, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x9a, 0x6, "ebb5dadf01453c9e8c620f77656049b227f56367d16b61bf3b0aa9f98ec717e4498bec00bf0ef63d364cc1af916eefb44b60ef4e66e3f57744c84c088da0b05f7c5f7e05add6733cd47b453d7014c290a0c1be318bf231bf58f7fdee36dc4404d8f7ed390db865fc5dddbfb6d3d9c15169695f04595c14e93da394119672a80ee2a47b1c2c79c712109a03c7c90157ddee509de5e699"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x1114, 0x1e, 0x0, 0x0, {{0xb}, {0x10c8, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x8, 0xa1eb, 0x7395, 0x401, {0x10, 0x1, 0x8001, 0x7, 0x772a, 0x1}, {0x4, 0x0, 0x9, 0xb0, 0xffc0, 0xc4}, 0x3, 0x8, 0x2d}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x6d, 0x54, 0x2, {0x6, 0x2, 0x6, 0x1, 0x7f, 0x287f}, {0x3d, 0x0, 0x5, 0x400, 0x7, 0x9}, 0x8001, 0xffffff4b, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6b1, 0xa61, 0x9, 0x6, 0x7, 0xfe, 0x80000001, 0x1, 0x6, 0x400, 0x7, 0xffffffff, 0x5, 0x5, 0x5, 0xffff8000, 0x4, 0x1, 0x8, 0x80000001, 0x9, 0xec4, 0x8, 0x8bbb, 0x9, 0x0, 0x7ff, 0x10001, 0x0, 0x81, 0x5, 0x2, 0x83a, 0x3, 0x0, 0x8c, 0x80000001, 0x8, 0x6, 0x200, 0x7ff, 0x80000000, 0x8, 0xa4, 0x10, 0x6, 0x3, 0xff, 0x4, 0x1, 0xb, 0x3, 0x5, 0x3, 0x5, 0x7, 0x8, 0x100, 0x1, 0x800, 0x101, 0x6, 0x1, 0x6, 0x9, 0x0, 0xa, 0x7fff, 0x9, 0x1, 0x0, 0x9, 0x3ff, 0x4, 0x2, 0x3ff, 0xb7f59d4, 0x7560, 0x0, 0xfffffffd, 0x2, 0x5, 0x2, 0x1, 0x100, 0x3004, 0xf, 0x3, 0x7fffffff, 0x1, 0x2, 0x8, 0x81, 0x9e3d, 0x76f31532, 0x7f, 0x8, 0x40, 0x2, 0x66, 0x4, 0xfffffff7, 0x1, 0x1, 0x5, 0x8, 0x0, 0x4, 0x0, 0x8, 0x4, 0x8, 0x80, 0x87, 0x3, 0x5, 0x5ddf, 0x2, 0x80000000, 0xffff99fc, 0x0, 0x4, 0x9, 0x1, 0xd, 0xfffffffd, 0x7, 0x2, 0x3, 0x17db, 0x6, 0x9, 0x30000000, 0x8, 0x0, 0x4, 0x7fffffff, 0x20000000, 0x9, 0x5, 0x6, 0x61, 0x5, 0x0, 0x2, 0x5f5, 0x1, 0x734d, 0xb, 0x8, 0x7, 0x9, 0xfffffffe, 0x4, 0x0, 0x400, 0xfffffff9, 0x1, 0xd5f, 0xfffffff0, 0x125, 0x3, 0x40, 0x5, 0x1, 0xac, 0x7, 0x8, 0x8, 0x4, 0xa, 0x8a63, 0x400, 0x9, 0x59, 0x4, 0x5, 0x4, 0x7, 0x0, 0x8000, 0x1695, 0x4, 0x0, 0x0, 0x9312, 0x2, 0x7, 0x8000, 0x6, 0x1, 0x0, 0x3, 0x7f, 0xab6, 0x10, 0xfffffff9, 0x10001, 0xff, 0xf2d, 0xfff, 0xfffffff9, 0x9, 0x8001, 0x778, 0xd622, 0x0, 0x1, 0x800, 0x3ff, 0xf, 0x7f, 0xd7d, 0x2, 0x5, 0x1, 0x7, 0x101, 0x3, 0x3, 0xd9, 0xd, 0x1, 0x4, 0x7fffffff, 0x9, 0x7, 0x5, 0x2, 0x8, 0xee, 0x5, 0xfc000000, 0x70200000, 0x8, 0x100, 0x9, 0x8, 0xe, 0xfffffffc, 0xbca, 0x2d60, 0x2, 0xa, 0x1, 0x0, 0x101, 0x7, 0x6, 0x6, 0x1, 0x5, 0x0, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xae}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x9, 0xfff, 0x0, 0x0, 0xe, 0x4c, 0x6, 0x0, 0x5, 0x1, 0x101, 0x3, 0x2, 0x6c0, 0x9, 0x259, 0x4, 0x8, 0x0, 0x92de, 0x8, 0x3ff, 0xffffffff, 0x101, 0x1, 0x1, 0x52f, 0x9, 0x7, 0x2, 0x4041e5e1, 0x7, 0x56, 0x93, 0xfffffffd, 0x2, 0x5, 0x3ff, 0x1, 0x5, 0x0, 0x200, 0x7ff, 0x7, 0xacb, 0x5, 0x7d2, 0x3bae167e, 0x10, 0x3, 0x8, 0x2, 0x100, 0x6, 0x7ff, 0x7, 0x4, 0x71, 0x7e9, 0x8, 0x7f, 0x9, 0x7, 0x653, 0x6df0, 0xffffffff, 0xfce, 0x2c5, 0x4, 0x0, 0x5, 0xa, 0x6, 0x7, 0x7, 0xb, 0x1, 0x4, 0x9, 0x8, 0x2, 0xfffffff8, 0x401, 0x580, 0xa, 0x3, 0x5, 0x3, 0x2, 0x9, 0x0, 0x62, 0x4, 0x6, 0x9, 0x1ff, 0x0, 0xffffff6f, 0x4, 0x7, 0x7, 0x2, 0x3, 0x7, 0x7fffffff, 0x8, 0x2, 0x7, 0x7, 0xfffffe01, 0x7fffffff, 0x3, 0x24000, 0x0, 0x10001, 0x4, 0x2, 0x8746, 0x9a844301, 0x0, 0x9d, 0x5, 0x7f, 0x8, 0x9, 0x8, 0x8, 0x3, 0x8, 0x3, 0x9, 0x6a80, 0x6a80, 0x7, 0x3, 0x7fffffff, 0x926, 0x800, 0x5, 0x1ff, 0x5, 0x0, 0x8, 0x6, 0x6, 0xf, 0x80, 0x6, 0x9, 0x0, 0x0, 0x5d, 0x8, 0x1, 0xfffffffb, 0xe, 0x6, 0x5, 0x6, 0x7ff, 0x3, 0x40, 0x1, 0x9, 0xfffffffb, 0x1, 0x80000, 0x1, 0x8, 0x9, 0x7fff, 0x8, 0x1, 0xbc1, 0x3, 0x0, 0x9, 0x7, 0x81, 0xad, 0x7, 0x3, 0x5, 0xe, 0x4, 0x3, 0x1957, 0x0, 0x5, 0x6, 0x2, 0x100, 0x3, 0x3, 0x0, 0xe, 0x6, 0x9, 0x5ab77f7d, 0x0, 0xcb, 0x9, 0x7, 0x9, 0x2, 0x80, 0x3, 0xfffffbff, 0x3, 0xb6, 0x9, 0x8, 0xf3c7, 0x2, 0x4, 0x401, 0x8, 0x729b, 0x5, 0x81, 0xff, 0x4, 0x6, 0x4, 0x4, 0x9, 0x0, 0xa, 0x80000000, 0x5, 0x0, 0x3, 0x8, 0x10000, 0x0, 0x6, 0xd, 0xa80a, 0x5, 0x401, 0x1, 0x2, 0x81, 0x40, 0x3, 0x80, 0x9, 0x5, 0x1000, 0x2, 0xd7d, 0x2, 0x5, 0x401, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x7, 0x9, 0xb2, 0x7fffffff, 0x5, 0xffffffdf, 0xffff1d3c, 0x101, 0x7, 0x4560, 0x2, 0x6, 0x6e, 0x2f0, 0x6, 0x8, 0x2, 0x3, 0x9, 0x0, 0x1, 0x7900, 0x2398b0a7, 0xf6, 0x3, 0x2, 0x6778, 0x94d3, 0x6, 0x85dd, 0x8, 0xd, 0x3, 0x3, 0x7, 0x8, 0xbd1, 0x3, 0x7, 0x8, 0x8, 0x6, 0x1, 0x3, 0x9, 0x0, 0x35, 0x1, 0xfffffffa, 0x2, 0x0, 0x1, 0xacd, 0x4, 0x1000, 0xfffffffb, 0xffffffff, 0x0, 0x0, 0x5, 0xd7, 0x6de, 0x3, 0xfffff000, 0x3a3, 0xffff, 0x10001, 0x1, 0x3, 0xfffff3f3, 0x5, 0x7fffffff, 0x8, 0x0, 0x5, 0x80, 0x200, 0x3, 0xffffffff, 0x7ff, 0x7fffffff, 0x4, 0x3, 0x8, 0x4, 0x836, 0x0, 0x9, 0x2, 0x8, 0xb, 0x2e, 0xf7f, 0x81, 0xc, 0x4, 0xb61b, 0xffffffff, 0xfffffff7, 0x2, 0xc, 0x7, 0x4, 0x8, 0x1ff, 0x725, 0xaa5, 0x3, 0x9, 0xffffffff, 0x7b, 0x5, 0x4, 0xfffffffa, 0x7f, 0x4, 0xf233, 0x1, 0x1, 0xa6d3, 0x2, 0x0, 0x7, 0x8, 0x101, 0xfffffff9, 0xfffff000, 0x2, 0xa0, 0x2, 0xd42, 0x8, 0x4, 0x8, 0x8, 0x3ff, 0x7, 0x0, 0x8, 0x0, 0x9, 0x9, 0xe16, 0x4, 0x8, 0x0, 0x7, 0x5, 0x4, 0xc, 0x2, 0x3, 0x9, 0xed25, 0x200, 0x7, 0x10001, 0x80, 0x1, 0x9, 0x4, 0x9, 0x400, 0x9, 0x5de0980a, 0x7ff, 0x0, 0x10000, 0xd16, 0x8, 0x4, 0x3, 0x4, 0xfffffffa, 0xe9e9, 0x4, 0x3, 0xffffffff, 0x3, 0x5, 0x2c97c729, 0x80000000, 0x2, 0x401, 0x0, 0x3, 0x8, 0xe000000, 0x4, 0x5bd5, 0x24, 0xbfb, 0x800, 0x8, 0x0, 0x10, 0x7fffffff, 0x3, 0x5, 0x81, 0x71, 0x9, 0x8, 0xffffffff, 0x9ba, 0xfffffffe, 0xd, 0x4, 0x6, 0x4, 0xe, 0x2, 0x2, 0x0, 0x4, 0x1, 0x7, 0xffff0146, 0x7, 0xfffffff9, 0x9, 0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x0, 0x4, 0x2, 0x501, 0xc, 0x3ff, 0x1, 0x98a, 0xd, 0xd, 0x81, 0x2, 0x2, 0x0, 0x1000, 0x3, 0x34, 0x7, 0x4, 0x0, 0xfff, 0x581cc809, 0x8, 0x7f, 0x9, 0x6, 0x1ff]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x2, 0x5, 0x0, 0x9, 0x81, 0x7, 0x2, 0x6, 0x1afd, 0x3, 0x5, 0x8, 0x1, 0x400, 0xe, 0x41c5, 0x1, 0x8, 0x76a, 0x7, 0x7fffffff, 0xbc5, 0xffffffff, 0x3, 0x7, 0x8000, 0x7, 0x3, 0x0, 0x0, 0x8e7, 0x0, 0xff80000, 0x4, 0x7, 0x3, 0xa, 0x9, 0x3, 0x3ff, 0xffffffff, 0x5, 0x2, 0x4, 0x9, 0x1, 0x2, 0x7fff0, 0x1, 0x0, 0xe7, 0x3ff, 0x7, 0x800, 0xd, 0x7, 0x5, 0x8, 0x5, 0xfffeffff, 0x1b, 0x7, 0x80, 0x1, 0x0, 0x9, 0x8, 0xda, 0x8, 0x8001, 0x4, 0x8, 0x9, 0x6, 0x7fffffff, 0x1, 0x2, 0x2433, 0x6, 0x4, 0x6, 0x8, 0x80000001, 0x4, 0xffffa365, 0x26, 0x3, 0x40, 0x9, 0xc9, 0x7, 0x2, 0x3, 0x1, 0x0, 0x3, 0x81, 0xf, 0x80000001, 0x1ff, 0xfffffffb, 0x9, 0x8, 0x1, 0x3, 0x8, 0xe, 0xe1d7, 0x1c2, 0x80000001, 0xc, 0x2, 0x63b4, 0xa, 0x401, 0x6e, 0x5, 0x0, 0x9, 0x0, 0x6, 0x7fffffff, 0x0, 0x2499, 0x3ff, 0x8, 0x80, 0xd, 0x3550, 0x5, 0x750, 0x9f40f6c, 0x6, 0x8, 0x401, 0x8001, 0x33fe5a42, 0x200, 0x2, 0x7, 0x1, 0x8001, 0x1, 0x7, 0xfffffffb, 0x8000, 0x5, 0x8, 0x1, 0xc, 0x7, 0x7fffffff, 0x2, 0xc, 0x8, 0x6000000, 0xf, 0x240000, 0x80000001, 0x9, 0x9, 0x101, 0x6, 0x10000, 0x9, 0x3d0, 0xa94, 0x4, 0xfffffffa, 0x8000, 0xff, 0x1, 0xe84, 0x0, 0x4000000, 0x300, 0x0, 0x8, 0x80, 0x0, 0x3, 0x1, 0xba0, 0x228, 0x7fff, 0xfffffffb, 0x11a, 0x10, 0x8, 0x4, 0x3, 0xfffffffa, 0x3, 0x4, 0x7, 0x5b, 0x0, 0x7fff, 0xfffffeff, 0xffff7fff, 0xfffffffe, 0x2, 0x3228, 0xfffffffc, 0x1, 0x7fff, 0x3, 0x3a4, 0x9, 0x5, 0x8, 0x8, 0x0, 0x7, 0x2b80, 0xffff, 0x3, 0x6, 0xfffff001, 0x60, 0x3, 0x7, 0x10000, 0x8, 0x0, 0xf47, 0xb66b, 0x2, 0x2, 0x2, 0xc6c5, 0x7, 0x6, 0x4, 0xdc, 0xa, 0xbb7, 0x3, 0xa89b, 0x6, 0xc, 0x3, 0xf61c, 0xfff, 0x58d, 0x5, 0x22b, 0x10001, 0x2, 0x4, 0x6, 0x0, 0x1e0, 0x6, 0x93b]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]]}, {0x23, 0x6, "f4459acc33f11f0183f378871cc33235b90a00870ffc7284efdce1b36cbe89"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x16ac, 0x2, [@TCA_U32_ACT={0x468, 0x7, [@m_vlan={0x148, 0xf, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe20}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x85b}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0xfffffff7, 0x10000000, 0xc, 0xb32f}, 0x3}}]}, {0xce, 0x6, "8eede7acb36b1d026bdaa652b50821d48c861cd57fec9a2faf52e1422d2f030f91061ee1a867fdd6bdbed6419f32a4529ece5e7361ecf1f1a6970222791e285acbd3d1b8bd82c8c5d16127d327f26d37e20dbf741fe5d421a9eed692984c1096e4f3272a9d524a34e02d535aac194902ed3b1b482d3db7a03978aab58ad98240f4a8d3efb89e63cb41d72019dfcee7c72d9c4de1e5f53d019233a13a82e44a74c4f656d3b2a22a853ed164da5d51b4133e876e104458271c6bd56bacedf0fe89cae6aa68c53ed652be74"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x13c, 0x18, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x38, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x4800}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8000}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x1, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1b9}]}, {0xd4, 0x6, "3399cdc14b028c6bed0d0ea950f3ff0eec3bdbd2784b7e18eb2a1b1be6c5b96df42dbed1d9c02de29569795792dabbce35ded67d1b17418cf3e3fe3930fe32f7219cd2466ee3f0cf829aeff5c4108fa525295ec5fee18380fe55631d8afbc656de1441b972f126641218fb120f6ac0c4b20d9982d1521bf8249e3d2333bae4610e7d089a1cf40218d2edd5370f3eddc3bf720ff5c57e5f4a32258c5b6b28f70e525e41fe3f7c044e0820a518dbbb3625bbbd2d49c90c595e824582b780cbc2130b7e3a927268ca16e930037a5b88763e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xf8, 0x2, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '\\%\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xc0000, 0x80000001, 0x0, 0x5, 0x1ff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x1, 0x307a, 0xc6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x5, 0x2, 0x1ff}}, @TCA_DEF_DATA={0xe, 0x3, '(.)#/{#)O\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x2, 0xc94, 0x6}}]}, {0x54, 0x6, "12993d8cd26ca313543dc7eb15936148c283b026e312abbbb613afb7c223c01cd475f489909c071a5c396a93a7a5d049c8ff8028c923991a33a3d2710155eef680453fabe6e849ead4fc046fb2f2e44b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0xe8, 0xc, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb9dbd}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa0d29}]}, {0x93, 0x6, "73fd11be049ec1d45d1943b140280af4d7396b865cb725424ec1c93704d390a3d70ba66277075649542508aaf1b8071aeeaffc31079602fc9a1424d3b3b888c47eedbdefe759e70441a568bb653c3cd2885ff2db0d5f936be6ad5c8546632cfd2d8f74572c4375d9f0ac2e8d092fa8dc6061e44f8e5a56980ea5a236513c8266947b085906dd44e73b338fe0b1021c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_SEL={0x184, 0x5, {0x1, 0x64, 0x6, 0x9, 0xdd4, 0x0, 0x0, 0x9, [{0x2000000, 0x1, 0x5, 0x2}, {0x80000000, 0x7fff, 0x1, 0x2}, {0x3, 0x0, 0x0, 0xb2}, {0x4, 0x729, 0x6, 0xfffffffc}, {0x9, 0x4, 0xfffffff7, 0x1}, {0xd7b, 0x3, 0x6, 0xcc1e}, {0x2, 0x200, 0x2f7, 0x7}, {0x9, 0x1, 0x5, 0x15}, {0x4, 0xfc, 0x9, 0x3}, {0x4, 0x9ef, 0x9, 0x1}, {0x0, 0x9, 0x8000, 0x101}, {0x0, 0x8, 0x3, 0x5}, {0x10001, 0x8e0, 0x3, 0x4}, {0xb1b0, 0x1, 0x1, 0x25}, {0x1, 0x5, 0xffff, 0x2}, {0x15, 0xfff, 0x97, 0x5}, {0x7, 0x6, 0xcde}, {0x6, 0xfff, 0x4, 0xef1}, {0x2, 0x8, 0x0, 0x2}, {0x0, 0x6, 0x7, 0x101}, {0x3, 0xd1ac, 0x2, 0x2}, {0x8, 0x14, 0x5, 0x57e}, {0x4, 0x7, 0xffff8001, 0x7fff}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_POLICE={0x1098, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1ff, 0x6, 0x200, 0x4, 0x4, 0xc, 0x0, 0xf, 0xff, 0x4, 0x0, 0x5, 0x3, 0x8, 0x8, 0x4, 0x800, 0xa, 0xfd4e, 0x1, 0x0, 0x7, 0x3, 0x7ff, 0x5, 0x81, 0x4, 0x8, 0x8, 0x7, 0x7, 0x0, 0x3, 0x1ff, 0x6, 0x4, 0x9, 0xffff, 0xad47, 0x5, 0x8, 0x7, 0x2, 0x284, 0x6, 0x9, 0x0, 0x1, 0x80000001, 0x7fffffff, 0xfff, 0x9, 0x6, 0x8, 0x200, 0x8, 0x8, 0x7ff, 0x2, 0x1, 0x0, 0x6, 0x7, 0x10, 0x2, 0x7f, 0x2, 0x1ff, 0x0, 0x10, 0x8, 0x8, 0x6, 0x1, 0x7, 0x7, 0x59a, 0xc, 0x0, 0x1, 0x6, 0x0, 0x80000001, 0x180000, 0xffff18ec, 0x1ff, 0x10000, 0x1, 0x9, 0xed3, 0x1000, 0x5, 0x3, 0xc2, 0x8001, 0x2, 0x0, 0x4, 0x1, 0x2, 0x700000, 0x4, 0x7, 0x2, 0x401, 0x3, 0x247, 0x7fffffff, 0x4, 0xd8, 0x6, 0x1, 0x1, 0x3a5b, 0x7, 0x80000001, 0x4, 0x7ff, 0x2, 0x4, 0x3de8, 0x1, 0x3, 0x1, 0x9, 0x5, 0x3, 0xc, 0x0, 0x9, 0x100, 0x1, 0x9, 0x2, 0x4, 0x5, 0x10000, 0x6, 0x5, 0x7, 0x0, 0x1, 0xffffff21, 0x5, 0x1, 0xffffffff, 0x6, 0x800, 0x1, 0x5, 0x1, 0x10001, 0x6, 0x19, 0xfc, 0xfffff901, 0x800, 0x9, 0x5, 0x2, 0x9, 0x0, 0x4, 0x7, 0xdb33, 0xe3d, 0x2, 0x2, 0x7, 0x6, 0x8, 0x401, 0x0, 0x5, 0x77, 0x5, 0x0, 0x4, 0x8, 0xfffffffe, 0x0, 0x3, 0x400, 0x7, 0x5, 0xc, 0x4, 0x0, 0x894, 0x200, 0x1, 0x8001, 0x9, 0x2, 0x6, 0x1, 0xc522, 0x7, 0x6, 0x2, 0x727, 0x81, 0x80000001, 0xfffffffe, 0x6, 0xf3f2, 0x8, 0x4, 0x7, 0x1, 0x3, 0x2, 0x3, 0x4, 0x3d23, 0x2, 0x1000, 0xfffff9e8, 0x9, 0xfffffffa, 0xfffffff5, 0xbca9ecf, 0x1, 0x10000, 0xc495, 0x8, 0xffffff80, 0x9, 0x800, 0x4, 0x6a3c, 0x6a5, 0x9, 0x8, 0x200, 0x0, 0x101, 0x400, 0x39c2, 0x4, 0x5, 0x10, 0x18c5, 0x3, 0x4, 0x1, 0x1, 0x6, 0x2, 0x7, 0x80, 0x7, 0x8, 0x2, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff0000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0x80000000, 0x8, 0xb, 0x6, 0x2, 0xffff, 0x5, 0x8, 0xba8, 0x401, 0x0, 0x7, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x3, 0x4, 0x1, 0x9, 0x79a, 0x3, 0x5, 0xfffffffd, 0x9, 0x5, 0x7, 0x2, 0x5, 0xd57, 0xa69, 0xfffffffa, 0xc6b6, 0x0, 0x0, 0x9, 0x47f9, 0x2, 0x62, 0x6, 0xa, 0x6, 0x5, 0x0, 0xffff8000, 0xffffffff, 0x8, 0x401, 0x7, 0xffffffff, 0x7, 0xdea, 0xdb, 0x2, 0xf, 0x2400, 0x4, 0x2, 0x7, 0xffffff24, 0xfffff001, 0xa59, 0xe8c, 0x32, 0x8, 0x6631, 0x8, 0xb, 0x5, 0xda3, 0x8, 0x3, 0xb, 0x8000, 0x5, 0xac8, 0x80000001, 0xa6, 0xf, 0x6, 0x8223, 0x7ee, 0x8, 0x100, 0xf, 0xe718, 0x8, 0xd9, 0x8, 0xff, 0x9, 0x8, 0x4, 0x101, 0x9, 0x6, 0x8001, 0x7, 0x0, 0x3, 0x0, 0x4, 0x3ff, 0x0, 0x3, 0x80, 0x14, 0x4, 0xffffffca, 0x20000, 0x4, 0xf, 0x7, 0x0, 0x4, 0x7, 0xffffc94c, 0x400, 0xd43, 0x1, 0x81, 0x4f8, 0x3, 0x3, 0xfffffe00, 0x2, 0x5, 0x3, 0x1, 0x0, 0xfac0, 0x7, 0x7ff, 0x1, 0xd, 0x4, 0x101, 0xfffffffc, 0x3, 0x5, 0x8, 0xd, 0x44, 0x5, 0x74, 0x0, 0x7ff, 0x200, 0xb88, 0x0, 0x9, 0x8001, 0x5, 0x0, 0x81, 0xac34, 0x21, 0x88c, 0x7, 0x2, 0x2, 0xf, 0x52d, 0x80000001, 0x9, 0x10, 0x9, 0x0, 0x8, 0xe, 0x8d, 0x5, 0x1000, 0x1ff, 0x3, 0x8, 0x9, 0x40000, 0x6, 0x2, 0x8, 0x101, 0x3ff, 0x2, 0x1, 0x4e, 0x6, 0x81, 0x0, 0xa906, 0x1, 0x7, 0x0, 0xffff, 0x8, 0x5b, 0x9, 0x1, 0x0, 0x4, 0x80, 0x10, 0x5, 0x9, 0x0, 0x9, 0x7f, 0x2, 0x200800, 0x2000, 0x2, 0x3, 0x95, 0x3, 0x6, 0x2, 0x7, 0x95a, 0x6, 0x1ff, 0x1, 0x3faeb8b, 0x5, 0x7, 0x6, 0x0, 0xffffffff, 0x7f, 0x5, 0x8, 0x5, 0xd, 0xc, 0x401, 0x48, 0x5, 0x101, 0x3, 0x7, 0xffffffff, 0x3d7ce046, 0x4d, 0xb36, 0x5, 0x8000, 0x1, 0x9, 0x200, 0x7, 0x7ff, 0xe76a, 0x7, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7ff, 0x101, 0xc7a, 0x5, 0x2, 0x8, 0x5, 0x2b0af6, 0x53a, 0x2, 0x7, 0x80000000, 0x9, 0x9, 0x3, 0x7fffffff, 0x40, 0x8, 0x0, 0x0, 0xffffffff, 0x7fffffff, 0x9, 0x1000, 0x8, 0x7, 0x8001, 0xc, 0x3, 0x4, 0x0, 0x3, 0x9, 0x7ff, 0x6, 0xd, 0xf0c, 0x4, 0x2196, 0x9, 0xfff, 0x5, 0x7, 0x1, 0x84, 0x3354, 0x1, 0x40, 0x8, 0x0, 0x2, 0x227, 0x10001, 0x10000, 0x100, 0x1, 0x7, 0x5, 0x2, 0x7, 0xfffffff8, 0xf775, 0xfffffffc, 0x9, 0x6, 0x7, 0x7, 0x3, 0x244, 0x4bb806ea, 0x6, 0x6, 0x3, 0x0, 0xc29, 0x7, 0x952, 0x1, 0x2, 0x9, 0xb400, 0x1, 0x5, 0x2, 0x1, 0x0, 0x9, 0x2, 0x76f82a60, 0x1, 0xce, 0xfffffff8, 0x80000000, 0x80000000, 0x4, 0xcc, 0xb66, 0x0, 0x5, 0x7, 0x1, 0x0, 0x59d9, 0x5, 0x25f51971, 0x1, 0x5, 0x4acf, 0x6, 0x9, 0x1, 0xd11, 0x7, 0x7ff, 0x10001, 0x10, 0x40, 0x2, 0xe, 0xfff, 0x3ff, 0x7fff, 0x2177, 0x7, 0xc7b, 0x9, 0x7, 0xf, 0x3226, 0x7fffffff, 0x610, 0xc7, 0x8, 0xffff0000, 0xffff0001, 0x8, 0x0, 0x1ff, 0x5, 0x80000001, 0x10000, 0x2, 0x1, 0x2, 0xfad, 0xfff, 0x5, 0x8, 0x9, 0x5, 0x7, 0x1, 0x4, 0x8000, 0x2, 0xf5, 0x9, 0x7f, 0x5, 0x0, 0x1000, 0x10, 0x5, 0x8, 0x2, 0x80000000, 0xfaa5, 0xa, 0x4, 0x2, 0xae0, 0x6, 0x2, 0x7, 0x1, 0x5, 0x5, 0x0, 0xfff, 0xb, 0x2e10, 0xe, 0x7f, 0x7a4b, 0xffff0000, 0x200, 0x2, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x8, 0x40, 0x8, 0x3, 0x8, 0x9, 0x0, 0x4, 0x6, 0x7, 0x2, 0x3, 0x58f, 0xf, 0x1, 0xffff5c07, 0xffffffff, 0x100, 0x400, 0x684d78be, 0x40, 0xc, 0x3, 0xfffffffc, 0x13, 0x79c5, 0xcc07, 0x5740000, 0x9e9b, 0x2, 0x0, 0x8, 0x1ff, 0x4, 0xfffffffa, 0x3, 0x0, 0x9, 0xa, 0x6, 0x1, 0x80000000, 0x5, 0xdc3, 0xfffffe00, 0xffffffff, 0x1, 0x3, 0x7, 0x7, 0x0, 0x0, 0x1, 0x8, 0x3, 0x3, 0x3, 0x7f, 0x7, 0x7, 0x30000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x97d, 0x5, 0xb8fa, 0x1722, 0x10000, {0x3a, 0x1, 0x9, 0x2, 0x9, 0xfffffffd}, {0x1, 0x2, 0xd2, 0x1, 0xb}, 0x6, 0xfffffffb, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x190b, 0x10000000, 0xfffffff8, 0xf0d, 0xd, {0x65, 0x0, 0x0, 0x55a, 0x4, 0x8}, {0x7f, 0x1, 0x5, 0x8503, 0x8, 0x5}, 0x3, 0x10001, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1fd7, 0x4, 0x359a, 0x7, 0x6, 0xb, 0x34, 0xffff, 0x38, 0x65e0d5f7, 0x3, 0x2, 0x80000001, 0x7ff, 0x5, 0x40, 0x0, 0x4, 0x1ff, 0xc539, 0x7, 0x8, 0xf7, 0x8001, 0x1d90, 0x80000001, 0x1, 0x56b, 0x100, 0xe53f5593, 0x7fffffff, 0x2, 0xfffffff9, 0x8, 0x4, 0xf, 0x6, 0x1, 0x7, 0x7, 0x7, 0x1000, 0x7, 0x37, 0x6, 0x8001, 0xfffffff8, 0x4, 0xa23, 0x5, 0x100, 0x7, 0xf0c, 0x5fb13546, 0x1, 0x2, 0x2, 0x1a00, 0xe7, 0x1, 0x2, 0x0, 0xf1d1a08, 0x9, 0x2, 0x0, 0x10000, 0x0, 0xffffff3d, 0x1, 0x6, 0x1ff, 0xfffffffd, 0x9, 0x5b3, 0x34b2, 0x9, 0x9, 0x6f386bd2, 0xc6, 0x7f, 0x8, 0x1, 0x0, 0x10, 0xb, 0x80000001, 0x6aab, 0x6, 0x4, 0xffffffff, 0x7f, 0x3, 0x7a, 0xf3a4, 0x8, 0x9, 0x331, 0xd, 0x8, 0x5, 0x3, 0x8, 0x7, 0x3, 0x1, 0x100, 0x1, 0x1, 0x2, 0x8001, 0xffffffff, 0x8, 0x1, 0x80000000, 0x3, 0x5, 0x4, 0x5, 0x949d, 0xa94a, 0x9, 0x4, 0x8, 0x4, 0xffff, 0x4, 0x8, 0x40, 0x4, 0xfffffff5, 0x1, 0x800000, 0x2, 0xe, 0xffff, 0xe3, 0x4, 0x5, 0x1, 0x3, 0xfa, 0x0, 0x4, 0x6, 0x2, 0x9, 0x2, 0xfff, 0x0, 0xd6b0, 0xffffffff, 0x8, 0x1000, 0x3, 0x8, 0x5, 0x973b, 0x2, 0x84, 0x5d9, 0x3, 0x1, 0x57ee, 0x1000, 0x6, 0x2, 0xfffffe01, 0xffffffff, 0x1, 0x2, 0x4, 0x0, 0xaed, 0x8, 0xd, 0xfac, 0x0, 0x8000, 0x80000000, 0xb, 0x10, 0x0, 0x5, 0xffffffff, 0x800, 0xffffffff, 0x3a, 0x5d7775e4, 0x1, 0x5, 0x0, 0x8, 0x3, 0x4, 0x1, 0x6, 0x2, 0x1d, 0x8, 0x3d, 0x62c7353c, 0x9, 0x2, 0x80000000, 0x800, 0xa, 0x66a0, 0xe, 0x2, 0x4, 0x3, 0xffffff83, 0x9a7b, 0xffff8000, 0x10000, 0xfffffffd, 0xffff, 0x3eaf, 0x6, 0x9, 0x1, 0x9b, 0x1, 0x7, 0xfffffffb, 0x800, 0xe834, 0x5, 0xc, 0x2, 0x8, 0x9, 0x10001, 0x9, 0x7, 0x2eff, 0x6, 0x1, 0x220e, 0x8, 0xffffffff, 0x6, 0x8, 0x1, 0x1, 0x3ff, 0x7ff, 0x6, 0x80000000, 0x7, 0x9, 0x5, 0x106f, 0x8, 0xfffffd67]}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xee}]}}]}, 0x3728}, 0x1, 0x0, 0x0, 0x880}, 0x11) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = accept4$phonet_pipe(r3, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80400) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000002c0)=0x100, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 923.019126ms ago: executing program 1 (id=2516): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x3, {{0xa, 0x4e21, 0x5, @local, 0x1}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x9, @empty, 0x7}}, {{0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}}, {{0xa, 0x4e20, 0x9, @remote, 0x1}}]}, 0x210) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x401}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="368e5f2ffe7fb289dffbb909c8c7fd1c82d5d0bf76ace8da52709ea02355d0feff87006ce5b64dd336a3d0bee12513db18b8ee0276da358f027887804cadc295532ac1023caaf9e7663223fcddf8a3fbd5f52faf7bb29a38c479d31c29fd76056b36bc", 0x63}, {&(0x7f0000000300)="bcd2d58d82", 0x5}, {&(0x7f0000000340)="870f68cbcb4ca1980efc1b0f482bbbca87d0db481d353900ea2645587d481892c624a3e243baf6a360ceacbe1c8b20a08b8633c0e959d9f125630f6fd92c4a5f55a581ecb875d27568382dcbb14bbaa751f34c4d85864ee7c54a76a81be7e0bcf679d35801168a7e4f76bf473b759bfd80ef5e07", 0x74}, {&(0x7f00000003c0)="fd5eda5f5b1c45455f19c6e557853b18de49431b50ecd5ddd88f674d36397e54f83570ddc9e56aee7ddef283c2ce2ba9956dbc4aa4061dfccdc4b6c05aed6c0f174f34dbbe7b036e702fde3ab3cb3a0439fc4fd8e167e519895a7c550de330d6c96b883466c805456738855cbbd33566281169451d704db04776cf631d92056d1303eeabbc7247bea0286c7cd305352b", 0x90}, {&(0x7f0000000480)="685d44c28954c76564fad75fa51f53fc1e8b62bda3bbf2ee6b169f09d8fa99b22b0db88de9090213e70358fa7e8a72ca6a4a06e81ef4f8547d63f1e631b25920cf473b22c9dea27f67204212898ce5b53203488932f76845a54d9db86111b27e9487e38d7114425e970e33b7e0bfc4524f5b3b8d254741a6d86d252edfb9bb7af567c3296c5cd7da282238d938b3b53335c05744822c58401d94512d60f85d81f3609a68d30d4944fd96d6f6e7db4e09cd564c54f2cccc6aeaf37ccb6de670fda765e6d31b33761c9e2a820781778b91f3278f6fdaefdab6525ba978dd8c4e4bdb982c7b0aaccb6e14bbebd2b418b1f165ff263815ae63f8a433dd09b155", 0xfe}], 0x5}}], 0x1, 0x8000) r1 = socket$rxrpc(0x21, 0x2, 0x1c) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000640)=0x1, 0x4) connect$rxrpc(r1, &(0x7f0000000680)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r2 = socket(0x2b, 0x0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000006c0)={r1, 0x8, 0x8, 0x4}) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000700)='cgroup.procs\x00', 0x2, 0x0) tee(r3, r4, 0x800, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000840)={r2, &(0x7f0000000740)='}\'\x00', 0x440000, &(0x7f0000000780)={@_ha_fsid={[0x1, 0x81c]}, {0x4, 0xe90, 0x8, 0x1}}, 0x3, &(0x7f00000007c0), &(0x7f0000000800)=0x7}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000880)={0x0, 0xa65}, &(0x7f00000008c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000900)=r6, 0x4) connect$rxrpc(r3, &(0x7f0000000940)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @private1, 0x6}}, 0x24) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = accept4(r7, &(0x7f0000000980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000a00)=0x80, 0x80000) sendmsg$inet6(r0, &(0x7f0000000e80)={&(0x7f0000000a40)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1356}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000a80)}, {&(0x7f0000000ac0)="20e899d547b4cd0bf8bb1754055026054ad859a8f8b17925ec1226f25deb2b406a790af4209734561ee648703e0a5419c5f32b5a7db2c7a5d85a0d9cb98e67281e2bd1b58d1f398aa2698c", 0x4b}, {&(0x7f0000000b40)="931a9598981827c68446b7371bed1788090e227eabfd9d4e9bfeef673a247e98a1aa75bb3fb93af6cd94ef8daf2ad6", 0x2f}, {&(0x7f0000000b80)="9be508d9ce6fb62ca253e2bf10f0d2444f17cf5e0dd390fe312ffbad68ff7de90a035dc739bbaf7abc8ae578f825", 0x2e}, {&(0x7f0000000bc0)="e09778605f65f13f7ce9bab5fde1110068ecbe1798b5b79f27448eb26940f5019bd3a4ce75d60666b8504c22b36f35f5f4777a5b4b519f8e26a817fdf0b93fd2a5026fcdeeb355094e98d6a237108bc05f7309812db352e4b30f2526460afa54379b6d82607704503722473a", 0x6c}, {&(0x7f0000000c40)="8f847f6994e536a8d33edc5b89aeda368c9de7ee9fb820341b99144cc4f7d197a888760112c9eac07cea2b09bbf2c74c69f9f4fb10cfadaa9a0e50e8c3a2fc0982575f97382ce34f3186cb2876d98a62d60316b64c3d3b7ffed6744d1052b8463717d6dfcf613aa1bdfed52a4fa0af5fcb9a92694f06c2c47dab1fcb1283adfcb63a5fdd27d9956057f5", 0x8a}, {&(0x7f0000000d00)="9cf9d95c2e68f8ad0376575c9c8651c1627cb0e6f8ba95e9735c9206017f05b39e9b3043e34f8126396db24d0a4467948cce6448933bc0c4cf009f1b40051c52ef1f4810b6acbc9e4414b4f59744ddc73f093e2cd329d6877252961247f9e9ed4524bd8dacc2f30d4667db6f3a50ca0222a272f0ef53bb543367e6f806bd4718489bc1c21ff45230bfd12435c5532fe5e8632c3cae30faf39e4cc9c143d0e60b099f04f2d656d2d264c84ec50b8ae50edd3ee83503cf3bb0dedba665b1635539eaa847e1dbff5748b251d06257782814a11af4dce0f7374d81945a654647b257", 0xe0}], 0x7}, 0x20000000) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000f00)={0x0, @loopback, @initdev}, &(0x7f0000000f40)=0xc) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000001380)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000000f80)={0x3b0, 0x13, 0x300, 0x70bd2a, 0x25dfdbfc, {0x2c, 0x6, 0x4, 0xcd, {0x4e20, 0x4e20, [0x6, 0x4, 0x101, 0x2], [0xa7b, 0x3, 0x3, 0x1558], r9, [0xe, 0x7fffffff]}, 0x9, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x82, 0x1, "91b5399a4f9e825e5f4adddc50209e2836d23f1efde9a6f35617591a721e1b95606366dfd7ff86b6ac02d530b02b19d7921fd170519b28e32bde88f99eef837438cc6145943c7f5a250e3eb301d6eed8a692c3cf97ef6db5aff37a920baa29fc1506b065851d7c5782fc27d45681800333c7809960ef37342b737df205b3"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "8bb287fb51d2629c5acc394d811f6fbe784382c8003d33e4d158a2a8440943058156c658c54af5e07bf6dd5698d1a8b40c25b3a0e3bc24fbdcd804638758daf4192229b52528aa3dcf0a15a93559b3662be9eea61b6dc52cd1a080011f6dd95934fd917f6b949200b54d82ff9a0875fb9113fa754b11471b5d8f02a66037498358f131ca550fa365a5cf1ad08e4761f53993b33654f78fbba49029dc550afc15a5703b3c059e104207b842d8220d255aed1e676126e7539f33d3ce8bc881728dc585030edb329bcf12e78a443657c0b376530ea38fea616d98ea3a1b1455c3bec2353c3676f2"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "efeb5c8237eae5cb1d8e870ce333bf68383796bb493ecade99ddd7d32cef5b3f91fb994b2e3d04585da84b8bb0"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "a60bf9d7dc2e4784e63b36c520e2a77c9797195cd95490"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "e13621c83d96b517ceedfe35f5827647f8d6ab6198c442754d990b9decb9b531023e85b9ad74eb5565b22dca1734ac716e451fcee5ec05de9e21bfe82eac1aba15e6c594ec6e790b7a7cdc9c73c360212277299217adc0639a6cfd118275a8441cfdc4466d885284752f07cdbef4c99ffb1955864b92d5ce4f01a0bf29d60f67fe9c78fee6b01c6e65dab056d375eb729a8b1594bef0bed2ad24857bca9a651bf970f21051f8b26dee6dc7"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "5474c1a76829934dd00c367fb9aaaa9055cb3482bea091cef2bf3738fc0b528809a7e8577221f6bc21d675c2af64930bf2412d87ae9829669b5b4c629fd48dc1ed31ae9579af87cfa8d98f906432da26920c01b41370dfd57c643c061a34f47262cf82b875cae08b4ce004e9ed3196e0ecbc371420c09448b03565692606375071fdfefd303dec929996ff23b9ddf07bb14aa124ac44ca2993023ade0b02b28bbd9bd2b99f0f5dc79f77b9747827e779fd6c42b54163e68b44aacd1b971fde9dd063f02f5c2e6df13a5cd96d3ef6e90dd5728a84dd114162e102560cabd6aa6f74970912e0256880acf60de5d61b"}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x20800}, 0x4000880) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r10, &(0x7f00000013c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001400)=0x20) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, 0x140f, 0x0, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000001540), r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r5, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)=r10}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000001, '\x00', r9, r3, 0x2, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x9, &(0x7f0000001580)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000001600)='GPL\x00', 0x6, 0xe1, &(0x7f0000001640)=""/225, 0x40f00, 0x20, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001780)={0x1, 0x7, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001900)=[r11, r12, r3], &(0x7f0000001940)=[{0x1, 0x4, 0x0, 0x2}, {0x4, 0x4, 0x7, 0x6}, {0x5, 0x4, 0x0, 0xa}, {0x3, 0x1, 0x9, 0x9}, {0x1, 0x5, 0xc, 0x7}, {0x4, 0x3, 0x0, 0xb}], 0x10, 0x6d}, 0x94) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001a80)={r6, 0xb, 0x4, 0x4, 0x6, 0x8}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001ac0)={0x8001, 0x1000, 0xa, 0x6, 0x2, 0x10, 0x6, 0xfffff800}, &(0x7f0000001b00)=0x20) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000001b40)={0x11, 0x8, 0x0, 0x80, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x3a}, @local, @local]}, 0x48) pwrite64(r5, &(0x7f0000001bc0)="fa7f32ced7701e854beac98a888367e9e496d4b8cdb89f08bae33a0dbf3264d1f0c2a1970ea44938bf04872f131a4467d18b9ee6c9929b9a5e9b12bda281ab23195c4f0d3c5bae89531107aaa3245e5b88498a55aff35c01c948f3e9c29f30067132d964347a16ca52a8a118ec9699341f241f2eab777bc233506ee2efeae1667cede378849ae40853d2d7bb2492884cd37e4e6eab35a0632b514ead3acd0f85b153622fbb367b0207a433c104f97c95715c996ec1eee1ba7912c876a6f1ea", 0xbf, 0x7fffffffffffffff) 785.824113ms ago: executing program 1 (id=2518): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x3ff0000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x27, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @ldst={0x2, 0x66098a5380ac0f78, 0x4, 0x8, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x0, 0x6, 0x6, 0x6, 0xfffffffffffffff4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xbd14293f5af1f9ae}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 716.187335ms ago: executing program 3 (id=2519): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x2, 0x80, "add9be982ab556eaed97fcafebaa4585c83377b4921e3b10e33650e105d3ae28408033b444735ea0229db6417109efd908c6da896cfa9087ab1875e1ed2668adbe0d87974d91fc69eb84c868b4c38567a30e85dbb5e6b008789e73e2e0806a672a01300ec404c291cf709f2e3abb0bc5eb4ac58520453d6d2464ae2b96e214e1"}) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) 631.988051ms ago: executing program 4 (id=2520): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'wg0\x00'}}, 0x1e) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) close(r0) 631.717812ms ago: executing program 1 (id=2521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x8e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd00}, 0x48) 619.914667ms ago: executing program 0 (id=2522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet6(0xa, 0xa, 0x401) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) socket(0x2, 0x5, 0x2) 586.982094ms ago: executing program 3 (id=2523): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c000100240001"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x80}, 0x40010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00e5ff23002100feffffffffffffffffffff7f06004036b9de8203"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) splice(r4, &(0x7f0000000000)=0x7fffffff, r5, &(0x7f0000000040)=0x6, 0x1, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000140)=""/36, 0x24}) recvmsg$can_raw(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000a80)=""/133, 0x85}], 0x2}, 0x200) 523.521395ms ago: executing program 4 (id=2524): r0 = socket(0x2, 0x3, 0x102) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {0x0, 0xb00}], 0x3}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 491.138346ms ago: executing program 3 (id=2525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000014000100ff010000000000000000000000773f7f6dc1d79958d43ac967f2cd0400000000000000a0d485bf1a9d16afd9d76a32"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 478.294294ms ago: executing program 0 (id=2526): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000070c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x55) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40080c5}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) r13 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r13, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r13, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000000100)={0x9, 0xffff, 0x1800c, 0x1, 0x81, 0x6, 0x35, 0x459}, &(0x7f0000000140)=0x20) r14 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r14, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 431.184836ms ago: executing program 1 (id=2527): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000003740)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x6, {0x2, 0x4e21, @empty}, 'macvtap0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x89a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x82b2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf697}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}], 0x1c) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={r9, r10, r11}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 430.485306ms ago: executing program 4 (id=2528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0x2, 0x0, 0x0, @private1}, 0xf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000680)="6e396043c7f73cdb24daad17f83ce74b34cd63b8facb5c284d61010075bfdbc35cfe8116ba2125d355b852159de6df41715a3e9d41970b39c9293403d0e740dd1fd8e8b590936714c68252a41c8876cefdd8a3b4e05edd64fafd10e7ab0feabc0e", 0x0, 0x0, 0x2}, 0x50) pipe(0x0) 423.56911ms ago: executing program 3 (id=2529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x8703268b, @local}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xac, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @multicast2}}}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x34, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}]}}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffff0dd}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff0b0}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x534}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000019c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xb7}}}}}}}, 0x0) (async, rerun: 32) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000400)=""/99, &(0x7f0000000480)=0x63) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba919736d"], 0x2c}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async, rerun: 32) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x6, 0x6, 0x1, 0x8a, 0x2, 0x89}) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) 391.654902ms ago: executing program 4 (id=2530): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) 231.599214ms ago: executing program 2 (id=2531): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x80) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x13, 0x20, 0x3, 0x0, 0x4a, 0x2, 0x0, @multicast2, @multicast1}, {0x11, 0x20, 0x0, @broadcast, '\x00\x00\x00\x00'}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000000)=0x8) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) recvfrom(r3, 0x0, 0x0, 0x42, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r5, r6, 0x1, 0x6) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0xfffffffd}}) 230.628006ms ago: executing program 3 (id=2532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0xa8, 0xb, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa22c}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xc8a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x101}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r6, r4}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 230.342779ms ago: executing program 1 (id=2533): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffff8, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x8, 0x9, 0x0, 0x201, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3, 0xb}, {0x7, 0xb}, {0x8, 0x1}}, ["", ""]}, 0x24}}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000003be5000000060a0b04000000000000000002000000400004803c0001800a0001006c696d69740000002c0002800c000240000000000000000708000440000000010c000140000000000000000408000340ffffffff0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3c86dd6000004000383a00fe8000000000000000000000000000bbff020000000000000000000000000001030190780000000060d2c4c600002fff00000000000000000000000000000000fcaebc51ce67e1cdef000000000000003200000068000000"], 0x0) 226.117684ms ago: executing program 4 (id=2534): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x6c, 0x1d, 0x400, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x0, r1, 0x8, 0x1, 0x9}, [@NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_PROTOCOL={0x5}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_MASTER={0x8}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa}]}, 0x6c}}, 0x1) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000001c0)={{r0}, "16008de59657113bea79dff1ff82a4d7c2d916aee76ea5ec630547722006a986372b9d87534cf0b0ebe081abf94f92975962a5b0290f9829fb3efcfc07533c15bc86117137dcf196527ff60d1430d5d262eb1170caa0b9c157164e33cfbecfb799ef9bfd38d27906261ddf7d6e5038886d7dde98a5c23e8e8e1878fdb0b40fe6ce62b35f7e38472be20eaee727f9bd8859f21df22d01c5ecb297f6d90a92bacb2b524048057ddfc63827d35dbb1d43883f9847e19e7efe6c597c98cc9e64e547018973a5670de08d6e181b8a4f86ef20e178758c6a8255db77ab53740b8a7d9b349e554d40757b33c451622637c94b7852778e3407793c19f441efcdab3849a623ae0ff818f31133811966b1eed636ac71eabf10ed7eac968122b19af07f3953c02d06a00b95e5ae0a39e866ef33874097d26a6b3c0639a0550dc7e9b891c0b922511ccd2c71b61e1231bf7e5e70dd69a9e6a7a2c359517ffd1956be196b31a31a982e1fc3fd6d47508060f2e78285613cba35ad7c4d1206e34fd55f2911d220c4d952b1052d8c862cc777c284f7acb016832c9bc4c4eef0f828b72389c1bd065b28c3abc2b88ed2be1b6d6ecac644cb76f4530949e9ea450512352e6f4fafbb89c23032a8c44409591250081c4a786b74bf7359a918b8132f9aee5a866c932ac632b8b8df82dd23ca7b9a0402f909b218f11b0133f9adcf63dc2b02792371611407d64d55483ca660a88b2a1c2634d6060e9b1c42f8df3009b88398f61739cbb6f46212385972168749525533e72a11c919ddec49f9551a6689e51e17189d254ca7ba8e567b06934e47122448b4bb0fb3cc748979ee8d0bf2e074b5e951c2f36a37cc3efad5943cf9dc0b5641be42f47c3047168d69e9d14c97f281f89009bd8dd94289fa6dfefee764fbceaebba82b8269897cc09e5787c528c47f15c00d693728f46378b55a406fef35cb545f9320f16c998e4b7b79e6e80c4e3d2d9a7dddbb12f18bdcc2ef1163e48fa47ea8d71c39685bd5f5e752d222d21000bd2c3146ce271ef292f1439a22dd82155443f5ed1de424e5baa56e90bac054a496bdc434055939207e12c0e5f63739e620bcabb1fa5ce974cc53b59522f9742a8e016e36607ab4032a22854d482543d21ee6381b432c80cd958e35eac1dabd5ee0b0835eaf1e661d61c42d196cc8b01de76390ef9ddbdbc1079295fad53d15be5d925adfbdc2c48d7c8b220f255891628b1ffd33de2947babca66c165eaa76fcd57b11032183d153ab7317f40a34fee1b580d1a18ff7447e90330e540bae4db3606f75cb7c9e37b6ed77bc6ab984a722eff32ab750decab8bdca35575ac5ae4f378502aeb91f8b5c8bb9c2ca6649fe36c0b3fcb997f1c06ed9eec9d3613843b9b550c89bf68c1a6003816d7e9a999494f86adc48cafac3e3b680e13cc2d9010bd7114a5015e08fe79d48772cab282e1f6adb893b29596283096958c5f82c65a835d07835742a8e9138105d0fa873019175066ce2f6d4d35d1ce236b5e73680ca3fb211ff4dfce4604f72b1ff655cdfc057e9639b50ca209a170e9390f697cb294059c4a4f6732831094439f6a3616831e5926861ee59de07855cbb2bc8a9f08879c5ebb428413c80142ebcf35fb100aae3ff8cdb1cff701a4c018e7e7df05215fa52a51e4849869bfa96c75c9b1ed296681b7e2897f128b0a47b83ae4b2d3a9073b1e794ee1c1cc48d51072e34651bef0d797a7fde003519c5758a0e6259caf7c6ca708993da7abadcd8edb0375c07f2755e7b4a057f08dbff5b0933a75e19aa5506d31470bf5e3c9911c1512bf8a5556a6b323bbcae6fdb62172f5f39fa665cbae8b9444e1be53f46f97abbaa88d0e3500decb29dcf0084788be37fe1b873bfbda74d3b0914c6664f607c5893694cd40d349f2ee472e19e05be026cbfba00757e1c1e69f489eb9eacd8f48ac82f7eebe5ec0abf00dfe8f484bed95cef178bf73353c9c8dba25d082a0ba904500b7b0f6eb2e02fe0a80ed10e49187ece1d0fe05a665e3cfa831dd2df791bfa472e0d3a798b4142f9240a8e2d90919c9ab1dc3028c2fb3cea5c7ea53cc68aa807dc8fc6b071e5c6bd36d7d86af96865d8aa62f16a1e7c9c03af53e18cdd6a9543603b7f77976b0081d7580aeeea2cf95e85106761ea29f8e93c35f552bbc5c2b84e81089e7fbd23f23a771b07ce681c16d947dcdb6d19eb5b480afb9424e296a83730260fb6a250350e89be2d0fccdcf3ee41853418a8e23eb7300405e6097e19764d6c299aef1735cdf87de7309c3e31947523e55784b50f73597fe77cebae94eeda6b51075747c2570df508049eedb62ed8b4bb5e217eea8f712105e1ce81cff1a801fea035bf9caf0079eb60c0913ad0d5bbc280b22e2bc4095e43bf487edaaddd67cabe02ae071a1d34e17209119212574e933e3038b6215614d2678634fd02e2c2c39123e996c9630301f7f25251f865088b9c250d07fab7ec0727edc717d95445f0f7fa999b74ca9fe21a5be885957636d11db5b44a077253a0b546c817311b7883e012c1e912edda70d56a10eff2dff5ba8613ac400fff046d0efc9c8232c9545655edf7ec9161d0701e3345f0732ff7f0803f352bb0c965971abf0338fae1b6e4b063ae6246932f600f1ab1dc3220a373fcae60d6940a918ea881c737d6eadf8e189341637e4ebb9716dc24a9fa4a94530a4ca562a79753ee83c04976871229c1a810bf4eea13eaace861af3a43b066a84bdb3fd463154fd967b853fa87a4e3ef62ae96a10d630f1c462b0839db235b83e827f738f2b9ca0dd6fdd24110fd3d3b9efd31189e16dad3abc3764c89f916158c59ff8cf3d28d0eaafb425ecd08d4bb6ccb05b615cbc53520a6bbe427baafac4f34f41cb846a918fd14a21693d0f0c21360aed95595a0e33151e079f462443b7e1cfd1d67b729a1fb7e72ed7eb890669f4cd1e317e86afed573d547e4233473d3f1f1a73f72edaedbb476a62bf2a78e5c81c00d84bab750c3131e88496142a00ea84dea983be5eb26d1d2005e3bbe22311fa19a4db0115ff7c498a17eb3c54da804ef896e79e3e079ad855cda215a4af65b82b4ec65c462bb5fb337b70d46426a8b4e777eef19d1b6667a2688b0d9009762110ccce0fd7f75a6e9e870aa8a3b7417be0afa8c4a8c07f5c0f613467463db30e94f45e8c1ceabc3b4001ac5b99b5c1ce7c189bf1bbca12d9367f58af7b64a4bf6af8c6dbeedcf3b36133488ca546d9af7cabf740f857e9f8169c28f846eaffd3b0e3aed271c220fa6b56de2642ef24b16d02f6a68076a664fe35cb625d55f68b3c7806bb821934dcf6a5287442c8cad53cb9a03ef92eb9d8bae9c2a142b6d6c8c6571df55070ac3390b1c62c4c54410cbc880d75a6c968c2b50a4c1e523b3cf9260d872acbb5536c0c5df53f64536dd5fb09a521e1f5c9446cb6ad2091a3a9ff080ea3eea0213bf9df88bd112da8a2c86327d52fddf22bf98ae196ef1f6a618ed940aae4f28eb6743ad462b23d5aff739a5175e6fa5013dddc0d24f39a2ceb57a3c58b62361682c9fbb41a79a7faf819390e698d7448ff4393b13438662ab1b6bd2d5746b031e5168d7185b324291891f5ac5db4725a62336bdb717782d03033b042dcf9056b187d85c8c1e126d95a6352ec704fafd19f550b7b2aa1d022b2463b5e60a3d14cbe0b2d8dc72cbb12f5ef4a79a0e7a631dd5ac9d722742b0f89163699760390f38a781b3694cd6635f628944ab1af8531cacd9cddc0c24d725f3e9215d20bb8cbe770520b2e8fd6340b0edfa170213a739c8243e7e70ba969107c076990451f49331dc2aee9f46dc0c2b4730f3d8ecc5b68965c8eb32606e5c4a390aec34a2c0f34148e10f5c0fff9ff40386d0f09975fabe67a1e8054d54f55092875628bd666a9adf5c74989ce1a7be3ee9b63c969d0eed8879dd9bf291da31357ff6abfb92a4422cf1485986f0edf992e9c2ee45216a9877f087f15bcaa5a396ec3ac25bbccc8f0ba6684253ec44c10d3690785b984b727eeba30181ee9d7ef67a1688d3a6c1cdf66a7c6c457a1f13e5ed7402c7df415f48a762d42816fd250e801458fc499e53e9e0253d7bb04bef5b23dda6e6b7aeba114342edba86609b70c331d3361b63c36246b0403b17233cc4188bc62825f30d5a61d6d8be5cccf3786d65d023a7f5093277c6c29c4643e4d35b7a88973d911ee0795503cab4499890b80f49e0f688f095812bb0f7a57f2712b9e247a1394c1f91eda3f47fc3cf3154dbf87cabefacba8347f5df4a843254012dd9744719fbb065492f7db3d781973e2928a03eaa5cabe6134aef767cbd6063b2d2f38b1d523cf045603a502d09db8d9d9811173189ae46be1caac70ac1df48ae4aaa685cfaaa50def6a2e522a1bffd66ecb4dac3c4ea2dbf923e80306f300fdd13edcd629bfa0909ae03cef0958ae6ba61e006e530aa3660039417baa01d7fd35c5b7ea26cd511a0f79d6a7eb487f389f26efc973f87169e61545b502d96ca38c72cd15010b37a15f1cd42663c87f2ab22c8daf406a5e537d3a28aedbbc09a127ce033407da1a6a59e087394d7a74d6abbb398d0e512d249c52b662a16d2dd3cd2089dfca362bd718e4f881d98684970da9dd45fb1523f44d5a058bf74bc2c6bdd0c24e4b7d1f902b8af75db8cf3cb9a322b68db4bd7db53e8755abf02c8c732011466f434c274d246ab5ed2c6f66b50e774b47f5f9b1d00a1703aef210c615d8d328712eff1502fc469ffbd5b54669fd60810d2f6d906c47793838ce0dfa8b4a28352e9b14c640a5b84cf5b61a4b005880e8071a4c8ec526335f4bbea2874a8a9a701707ea89bbd525f5ebd5d370aba96b7184a32787c79e34a89ae3fc2be84014d074809bd72ba9fe242f9ce2311e0c19ad2921e061ef7813747617a217466ade9a81c534e4d480bfcb98712c941af6a782ad2946681cbe21ab9bf8333ca2b11a16b478af656143780b2c7c587960f10092300bf05a96db2c967ab5a5d80d43603c3c76c0cb4161d93fd24b2ec2a923b01b31aeeea48bfc554f6b8c05f4e4622c968f9f92b513157b329a4589381d77be10befe4ca44a0833e50ddfad9b04d9788ae019ef088c1f52133092176e85ada382233cd7339450e0fee31125c8140141e220c835c2335422a6a05231e08d055e12eaf959860affad1008dbcc55782f9142cd3ae950d4c8cb362fd9777c60cb9c1d88b1ec467b7681a69209ca6e55464fe1413f48257721bc86c2a6e3d28ab38dc11cc33377c05f92013b229de0024ce8ffc6e8d2710cdfa5027ddec60dcd646b3cfd9c689ae50dc23b759a4929d9d0ae81a97a7a50779694c986d4777bdbd990e39aacea194b76992d0df5d90c05d3ce25934b33a1a9a3bf430a3324c08a39d11f7c96d524388b9a781b8e54dfea6726f4231bc948fe7c839e9cd5f0eca0afabb994d0ccc74165dbdde407636cf53e018deaf51a23bd2f00b5ce94544498beb6ce85f53de355e614de0a7c64de2c566fe1dda04c676f1f583eb7a24def7b36b7df96de45fb00caa9dea6cceeb510ae5bbd562710a6ba65a59a4c78427153ff7ad938b6ecb95afbcc6a38409f8d5533f40d3c87c6ef32b2167d7c5750245bb5d75d00aedfb47ce059f544d0a17f1cb2e8bc5c3189741d88ac87c7557dae489334f00a1367a797303ee0c12066009867d48234d81614700af3be01491ae4c335423324c0f231feac4f2fbd82f05fbbe0ba0564368405b349aac8c9f026f7181f80f75773bd231"}) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001280)={&(0x7f00000011c0)=""/141, 0x1100000, 0x800, 0x3}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000012c0)=0x10040, 0x4) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x118, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff801}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x689a}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd72}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x8010) (async) socket$kcm(0x29, 0x7, 0x0) (async) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001500)=0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001580)={'veth0_to_bridge\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001640)={0x160, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x285}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x593}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x28051) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001840)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001a40)={{r6, 0x2, 0xb0c, 0x5, 0x8000000000000000, 0x5183, 0x0, 0x0, 0x3ff, 0x2, 0x7, 0x40, 0x4800000000000000, 0x10001, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000001b00)=0x4) sendmsg$xdp(r0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x2c, 0xa, r4, 0x30}, 0x10, &(0x7f0000001b80), 0x0, 0x0, 0x0, 0x2000c000}, 0x4084) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001ec0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c40)={0x21c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x206b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "c8f4ddcfba200c0c4b32c3163d0fdd6c12"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdb79}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040004) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x67ab18d86d801d53}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x98, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4698}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b9e1bde}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040005}, 0x20008000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000020c0), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0xae33692801df0938) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000002780)={{r0, &(0x7f00000021c0)='!,}&:$^$\'/}+^(*](&+%\\$\x00', 0x418100, &(0x7f0000002200)={@_ha_fsid={[0xd, 0x3]}, {0x0, 0x8, 0xf6a, 0xf8}}, 0x400, &(0x7f0000002240), &(0x7f0000002280)=0x3}, 0x5, &(0x7f00000026c0)=[{0x3, 0x0, &(0x7f00000022c0)='veth1\x00', &(0x7f0000002300)="4f3ac23b51ff905f5db6b9474e607b02465e475e52aedbfc71df4a48b14889c16b8f69a3cfad", 0x26, 0x4e4a8e6835fdabb5}, {0x1, 0x0, &(0x7f0000002340)='team0\x00', &(0x7f0000002380)="c20c52c2cae2c85f7a73bf789d4d51de9ba4a043f7eb7af5c900fbbce5d768c70d3d8779f74465d8d0ac2cbcc56f514e9b4ee465caffb0ca336b8a577640ee817391006fc1d143adc4e7d05d2d6afb908e3293d37d316d594814ede45254e05f0641ba35f4f7e2a464804234344fc117bb78cee8356ff824a42de007d72d226bb7254b09e15fbfb6141a25ddf6f33860641d", 0x92, 0x8}, {0x1, 0x7fff, &(0x7f0000002440)='\x00', &(0x7f0000002480)="bf392c4c1968d0a636ac17085470efc9fe4997657d6565922fc3de175fd5714c69f71d5812be1783382c97551d2e67a5f5124dc7b36608f94d4ad021a0405155eae2a1a943d782ebeacf18c89f26cb0f1e345fc9", 0x54}, {0x3, 0x7, &(0x7f0000002500)='\x00', &(0x7f0000002540)="662c87086273395084d9b150eec4f9", 0xf}, {0x3, 0xffffffff, &(0x7f0000002580)='\xff\xff', &(0x7f00000025c0)="48f80ed36712fffaf2da164dd9fdaa1aff5c3561833687b9942861da8427c50c14acabe49c7d1106a155e3501698673780dd9aaaa01db0166ccc0bbfdf13971c2c1b2e1f6abca0a9b1240164beaba8a6676000de2ee5b045acbd4ed3e0a8bc4adad8d2bb35b91330fbe31c701fbbade2329d8f6fd80894d813d4c01fca39af614513c4c2324331256556035f06bc9fbb59e5efe5ffaed581792f0dd6cef5b71c7d4c6a780418fa6ec0d0cead0b1366a055f070d088fd40cf3758853bb819fbd40c356554f56c90e940444ccf086b95e8763f09a18e4dde8251de5a886ef1b97295f636caa4fbb12d8cc1", 0xea, 0x32}]}) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000002800)=r0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002a80)={r8, r4, 0x25, 0xc, @val=@kprobe_multi=@syms={0x0, 0x8, &(0x7f0000002a40)=[&(0x7f0000002840)=']\x00', &(0x7f0000002880)='ib', &(0x7f00000028c0)='wlc\x00', &(0x7f0000002900)='ib', &(0x7f0000002940)='wlan0\x00', &(0x7f0000002980)='\x00', &(0x7f00000029c0)='wlan0\x00', &(0x7f0000002a00)='ib'], 0x0, 0x3ff}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002b80)={'erspan0\x00', &(0x7f0000002ac0)={'syztnl2\x00', r1, 0x20, 0x7800, 0x7fff, 0x9, {{0x1d, 0x4, 0x2, 0x0, 0x74, 0x65, 0x0, 0xc, 0x29, 0x0, @local, @remote, {[@noop, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x7, 0xc, "aca3ff4cc60473d3fce2"}, {0x7, 0x4, "02d7"}, {0x1, 0x3, "d7"}, {0x6, 0x11, "c8a5c23590a8da47c5f9f68ba54e4a"}, {0x6, 0x7, "9b5cd4be8f"}]}, @timestamp_prespec={0x44, 0x14, 0xf, 0x3, 0x3, [{@empty, 0x6}, {@local, 0x3}]}, @lsrr={0x83, 0x17, 0x67, [@loopback, @rand_addr=0x64010101, @multicast1, @remote, @empty]}]}}}}}) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000002bc0)={{r8}, "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"}) ioctl$PPPIOCGIDLE32(r8, 0x8008743f, &(0x7f0000003bc0)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 138.823211ms ago: executing program 0 (id=2535): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x8, 0x70bd2a, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x0, 0x0, 0x5}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6aabd95500462ffffc000000000000000000000000000001ff0200000000000000000000000000010c"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x8, 0x70bd2a, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x0, 0x0, 0x5}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6aabd95500462ffffc000000000000000000000000000001ff0200000000000000000000000000010c"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) 109.671639ms ago: executing program 4 (id=2536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x200, 0x13, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xd2, 0x8, "406ddb7506a87a6838047ef06bc5e666d74dfdb43a088d7805d3a0de832e5a9ca79b4fa0b7b3a794659cfa6355f512e7bd17ab5da38a9100303e02169dc89c38055a666b8e7d41b110aa97f9bc011375701fbf73aa4d0e87b4a4dc4cc73d96bcfdb11f26cbc8bb272e0128181e60d63dad233972fa091e54d10be48da4fb1e5db4f10c9638cc58ab0dc762eb5ee15ad8181b111fdaa5507fc1882b779ca0d0be560a9cc55551e4b3ea3befce30196f358f54ec715e843f70e854c7a72324fa44bdc875495b5d89723933608cd4b7"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x6e, 0x8, "2745bad528502e4149e779b1d5a1a3569a481162c5f446e0d84d43a6bc2c412a565d596515c93a3364f3274283f59916e74c93ad379dc66bc20b06d0e722ef7d4935fb7e39699ad2d47af422d5b3b14378f84bdd2822e79df45015abeb0f58976055aa244dc7caa894cb"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x12, 0x8, "f9b27bbe1412210f29f097d4a4a1"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x5b, 0x8, "78e0e923553c70c449b052c1a987df06268e5c5ef354abcc44631b22c94ed1c32a219f42bb0a94392fb441e8332e10949d8bc590c97bf5d7dfe868c1be23c843398cac410ed3fa6ce2a3df0e06507efcd9c8855afa12e1"}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c000180060006"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) syz_80211_inject_frame(&(0x7f0000000600), &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) 109.125082ms ago: executing program 2 (id=2537): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x8]}, {0xffff, 0x349, 0xfffffff7, 0x55}}, 0xa5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x7fff, 0x30, 0x3, 0xf8}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0xb755, 0x9, 0x8, 0x0, 0x3, 0x401, 0x2, 0x1000, r2}, 0x20) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000280)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r1, 0xfffffffd}, &(0x7f0000000340)=0x8) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000380), 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f00000003c0)={'hsr0\x00', {0x2, 0x0, @empty}}) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r7, 0x29, 0x46, &(0x7f0000000400)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={r5, 0x87, "c8f89e489d959c27eebbcd1b1237bafb8ae3a30483bf4bd023caffc59a581dd82dd1fb7c521197d7a4470dda8fe3700a0c35658db13ec1ff13f587dad2b807e117cdd2285f36350de45252da7fc10264a7f96a5e6329baeb2b1dddcf0611107d247e8493f5d7813ed9874dbfead6cab4a948d537266087d1f6383984dbce892c9eca47f6815c79"}, &(0x7f0000000500)=0x8f) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)={r8, 0xe9, "8798ec77d325672418bfef2120169d447080c62eeab8df72f2dfc0f9adad73129ad614af8beb76238f98fef6a2d515dc74511668c2cd1db4fbfbee737f20b3a5558963ae67f8af8df146fc2f4c5979a247e4d309ad46eb89f5d8cdfd7cd5198c8fe937393c86d71762e85bec8c9fc8d6ede177592dfb2e3c0289969f68279d442a1bfc884c4e67e520bb060a87433ed4b09ad118c5c45fc1966b46bbeaa3b088243dfdcaa029c26da875ef87720677a6ce0d30a56d4d4f7f5037ee07d85e601ad19fcbc2f4a13e24a0bf00c0e38a29cc4133885d52889f6dc5887183b991f7e9bc68481a1d758547f6"}, &(0x7f0000000640)=0xf1) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x20000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000800)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000840)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000880)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000008c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r10, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x11000100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000a40)) r16 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), r3) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r16, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) r17 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), r17) 43.868663ms ago: executing program 3 (id=2538): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x18baee02}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 32) bind$bt_l2cap(r7, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f00000000c0)={r7, r8, 0x4, 0x0, 0x0, 0xe, 0x0, 0x5f, 0x1, 0x81, 0x1, 0x2, 'syz0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8}]}}]}, 0x38}}, 0x44080) (async, rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r13, {0x0, 0x3}, {0xffe0, 0xa}, {0x1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) (rerun: 64) 25.070123ms ago: executing program 2 (id=2539): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0xffffffff, {0xa, 0x14, 0x40, 0x0, 0x9, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) 0s ago: executing program 0 (id=2540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x74, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0xb0, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x16, 0xa, 0x301, 0xb00, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x1b4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab00450001280000000000019078ac1e0001ffffffff0e0090787fff01fbfffffff30054271e"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) kernel console output (not intermixed with test programs): ast mode [ 124.122731][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 124.122773][ T7278] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.387'. [ 124.159539][ T7280] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 124.318432][ T7280] bond1: entered promiscuous mode [ 124.326149][ T7280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.361530][ T7283] bond1: (slave bridge2): making interface the new active one [ 124.373996][ T7283] bridge2: entered promiscuous mode [ 124.380825][ T7283] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 124.531582][ T7298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.394'. [ 124.555087][ T7298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.394'. [ 124.582613][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 124.715673][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 124.859430][ T7317] syzkaller0: entered promiscuous mode [ 124.871820][ T7317] syzkaller0: entered allmulticast mode [ 125.156009][ T7338] netlink: 'syz.0.404': attribute type 1 has an invalid length. [ 125.289217][ T7338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.857088][ T7378] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 125.866541][ T7375] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 125.879800][ T7375] bond2 (unregistering): Released all slaves [ 125.952444][ T7378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.084961][ T7384] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 126.103801][ T7385] net_ratelimit: 187 callbacks suppressed [ 126.103819][ T7385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.127692][ T7385] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 126.345534][ T7402] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 126.383345][ T7402] netlink: 224 bytes leftover after parsing attributes in process `syz.2.420'. [ 126.413600][ T7402] NCSI netlink: No device for ifindex 0 [ 127.384736][ T7465] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 127.536819][ T7478] Bluetooth: MGMT ver 1.23 [ 127.589892][ T7470] veth3: entered promiscuous mode [ 127.619744][ T7470] veth3: entered allmulticast mode [ 127.927726][ T7500] block nbd4: NBD_DISCONNECT [ 128.078599][ T7507] __nla_validate_parse: 6 callbacks suppressed [ 128.078617][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 128.217919][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 128.264870][ T7517] netlink: 64 bytes leftover after parsing attributes in process `syz.2.460'. [ 128.432626][ T7509] infiniband syz1: set down [ 128.465547][ T7509] infiniband syz1: added ipvlan0 [ 128.537066][ T7509] RDS/IB: syz1: added [ 128.541714][ T7509] smc: adding ib device syz1 with port count 1 [ 128.554093][ T7509] smc: ib device syz1 port 1 has no pnetid [ 128.620529][ T7532] pimreg: entered allmulticast mode [ 128.904843][ T7537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.467'. [ 128.941192][ T7537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.467'. [ 129.020527][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 129.090360][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 129.138618][ T7548] netlink: 68 bytes leftover after parsing attributes in process `syz.0.471'. [ 129.169143][ T7548] netlink: 'syz.0.471': attribute type 3 has an invalid length. [ 129.215022][ T7548] netlink: 72 bytes leftover after parsing attributes in process `syz.0.471'. [ 129.308285][ T7554] syzkaller0: entered promiscuous mode [ 129.463673][ T7545] nbd0: detected capacity change from 0 to 63 [ 129.653380][ T7547] nbd1: detected capacity change from 0 to 63 [ 129.727607][ T5827] block nbd0: Receive control failed (result -104) [ 129.734539][ T5834] block nbd0: Receive control failed (result -32) [ 129.743683][ T5142] block nbd1: Receive control failed (result -32) [ 129.746550][ T5836] block nbd1: Receive control failed (result -32) [ 129.880816][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 130.028227][ T7580] netlink: 'syz.1.478': attribute type 5 has an invalid length. [ 130.127840][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.254794][ T7671] syzkaller0: entered allmulticast mode [ 131.467068][ T7683] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 131.716631][ T7696] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 131.739438][ T7692] bond4: entered promiscuous mode [ 131.764725][ T7692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.822946][ T7696] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 132.422463][ T7729] netlink: 'syz.0.509': attribute type 21 has an invalid length. [ 132.585895][ T7739] bond0: entered promiscuous mode [ 132.592880][ T7739] bond_slave_0: entered promiscuous mode [ 132.600767][ T7739] bond_slave_1: entered promiscuous mode [ 132.761942][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.770298][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.800134][ T7739] bond0: left promiscuous mode [ 132.808183][ T7739] bond_slave_0: left promiscuous mode [ 132.833601][ T7739] bond_slave_1: left promiscuous mode [ 132.859280][ T7747] veth0: entered promiscuous mode [ 133.138034][ T7767] __nla_validate_parse: 45 callbacks suppressed [ 133.138060][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.525'. [ 133.204624][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.525'. [ 133.238365][ T5836] block nbd2: Receive control failed (result -32) [ 133.311741][ T7775] netlink: 'syz.1.529': attribute type 29 has an invalid length. [ 133.328790][ T7773] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 133.368739][ T7773] netlink: 68 bytes leftover after parsing attributes in process `syz.4.527'. [ 133.418086][ T7773] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 133.601607][ T7794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.712198][ T7799] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 133.727684][ T7799] netlink: 236 bytes leftover after parsing attributes in process `syz.1.535'. [ 133.927605][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 133.959362][ T7816] syzkaller0: entered promiscuous mode [ 133.980107][ T7816] syzkaller0: entered allmulticast mode [ 134.024406][ T7825] siw: device registration error -23 [ 134.055084][ T7825] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 134.063103][ T7825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.128018][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.544'. [ 134.289778][ T7836] netlink: 'syz.1.547': attribute type 3 has an invalid length. [ 134.332803][ T7845] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 134.357596][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.549'. [ 134.419845][ T7853] netlink: 92 bytes leftover after parsing attributes in process `syz.4.549'. [ 134.612366][ T7862] netlink: 'syz.1.554': attribute type 4 has an invalid length. [ 134.639341][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 134.724387][ T7873] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 134.756479][ T7878] xt_TCPMSS: Only works on TCP SYN packets [ 134.936796][ T7882] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 135.013027][ T7882] bond4: entered promiscuous mode [ 135.018553][ T7882] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.042108][ T7889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.087441][ T7889] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 135.099004][ T7889] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 135.113999][ T7889] bond4: (slave vti0): making interface the new active one [ 135.127247][ T7900] sctp: [Deprecated]: syz.4.562 (pid 7900) Use of int in max_burst socket option deprecated. [ 135.127247][ T7900] Use struct sctp_assoc_value instead [ 135.146183][ T7889] vti0: entered promiscuous mode [ 135.152743][ T7889] bond4: (slave vti0): Enslaving as an active interface with an up link [ 135.163949][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'. [ 135.551113][ T7919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.708598][ T7930] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 135.749032][ T7930] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 135.763600][ T7930] netlink: 'syz.3.574': attribute type 8 has an invalid length. [ 136.013708][ T7945] syzkaller0: entered promiscuous mode [ 136.019654][ T7945] syzkaller0: entered allmulticast mode [ 136.230925][ T7973] netlink: 'syz.4.585': attribute type 4 has an invalid length. [ 136.611281][ T29] audit: type=1107 audit(1774131110.848:2): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 136.654957][ T7993] bridge0: port 3(ipvlan2) entered blocking state [ 136.757600][ T7993] bridge0: port 3(ipvlan2) entered disabled state [ 136.767763][ T7993] ipvlan2: entered allmulticast mode [ 136.773186][ T7993] bridge0: entered allmulticast mode [ 136.780083][ T7993] ipvlan2: left allmulticast mode [ 136.785508][ T7993] bridge0: left allmulticast mode [ 136.802653][ T7997] vlan3: entered allmulticast mode [ 136.808009][ T7997] erspan0: entered allmulticast mode [ 136.828837][ T7991] syz.2.593 (7991) used greatest stack depth: 15176 bytes left [ 137.113553][ T8014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 137.371085][ T8028] syzkaller0: entered promiscuous mode [ 137.391784][ T8028] syzkaller0: entered allmulticast mode [ 138.703513][ T8125] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 138.776079][ T8125] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.821033][ T8130] __nla_validate_parse: 13 callbacks suppressed [ 138.821053][ T8130] netlink: 44 bytes leftover after parsing attributes in process `syz.1.624'. [ 138.976164][ T8139] Cannot find set identified by id 3 to match [ 139.062507][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 139.157430][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 139.176353][ T8144] netlink: 'syz.2.631': attribute type 12 has an invalid length. [ 139.194657][ T8151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 139.345227][ T8144] bond3: option primary_reselect: invalid value (255) [ 139.402091][ T8144] bond3 (unregistering): Released all slaves [ 139.491333][ T8172] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 139.702854][ T8172] bond2: entered promiscuous mode [ 139.708413][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.640'. [ 139.712883][ T8172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.810696][ T8172] bond2: (slave bridge2): making interface the new active one [ 139.832083][ T8172] bridge2: entered promiscuous mode [ 139.854092][ T8172] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 139.976052][ T8202] tipc: Started in network mode [ 139.981095][ T8202] tipc: Node identity 5ed64073fede, cluster identity 4711 [ 140.011605][ T8202] tipc: Enabled bearer , priority 0 [ 140.034016][ T8204] syzkaller0: entered promiscuous mode [ 140.063589][ T8204] syzkaller0: entered allmulticast mode [ 140.142215][ T8202] tipc: Resetting bearer [ 140.247072][ T8202] tipc: Resetting bearer [ 140.300105][ T8202] tipc: Disabling bearer [ 140.555795][ T5830] IPVS: starting estimator thread 0... [ 140.609374][ T8242] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 140.663476][ T8235] IPVS: using max 31 ests per chain, 74400 per kthread [ 140.690450][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.698148][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.760996][ T8255] netlink: 60 bytes leftover after parsing attributes in process `syz.1.657'. [ 140.799681][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.813142][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.900427][ T8238] bond1: left allmulticast mode [ 140.905998][ T8238] ip6gretap1: left allmulticast mode [ 140.917611][ T8238] veth3: left promiscuous mode [ 140.922436][ T8238] veth3: left allmulticast mode [ 140.952635][ T8242] 8021q: adding VLAN 0 to HW filter on device bond6 [ 140.982525][ T8246] vlan2: entered promiscuous mode [ 140.988053][ T8246] bond6: entered promiscuous mode [ 140.995361][ T8246] vlan2: entered allmulticast mode [ 141.000915][ T8246] bond6: entered allmulticast mode [ 141.013002][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 141.026581][ T250] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.054848][ T250] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.065182][ T250] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.077890][ T250] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.107000][ T250] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.123717][ T250] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.214930][ T250] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.237666][ T250] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.495827][ T8284] TCP: TCP_TX_DELAY enabled [ 141.568508][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.664'. [ 141.623621][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.664'. [ 141.629138][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 142.055636][ T8312] netlink: 'syz.1.675': attribute type 11 has an invalid length. [ 142.079213][ T8312] netlink: 'syz.1.675': attribute type 11 has an invalid length. [ 142.159784][ T8312] IPVS: persistence engine module ip_vs_pe_ not found [ 142.233247][ T8320] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 142.506430][ T8337] IPVS: Scheduler module ip_vs_sip not found [ 142.709502][ T8355] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 142.746119][ T8357] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 142.835000][ T8357] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.914247][ T8358] bond3: (slave geneve2): making interface the new active one [ 142.960135][ T8358] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 143.609394][ T8379] nbd: must specify at least one socket [ 143.824983][ T8384] __nla_validate_parse: 11 callbacks suppressed [ 143.825001][ T8384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.693'. [ 143.917627][ T8352] syz.2.685 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 143.964592][ T8352] CPU: 0 UID: 0 PID: 8352 Comm: syz.2.685 Not tainted syzkaller #0 PREEMPT(full) [ 143.964619][ T8352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.964630][ T8352] Call Trace: [ 143.964638][ T8352] [ 143.964646][ T8352] dump_stack_lvl+0xe8/0x150 [ 143.964686][ T8352] dump_header+0xd3/0x4c0 [ 143.964712][ T8352] oom_kill_process+0x3ab/0x970 [ 143.964737][ T8352] out_of_memory+0x106c/0x1410 [ 143.964756][ T8352] ? percpu_ref_put+0x19/0x180 [ 143.964781][ T8352] ? __pfx___mutex_lock+0x10/0x10 [ 143.964818][ T8352] ? __pfx_out_of_memory+0x10/0x10 [ 143.964834][ T8352] ? do_raw_spin_unlock+0xf5/0x210 [ 143.964865][ T8352] try_charge_memcg+0xc53/0x1560 [ 143.964908][ T8352] ? __pfx_try_charge_memcg+0x10/0x10 [ 143.964946][ T8352] ? rcu_read_unlock+0x4a/0x60 [ 143.964977][ T8352] obj_cgroup_charge_pages+0x1e/0xa0 [ 143.965007][ T8352] obj_cgroup_charge_account+0xcf/0x650 [ 143.965028][ T8352] ? obj_cgroup_charge_account+0x13b/0x650 [ 143.965049][ T8352] __memcg_slab_post_alloc_hook+0x5f8/0xa80 [ 143.965080][ T8352] ? alloc_buffer_head+0x2a/0x270 [ 143.965102][ T8352] kmem_cache_alloc_noprof+0x347/0x650 [ 143.965120][ T8352] ? alloc_buffer_head+0x2a/0x270 [ 143.965138][ T8352] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 143.965161][ T8352] alloc_buffer_head+0x2a/0x270 [ 143.965180][ T8352] ? folio_alloc_buffers+0x30e/0x640 [ 143.965202][ T8352] folio_alloc_buffers+0x32c/0x640 [ 143.965229][ T8352] create_empty_buffers+0x3a/0x530 [ 143.965256][ T8352] __block_write_begin_int+0x3c2/0x1910 [ 143.965288][ T8352] ? __mark_inode_dirty+0x6ec/0x1470 [ 143.965314][ T8352] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 143.965339][ T8352] ? __pfx___block_write_begin_int+0x10/0x10 [ 143.965372][ T8352] block_page_mkwrite+0x34f/0x4c0 [ 143.965394][ T8352] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 143.965415][ T8352] ext4_page_mkwrite+0xc98/0x11a0 [ 143.965449][ T8352] ? __pfx_filemap_fault+0x10/0x10 [ 143.965475][ T8352] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 143.965496][ T8352] ? __lock_acquire+0x6b5/0x2cf0 [ 143.965531][ T8352] do_page_mkwrite+0x14d/0x310 [ 143.965559][ T8352] do_pte_missing+0x69d/0x3490 [ 143.965592][ T8352] ? handle_mm_fault+0xee/0x3310 [ 143.965625][ T8352] handle_mm_fault+0x1bec/0x3310 [ 143.965664][ T8352] ? handle_mm_fault+0xee/0x3310 [ 143.965700][ T8352] ? __pfx_handle_mm_fault+0x10/0x10 [ 143.965748][ T8352] ? lock_mm_and_find_vma+0xa7/0x340 [ 143.965772][ T8352] do_user_addr_fault+0x75b/0x1340 [ 143.965822][ T8352] exc_page_fault+0x6a/0xc0 [ 143.965844][ T8352] asm_exc_page_fault+0x26/0x30 [ 143.965862][ T8352] RIP: 0033:0x7f47c0465630 [ 143.965887][ T8352] Code: 48 89 44 24 10 e8 80 4c ff ff 48 8b 15 49 01 ee 00 48 8b 44 24 10 01 05 2e 01 ee 00 48 29 c2 41 83 e7 02 48 89 15 30 01 ee 00 02 00 0f 84 a3 fa ff ff 48 8b 15 20 01 ee 00 c6 42 01 00 48 83 [ 143.965902][ T8352] RSP: 002b:00007ffef2447ac0 EFLAGS: 00010202 [ 143.965919][ T8352] RAX: 0000000000000003 RBX: 0000000000000026 RCX: 0000000000000026 [ 143.965930][ T8352] RDX: 0000001b30563fc4 RSI: 0000000000000003 RDI: 00007f47c1345720 [ 143.965941][ T8352] RBP: 00007f47c1345720 R08: 0000000000000000 R09: 00007f47c0816038 [ 143.965953][ T8352] R10: 0000000000000001 R11: 0000000000000004 R12: 0000000000000000 [ 143.965963][ T8352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 143.965993][ T8352] [ 143.968254][ T8352] memory: usage 307200kB, limit 307200kB, failcnt 694 [ 144.333276][ T8352] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0 [ 144.342186][ T8352] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 144.373325][ T8352] Memory cgroup stats for /syz2: [ 144.373554][ T8352] cache 8192 [ 144.381725][ T8352] rss 0 [ 144.393251][ T8352] rss_huge 0 [ 144.396494][ T8352] shmem 0 [ 144.400720][ T8352] mapped_file 0 [ 144.413268][ T8352] dirty 0 [ 144.416255][ T8352] writeback 0 [ 144.419545][ T8352] workingset_refault_anon 23 [ 144.443286][ T8352] workingset_refault_file 117 [ 144.448021][ T8352] swap 94208 [ 144.451223][ T8352] swapcached 126976 [ 144.473262][ T8352] pgpgin 15998 [ 144.476686][ T8352] pgpgout 15988 [ 144.480148][ T8352] pgfault 23755 [ 144.503324][ T8352] pgmajfault 14 [ 144.511435][ T8352] inactive_anon 24576 [ 144.522595][ T8352] active_anon 8192 [ 144.530993][ T8352] inactive_file 0 [ 144.538518][ T8352] active_file 8192 [ 144.548246][ T8352] unevictable 0 [ 144.555640][ T8352] hierarchical_memory_limit 314572800 [ 144.567899][ T8352] hierarchical_memsw_limit 9223372036854771712 [ 144.585278][ T8352] total_cache 8192 [ 144.592616][ T8352] total_rss 0 [ 144.600642][ T8352] total_rss_huge 0 [ 144.609527][ T8352] total_shmem 0 [ 144.617557][ T8352] total_mapped_file 0 [ 144.737806][ T8352] total_dirty 0 [ 144.741318][ T8352] total_writeback 0 [ 144.753398][ T8352] total_workingset_refault_anon 23 [ 144.763293][ T8352] total_workingset_refault_file 117 [ 144.768535][ T8352] total_swap 94208 [ 144.785048][ T8352] total_swapcached 126976 [ 144.792713][ T8352] total_pgpgin 15998 [ 144.802884][ T8352] total_pgpgout 15988 [ 144.813072][ T8352] total_pgfault 23755 [ 144.817367][ T8352] total_pgmajfault 14 [ 144.821362][ T8352] total_inactive_anon 24576 [ 144.833372][ T8352] total_active_anon 8192 [ 144.843551][ T8352] total_inactive_file 0 [ 144.847735][ T8352] total_active_file 8192 [ 144.873161][ T8352] total_unevictable 0 [ 144.877293][ T8352] anon_cost 0 [ 144.880581][ T8352] file_cost 0 [ 144.892502][ T8352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.685,pid=8352,uid=0 [ 144.924421][ T8352] Memory cgroup out of memory: Killed process 8352 (syz.2.685) total-vm:98580kB, anon-rss:1248kB, file-rss:21636kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 146.310680][ T8417] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.702'. [ 146.338188][ T8423] netlink: 120 bytes leftover after parsing attributes in process `syz.4.700'. [ 146.356683][ T8423] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 146.376836][ T8423] netlink: 64 bytes leftover after parsing attributes in process `syz.4.700'. [ 146.586873][ T8432] netlink: 'syz.2.705': attribute type 1 has an invalid length. [ 146.605315][ T8438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.641229][ T8440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.678925][ T8432] bond3: entered promiscuous mode [ 146.684571][ T8432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.759973][ T8441] macvtap1: entered allmulticast mode [ 146.775548][ T8447] netlink: 'syz.0.709': attribute type 2 has an invalid length. [ 146.818122][ T8432] bond3: (slave bridge2): making interface the new active one [ 146.850656][ T8432] bridge2: entered promiscuous mode [ 146.877777][ T8432] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 147.057274][ T8464] : renamed from hsr0 (while UP) [ 147.075075][ T8464] netlink: 'syz.4.718': attribute type 6 has an invalid length. [ 147.201562][ T10] IPVS: starting estimator thread 0... [ 147.323390][ T8474] IPVS: using max 33 ests per chain, 79200 per kthread [ 147.494829][ T8486] nbd: illegal input index 2958377 [ 147.750269][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 147.769210][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 147.793427][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 148.023929][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 148.084848][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.739'. [ 148.134589][ T8530] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 148.188541][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.741'. [ 148.238307][ T8540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.275407][ T8540] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.462808][ T8549] bond8: entered promiscuous mode [ 148.812219][ T8580] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 148.883333][ T8580] netlink: 'syz.2.751': attribute type 2 has an invalid length. [ 149.182499][ T8603] netlink: 'syz.1.758': attribute type 2 has an invalid length. [ 149.207434][ T8603] __nla_validate_parse: 7 callbacks suppressed [ 149.207460][ T8603] netlink: 188 bytes leftover after parsing attributes in process `syz.1.758'. [ 149.228676][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 149.622690][ T8637] netlink: 48 bytes leftover after parsing attributes in process `syz.2.765'. [ 149.660749][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 150.400199][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 150.511704][ T8679] team1: entered promiscuous mode [ 150.538590][ T8679] team1: entered allmulticast mode [ 150.571898][ T8693] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 150.582666][ T8693] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.606197][ T8686] bridge0: port 4(gretap0) entered blocking state [ 150.612941][ T8686] bridge0: port 4(gretap0) entered disabled state [ 150.623507][ T8686] gretap0: entered allmulticast mode [ 150.631763][ T8686] gretap0: entered promiscuous mode [ 150.644005][ T8686] bridge0: port 4(gretap0) entered blocking state [ 150.650593][ T8686] bridge0: port 4(gretap0) entered forwarding state [ 150.987754][ T8710] syzkaller0: entered promiscuous mode [ 150.997011][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 151.012777][ T8710] hsr0: entered promiscuous mode [ 151.021701][ T8710] macvlan2: entered allmulticast mode [ 151.041728][ T8710] hsr0: entered allmulticast mode [ 151.049222][ T8710] hsr_slave_0: entered allmulticast mode [ 151.322655][ T8726] netlink: 'syz.0.794': attribute type 29 has an invalid length. [ 151.424424][ T8740] netlink: 'syz.0.794': attribute type 29 has an invalid length. [ 151.465203][ T8737] netlink: 76 bytes leftover after parsing attributes in process `syz.4.796'. [ 151.514328][ T8747] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 151.622508][ T8746] can: request_module (can-proto-0) failed. [ 151.640544][ T8751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.800'. [ 151.856026][ T8770] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 151.982035][ T8781] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 151.998498][ T8781] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 152.008832][ T8770] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 152.024804][ T8781] bond9: (slave ip6gre2): making interface the new active one [ 152.033069][ T8781] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 152.118461][ T8790] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 152.541397][ T8753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.674875][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.815'. [ 152.819225][ T8817] x_tables: duplicate underflow at hook 2 [ 152.897685][ T8818] xt_hashlimit: size too large, truncated to 1048576 [ 153.231017][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.821'. [ 153.296732][ T8851] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 154.262960][ T8901] __nla_validate_parse: 1 callbacks suppressed [ 154.262980][ T8901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.833'. [ 154.378713][ T8903] netlink: 'syz.0.834': attribute type 33 has an invalid length. [ 154.487001][ T8909] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.836'. [ 154.586945][ T8916] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 154.595302][ T8916] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 155.107807][ T8947] 8021q: adding VLAN 0 to HW filter on device bond10 [ 155.290681][ T8967] netlink: 48 bytes leftover after parsing attributes in process `syz.1.848'. [ 155.300754][ T8968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.848'. [ 155.311340][ T8969] netlink: 68 bytes leftover after parsing attributes in process `syz.0.850'. [ 156.274083][ T9016] tipc: Enabling of bearer rejected, failed to enable media [ 156.494508][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.872'. [ 156.652734][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 156.727130][ T9049] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 156.892904][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 157.214830][ T9078] xt_hashlimit: size too large, truncated to 1048576 [ 157.378567][ T9091] xt_hashlimit: size too large, truncated to 1048576 [ 157.981928][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 157.991233][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 158.178872][ T9138] netlink: 'syz.4.905': attribute type 4 has an invalid length. [ 158.829562][ T9174] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:21 [ 159.199534][ T9187] bond11: entered promiscuous mode [ 159.215836][ T9187] 8021q: adding VLAN 0 to HW filter on device bond11 [ 159.288264][ T9190] bridge4: entered promiscuous mode [ 159.310786][ T9190] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 159.352083][ T9195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.361156][ T9190] __nla_validate_parse: 8 callbacks suppressed [ 159.361176][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 159.376698][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.521608][ T9195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.529571][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.538135][ T9195] batman_adv: batadv0: Removing interface: netdevsim0 [ 159.574728][ T9193] geneve3: entered promiscuous mode [ 159.600815][ T9190] macvlan2: entered promiscuous mode [ 159.606531][ T9190] macvlan2: entered allmulticast mode [ 159.626945][ T9204] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 159.640012][ T5191] block nbd0: Connection timed out, retrying (0/2 alive) [ 159.650618][ T5191] block nbd0: Connection timed out, retrying (0/2 alive) [ 159.659040][ T5191] block nbd0: Connection timed out, retrying (0/2 alive) [ 159.667167][ T5191] block nbd0: Connection timed out, retrying (0/2 alive) [ 159.675130][ T11] block nbd0: Dead connection, failed to find a fallback [ 159.682694][ T11] block nbd0: shutting down sockets [ 159.689189][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.700423][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 159.708955][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.718793][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 159.726609][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.736253][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 159.744077][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.753723][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 159.763102][ T6030] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.773123][ T6030] Buffer I/O error on dev nbd0, logical block 0, async page read [ 159.782141][ T6030] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.791664][ T6030] Buffer I/O error on dev nbd0, logical block 1, async page read [ 159.799898][ T6030] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.810426][ T6030] Buffer I/O error on dev nbd0, logical block 2, async page read [ 159.819484][ T6030] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.829036][ T6030] Buffer I/O error on dev nbd0, logical block 3, async page read [ 159.836906][ T6030] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.846439][ T6030] Buffer I/O error on dev nbd0, logical block 0, async page read [ 159.854292][ T6030] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.863825][ T6030] Buffer I/O error on dev nbd0, logical block 1, async page read [ 159.872478][ T6030] ldm_validate_partition_table(): Disk read failed. [ 159.880032][ T6030] Dev nbd0: unable to read RDB block 0 [ 159.886173][ T6030] nbd0: unable to read partition table [ 159.934022][ T6030] ldm_validate_partition_table(): Disk read failed. [ 159.941118][ T6030] Dev nbd0: unable to read RDB block 0 [ 159.996845][ T6030] nbd0: unable to read partition table [ 160.125273][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 160.162214][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 160.227635][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 160.279599][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 160.289315][ T2236] block nbd1: Connection timed out, retrying (0/2 alive) [ 160.296724][ T2236] block nbd1: Connection timed out, retrying (0/2 alive) [ 160.303919][ T2236] block nbd1: Connection timed out, retrying (0/2 alive) [ 160.311013][ T2236] block nbd1: Connection timed out, retrying (0/2 alive) [ 160.319225][ T2236] block nbd1: Dead connection, failed to find a fallback [ 160.325194][ T9231] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 160.328002][ T2236] block nbd1: shutting down sockets [ 160.340490][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 160.340752][ T6056] ldm_validate_partition_table(): Disk read failed. [ 160.360270][ T6056] Dev nbd1: unable to read RDB block 0 [ 160.370653][ T6056] nbd1: unable to read partition table [ 160.392821][ T6056] ldm_validate_partition_table(): Disk read failed. [ 160.422186][ T6056] Dev nbd1: unable to read RDB block 0 [ 160.429879][ T6056] nbd1: unable to read partition table [ 160.446187][ T9237] netlink: 'syz.3.930': attribute type 4 has an invalid length. [ 160.457229][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 160.484452][ T9237] netlink: 152 bytes leftover after parsing attributes in process `syz.3.930'. [ 160.610569][ T9220] 8021q: adding VLAN 0 to HW filter on device bond12 [ 160.657234][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.699026][ T9228] bond12: (slave bond0): making interface the new active one [ 160.728637][ T9228] bond12: (slave bond0): Enslaving as an active interface with an up link [ 160.830698][ T9237] .`: renamed from bond0 (while UP) [ 161.041911][ T7611] bond12: (slave .`): link status definitely down, disabling slave [ 161.083791][ T7611] bond12: now running without any active interface! [ 161.914686][ T9309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 161.936993][ T9313] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 161.949655][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 162.080374][ T9319] syzkaller1: entered promiscuous mode [ 162.122178][ T9319] syzkaller1: entered allmulticast mode [ 162.321821][ T9336] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 162.371871][ T9340] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 162.665182][ T9362] ip6tnl0: Caught tx_queue_len zero misconfig [ 162.852693][ T9370] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.879870][ T9370] bond3: (slave lo): Enslaving as an active interface with an up link [ 162.927276][ T9370] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 163.104211][ T9381] bridge_slave_1: left promiscuous mode [ 163.110216][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.197134][ T9381] bridge_slave_0: left allmulticast mode [ 163.202813][ T9381] bridge_slave_0: left promiscuous mode [ 163.212305][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.422251][ T9412] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 163.439440][ T9412] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 163.820337][ T9436] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 164.349369][ T9471] netlink: 'syz.2.1001': attribute type 29 has an invalid length. [ 164.456590][ T9475] netlink: 'syz.1.1003': attribute type 7 has an invalid length. [ 164.476568][ T9476] __nla_validate_parse: 14 callbacks suppressed [ 164.476586][ T9476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1000'. [ 164.856093][ T9495] sctp: [Deprecated]: syz.2.1008 (pid 9495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.856093][ T9495] Use struct sctp_sack_info instead [ 165.204214][ T9512] netlink: 'syz.1.1012': attribute type 1 has an invalid length. [ 165.294081][ T9516] macvlan3: entered promiscuous mode [ 165.336166][ T9516] macvlan3: entered allmulticast mode [ 165.367115][ T9516] bond6: entered promiscuous mode [ 165.388212][ T9516] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 165.418298][ T9516] bond6: left promiscuous mode [ 165.424032][ T9520] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1014'. [ 165.514478][ T9526] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 165.522613][ T9526] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 165.705000][ T9528] netlink: 'syz.0.1017': attribute type 7 has an invalid length. [ 165.790490][ T9534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'. [ 165.822627][ T9536] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1020'. [ 166.037987][ T9546] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.053290][ T9547] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1025'. [ 166.544903][ T9567] tipc: Can't bind to reserved service type 0 [ 166.608951][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1031'. [ 166.869413][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 166.961287][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 167.184805][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 167.242627][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'. [ 167.260987][ T9589] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 167.314233][ T138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 167.829834][ T9610] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.877657][ T9610] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.911355][ T9616] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 167.983137][ T9610] .` (unregistering): Released all slaves [ 168.779925][ T9632] syzkaller0: entered promiscuous mode [ 168.786982][ T9632] syzkaller0: entered allmulticast mode [ 168.795458][ T9632] Bluetooth: MGMT ver 1.23 [ 169.399005][ T6008] hid-generic 0005:4C4A:0C6E.0001: unknown main item tag 0x0 [ 169.512572][ T6008] hid-generic 0005:4C4A:0C6E.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 169.600405][ T9666] netlink: 'syz.4.1054': attribute type 1 has an invalid length. [ 169.644574][ T9666] __nla_validate_parse: 9 callbacks suppressed [ 169.644591][ T9666] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1054'. [ 169.708835][ T9666] NCSI netlink: No device for ifindex 0 [ 169.734572][ T9670] syzkaller1: entered promiscuous mode [ 169.753467][ T9670] syzkaller1: entered allmulticast mode [ 169.785151][ T9666] netlink: 'syz.4.1054': attribute type 29 has an invalid length. [ 169.814868][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 170.157410][ T9686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1056'. [ 170.193119][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1057'. [ 170.732605][ T9731] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 170.788417][ T9739] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 170.862704][ T9739] bond7: entered promiscuous mode [ 170.868309][ T9739] 8021q: adding VLAN 0 to HW filter on device bond7 [ 170.907583][ T9738] 8021q: adding VLAN 0 to HW filter on device bond7 [ 170.915441][ T9738] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 170.928203][ T9738] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 170.944006][ T9738] bond7: (slave vcan1): making interface the new active one [ 170.951599][ T9738] vcan1: entered promiscuous mode [ 170.958383][ T9738] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 170.974303][ T9739] bond7: (slave vcan2): The slave device specified does not support setting the MAC address [ 170.987942][ T9739] bond7: (slave vcan2): Enslaving as a backup interface with an up link [ 171.162808][ T9765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1076'. [ 171.686442][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1085'. [ 171.709885][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'. [ 171.720415][ T9794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1085'. [ 171.772938][ T9796] netdevsim netdevsim1: Direct firmware load for .. @ failed with error -2 [ 171.799299][ T9796] netdevsim netdevsim1: Falling back to sysfs fallback for: .. @ [ 171.830338][ T9802] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 171.894418][ T9802] bond13: (slave geneve2): making interface the new active one [ 171.902823][ T9802] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 171.920227][ T138] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.938164][ T138] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.963411][ T138] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.972307][ T138] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.497567][ T9841] syzkaller0: entered promiscuous mode [ 172.504894][ T9841] syzkaller0: entered allmulticast mode [ 172.987650][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 172.997224][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.007416][ T9862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1104'. [ 173.025978][ T9862] netlink: 'syz.4.1104': attribute type 7 has an invalid length. [ 173.035384][ T9862] netlink: 'syz.4.1104': attribute type 8 has an invalid length. [ 173.055509][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.875592][ T9907] openvswitch: netlink: Flow key attr not present in new flow. [ 174.140595][ T9922] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 174.584908][ T9947] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 174.908327][ T9960] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 175.055616][ T9971] __nla_validate_parse: 8 callbacks suppressed [ 175.055636][ T9971] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1144'. [ 175.129501][ T9975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.129866][ T9977] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 175.194181][ T9977] nbd: error processing sock list [ 175.264177][ T9979] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 175.317404][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 175.322182][ T9979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.335978][ T9986] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 175.339307][ T9987] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1150'. [ 175.464240][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 175.478221][ T9986] bond4: entered allmulticast mode [ 175.622896][T10001] netlink: 'syz.3.1153': attribute type 21 has an invalid length. [ 175.651072][ T29] audit: type=1107 audit(1774131149.888:3): pid=10004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P=P/^CܺQ-S܃ؘ`ix:I' [ 175.654539][T10001] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1153'. [ 175.671374][T10006] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.697988][T10001] netlink: 'syz.3.1153': attribute type 5 has an invalid length. [ 175.738514][T10001] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1153'. [ 175.751955][T10005] netem: change failed [ 175.863462][T10017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.982568][T10024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1160'. [ 176.012130][T10024] netlink: 'syz.0.1160': attribute type 7 has an invalid length. [ 176.020903][T10024] netlink: 'syz.0.1160': attribute type 8 has an invalid length. [ 176.029175][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 176.087045][T10024] syz_tun: entered promiscuous mode [ 176.104984][T10024] gretap0: entered promiscuous mode [ 176.128255][T10024] erspan0: entered promiscuous mode [ 176.166117][T10036] siw: device registration error -23 [ 176.291330][T10045] netlink: zone id is out of range [ 176.314349][T10045] netlink: del zone limit has 4 unknown bytes [ 176.498741][T10056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1171'. [ 176.761025][T10076] tipc: Enabled bearer , priority 0 [ 176.776742][T10076] syzkaller0: entered promiscuous mode [ 176.799539][T10076] syzkaller0: entered allmulticast mode [ 176.918930][T10076] tipc: Resetting bearer [ 176.935920][T10075] tipc: Resetting bearer [ 176.957161][T10075] tipc: Disabling bearer [ 177.141655][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 177.483500][T10115] syzkaller0: entered promiscuous mode [ 177.504866][T10115] syzkaller0: entered allmulticast mode [ 177.538047][T10117] xt_connbytes: Forcing CT accounting to be enabled [ 177.563625][ T7611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.588451][ T7611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.857058][T10139] IPVS: length: 4096 != 8 [ 177.861465][T10139] IPVS: length: 4096 != 8 [ 177.901743][T10139] IPVS: length: 4096 != 8 [ 177.912959][T10139] IPVS: length: 4096 != 8 [ 177.933025][T10139] IPVS: length: 4096 != 8 [ 177.947487][T10139] IPVS: length: 4096 != 8 [ 177.961804][T10139] IPVS: length: 4096 != 8 [ 177.975172][T10139] IPVS: length: 4096 != 8 [ 177.986062][T10139] IPVS: length: 4096 != 8 [ 177.997028][T10139] IPVS: length: 4096 != 8 [ 178.001432][T10139] IPVS: length: 4096 != 8 [ 178.014031][T10139] IPVS: length: 4096 != 8 [ 178.018679][T10139] IPVS: length: 4096 != 8 [ 178.026985][T10139] IPVS: length: 4096 != 8 [ 178.040258][T10139] IPVS: length: 4096 != 8 [ 178.050337][T10139] IPVS: length: 4096 != 8 [ 178.058649][T10139] IPVS: length: 4096 != 8 [ 178.063107][T10139] IPVS: length: 4096 != 8 [ 178.103039][T10139] IPVS: length: 4096 != 8 [ 178.123361][T10139] IPVS: length: 4096 != 8 [ 178.127773][T10139] IPVS: length: 4096 != 8 [ 178.163034][T10139] IPVS: length: 4096 != 8 [ 178.177797][T10139] IPVS: length: 4096 != 8 [ 178.182206][T10139] IPVS: length: 4096 != 8 [ 178.203507][T10139] IPVS: length: 4096 != 8 [ 178.207996][T10139] IPVS: length: 4096 != 8 [ 178.225665][T10162] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 178.233502][T10139] IPVS: length: 4096 != 8 [ 178.238400][T10139] IPVS: length: 4096 != 8 [ 178.284933][T10139] IPVS: length: 4096 != 8 [ 178.290074][T10162] bond4: option miimon: invalid value (18446744073709551585) [ 178.298296][T10162] bond4: option miimon: allowed values 0 - 2147483647 [ 178.304657][T10139] IPVS: length: 4096 != 8 [ 178.309454][T10139] IPVS: length: 4096 != 8 [ 178.310921][T10162] bond4 (unregistering): Released all slaves [ 178.320675][T10139] IPVS: length: 4096 != 8 [ 178.329774][T10139] IPVS: length: 4096 != 8 [ 178.924896][T10197] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 179.096354][T10199] tipc: Invalid UDP bearer configuration [ 179.096407][T10199] tipc: Enabling of bearer rejected, failed to enable media [ 179.326322][T10215] ip6t_srh: unknown srh invflags 4000 [ 179.542566][T10228] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 180.038181][T10263] xt_hashlimit: size too large, truncated to 1048576 [ 180.325759][T10270] netlink: 'syz.2.1237': attribute type 11 has an invalid length. [ 180.628512][T10282] __nla_validate_parse: 17 callbacks suppressed [ 180.628530][T10282] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1240'. [ 180.757794][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 181.113465][T10309] netlink: 'syz.3.1246': attribute type 1 has an invalid length. [ 181.230373][T10309] 8021q: adding VLAN 0 to HW filter on device bond14 [ 181.287881][T10309] bond14: (slave gretap1): making interface the new active one [ 181.299034][T10309] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 181.309587][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1250'. [ 181.321386][T10309] macvlan3: entered promiscuous mode [ 181.332315][T10309] macvlan3: entered allmulticast mode [ 181.339073][T10309] bond14: entered promiscuous mode [ 181.345125][T10309] gretap1: entered promiscuous mode [ 181.351342][T10309] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 181.361423][T10309] bond14: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 181.379476][T10309] bond14: left promiscuous mode [ 181.425332][T10309] gretap1: left promiscuous mode [ 181.606022][T10349] netlink: 'syz.1.1255': attribute type 21 has an invalid length. [ 181.624971][T10349] netlink: 'syz.1.1255': attribute type 6 has an invalid length. [ 181.666234][T10349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1255'. [ 181.706348][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 181.719526][T10355] bond0: (slave rose0): refused to change device type [ 181.730015][T10347] bond0: (slave rose0): refused to change device type [ 181.742329][T10357] netlink: 'syz.4.1258': attribute type 14 has an invalid length. [ 181.778215][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 181.817369][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 181.858321][T10357] netlink: 'syz.4.1258': attribute type 14 has an invalid length. [ 181.893091][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 182.118590][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 182.230350][T10391] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 182.445858][T10402] netlink: 'syz.3.1271': attribute type 30 has an invalid length. [ 182.456506][T10406] netlink: 'syz.1.1272': attribute type 1 has an invalid length. [ 182.484764][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 182.948044][T10436] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 182.965031][T10436] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 183.176919][T10453] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 183.219640][T10453] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 183.510026][T10477] netlink: 'syz.3.1294': attribute type 10 has an invalid length. [ 183.519005][T10470] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 183.530789][T10470] bond5: option packets_per_slave: allowed values 0 - 65535 [ 183.541514][T10470] bond5 (unregistering): Released all slaves [ 183.570684][T10478] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 183.847492][T10504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.791437][T10495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.928920][T10555] netlink: 'syz.4.1317': attribute type 32 has an invalid length. [ 186.969760][T10555] __nla_validate_parse: 3 callbacks suppressed [ 186.969778][T10555] netlink: 776 bytes leftover after parsing attributes in process `syz.4.1317'. [ 187.007563][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 187.027379][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1318'. [ 187.066374][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 187.153454][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1318'. [ 187.709139][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 187.943390][T10629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1336'. [ 187.968874][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.976696][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.190804][T10640] vlan2: entered promiscuous mode [ 188.220692][T10640] vlan2: entered allmulticast mode [ 188.238054][T10640] hsr_slave_1: entered allmulticast mode [ 188.341196][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'. [ 188.483197][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 188.511995][T10666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1348'. [ 188.852363][T10679] netlink: 'syz.3.1353': attribute type 33 has an invalid length. [ 188.976144][T10679] bond16: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 188.997849][T10679] bond16 (unregistering): Released all slaves [ 189.156358][T10699] 8021q: VLANs not supported on wg1 [ 189.277821][T10708] netlink: 'syz.1.1364': attribute type 83 has an invalid length. [ 189.302123][T10712] netlink: 'syz.3.1365': attribute type 11 has an invalid length. [ 189.453376][T10722] openvswitch: netlink: Key type 30 is not supported [ 189.478965][T10722] xt_hashlimit: size too large, truncated to 1048576 [ 189.531579][T10725] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 189.595162][T10727] dvmrp0: entered allmulticast mode [ 189.639669][T10729] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 190.137685][T10760] netlink: 'syz.1.1380': attribute type 10 has an invalid length. [ 190.190818][T10760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.205893][T10760] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 190.317873][T10768] netlink: 'syz.2.1383': attribute type 3 has an invalid length. [ 190.420019][T10769] syzkaller1: entered promiscuous mode [ 190.444130][T10768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.449735][T10769] syzkaller1: entered allmulticast mode [ 190.961720][T10811] sctp: [Deprecated]: syz.1.1394 (pid 10811) Use of int in max_burst socket option. [ 190.961720][T10811] Use struct sctp_assoc_value instead [ 190.961775][T10814] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 191.029725][T10814] bridge_slave_1: left allmulticast mode [ 191.033439][T10813] nbd3: detected capacity change from 0 to 127 [ 191.049827][T10814] bridge_slave_1: left promiscuous mode [ 191.069520][T10814] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.129278][ T5836] block nbd3: Receive control failed (result -104) [ 191.205229][T10822] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 191.287292][T10822] bond5: entered promiscuous mode [ 191.322425][T10822] bond5: entered allmulticast mode [ 191.339272][T10822] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.848430][T10879] netlink: 'syz.4.1409': attribute type 3 has an invalid length. [ 191.921731][ T29] audit: type=1800 audit(1774131166.168:4): pid=10875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1407" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1535 res=0 errno=0 [ 192.376959][T10913] netdevsim0: entered promiscuous mode [ 192.694541][T10925] netlink: 'syz.0.1421': attribute type 29 has an invalid length. [ 192.717206][T10925] netlink: 'syz.0.1421': attribute type 29 has an invalid length. [ 192.762209][T10925] netlink: 'syz.0.1421': attribute type 29 has an invalid length. [ 192.807613][T10925] netlink: 'syz.0.1421': attribute type 29 has an invalid length. [ 192.854348][T10937] netlink: get zone limit has 4 unknown bytes [ 192.860563][T10925] netlink: 'syz.0.1421': attribute type 29 has an invalid length. [ 193.244535][T10964] __nla_validate_parse: 23 callbacks suppressed [ 193.244562][T10964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1428'. [ 193.332479][T10964] netlink: 'syz.1.1428': attribute type 1 has an invalid length. [ 193.346795][T10974] geneve3: entered promiscuous mode [ 193.488226][T10964] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 193.512097][T10990] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 193.525108][T10943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.528824][T10990] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1432'. [ 193.594108][T10984] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1432'. [ 194.205798][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.212980][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.439668][T11045] netlink: 'syz.3.1445': attribute type 1 has an invalid length. [ 194.478085][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1446'. [ 194.511396][T11045] 8021q: adding VLAN 0 to HW filter on device bond16 [ 194.569137][T11045] bond16: (slave bridge6): making interface the new active one [ 194.632154][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 194.642732][T11045] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 194.697555][T11061] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 194.720153][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 194.745223][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1451'. [ 194.778706][T11071] nbd: must specify at least one socket [ 194.787856][T11071] block nbd1: NBD_DISCONNECT [ 194.792552][T11071] block nbd1: Send disconnect failed -32 [ 194.800319][T11071] block nbd1: Send disconnect failed -32 [ 194.917886][T11075] syzkaller0: entered promiscuous mode [ 194.930311][T11075] syzkaller0: entered allmulticast mode [ 195.677808][T11119] veth5: entered allmulticast mode [ 195.686634][T11122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.853178][T11132] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.1468'. [ 195.886128][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 196.117455][T11147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1471'. [ 196.276358][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 196.276386][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 196.276429][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 196.490337][T11175] netlink: 'syz.3.1479': attribute type 1 has an invalid length. [ 196.572039][T11179] block nbd1: Unsupported socket: should be TCP or UNIX. [ 197.091414][T11214] pimreg: entered allmulticast mode [ 197.149904][T11219] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 197.303131][T11237] openvswitch: netlink: IP tunnel dst address not specified [ 197.361042][T11241] openvswitch: netlink: IP tunnel dst address not specified [ 197.596682][T11257] netlink: 'syz.0.1507': attribute type 10 has an invalid length. [ 197.626539][T11256] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 197.635993][T11256] bond4 (unregistering): Released all slaves [ 197.665924][T11257] team0 (unregistering): Port device team_slave_0 removed [ 197.684285][T11257] team0 (unregistering): Port device team_slave_1 removed [ 197.903067][T11271] netlink: 'syz.0.1511': attribute type 1 has an invalid length. [ 197.911207][T11271] nbd: error processing sock list [ 198.093054][T11281] vcan3: entered allmulticast mode [ 198.265403][T11286] netlink: 'syz.1.1516': attribute type 9 has an invalid length. [ 198.383109][T11297] netlink: 'syz.1.1521': attribute type 4 has an invalid length. [ 198.404629][T11297] __nla_validate_parse: 16 callbacks suppressed [ 198.404645][T11297] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1521'. [ 198.425881][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 198.508924][T10864] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 198.512322][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1524'. [ 198.541833][T11306] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 198.566368][T11306] batadv2: entered promiscuous mode [ 198.574066][T11306] batadv2: entered allmulticast mode [ 198.580807][T11306] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 198.601028][T11306] team0: Failed to send options change via netlink (err -105) [ 198.624736][T11306] team0: Port device batadv2 added [ 198.664671][ T7609] bridge0: port 3(team0) entered blocking state [ 198.672125][ T7609] bridge0: port 3(team0) entered forwarding state [ 198.760952][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 198.787680][T11317] vlan2: entered allmulticast mode [ 198.794684][T11317] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 198.914673][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'. [ 199.002658][T11332] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.034946][ T35] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 199.044972][ T35] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 199.105520][T11333] 8021q: adding VLAN 0 to HW filter on device bond9 [ 199.173297][T11341] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1535'. [ 199.253504][T11349] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 199.273056][T11346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.303964][T11346] openvswitch: netlink: IP tunnel dst address not specified [ 199.670324][T11371] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1544'. [ 199.686667][T11381] netlink: 'syz.4.1547': attribute type 5 has an invalid length. [ 199.705123][T11371] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 199.750269][T11382] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 199.808007][T11382] 8021q: adding VLAN 0 to HW filter on device bond17 [ 200.282508][T11407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1555'. [ 200.297939][T11407] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1555'. [ 200.678011][T11421] syzkaller0: entered promiscuous mode [ 200.691919][T11421] syzkaller0: entered allmulticast mode [ 200.708520][T11418] can: request_module (can-proto-0) failed. [ 200.729766][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1559'. [ 201.690258][T11473] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 202.047601][T11495] netlink: 'syz.1.1586': attribute type 21 has an invalid length. [ 202.340725][T11514] sctp: [Deprecated]: syz.3.1592 (pid 11514) Use of int in max_burst socket option. [ 202.340725][T11514] Use struct sctp_assoc_value instead [ 202.410761][T11517] bond6: Removing last arp target with arp_interval on [ 202.615160][T11532] netlink: 'syz.3.1597': attribute type 3 has an invalid length. [ 202.683131][T11530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.710328][T11538] netlink: 'syz.1.1599': attribute type 9 has an invalid length. [ 202.741229][T11540] set match dimension is over the limit! [ 202.858213][T11548] openvswitch: netlink: IP tunnel TTL not specified. [ 203.415846][T11594] __nla_validate_parse: 8 callbacks suppressed [ 203.415867][T11594] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1613'. [ 203.481424][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 203.635568][T11606] block nbd1: Unsupported socket: should be TCP or UNIX. [ 203.697425][T11610] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 203.707430][T11610] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1618'. [ 203.717827][T11610] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1618'. [ 203.719718][T11606] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 203.728390][T11610] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1618'. [ 203.748459][T11606] bond10 (unregistering): Released all slaves [ 203.941080][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 204.052349][T11626] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 204.060732][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 204.070226][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 204.080653][T11626] netlink: 'syz.1.1621': attribute type 2 has an invalid length. [ 204.088944][T11626] netlink: 'syz.1.1621': attribute type 2 has an invalid length. [ 204.097891][T11626] netlink: 'syz.1.1621': attribute type 2 has an invalid length. [ 204.180093][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 204.211678][T11632] openvswitch: netlink: Flow actions attr not present in new flow. [ 204.325181][T11645] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1625'. [ 205.638582][T11710] netlink: 'syz.3.1647': attribute type 2 has an invalid length. [ 205.652027][T11712] vlan1: entered allmulticast mode [ 205.674080][T11712] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 205.955426][T11730] netlink: 'syz.3.1653': attribute type 21 has an invalid length. [ 206.022705][T11734] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 206.219044][T11748] geneve1 speed is unknown, defaulting to 1000 [ 206.246092][T11748] geneve1 speed is unknown, defaulting to 1000 [ 206.262036][T11748] geneve1 speed is unknown, defaulting to 1000 [ 206.844019][T11748] infiniband syz0: set down [ 206.848675][T11748] infiniband syz0: added geneve1 [ 206.853838][ T798] geneve1 speed is unknown, defaulting to 1000 [ 207.030418][T11748] RDS/IB: syz0: added [ 207.060068][T11748] smc: adding ib device syz0 with port count 1 [ 207.068017][T11748] smc: ib device syz0 port 1 has no pnetid [ 207.077690][ T6008] geneve1 speed is unknown, defaulting to 1000 [ 207.089513][T11748] geneve1 speed is unknown, defaulting to 1000 [ 207.586762][T11815] sch_fq: defrate 0 ignored. [ 207.661992][T11822] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 207.700298][T11818] syzkaller0: entered promiscuous mode [ 207.728204][T11818] syzkaller0: entered allmulticast mode [ 207.781254][T11748] geneve1 speed is unknown, defaulting to 1000 [ 207.933708][T11832] xt_nfacct: accounting object `syz1' does not exist [ 207.948592][T11832] erspan0: entered promiscuous mode [ 207.962652][T11832] erspan0: left promiscuous mode [ 208.092874][T11837] Cannot find map_set index 65533 as target [ 208.208898][T11843] nbd: must specify a size in bytes for the device [ 208.246159][T11748] geneve1 speed is unknown, defaulting to 1000 [ 209.639980][T11748] geneve1 speed is unknown, defaulting to 1000 [ 209.681100][T11868] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 209.858978][T11876] tipc: Started in network mode [ 209.878078][T11876] tipc: Node identity 7f000001, cluster identity 4711 [ 209.895103][T11876] tipc: Enabling of bearer rejected, failed to enable media [ 209.998068][T11887] __nla_validate_parse: 18 callbacks suppressed [ 209.998087][T11887] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1699'. [ 210.016428][T11887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1699'. [ 210.138630][T11891] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1700'. [ 210.205308][T11897] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1702'. [ 210.293457][T11748] geneve1 speed is unknown, defaulting to 1000 [ 210.315580][T11902] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 210.339659][T11901] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 210.715631][T11919] IPVS: Error connecting to the multicast addr [ 210.806132][T11925] Cannot find del_set index 4 as target [ 210.938245][T11933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.963614][T11933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.194297][T11944] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1717'. [ 211.342973][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1720'. [ 211.480763][T11952] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.519790][T11952] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 211.627536][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 211.762049][T11972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1727'. [ 211.844228][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.873125][T11961] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 211.929729][T11952] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.942211][T11952] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 211.969681][T11977] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 212.089756][T11952] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.090720][T11984] netlink: 'syz.1.1730': attribute type 1 has an invalid length. [ 212.132820][T11952] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 212.192158][T11984] 8021q: adding VLAN 0 to HW filter on device bond10 [ 212.206157][T11991] FAULT_INJECTION: forcing a failure. [ 212.206157][T11991] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 212.219889][T11991] CPU: 0 UID: 0 PID: 11991 Comm: syz.4.1732 Not tainted syzkaller #0 PREEMPT(full) [ 212.219913][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.219925][T11991] Call Trace: [ 212.219932][T11991] [ 212.219940][T11991] dump_stack_lvl+0xe8/0x150 [ 212.219971][T11991] should_fail_ex+0x412/0x560 [ 212.220002][T11991] _copy_from_user+0x2d/0xb0 [ 212.220024][T11991] ___sys_recvmsg+0x175/0x590 [ 212.220045][T11991] ? get_pid_task+0x20/0x1f0 [ 212.220061][T11991] ? get_pid_task+0x20/0x1f0 [ 212.220081][T11991] ? __pfx____sys_recvmsg+0x10/0x10 [ 212.220125][T11991] ? __fget_files+0x3a0/0x420 [ 212.220162][T11991] __x64_sys_recvmsg+0x1ba/0x2a0 [ 212.220187][T11991] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 212.220218][T11991] ? __pfx_ksys_write+0x10/0x10 [ 212.220249][T11991] do_syscall_64+0x14d/0xf80 [ 212.220269][T11991] ? trace_irq_disable+0x3b/0x150 [ 212.220294][T11991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.220312][T11991] ? clear_bhb_loop+0x40/0x90 [ 212.220333][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.220350][T11991] RIP: 0033:0x7f341b19c799 [ 212.220367][T11991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.220382][T11991] RSP: 002b:00007f341c0fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 212.220402][T11991] RAX: ffffffffffffffda RBX: 00007f341b416090 RCX: 00007f341b19c799 [ 212.220415][T11991] RDX: 0000000000000102 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 212.220427][T11991] RBP: 00007f341c0fa090 R08: 0000000000000000 R09: 0000000000000000 [ 212.220438][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.220447][T11991] R13: 00007f341b416128 R14: 00007f341b416090 R15: 00007ffe7d9da068 [ 212.220474][T11991] [ 212.297038][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1730'. [ 212.335021][T11952] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.436876][T11952] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 212.466053][T11984] bond10: (slave geneve2): making interface the new active one [ 212.477362][T11984] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 212.486666][T10864] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.496408][T10864] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.506779][T10864] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.527038][T10864] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.608792][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.617973][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.649731][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.659565][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.681004][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.689641][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.709910][ T7609] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.718520][ T7609] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.902415][T12014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1738'. [ 213.050743][T12021] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 213.171429][T12021] 8021q: adding VLAN 0 to HW filter on device bond18 [ 213.181509][T12021] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 213.202094][T12022] bond18: (slave veth0_to_bond): making interface the new active one [ 213.212739][T12022] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 213.949775][ T42] hid-generic 0005:0458:0000.0002: item fetching failed at offset 0/1 [ 213.967296][ T42] hid-generic 0005:0458:0000.0002: probe with driver hid-generic failed with error -22 [ 214.585289][T12114] netlink: 'syz.1.1764': attribute type 29 has an invalid length. [ 214.611893][T12115] netlink: 'syz.1.1764': attribute type 29 has an invalid length. [ 214.994786][T12093] geneve1 speed is unknown, defaulting to 1000 [ 215.141179][T12140] __nla_validate_parse: 73 callbacks suppressed [ 215.141198][T12140] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1771'. [ 215.159232][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1771'. [ 215.329088][T12138] siw: device registration error -23 [ 215.551865][T12156] IPv6: NLM_F_REPLACE set, but no existing node found! [ 215.563059][T12156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1777'. [ 215.576374][T12156] netlink: 'syz.1.1777': attribute type 83 has an invalid length. [ 215.896439][T12164] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 215.917411][T12164] netlink: 'syz.1.1780': attribute type 2 has an invalid length. [ 216.072894][T12171] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1782'. [ 216.270404][T12175] syzkaller0: entered promiscuous mode [ 216.302454][T12175] syzkaller0: entered allmulticast mode [ 216.432966][T12178] bond3: (slave lo): Releasing backup interface [ 216.444530][T12178] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 216.453379][T12185] Bluetooth: MGMT ver 1.23 [ 216.465278][T12178] gretap0: left allmulticast mode [ 216.471380][T12178] gretap0: left promiscuous mode [ 216.476826][T12178] bridge0: port 4(gretap0) entered disabled state [ 216.490819][T12178] team0: left allmulticast mode [ 216.497682][T12178] team_slave_0: left allmulticast mode [ 216.503169][T12178] team_slave_1: left allmulticast mode [ 216.509336][T12178] batadv2: left allmulticast mode [ 216.516084][T12178] team0: left promiscuous mode [ 216.521086][T12178] team_slave_0: left promiscuous mode [ 216.527649][T12178] team_slave_1: left promiscuous mode [ 216.535329][T12178] batadv2: left promiscuous mode [ 216.540668][T12178] bridge0: port 3(team0) entered disabled state [ 216.563121][T12178] bridge_slave_0: left allmulticast mode [ 216.569527][T12178] bridge_slave_0: left promiscuous mode [ 216.575729][T12178] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.588001][T12178] bridge_slave_1: left allmulticast mode [ 216.595675][T12178] bridge_slave_1: left promiscuous mode [ 216.601463][T12178] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.618837][T12178] bond0: (slave bond_slave_0): Releasing backup interface [ 216.631331][T12178] bond0: (slave bond_slave_1): Releasing backup interface [ 216.649373][T12178] team0: Port device team_slave_0 removed [ 216.660243][T12178] team0: Port device team_slave_1 removed [ 216.674287][T12178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.683172][T12178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.695668][T12178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.703148][T12178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.712822][T12178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.013819][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1792'. [ 217.022742][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 217.046300][T12216] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 217.055710][T12216] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 217.074060][T12212] netlink: 'syz.4.1792': attribute type 15 has an invalid length. [ 217.117439][ T12] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 217.117535][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1792'. [ 217.139454][ T12] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 217.142054][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 217.158307][T12212] netlink: 'syz.4.1792': attribute type 15 has an invalid length. [ 217.178279][ T12] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 217.381005][T12231] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1797'. [ 217.589573][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 217.768431][T12267] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 217.905693][T12283] netlink: 'syz.1.1811': attribute type 21 has an invalid length. [ 217.916189][T12283] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.926334][T12283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.933623][T12283] IPv6: NLM_F_CREATE should be set when creating new route [ 217.940928][T12283] IPv6: NLM_F_CREATE should be set when creating new route [ 217.948322][T12283] IPv6: NLM_F_CREATE should be set when creating new route [ 217.962228][ T5876] IPVS: starting estimator thread 0... [ 218.053377][T12286] IPVS: using max 31 ests per chain, 74400 per kthread [ 218.148418][T12299] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 218.513339][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 218.513433][ T5834] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 220.606030][T12260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.798916][T12312] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 220.947076][T12329] __nla_validate_parse: 3 callbacks suppressed [ 220.947094][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 220.997674][T12332] netlink: 'syz.3.1820': attribute type 9 has an invalid length. [ 221.007399][T12332] netlink: 'syz.3.1820': attribute type 11 has an invalid length. [ 221.034303][T12332] netlink: 'syz.3.1820': attribute type 12 has an invalid length. [ 221.043171][T12332] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1820'. [ 221.055217][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 221.218114][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 221.432400][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 221.442356][T12367] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1829'. [ 221.735659][T12388] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1835'. [ 221.767096][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1834'. [ 221.841957][T12394] xt_hashlimit: size too large, truncated to 1048576 [ 222.041086][T12405] netlink: 'syz.2.1838': attribute type 2 has an invalid length. [ 222.044115][T12408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1838'. [ 222.133411][T12405] netlink: 'syz.2.1838': attribute type 2 has an invalid length. [ 222.190976][T12417] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1841'. [ 222.464460][T12439] tipc: Started in network mode [ 222.471281][T12439] tipc: Node identity 2a7e9aac1227, cluster identity 4711 [ 222.479036][T12439] tipc: Enabled bearer , priority 0 [ 222.488942][T12439] syzkaller0: entered promiscuous mode [ 222.496806][T12439] syzkaller0: entered allmulticast mode [ 222.536160][T12439] tipc: Resetting bearer [ 222.581353][T12439] tipc: Disabling bearer [ 222.849572][T12465] netlink: 'syz.3.1854': attribute type 3 has an invalid length. [ 223.127979][T12478] tipc: Enabling of bearer rejected, failed to enable media [ 224.021677][T12547] erspan0: entered promiscuous mode [ 224.238784][T12560] xt_l2tp: wrong L2TP version: 6 [ 225.189379][T12624] batadv_slave_1: entered promiscuous mode [ 225.226709][T12624] batadv_slave_1: left promiscuous mode [ 225.515351][T12652] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 225.688815][T12652] veth9: entered allmulticast mode [ 225.968036][T12662] syzkaller0: entered promiscuous mode [ 225.974049][T12662] syzkaller0: entered allmulticast mode [ 226.285306][T12666] nbd1: detected capacity change from 0 to 63 [ 226.296487][ T5836] block nbd1: Receive control failed (result -104) [ 226.296487][ T5834] block nbd1: Receive control failed (result -32) [ 226.544686][T12675] __nla_validate_parse: 16 callbacks suppressed [ 226.544699][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 226.567498][T12677] netlink: 'syz.2.1917': attribute type 3 has an invalid length. [ 226.595611][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'. [ 226.607260][T12678] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 226.608285][T12675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'. [ 226.627297][T12675] netlink: 'syz.1.1916': attribute type 7 has an invalid length. [ 226.637916][T12675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1916'. [ 226.693842][T12678] bond5: entered allmulticast mode [ 226.743926][T12678] bridge5: entered allmulticast mode [ 226.778233][T12678] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 226.928197][T12682] bridge6: entered allmulticast mode [ 226.942693][T12682] bond5: (slave bridge6): Enslaving as a backup interface with a down link [ 227.026636][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1921'. [ 227.047546][T12695] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1921'. [ 227.096845][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'. [ 227.119801][T12695] veth5: entered promiscuous mode [ 227.152500][T12702] erspan0: entered promiscuous mode [ 227.159241][T12702] macvtap2: entered promiscuous mode [ 227.167841][T12702] macvtap2: entered allmulticast mode [ 227.186348][T12702] erspan0: entered allmulticast mode [ 227.275217][T12714] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.300007][T12718] syzkaller1: entered promiscuous mode [ 227.305678][T12718] syzkaller1: entered allmulticast mode [ 227.436043][T12729] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1930'. [ 227.527543][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 227.537277][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 227.622903][T12745] pim6reg: entered allmulticast mode [ 227.636788][T12745] netlink: 'syz.0.1935': attribute type 15 has an invalid length. [ 227.798747][ T13] wlan1: Trigger new scan to find an IBSS to join [ 228.116034][T12762] netlink: 'syz.0.1941': attribute type 33 has an invalid length. [ 228.189082][T12766] ip6gre1: entered promiscuous mode [ 228.195121][T12766] ip6gre1: entered allmulticast mode [ 228.593862][T12803] netlink: 'syz.2.1953': attribute type 1 has an invalid length. [ 228.617849][T12803] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.636818][T12803] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.644214][T12803] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 228.656103][T12803] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 228.691264][T12805] veth7: entered promiscuous mode [ 228.699759][T12805] bond4: (slave veth7): Enslaving as an active interface with a down link [ 228.720051][T12803] vlan3: entered allmulticast mode [ 228.725250][T12803] bond4: entered allmulticast mode [ 229.430900][T12823] vlan1: entered promiscuous mode [ 229.440078][T12823] geneve1: entered promiscuous mode [ 229.445897][T12823] vlan1: entered allmulticast mode [ 229.451161][T12823] geneve1: entered allmulticast mode [ 229.535664][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.644270][T12847] syzkaller0: entered promiscuous mode [ 229.649882][T12847] syzkaller0: entered allmulticast mode [ 229.806701][T12858] bond12 (unregistering): Released all slaves [ 230.069685][T12880] netlink: 'syz.4.1974': attribute type 2 has an invalid length. [ 230.078788][T12880] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 230.290259][T12895] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 230.387182][T12899] bond5: option xmit_hash_policy: invalid value (64) [ 230.397007][T12899] bond5 (unregistering): Released all slaves [ 230.495666][T12908] netlink: 'syz.4.1982': attribute type 10 has an invalid length. [ 230.563785][T12906] x_tables: duplicate underflow at hook 1 [ 230.726726][T12921] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 230.760086][T12923] syzkaller0: entered promiscuous mode [ 230.766675][T12923] syzkaller0: entered allmulticast mode [ 230.785104][T12927] xt_TPROXY: Can be used only with -p tcp or -p udp [ 230.837048][ T1339] wlan1: Trigger new scan to find an IBSS to join [ 230.847761][T12921] openvswitch: netlink: IP tunnel dst address not specified [ 231.103992][T12953] vcan0 (unregistering): left allmulticast mode [ 231.897785][T12991] netlink: 'syz.1.2007': attribute type 9 has an invalid length. [ 231.964741][T12991] __nla_validate_parse: 14 callbacks suppressed [ 231.964767][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2007'. [ 232.048733][T12994] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 232.091957][T12994] bond5 (unregistering): Released all slaves [ 232.286395][T13023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.287168][T13021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.335645][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 232.358187][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 232.812502][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 233.208361][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 233.582960][T13098] xt_nfacct: accounting object `syz1' does not exist [ 233.687422][T13104] netlink: 'syz.3.2039': attribute type 10 has an invalid length. [ 233.692305][T13108] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2041'. [ 233.729329][T13104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.757801][T13104] .`: (slave batadv0): Enslaving as an active interface with an up link [ 233.793837][ T13] wlan1: Trigger new scan to find an IBSS to join [ 233.814805][T13112] vlan0: entered promiscuous mode [ 233.820223][T13112] vlan0: entered allmulticast mode [ 233.839624][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 233.870254][T13112] 8021q: VLANs not supported on gre0 [ 233.908609][T13114] syzkaller1: entered promiscuous mode [ 233.934460][T13114] syzkaller1: entered allmulticast mode [ 234.316514][T13156] netlink: 'syz.3.2055': attribute type 1 has an invalid length. [ 234.341775][T13158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2051'. [ 234.381557][T13156] bond20: entered promiscuous mode [ 234.386840][T13156] bond20: entered allmulticast mode [ 234.396454][T13156] 8021q: adding VLAN 0 to HW filter on device bond20 [ 234.412991][T13162] macvlan4: entered promiscuous mode [ 234.418796][T13162] macvlan4: entered allmulticast mode [ 234.426989][T13162] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 234.713136][ T13] wlan1: Creating new IBSS network, BSSID 3e:58:fe:91:50:51 [ 235.030858][T13145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.210827][T13201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.462202][T13216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2070'. [ 235.609887][T13229] netlink: zone id is out of range [ 235.616077][T13229] netlink: zone id is out of range [ 235.627605][T13229] netlink: zone id is out of range [ 235.632762][T13229] netlink: zone id is out of range [ 235.648272][T13229] netlink: zone id is out of range [ 235.659872][T13229] netlink: zone id is out of range [ 235.672898][T13229] netlink: zone id is out of range [ 235.689655][T13229] netlink: zone id is out of range [ 235.695430][T13229] netlink: zone id is out of range [ 235.712697][T13229] netlink: zone id is out of range [ 235.734649][T13242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2077'. [ 235.872775][T13247] syzkaller0: entered promiscuous mode [ 235.878846][T13247] syzkaller0: entered allmulticast mode [ 236.252112][T13267] netlink: 'syz.2.2085': attribute type 4 has an invalid length. [ 236.644817][T13280] sctp: [Deprecated]: syz.3.2089 (pid 13280) Use of int in max_burst socket option. [ 236.644817][T13280] Use struct sctp_assoc_value instead [ 237.570837][T13292] __nla_validate_parse: 8 callbacks suppressed [ 237.570857][T13292] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2092'. [ 237.595570][T13294] netlink: 'syz.1.2092': attribute type 5 has an invalid length. [ 237.760076][T13311] x_tables: duplicate underflow at hook 1 [ 237.783946][T13312] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2097'. [ 237.903428][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2098'. [ 238.058090][T13345] : renamed from bond0 [ 238.217495][T13354] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2106'. [ 238.288199][T13354] sch_fq: defrate 53322 ignored. [ 238.485452][T13370] netlink: 'syz.2.2111': attribute type 15 has an invalid length. [ 238.485452][T13369] netlink: 'syz.2.2111': attribute type 15 has an invalid length. [ 238.485477][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'. [ 238.509941][T13369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'. [ 238.693979][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 239.849679][ T58] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.849837][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 239.868890][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 239.871411][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.913097][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.942012][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.027008][T13400] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2119'. [ 240.201329][T13414] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.208579][T13414] bridge0: port 1(bridge_slave_0) entered listening state [ 240.824982][T13458] bond0: (slave batadv0): Releasing backup interface [ 240.851845][T13433] geneve1 speed is unknown, defaulting to 1000 [ 241.095738][T13475] FAULT_INJECTION: forcing a failure. [ 241.095738][T13475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.123869][T13475] CPU: 0 UID: 0 PID: 13475 Comm: syz.1.2143 Not tainted syzkaller #0 PREEMPT(full) [ 241.123897][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.123924][T13475] Call Trace: [ 241.123934][T13475] [ 241.123942][T13475] dump_stack_lvl+0xe8/0x150 [ 241.123975][T13475] should_fail_ex+0x412/0x560 [ 241.124005][T13475] _copy_from_iter+0x1d3/0x1670 [ 241.124035][T13475] ? rcu_is_watching+0x15/0xb0 [ 241.124067][T13475] ? __pfx__copy_from_iter+0x10/0x10 [ 241.124102][T13475] ? netlink_sendmsg+0x650/0xb40 [ 241.124128][T13475] ? skb_put+0x11b/0x210 [ 241.124150][T13475] netlink_sendmsg+0x6c0/0xb40 [ 241.124187][T13475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.124217][T13475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.124245][T13475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.124270][T13475] ____sys_sendmsg+0x972/0x9f0 [ 241.124300][T13475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.124330][T13475] ? import_iovec+0x73/0xa0 [ 241.124353][T13475] ___sys_sendmsg+0x2a5/0x360 [ 241.124380][T13475] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.124435][T13475] ? __fget_files+0x2a/0x420 [ 241.124468][T13475] ? __fget_files+0x3a0/0x420 [ 241.124504][T13475] __x64_sys_sendmsg+0x1bd/0x2a0 [ 241.124528][T13475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.124559][T13475] ? __pfx_ksys_write+0x10/0x10 [ 241.124591][T13475] do_syscall_64+0x14d/0xf80 [ 241.124611][T13475] ? trace_irq_disable+0x3b/0x150 [ 241.124637][T13475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.124656][T13475] ? clear_bhb_loop+0x40/0x90 [ 241.124679][T13475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.124697][T13475] RIP: 0033:0x7fe8a3b9c799 [ 241.124715][T13475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.124732][T13475] RSP: 002b:00007fe8a4a6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.124752][T13475] RAX: ffffffffffffffda RBX: 00007fe8a3e15fa0 RCX: 00007fe8a3b9c799 [ 241.124766][T13475] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 241.124778][T13475] RBP: 00007fe8a4a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 241.124790][T13475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.124801][T13475] R13: 00007fe8a3e16038 R14: 00007fe8a3e15fa0 R15: 00007fff37855388 [ 241.124832][T13475] [ 241.447700][T13486] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 241.523788][T13491] netlink: 'syz.2.2147': attribute type 33 has an invalid length. [ 241.529640][T13486] bond12: entered promiscuous mode [ 241.541950][T13486] 8021q: adding VLAN 0 to HW filter on device bond12 [ 241.574579][T13488] bond12: (slave bridge4): making interface the new active one [ 241.582330][T13488] bridge4: entered promiscuous mode [ 241.591114][T13488] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 241.601687][T13486] bridge0: Device is already in use. [ 242.274098][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 244.092458][T13479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.307116][T13519] netlink: 'syz.3.2156': attribute type 2 has an invalid length. [ 244.315652][T13521] FAULT_INJECTION: forcing a failure. [ 244.315652][T13521] name failslab, interval 1, probability 0, space 0, times 0 [ 244.315687][T13521] CPU: 0 UID: 0 PID: 13521 Comm: syz.4.2155 Not tainted syzkaller #0 PREEMPT(full) [ 244.315707][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.315719][T13521] Call Trace: [ 244.315726][T13521] [ 244.315734][T13521] dump_stack_lvl+0xe8/0x150 [ 244.315765][T13521] should_fail_ex+0x412/0x560 [ 244.315797][T13521] should_failslab+0xa8/0x100 [ 244.315821][T13521] ? skb_clone+0x212/0x3a0 [ 244.315842][T13521] kmem_cache_alloc_noprof+0x87/0x650 [ 244.315862][T13521] ? __netlink_lookup+0xc6/0x8b0 [ 244.315888][T13521] skb_clone+0x212/0x3a0 [ 244.315912][T13521] __netlink_deliver_tap+0x404/0x850 [ 244.315951][T13521] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.315980][T13521] netlink_deliver_tap+0x19c/0x1b0 [ 244.316008][T13521] netlink_unicast+0x7e3/0x9b0 [ 244.316041][T13521] ? __pfx_netlink_unicast+0x10/0x10 [ 244.316068][T13521] ? netlink_sendmsg+0x650/0xb40 [ 244.316093][T13521] ? skb_put+0x11b/0x210 [ 244.316116][T13521] netlink_sendmsg+0x813/0xb40 [ 244.316159][T13521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.316189][T13521] ? aa_sock_msg_perm+0xf1/0x1b0 [ 244.316218][T13521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.316242][T13521] ____sys_sendmsg+0x972/0x9f0 [ 244.316271][T13521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.316302][T13521] ? import_iovec+0x73/0xa0 [ 244.316326][T13521] ___sys_sendmsg+0x2a5/0x360 [ 244.316353][T13521] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.316409][T13521] ? __fget_files+0x2a/0x420 [ 244.316435][T13521] ? __fget_files+0x3a0/0x420 [ 244.316471][T13521] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.316496][T13521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.316536][T13521] ? __pfx_ksys_write+0x10/0x10 [ 244.316567][T13521] do_syscall_64+0x14d/0xf80 [ 244.316586][T13521] ? trace_irq_disable+0x3b/0x150 [ 244.316607][T13521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.316623][T13521] ? clear_bhb_loop+0x40/0x90 [ 244.316645][T13521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.316663][T13521] RIP: 0033:0x7f341b19c799 [ 244.316680][T13521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.316697][T13521] RSP: 002b:00007f341c11b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.316716][T13521] RAX: ffffffffffffffda RBX: 00007f341b415fa0 RCX: 00007f341b19c799 [ 244.316729][T13521] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 244.316740][T13521] RBP: 00007f341c11b090 R08: 0000000000000000 R09: 0000000000000000 [ 244.316752][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.316763][T13521] R13: 00007f341b416038 R14: 00007f341b415fa0 R15: 00007ffe7d9da068 [ 244.316793][T13521] [ 244.364605][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.369047][ T5834] Bluetooth: hci4: link tx timeout [ 244.373163][ C0] bridge0: topology change detected, propagating [ 244.632253][ T5834] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 244.641895][ T5834] Bluetooth: hci4: link tx timeout [ 244.647523][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.750863][T13541] __nla_validate_parse: 7 callbacks suppressed [ 244.750881][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'. [ 245.104372][T13557] x_tables: duplicate underflow at hook 1 [ 245.219323][T13563] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 245.252226][T13563] bond9 (unregistering): Released all slaves [ 245.278197][T13567] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 245.396347][T13567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2165'. [ 245.417630][T13576] FAULT_INJECTION: forcing a failure. [ 245.417630][T13576] name failslab, interval 1, probability 0, space 0, times 0 [ 245.454418][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.2.2169 Not tainted syzkaller #0 PREEMPT(full) [ 245.454443][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.454453][T13576] Call Trace: [ 245.454460][T13576] [ 245.454467][T13576] dump_stack_lvl+0xe8/0x150 [ 245.454495][T13576] should_fail_ex+0x412/0x560 [ 245.454523][T13576] should_failslab+0xa8/0x100 [ 245.454546][T13576] __kmalloc_noprof+0xe8/0x760 [ 245.454568][T13576] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 245.454594][T13576] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 245.454624][T13576] genl_family_rcv_msg_doit+0xd9/0x330 [ 245.454660][T13576] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 245.454688][T13576] ? apparmor_capable+0x126/0x170 [ 245.454712][T13576] ? bpf_lsm_capable+0x9/0x20 [ 245.454736][T13576] ? security_capable+0x7e/0x2c0 [ 245.454768][T13576] genl_rcv_msg+0x61c/0x7a0 [ 245.454797][T13576] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.454817][T13576] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 245.454837][T13576] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 245.454862][T13576] ? __pfx_nl80211_post_doit+0x10/0x10 [ 245.454882][T13576] ? __lock_acquire+0x6b5/0x2cf0 [ 245.454916][T13576] netlink_rcv_skb+0x232/0x4b0 [ 245.454944][T13576] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.454965][T13576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.455009][T13576] ? down_read+0x272/0x2e0 [ 245.455030][T13576] ? genl_rcv+0xd/0x40 [ 245.455052][T13576] genl_rcv+0x28/0x40 [ 245.455070][T13576] netlink_unicast+0x80f/0x9b0 [ 245.455103][T13576] ? __pfx_netlink_unicast+0x10/0x10 [ 245.455130][T13576] ? netlink_sendmsg+0x650/0xb40 [ 245.455154][T13576] ? skb_put+0x11b/0x210 [ 245.455176][T13576] netlink_sendmsg+0x813/0xb40 [ 245.455212][T13576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.455242][T13576] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.455270][T13576] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.455295][T13576] ____sys_sendmsg+0x972/0x9f0 [ 245.455324][T13576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.455354][T13576] ? import_iovec+0x73/0xa0 [ 245.455380][T13576] ___sys_sendmsg+0x2a5/0x360 [ 245.455407][T13576] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.455461][T13576] ? __fget_files+0x2a/0x420 [ 245.455487][T13576] ? __fget_files+0x3a0/0x420 [ 245.455522][T13576] __x64_sys_sendmsg+0x1bd/0x2a0 [ 245.455547][T13576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.455578][T13576] ? __pfx_ksys_write+0x10/0x10 [ 245.455609][T13576] do_syscall_64+0x14d/0xf80 [ 245.455629][T13576] ? trace_irq_disable+0x3b/0x150 [ 245.455661][T13576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.455679][T13576] ? clear_bhb_loop+0x40/0x90 [ 245.455701][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.455720][T13576] RIP: 0033:0x7f47c059c799 [ 245.455738][T13576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.455754][T13576] RSP: 002b:00007f47c152a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.455775][T13576] RAX: ffffffffffffffda RBX: 00007f47c0815fa0 RCX: 00007f47c059c799 [ 245.455789][T13576] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 245.455801][T13576] RBP: 00007f47c152a090 R08: 0000000000000000 R09: 0000000000000000 [ 245.455812][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.455823][T13576] R13: 00007f47c0816038 R14: 00007f47c0815fa0 R15: 00007ffef24479c8 [ 245.455854][T13576] [ 245.894474][T13584] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2173'. [ 245.926628][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'. [ 245.956384][T13584] net_ratelimit: 379 callbacks suppressed [ 245.956402][T13584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.046872][T13588] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 246.054958][T13588] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2172'. [ 246.280075][T13611] syzkaller1: entered promiscuous mode [ 246.326384][T13611] syzkaller1: entered allmulticast mode [ 246.392634][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 246.539776][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'. [ 246.582498][T13639] x_tables: duplicate underflow at hook 3 [ 246.689246][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 246.729325][T13645] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 246.761054][T13645] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2185'. [ 246.804761][T13645] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 246.853163][T13657] xt_ecn: cannot match TCP bits for non-tcp packets [ 246.873353][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'. [ 246.975371][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2191'. [ 247.395357][T13695] syzkaller0: entered promiscuous mode [ 247.408961][T13695] syzkaller0: entered allmulticast mode [ 247.768739][T13707] syzkaller0: entered promiscuous mode [ 247.785721][T13707] syzkaller0: entered allmulticast mode [ 248.116229][T13739] openvswitch: netlink: Flow actions attr not present in new flow. [ 248.121791][T13737] --map-set only usable from mangle table [ 248.176190][T13737] sctp: [Deprecated]: syz.0.2211 (pid 13737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.176190][T13737] Use struct sctp_sack_info instead [ 248.220032][T13747] Cannot find add_set index 0 as target [ 248.300705][T13746] veth9: entered promiscuous mode [ 248.305937][T13746] veth9: entered allmulticast mode [ 248.499388][T13771] block nbd3: NBD_DISCONNECT [ 248.504746][T13771] block nbd3: Send disconnect failed -32 [ 248.510418][T13771] block nbd3: shutting down sockets [ 248.519858][ C0] blk_print_req_error: 286 callbacks suppressed [ 248.519881][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.535739][ C0] buffer_io_error: 286 callbacks suppressed [ 248.535751][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 248.549493][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.559018][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 248.566880][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.576411][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 248.584261][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.593770][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 248.604935][ T6030] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.616363][ T6030] Buffer I/O error on dev nbd3, logical block 0, async page read [ 248.627388][ T6030] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.636987][ T6030] Buffer I/O error on dev nbd3, logical block 1, async page read [ 248.662451][ T6030] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.681952][ T6030] Buffer I/O error on dev nbd3, logical block 2, async page read [ 248.735917][ T6030] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.761828][ T6030] Buffer I/O error on dev nbd3, logical block 3, async page read [ 248.783995][ T6030] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.800739][T13782] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 248.808703][ T6030] Buffer I/O error on dev nbd3, logical block 0, async page read [ 248.833668][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 248.890219][ T6030] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 248.900651][ T6030] Buffer I/O error on dev nbd3, logical block 1, async page read [ 248.911461][ T6030] ldm_validate_partition_table(): Disk read failed. [ 248.921047][ T6030] Dev nbd3: unable to read RDB block 0 [ 248.932503][ T6030] nbd3: unable to read partition table [ 248.955700][ T6030] ldm_validate_partition_table(): Disk read failed. [ 248.974069][ T6030] Dev nbd3: unable to read RDB block 0 [ 248.980281][ T6030] nbd3: unable to read partition table [ 249.224224][T13810] tipc: Started in network mode [ 249.229401][T13810] tipc: Node identity ac14140f, cluster identity 4711 [ 249.247572][T13810] tipc: New replicast peer: 255.255.255.255 [ 249.264692][T13810] tipc: Enabled bearer , priority 10 [ 249.290145][T13817] netlink: Conntrack attr has 4 unknown bytes [ 249.333504][T13823] netlink: 'syz.3.2236': attribute type 11 has an invalid length. [ 249.985464][T13863] netlink: 'syz.0.2242': attribute type 2 has an invalid length. [ 250.010676][T13853] syzkaller0: entered promiscuous mode [ 250.025625][T13853] syzkaller0: entered allmulticast mode [ 250.397185][ T42] tipc: Node number set to 2886997007 [ 250.511457][T13891] netlink: 'syz.3.2248': attribute type 1 has an invalid length. [ 250.749247][T13901] xt_TCPMSS: Only works on TCP SYN packets [ 250.969275][T13914] openvswitch: netlink: IP tunnel dst address not specified [ 251.605829][T13946] __nla_validate_parse: 15 callbacks suppressed [ 251.605848][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 252.195956][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2257'. [ 253.326615][T13946] macvlan1: entered allmulticast mode [ 253.433088][T13999] x_tables: duplicate underflow at hook 3 [ 253.627843][T14015] block nbd0: Unsupported socket: should be TCP or UNIX. [ 253.649250][T14012] syzkaller0: entered promiscuous mode [ 253.657787][T14012] syzkaller0: entered allmulticast mode [ 253.674274][T14012] netlink: 'syz.2.2262': attribute type 1 has an invalid length. [ 253.687108][T14018] syzkaller0: entered promiscuous mode [ 253.692769][T14018] syzkaller0: entered allmulticast mode [ 253.721969][T14012] bond5: entered promiscuous mode [ 253.728643][T14012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.936405][T14021] bond5: (slave bridge4): making interface the new active one [ 253.978402][T14021] bridge4: entered promiscuous mode [ 254.004020][T14021] bridge4: left promiscuous mode [ 254.186014][T14053] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2272'. [ 254.233610][T14053] nbd: illegal input index -8454144 [ 254.389528][T14068] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 254.430723][T14067] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2274'. [ 254.601207][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 254.651289][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 254.681185][T14090] bridge: RTM_NEWNEIGH with invalid ether address [ 254.710547][T14090] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2280'. [ 254.847884][T14100] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20000 [ 255.391939][T14138] netlink: 'syz.1.2291': attribute type 2 has an invalid length. [ 255.502870][T14140] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2292'. [ 255.512700][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2294'. [ 255.531619][T14148] netlink: 'syz.3.2295': attribute type 12 has an invalid length. [ 255.586224][T14148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2295'. [ 255.639636][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.754560][T14158] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3944. macoff=96 [ 256.360402][T14209] siw: device registration error -23 [ 256.744425][T14225] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 256.764411][T14225] netlink: 'syz.0.2318': attribute type 10 has an invalid length. [ 256.836308][T14230] geneve3: entered promiscuous mode [ 256.841572][T14230] geneve3: entered allmulticast mode [ 256.918843][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 256.926664][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 256.935379][ T9206] block nbd1: Dead connection, failed to find a fallback [ 256.948230][ T9206] block nbd1: shutting down sockets [ 256.955003][ T9206] blk_print_req_error: 138 callbacks suppressed [ 256.955048][ T9206] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.973052][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 256.980922][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 256.988604][ T9206] buffer_io_error: 138 callbacks suppressed [ 256.988618][ T9206] Buffer I/O error on dev nbd1, logical block 0, async page read [ 257.002538][ T9206] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.012692][ T9206] Buffer I/O error on dev nbd1, logical block 3, async page read [ 257.021311][ T9206] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.031409][ T9206] Buffer I/O error on dev nbd1, logical block 2, async page read [ 257.039453][ T9206] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.049783][ T9206] Buffer I/O error on dev nbd1, logical block 1, async page read [ 257.058127][ T8422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.068137][ T8422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 257.076557][ T8422] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.086248][ T8422] Buffer I/O error on dev nbd1, logical block 1, async page read [ 257.094147][ T8422] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.104446][ T8422] Buffer I/O error on dev nbd1, logical block 2, async page read [ 257.112614][ T8422] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.122739][ T8422] Buffer I/O error on dev nbd1, logical block 3, async page read [ 257.130929][ T8422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.140839][ T8422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 257.148736][ T8422] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.158534][ T8422] Buffer I/O error on dev nbd1, logical block 1, async page read [ 257.167265][ T8422] ldm_validate_partition_table(): Disk read failed. [ 257.174643][ T8422] Dev nbd1: unable to read RDB block 0 [ 257.180683][ T8422] nbd1: unable to read partition table [ 257.198911][ T8422] ldm_validate_partition_table(): Disk read failed. [ 257.206092][ T8422] Dev nbd1: unable to read RDB block 0 [ 257.213944][ T8422] nbd1: unable to read partition table [ 257.517459][T14272] __nla_validate_parse: 4 callbacks suppressed [ 257.517477][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2328'. [ 257.549994][T14271] syzkaller0: entered promiscuous mode [ 257.578641][T14271] syzkaller0: entered allmulticast mode [ 257.603460][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2329'. [ 257.755539][T14285] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 257.762735][T14285] 0: hsr_addr_subst_dest: Unknown node [ 257.810586][T14262] geneve1 speed is unknown, defaulting to 1000 [ 258.209779][T14300] nbd: nbd0 already in use [ 258.230465][T14300] block nbd2: NBD_DISCONNECT [ 258.244168][T14300] block nbd2: Send disconnect failed -32 [ 258.258909][T14300] block nbd2: shutting down sockets [ 258.268358][T14291] netlink: 'syz.3.2334': attribute type 12 has an invalid length. [ 258.281231][T14291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2334'. [ 258.505377][T14309] veth1_macvtap: left promiscuous mode [ 258.839126][T14336] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2346'. [ 258.899615][T14341] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 258.912091][T14341] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 259.097886][T14345] netlink: 'syz.2.2351': attribute type 30 has an invalid length. [ 259.114118][T14353] sctp: [Deprecated]: syz.4.2353 (pid 14353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.114118][T14353] Use struct sctp_sack_info instead [ 259.229880][T14361] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2356'. [ 259.255382][T14363] netlink: 182812 bytes leftover after parsing attributes in process `syz.1.2355'. [ 259.355611][T14368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2358'. [ 259.423167][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 259.491892][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 259.569815][T14384] syzkaller1: entered promiscuous mode [ 259.575894][T14384] syzkaller1: entered allmulticast mode [ 259.644021][T14391] netlink: 516 bytes leftover after parsing attributes in process `syz.0.2365'. [ 259.997568][T14414] x_tables: duplicate underflow at hook 3 [ 260.299685][T14442] netlink: zone id is out of range [ 260.318990][T14442] netlink: zone id is out of range [ 260.339257][T14442] netlink: zone id is out of range [ 260.376772][T14442] netlink: zone id is out of range [ 260.381954][T14442] netlink: zone id is out of range [ 260.448521][T14442] netlink: zone id is out of range [ 260.483630][T14442] netlink: zone id is out of range [ 260.488790][T14442] netlink: zone id is out of range [ 260.749822][T14465] netlink: 'syz.0.2387': attribute type 2 has an invalid length. [ 260.767031][T14465] netlink: 'syz.0.2387': attribute type 1 has an invalid length. [ 260.888935][T14471] netlink: 'syz.4.2389': attribute type 4 has an invalid length. [ 261.393148][T14500] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.455792][T14500] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 261.705205][T14528] syz_tun: entered allmulticast mode [ 261.972179][T14550] netlink: 'syz.4.2413': attribute type 1 has an invalid length. [ 261.982186][T14552] veth0: entered promiscuous mode [ 262.024480][T14550] 8021q: adding VLAN 0 to HW filter on device bond9 [ 262.149800][T14558] bond9: (slave geneve4): making interface the new active one [ 262.158989][T14558] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 262.192903][ T7607] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.203789][ T7607] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.219818][ T7607] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.461047][T14575] veth0: entered promiscuous mode [ 262.522586][T14575] veth0: left promiscuous mode [ 262.593712][T14591] netlink: 'syz.2.2423': attribute type 10 has an invalid length. [ 262.722649][T14598] __nla_validate_parse: 12 callbacks suppressed [ 262.722668][T14598] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2425'. [ 263.116522][T14605] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2429'. [ 263.161210][T14605] net_ratelimit: 6 callbacks suppressed [ 263.161228][T14605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.212898][T14609] lo: entered promiscuous mode [ 263.235854][T14612] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2429'. [ 263.254038][T14609] tunl0: entered promiscuous mode [ 263.259629][T14609] gre0: entered promiscuous mode [ 263.319048][T14609] gretap0: entered promiscuous mode [ 263.328476][T14622] netlink: 'syz.2.2433': attribute type 2 has an invalid length. [ 263.449392][T14609] ip_vti0: entered promiscuous mode [ 263.595302][T14638] netlink: 'syz.0.2438': attribute type 9 has an invalid length. [ 263.597706][T14636] syzkaller1: entered promiscuous mode [ 263.608969][T14636] syzkaller1: entered allmulticast mode [ 263.797425][T14650] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 263.953501][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 264.069191][T14661] block nbd0: reconnected socket [ 264.069707][ T5142] block nbd0: Receive control failed (result -107) [ 264.118350][ T5834] block nbd2: Receive control failed (result -32) [ 264.134523][T14663] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 264.312159][T14667] bond21: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 264.431330][T14677] tipc: Enabling of bearer rejected, failed to enable media [ 265.070366][T14712] netlink: 160812 bytes leftover after parsing attributes in process `syz.0.2458'. [ 265.291879][T14736] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 265.674678][T14745] geneve1 speed is unknown, defaulting to 1000 [ 268.205122][T14724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.385452][T14766] Cannot find del_set index 4 as target [ 268.423775][T14769] netlink: 'syz.0.2470': attribute type 13 has an invalid length. [ 268.487253][T14769] veth0_macvtap: left promiscuous mode [ 268.504000][T14769] macvtap0: entered allmulticast mode [ 268.528166][T14769] macvtap0: refused to change device tx_queue_len [ 268.565025][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'. [ 268.588960][T14787] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2477'. [ 268.647748][T14791] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 268.658028][T14791] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2474'. [ 268.755647][T14798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2480'. [ 268.844424][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2482'. [ 268.922336][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'. [ 269.313076][T14826] dvmrp0: entered allmulticast mode [ 270.028673][T14851] ip6t_srh: unknown srh match flags 5F28 [ 270.029265][T14850] ip6t_srh: unknown srh match flags 5F28 [ 270.866784][T14868] netlink: 'syz.3.2501': attribute type 1 has an invalid length. [ 270.897032][T14868] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2501'. [ 270.987364][T14868] tipc: Enabled bearer , priority 0 [ 271.031666][T14868] wg0: entered allmulticast mode [ 271.147130][T14867] tipc: Disabling bearer [ 271.344929][T14903] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2509'. [ 271.388743][T14906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.396053][T14906] IPv6: NLM_F_CREATE should be set when creating new route [ 271.489115][T14914] Unsupported ieee802154 address type: 0 [ 271.496274][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 271.655887][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 272.250189][T14956] "syz.0.2526" (14956) uses obsolete ecb(arc4) skcipher [ 272.398896][T14986] openvswitch: netlink: EtherType 0 is less than min 600 [ 272.446872][T14986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.517136][T15001] [ 272.519508][T15001] ====================================================== [ 272.526527][T15001] WARNING: possible circular locking dependency detected [ 272.533569][T15001] syzkaller #0 Not tainted [ 272.537994][T15001] ------------------------------------------------------ [ 272.545020][T15001] syz.0.2540/15001 is trying to acquire lock: [ 272.551092][T15001] ffffffff8e883040 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 272.560431][T15001] [ 272.560431][T15001] but task is already holding lock: [ 272.567786][T15001] ffff88807c463538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 272.577000][T15001] [ 272.577000][T15001] which lock already depends on the new lock. [ 272.577000][T15001] [ 272.587410][T15001] [ 272.587410][T15001] the existing dependency chain (in reverse order) is: [ 272.596415][T15001] [ 272.596415][T15001] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 272.603994][T15001] __mutex_lock+0x19f/0x1300 [ 272.609125][T15001] __ipv6_dev_mc_inc+0x4e/0xa50 [ 272.614504][T15001] __ipv6_sock_mc_join+0x503/0x750 [ 272.620137][T15001] do_ipv6_mcast_group_source+0x3df/0x4c0 [ 272.626381][T15001] do_ipv6_setsockopt+0x16d8/0x31c0 [ 272.632102][T15001] ipv6_setsockopt+0x59/0x170 [ 272.637297][T15001] do_sock_setsockopt+0x17c/0x1b0 [ 272.642844][T15001] __x64_sys_setsockopt+0x13d/0x1b0 [ 272.648563][T15001] do_syscall_64+0x14d/0xf80 [ 272.653674][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.660084][T15001] [ 272.660084][T15001] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 272.667818][T15001] lock_sock_nested+0x48/0x100 [ 272.673120][T15001] inet_shutdown+0x6a/0x390 [ 272.678145][T15001] nbd_mark_nsock_dead+0x2e9/0x560 [ 272.683779][T15001] recv_work+0x1c7f/0x1d90 [ 272.688716][T15001] process_scheduled_works+0xb6e/0x18c0 [ 272.694789][T15001] worker_thread+0xa53/0xfc0 [ 272.699900][T15001] kthread+0x388/0x470 [ 272.704489][T15001] ret_from_fork+0x51e/0xb90 [ 272.709603][T15001] ret_from_fork_asm+0x1a/0x30 [ 272.714889][T15001] [ 272.714889][T15001] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 272.722535][T15001] __mutex_lock+0x19f/0x1300 [ 272.727648][T15001] nbd_queue_rq+0x37b/0x1100 [ 272.732758][T15001] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 272.738824][T15001] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 272.745675][T15001] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 272.752177][T15001] blk_mq_run_hw_queue+0x348/0x4f0 [ 272.757811][T15001] blk_mq_dispatch_list+0xd16/0xe10 [ 272.763535][T15001] blk_mq_flush_plug_list+0x48d/0x570 [ 272.769431][T15001] __blk_flush_plug+0x3ed/0x4d0 [ 272.774806][T15001] __submit_bio+0x28d/0x580 [ 272.779833][T15001] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 272.785986][T15001] block_read_full_folio+0x599/0x830 [ 272.791799][T15001] filemap_read_folio+0x137/0x3b0 [ 272.797344][T15001] do_read_cache_folio+0x358/0x590 [ 272.802978][T15001] read_part_sector+0xb6/0x2b0 [ 272.808265][T15001] adfspart_check_ICS+0xa5/0xa40 [ 272.813725][T15001] bdev_disk_changed+0x7ba/0x1550 [ 272.819287][T15001] blkdev_get_whole+0x380/0x510 [ 272.824660][T15001] bdev_open+0x31e/0xd30 [ 272.829425][T15001] blkdev_open+0x470/0x610 [ 272.834362][T15001] do_dentry_open+0x785/0x14e0 [ 272.839646][T15001] vfs_open+0x3b/0x340 [ 272.844241][T15001] path_openat+0x2e08/0x3860 [ 272.849355][T15001] do_file_open+0x23e/0x4a0 [ 272.854377][T15001] do_sys_openat2+0x113/0x200 [ 272.859582][T15001] __x64_sys_openat+0x138/0x170 [ 272.864956][T15001] do_syscall_64+0x14d/0xf80 [ 272.870066][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.876476][T15001] [ 272.876476][T15001] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 272.883694][T15001] __mutex_lock+0x19f/0x1300 [ 272.888825][T15001] nbd_queue_rq+0xc6/0x1100 [ 272.893847][T15001] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 272.899913][T15001] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 272.906764][T15001] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 272.913265][T15001] blk_mq_run_hw_queue+0x348/0x4f0 [ 272.918895][T15001] blk_mq_dispatch_list+0xd16/0xe10 [ 272.924617][T15001] blk_mq_flush_plug_list+0x48d/0x570 [ 272.930511][T15001] __blk_flush_plug+0x3ed/0x4d0 [ 272.935884][T15001] __submit_bio+0x28d/0x580 [ 272.940908][T15001] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 272.947065][T15001] block_read_full_folio+0x599/0x830 [ 272.952877][T15001] filemap_read_folio+0x137/0x3b0 [ 272.958423][T15001] do_read_cache_folio+0x358/0x590 [ 272.964064][T15001] read_part_sector+0xb6/0x2b0 [ 272.969353][T15001] adfspart_check_ICS+0xa5/0xa40 [ 272.974814][T15001] bdev_disk_changed+0x7ba/0x1550 [ 272.980360][T15001] blkdev_get_whole+0x380/0x510 [ 272.985736][T15001] bdev_open+0x31e/0xd30 [ 272.990500][T15001] blkdev_open+0x470/0x610 [ 272.995439][T15001] do_dentry_open+0x785/0x14e0 [ 273.000728][T15001] vfs_open+0x3b/0x340 [ 273.005320][T15001] path_openat+0x2e08/0x3860 [ 273.010436][T15001] do_file_open+0x23e/0x4a0 [ 273.015459][T15001] do_sys_openat2+0x113/0x200 [ 273.020664][T15001] __x64_sys_openat+0x138/0x170 [ 273.026045][T15001] do_syscall_64+0x14d/0xf80 [ 273.031158][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.037570][T15001] [ 273.037570][T15001] -> #3 (set->srcu){.+.+}-{0:0}: [ 273.044699][T15001] __synchronize_srcu+0xca/0x3e0 [ 273.050167][T15001] elevator_switch+0x1e8/0x7a0 [ 273.055452][T15001] elevator_change+0x2cc/0x450 [ 273.060737][T15001] elevator_set_default+0x36c/0x430 [ 273.066457][T15001] blk_register_queue+0x366/0x430 [ 273.072006][T15001] __add_disk+0x677/0xd50 [ 273.076860][T15001] add_disk_fwnode+0xfb/0x480 [ 273.082059][T15001] nbd_dev_add+0x72c/0xb50 [ 273.086996][T15001] nbd_init+0x168/0x1f0 [ 273.091675][T15001] do_one_initcall+0x250/0x8d0 [ 273.096968][T15001] do_initcall_level+0x104/0x190 [ 273.102428][T15001] do_initcalls+0x59/0xa0 [ 273.107278][T15001] kernel_init_freeable+0x2a6/0x3e0 [ 273.112998][T15001] kernel_init+0x1d/0x1d0 [ 273.117858][T15001] ret_from_fork+0x51e/0xb90 [ 273.122975][T15001] ret_from_fork_asm+0x1a/0x30 [ 273.128266][T15001] [ 273.128266][T15001] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 273.136083][T15001] __mutex_lock+0x19f/0x1300 [ 273.141200][T15001] elevator_change+0x1b3/0x450 [ 273.146485][T15001] elevator_set_none+0xb5/0x140 [ 273.151857][T15001] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 273.158188][T15001] nbd_start_device+0x17f/0xb10 [ 273.163559][T15001] nbd_genl_connect+0x165b/0x1cf0 [ 273.169189][T15001] genl_family_rcv_msg_doit+0x22a/0x330 [ 273.175257][T15001] genl_rcv_msg+0x61c/0x7a0 [ 273.180281][T15001] netlink_rcv_skb+0x232/0x4b0 [ 273.185569][T15001] genl_rcv+0x28/0x40 [ 273.190073][T15001] netlink_unicast+0x80f/0x9b0 [ 273.195364][T15001] netlink_sendmsg+0x813/0xb40 [ 273.200652][T15001] ____sys_sendmsg+0x972/0x9f0 [ 273.205945][T15001] ___sys_sendmsg+0x2a5/0x360 [ 273.211141][T15001] __x64_sys_sendmsg+0x1bd/0x2a0 [ 273.216601][T15001] do_syscall_64+0x14d/0xf80 [ 273.221718][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.228133][T15001] [ 273.228133][T15001] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 273.236742][T15001] blk_alloc_queue+0x546/0x680 [ 273.242032][T15001] __blk_mq_alloc_disk+0x197/0x390 [ 273.247667][T15001] nbd_dev_add+0x499/0xb50 [ 273.252610][T15001] nbd_init+0x168/0x1f0 [ 273.257285][T15001] do_one_initcall+0x250/0x8d0 [ 273.262572][T15001] do_initcall_level+0x104/0x190 [ 273.268033][T15001] do_initcalls+0x59/0xa0 [ 273.272884][T15001] kernel_init_freeable+0x2a6/0x3e0 [ 273.278602][T15001] kernel_init+0x1d/0x1d0 [ 273.283457][T15001] ret_from_fork+0x51e/0xb90 [ 273.288575][T15001] ret_from_fork_asm+0x1a/0x30 [ 273.293862][T15001] [ 273.293862][T15001] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 273.301075][T15001] __lock_acquire+0x15a5/0x2cf0 [ 273.306450][T15001] lock_acquire+0xf0/0x2e0 [ 273.311386][T15001] fs_reclaim_acquire+0x71/0x100 [ 273.316845][T15001] __kmalloc_cache_noprof+0x40/0x660 [ 273.322650][T15001] __ipv6_dev_mc_inc+0x44f/0xa50 [ 273.328117][T15001] __ipv6_sock_mc_join+0x503/0x750 [ 273.333754][T15001] inet6_addr_add+0x3cf/0xb20 [ 273.338955][T15001] inet6_rtm_newaddr+0xa17/0xe30 [ 273.344413][T15001] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 273.349877][T15001] netlink_rcv_skb+0x232/0x4b0 [ 273.355167][T15001] netlink_unicast+0x80f/0x9b0 [ 273.360455][T15001] netlink_sendmsg+0x813/0xb40 [ 273.365749][T15001] ____sys_sendmsg+0x972/0x9f0 [ 273.371035][T15001] ___sys_sendmsg+0x2a5/0x360 [ 273.376232][T15001] __x64_sys_sendmsg+0x1bd/0x2a0 [ 273.381692][T15001] do_syscall_64+0x14d/0xf80 [ 273.386805][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.393216][T15001] [ 273.393216][T15001] other info that might help us debug this: [ 273.393216][T15001] [ 273.403438][T15001] Chain exists of: [ 273.403438][T15001] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 273.403438][T15001] [ 273.416044][T15001] Possible unsafe locking scenario: [ 273.416044][T15001] [ 273.423485][T15001] CPU0 CPU1 [ 273.428842][T15001] ---- ---- [ 273.434200][T15001] lock(&idev->mc_lock); [ 273.438529][T15001] lock(sk_lock-AF_INET6); [ 273.445549][T15001] lock(&idev->mc_lock); [ 273.452398][T15001] lock(fs_reclaim); [ 273.456380][T15001] [ 273.456380][T15001] *** DEADLOCK *** [ 273.456380][T15001] [ 273.464516][T15001] 3 locks held by syz.0.2540/15001: [ 273.469703][T15001] #0: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 273.479108][T15001] #1: ffff888071071b20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x3be/0xb20 [ 273.488952][T15001] #2: ffff88807c463538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 273.498627][T15001] [ 273.498627][T15001] stack backtrace: [ 273.504514][T15001] CPU: 0 UID: 0 PID: 15001 Comm: syz.0.2540 Not tainted syzkaller #0 PREEMPT(full) [ 273.504535][T15001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.504544][T15001] Call Trace: [ 273.504553][T15001] [ 273.504561][T15001] dump_stack_lvl+0xe8/0x150 [ 273.504586][T15001] print_circular_bug+0x2e1/0x300 [ 273.504611][T15001] check_noncircular+0x12e/0x150 [ 273.504635][T15001] __lock_acquire+0x15a5/0x2cf0 [ 273.504655][T15001] ? rcu_is_watching+0x15/0xb0 [ 273.504685][T15001] ? __mutex_lock+0x319/0x1300 [ 273.504706][T15001] lock_acquire+0xf0/0x2e0 [ 273.504724][T15001] ? __kmalloc_cache_noprof+0x40/0x660 [ 273.504742][T15001] ? __pfx___mutex_lock+0x10/0x10 [ 273.504760][T15001] fs_reclaim_acquire+0x71/0x100 [ 273.504777][T15001] ? __kmalloc_cache_noprof+0x40/0x660 [ 273.504793][T15001] __kmalloc_cache_noprof+0x40/0x660 [ 273.504810][T15001] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 273.504833][T15001] __ipv6_dev_mc_inc+0x44f/0xa50 [ 273.504858][T15001] __ipv6_sock_mc_join+0x503/0x750 [ 273.504880][T15001] ? __local_bh_enable_ip+0xd0/0x130 [ 273.504901][T15001] inet6_addr_add+0x3cf/0xb20 [ 273.504924][T15001] inet6_rtm_newaddr+0xa17/0xe30 [ 273.504944][T15001] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 273.504959][T15001] ? __dev_queue_xmit+0x277/0x3890 [ 273.504987][T15001] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 273.505003][T15001] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 273.505028][T15001] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 273.505049][T15001] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.505071][T15001] ? ref_tracker_free+0x693/0x840 [ 273.505093][T15001] ? __copy_skb_header+0xa3/0x4a0 [ 273.505110][T15001] ? __pfx_ref_tracker_free+0x10/0x10 [ 273.505136][T15001] netlink_rcv_skb+0x232/0x4b0 [ 273.505159][T15001] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.505182][T15001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.505210][T15001] netlink_unicast+0x80f/0x9b0 [ 273.505233][T15001] ? __pfx_netlink_unicast+0x10/0x10 [ 273.505253][T15001] ? netlink_sendmsg+0x650/0xb40 [ 273.505274][T15001] ? skb_put+0x11b/0x210 [ 273.505289][T15001] netlink_sendmsg+0x813/0xb40 [ 273.505314][T15001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.505337][T15001] ? aa_sock_msg_perm+0xf1/0x1b0 [ 273.505360][T15001] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.505378][T15001] ____sys_sendmsg+0x972/0x9f0 [ 273.505398][T15001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.505417][T15001] ? import_iovec+0x73/0xa0 [ 273.505434][T15001] ___sys_sendmsg+0x2a5/0x360 [ 273.505452][T15001] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.505471][T15001] ? futex_wake+0x4ac/0x580 [ 273.505501][T15001] ? __fget_files+0x2a/0x420 [ 273.505522][T15001] ? __fget_files+0x3a0/0x420 [ 273.505546][T15001] __x64_sys_sendmsg+0x1bd/0x2a0 [ 273.505564][T15001] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.505584][T15001] ? rcu_is_watching+0x15/0xb0 [ 273.505608][T15001] do_syscall_64+0x14d/0xf80 [ 273.505625][T15001] ? trace_irq_disable+0x3b/0x150 [ 273.505647][T15001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.505662][T15001] ? clear_bhb_loop+0x40/0x90 [ 273.505685][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.505700][T15001] RIP: 0033:0x7f633bb9c799 [ 273.505715][T15001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.505728][T15001] RSP: 002b:00007f633c985028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.505745][T15001] RAX: ffffffffffffffda RBX: 00007f633be15fa0 RCX: 00007f633bb9c799 [ 273.505756][T15001] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 273.505767][T15001] RBP: 00007f633bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 273.505777][T15001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.505786][T15001] R13: 00007f633be16038 R14: 00007f633be15fa0 R15: 00007fff62bf3438 [ 273.505803][T15001] [ 273.879533][T15008] __nla_validate_parse: 9 callbacks suppressed [ 273.879551][T15008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2541'.