last executing test programs: 2m6.629195756s ago: executing program 1 (id=5597): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x44, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x32, 0xa9, 0x0, 0x1, [@generic="57d753865bc026738a23", @nested={0x21, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r1}, @generic="2db88f6f88ebb2fd1bd786312d0c165c579777e85d"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40041}}], 0x1, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63}, 0x94) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) (async) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) close(0x4) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090603000000000000000000050000000900020073797a310040000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00148008000140ffff"], 0x54}}, 0x80) 2m6.23621613s ago: executing program 1 (id=5599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "8a152e"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 2m6.01584158s ago: executing program 1 (id=5601): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc0000009500000000000000e56a56578f992024efd00c6186493551ba3539924663d8d0257ad7979902f292c0be8cc00f98f2d6b3efea77904f78fc5f80b03ed0a4e9202c144bb7eb244fe46bcb5a9623edabb4309caa3f216f5b60cc2bb46dbf5290ae923e5814ed9363765bcc279d8b01f4529d87d97827a5dc13f5a3b4b84c6139d1b163f73676c56e50dba671f71504354ccbb0fc7d880cf2866c8c4cebe286c4e6ab9960d97957b2858d82f5b285af9b6da29d39931cf00f7285"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000540)={r4, &(0x7f0000001980)='\xf3-@\x00', 0x803, &(0x7f0000000300)={@align=0x894, {0x1c, 0xc0, 0x7, 0x9}}, 0x4, &(0x7f0000000480), &(0x7f0000000500)=0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x80, 0x7, 0x0, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x66, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x3f, 0x3, 0x1, [{@local, 0x9}, {@local}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffff7}, {@remote, 0x2}, {@broadcast, 0xfffffff8}, {@private=0xa010101, 0xa2}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x1c4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xec, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x1c4}}, 0x40000) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xd0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m5.503756611s ago: executing program 1 (id=5607): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="05000000010001", 0x7) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x33, 0x2, 0x3, 0x1, @local, @remote, 0x8, 0x20, 0x0, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@ipmr_newroute={0x3c, 0x18, 0x4, 0x70bd29, 0x25dfdbff, {0x80, 0x20, 0x0, 0x9, 0xff, 0x2, 0x0, 0x7, 0x2500}, [@RTA_NH_ID={0x8, 0x1e, 0x902}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NH_ID={0x8, 0x1e, 0x4}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000706000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad8800000000140012800b00010067656e6576650000040002800b000100"], 0x40}}, 0x0) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f00000005c0)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0xff, 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {}, {}, 0x62}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'dvmrp1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x687, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x3, 0xe, 0x9, 0x3, 0x1, 0xe, 0x8, 0x18, 0x4, 0x7f, 0x3, 0x3e}, 0xe) close(0x3) sendmsg$rds(0xffffffffffffffff, 0x0, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000440)={0x94, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x5, 0x5, 0x104a}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x8840) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 2m5.123401031s ago: executing program 1 (id=5611): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0xd}, 0x8) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x5c, r2, 0x1, 0x70bd25, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x10, 0xf}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x412fa6e879b1e1cf}, 0x0) 2m4.658406465s ago: executing program 1 (id=5612): syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/34, &(0x7f00000000c0)=0x57) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000000850000007d000000b708000000000000dba8f8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000000c00000095"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)={0x34, 0x10, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x18, 0x125, 0x0, 0x1, [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202200, 0x0) unshare(0x22020600) write$cgroup_pid(r2, &(0x7f0000000280)=0xffffffffffffffff, 0x12) write$tun(r6, 0x0, 0x78) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r7, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x404c894) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 1m31.339438995s ago: executing program 2 (id=5815): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x201, @local, 'gre0\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85980000080001004400128009000100626f6e64000000003400028008000f0005000000050010008800000008000500d7002d5b94f7061e1f624b897d81a7e5000800d17dc328470aa71c5c781926ed098d04002d090000080000"], 0x64}}, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1e, 0x305, 0x1000000, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0x400c8c0}, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000140)=0x7ff, &(0x7f0000000180)=0x4) 1m29.887725222s ago: executing program 2 (id=5822): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000052000100000000040000000002000000080001"], 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1401000020"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m28.965524152s ago: executing program 2 (id=5829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m28.890664104s ago: executing program 3 (id=5831): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r6, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/189, 0xbd}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10) write(r6, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x2, 0x6, {{0x12, 0x4, 0x1, 0x3, 0x48, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x17, 0x94, [@dev={0xac, 0x14, 0x14, 0xa}, @remote, @rand_addr=0x64010101, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x13, 0x20, [@multicast2, @local, @empty, @broadcast]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x7, 0x72}, 0x2c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x281, 0x10003}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4008044) 1m28.517115925s ago: executing program 0 (id=5833): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000a00)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/232, 0xe8}], 0x4}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000000)={@private0, @dev={0xac, 0x14, 0x14, 0x11}, 0x12, 0x5}}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3b}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x1, 0x4) 1m28.124018322s ago: executing program 0 (id=5835): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8954, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00795a7e1b6b90f9829c000010001fff000000", @ANYRES32=0x0, @ANYBLOB="03f0000000000000140012800a000100767863616e0000000400028008000a00", @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m27.997577645s ago: executing program 0 (id=5837): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r1 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000, 0x1}}, 0x40) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x8000) (async) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000200)=""/107, &(0x7f0000000280)=0x6b) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a00000800000500"], 0x50}}, 0x4000850) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x0, 0x4, 0xff}, 0x48) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 1m27.996530739s ago: executing program 3 (id=5838): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x3004c071) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000300), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0xb619, '.\x00'}}) 1m27.797586041s ago: executing program 3 (id=5841): r0 = socket(0x28, 0xa, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @private}}}}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001600)={&(0x7f0000001480)=@delqdisc={0x14c, 0x25, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0x3}, {0xffff, 0x2}, {0x1, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x20}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x7f, 0x8}}, @TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5, 0x9, 0x5, 0x0, 0x6, 0x2, 0x5}}, {0xe, 0x2, [0x3, 0x3, 0x8000, 0xfffe, 0x1]}}, {{0x1c, 0x1, {0x48, 0x3, 0xf, 0x2, 0x1, 0x4, 0xa, 0x4}}, {0xc, 0x2, [0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0xa6, 0x7, 0x4d6f, 0x8, 0x1, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0xfffc]}}, {{0x1c, 0x1, {0x96, 0x2, 0xd5, 0x6, 0x0, 0x8, 0x401, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x7, 0x2, 0x3, 0x8000, 0x0, 0xf, 0x97, 0x8}}, {0x14, 0x2, [0x9, 0x200, 0x8ad, 0x1, 0x0, 0xe, 0xc, 0x8]}}, {{0x1c, 0x1, {0x7, 0x2, 0x6, 0x5, 0x0, 0x4, 0x8, 0x9}}, {0x16, 0x2, [0xa, 0x8, 0x9, 0x63c7, 0x3000, 0xb, 0x5, 0x5, 0x1ff]}}]}]}, 0x14c}}, 0x40c0000) (async, rerun: 32) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async, rerun: 32) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r6 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0xb, 0x0, 0x101, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe, '\x00', r3, 0xffffffffffffffff, 0x3, 0x1, 0xb}, 0x50) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r8, r1, 0x26, 0x2020, 0x0, @void, @void, @value=r9, @void, r7}, 0x20) (async, rerun: 64) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x120) (async, rerun: 64) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x80000000, @mcast2, 0x2975, 0x4}, 0x80, 0x0}, 0x24044040) recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x40000000, 0x0) (async) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x20}], 0x1}, 0x7}], 0x1, 0x100a1, 0x0) (async) close(r5) 1m27.679901234s ago: executing program 0 (id=5842): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000500)) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20008051}, 0x810) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x48, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x48}}, 0x4008010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000000906010629d65b4200000000ffff000100070000000800094000000800"/48], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x90) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000000706050000000000000000000100000205000100070000002e03ae4ff220598d6da6166e4568fd3ef6be8d95bf5a4ad8a3e42200a5b7bd9e629fac0b2ffce921eead091cbe9779e7cd6d108ce3a3315aa3dac9ac1adf4e94945f4749814e198e1c62114f811104f6bb8bdea1c498e041a8abb598ca3f889dccefe764"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="410404"], 0x7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendto(r7, &(0x7f0000000880)="b2c0e7775a325e4f385867eea756df15f89873ce75e59518590efa82fa9a0cc3f3fdaa86b5b35018682e529eebe7b85aae9856fad053273139f2b16f0f500416dacb51eb28cf762b3f89e5b1eb3a2a8f89eca7555e12ca9a3cf411c8b5b57dec88892b1a91ddadc7444a", 0x6a, 0x8810, &(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @multicast2}, 0x4, 0x4}}, 0x80) sendmsg$IPSET_CMD_FLUSH(r9, 0x0, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) 1m27.482909336s ago: executing program 3 (id=5843): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x403, 0x278bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90606}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r7) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x9, 0x0, 0x4200, 0xfffffffd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_lifetime={0x4, 0x4, 0xb, 0x80, 0x7fffffff, 0x80}, @sadb_x_sa2={0x2, 0x13, 0x59, 0x0, 0x0, 0x70bd27, 0x3506}]}, 0x48}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000440)={0x28, r8, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r10, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r12, 0x764927f8a7d3d5b3, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x814) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r10) 1m27.252205827s ago: executing program 4 (id=5844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002380)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x38}}, 0x7b50728633ca4a8a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f00000007c0)="63eced8e460100000002acf12a04", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x60}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r5 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r5, 0x1) poll(&(0x7f0000000200)=[{r5, 0x1210}], 0x1, 0x1ff8) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x1}, {0x1, 0xe}}}, 0x24}}, 0x0) accept4(r5, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) sendmsg$nl_route(r8, 0x0, 0x0) 1m26.402284835s ago: executing program 2 (id=5845): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xcff7}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000006000)=@newtaction={0x3ec4, 0x30, 0x4, 0x70bd29, 0x25dfdbff, {}, [{0x392c, 0x1, [@m_police={0x2630, 0x1c, 0x0, 0x0, {{0xb}, {0x25bc, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x810, 0x2, 0x4, 0x0, 0x5, 0x6, 0x76, 0x9, 0x7fffffff, 0x7ff, 0x6, 0xa5, 0xc1, 0x227b, 0x2, 0xf3d5, 0x0, 0x9, 0x9, 0x5, 0x8, 0x9, 0x6, 0x1ff, 0x1d7fe998, 0x30, 0x1, 0x2, 0x0, 0x0, 0x4, 0x8, 0x8001, 0xa3a, 0xec5e, 0x4, 0x0, 0xb9, 0x3, 0x8, 0x6, 0xfe8, 0x3, 0x2, 0x0, 0xfffffffc, 0x0, 0x5, 0x9, 0xfffffff9, 0x0, 0xb291, 0x401, 0x4634b935, 0xf2c, 0xd, 0x2, 0xc0, 0xca1, 0x8, 0x6, 0x7, 0x6, 0x7e, 0x4, 0x7fff, 0x4, 0x4, 0x9d, 0x3, 0x2, 0x80000001, 0x57, 0x9, 0x460, 0x8, 0x5, 0xc1, 0x6, 0x8, 0x7, 0x80000000, 0x20eb, 0x4e, 0x100, 0xffff, 0x3, 0x5, 0x1, 0x4, 0x603, 0xce, 0x6, 0x7, 0x1, 0x37d, 0xcaf, 0x3ff, 0x6, 0x81, 0xaf, 0x10, 0x8, 0x0, 0x7ff, 0x9, 0x5, 0x400, 0xa, 0x0, 0x4, 0x2, 0x800, 0xee7c, 0x9, 0x2, 0x4, 0xd5, 0x742, 0x8, 0x1dd6, 0xffff, 0xffffffff, 0xff, 0x5, 0x1, 0x5, 0x1, 0x0, 0x0, 0x3, 0x10, 0x0, 0x6, 0x8001, 0x6, 0x8, 0x10001, 0xf, 0x3, 0x10001, 0xb472, 0x6, 0x1, 0x1, 0x5, 0x7ff, 0xcc, 0x40, 0x400, 0x7fffffff, 0x4a54d1fd, 0x7ff, 0xfffffff7, 0x5, 0x3233, 0x30000000, 0x0, 0x8, 0xfffffffc, 0x10001, 0xc19, 0x7, 0x81eb, 0x6ca4, 0x21, 0xffffff80, 0x4169, 0x635b, 0x4d, 0xe2c, 0x6, 0x3, 0x8, 0x1, 0x853, 0x200, 0x8000, 0x8, 0x1, 0x0, 0x1000, 0xffffffff, 0x4, 0x9, 0xfffffffb, 0x200, 0x68, 0xd66, 0x800, 0x5, 0x0, 0xfffffff8, 0x0, 0xafa, 0x2, 0x5d0, 0x1, 0x101, 0x3, 0x3, 0xfff, 0x1, 0xb1103052, 0xffffff81, 0x10001, 0x6, 0x58c4, 0x4, 0x5, 0x8, 0xfffffffa, 0x9, 0x4, 0x1000, 0x7, 0x8, 0x3, 0x0, 0x3, 0x7, 0x897c, 0x0, 0x401, 0x7, 0x8, 0xb, 0x6, 0x2, 0x7, 0x0, 0x7, 0xffffffff, 0x4, 0x2, 0xffffffff, 0x4, 0x0, 0x10000, 0x6, 0xfffffffb, 0x6c, 0xa9, 0x1, 0x9, 0x12, 0x7, 0x7ffffffe, 0x4842, 0x8001, 0x8, 0x0, 0xf1f6, 0x0, 0x80000000, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xcec9, 0x2, 0x50dc8186, 0x5, 0xa5d, {0x9, 0x0, 0x1, 0x9499, 0x2, 0xa703}, {0x81, 0x2, 0x7, 0x8, 0x1, 0x40}, 0x3, 0x2, 0xffff}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5f9, 0x2, 0x1, 0x5, 0x7, {0xd2, 0x0, 0x8, 0x7, 0x1000, 0x20000}, {0x1f, 0x0, 0x3, 0x101, 0x6, 0x3}, 0x3, 0x101, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x67, 0x3, 0x0, 0x7, 0x75c, 0xeb7, 0x0, 0x7, 0x0, 0x6, 0x10001, 0x10001, 0x5, 0x9, 0x6, 0x40, 0x7, 0x7, 0xad, 0x5c, 0xb5d, 0x80000000, 0x7f, 0x0, 0x3, 0x38, 0x4, 0x6, 0x9, 0xfffffffc, 0x6, 0x9, 0x80, 0x0, 0x1ff, 0x9, 0xfffffffe, 0x9, 0x0, 0x7, 0x1, 0x3, 0x5, 0x715, 0x2, 0x853, 0x7, 0x2, 0xa3, 0xfffffffa, 0x2, 0x5, 0xac, 0x8000, 0x3, 0xffffffff, 0x401, 0x5, 0x4, 0x10, 0x254, 0x7, 0xfffff9cf, 0x100, 0x5, 0x2, 0x9, 0xfffffff7, 0x100, 0x6, 0x3, 0x7, 0xd, 0x7f, 0x9, 0x0, 0x1, 0xbeb5, 0x7f, 0x0, 0x401, 0x4, 0x0, 0xffff6096, 0x363b80c8, 0xfffffffd, 0x3, 0x6, 0x4, 0xe6, 0x10000, 0x5, 0x3, 0x7, 0x6, 0x6, 0x1, 0x5, 0x0, 0x68, 0x7, 0x7f, 0x8, 0x1, 0x3, 0x100, 0x4, 0x2000, 0x401, 0xffffffff, 0xfff, 0x5, 0x3b0000, 0xfda2, 0x101, 0x9, 0x0, 0x7b1, 0xe5, 0x8, 0xb66, 0x9, 0x1, 0x3b14fadd, 0x61, 0x3, 0x4, 0x4, 0x8, 0x3, 0x800, 0xfffffffa, 0xd8ce, 0x401, 0xa50428a, 0x4, 0x1, 0x4, 0x1a, 0xe00, 0x7, 0xedf5, 0x3, 0xdad, 0x10000, 0x0, 0x9, 0x5, 0xfff, 0xb8, 0x1, 0x9, 0x8, 0x4, 0x1, 0x5, 0x4, 0x81, 0x200, 0xcc6, 0x88, 0x2, 0xfffffffc, 0xfffffff9, 0x5, 0x4, 0x8, 0x0, 0x6, 0x1ff, 0x4a39a569, 0x6, 0x4, 0x3, 0x5, 0x6, 0x7fff, 0xff, 0x3, 0x9, 0x2, 0x6, 0x2a, 0x10, 0xa, 0x2fb, 0x27, 0x3, 0x1, 0x2, 0x3, 0x47581ca7, 0x1, 0x9, 0xbae, 0x913, 0x7fffffff, 0x2, 0x5fd8, 0x2, 0x5, 0xf3a5, 0x6, 0x10000, 0xffffffff, 0x4, 0x3, 0xffff, 0x4, 0x800, 0x101, 0xb6, 0x0, 0xef32, 0x40, 0x0, 0x9, 0x10000, 0x6, 0x7, 0x6, 0xb2fd, 0x100, 0x1c00000, 0x2, 0x8, 0x80000000, 0x8, 0x0, 0x5, 0x4, 0x80000001, 0xfffffffa, 0xd3, 0x8, 0xc, 0x1, 0xa, 0x8, 0x10000, 0x8, 0x7ff, 0x7fff, 0x10, 0x5, 0x5, 0x8, 0x3318, 0x2e2, 0x2, 0x80, 0x2, 0x6, 0x9, 0x0, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5f6, 0x40, 0x80000001, 0x5, 0x2, 0xfffffffb, 0x3, 0x101, 0x0, 0x7, 0x6, 0x3, 0x9, 0x3800000, 0x8000, 0xc274, 0xc9, 0x8, 0x4, 0x1, 0xffff, 0x0, 0x0, 0x2, 0xfffffff7, 0x2, 0x7, 0x419f, 0x5, 0xfffff5c4, 0x806, 0x2, 0x925, 0x200, 0xeedc, 0x9, 0x80000000, 0x8, 0x3ff, 0x1, 0x35, 0xffff6f40, 0x5, 0xff, 0x36, 0xe1d5, 0x10001, 0x1, 0xbeb, 0x8, 0x5, 0x4, 0x6, 0x8, 0x9, 0x1, 0x200, 0x2, 0x9, 0x7, 0x0, 0x80000001, 0x3, 0x200, 0x8, 0xf7a2, 0x7ff, 0x100, 0x1, 0x3, 0x3, 0xfffffff1, 0x81, 0x0, 0x6, 0x7, 0x5, 0x5, 0x8, 0x200, 0x8, 0x7, 0x4861, 0x8000, 0x7f, 0x1, 0x5, 0x4, 0x5, 0x6, 0x200, 0x7, 0x592, 0xc8, 0x2, 0x2, 0x1, 0x800, 0xfff, 0x5, 0xfffffffb, 0x6, 0x2, 0x100, 0x7, 0x66c3, 0xf, 0x7fffffff, 0x5, 0x1, 0x7ff, 0x0, 0x5, 0x2, 0x9, 0x7f25, 0x1, 0xf80, 0x9, 0x8, 0x7, 0x81, 0x7, 0x7, 0x7c8, 0x7f, 0xca, 0x5, 0x0, 0xb, 0x835, 0x200000, 0xfff, 0x7fff, 0x1, 0x6, 0x3, 0x7fff, 0xa, 0xd, 0x2, 0x7, 0x7, 0x8001, 0x6, 0x3, 0xfb5, 0x5, 0x1000, 0xfffffc00, 0x0, 0x3, 0x0, 0x80, 0xeb18, 0xf, 0x9, 0x6, 0xfffffffe, 0x9, 0x4, 0xfffffff8, 0xe52, 0x6, 0x3, 0x6, 0x9, 0x9, 0x6, 0x7fffffff, 0x5, 0x0, 0x4, 0x7fff, 0xfffff000, 0x1, 0x7, 0x1, 0x1, 0x100, 0x1, 0x3397, 0x0, 0x7, 0x8, 0x401, 0x7, 0xfff, 0x9, 0x2, 0xfe, 0xa, 0x6, 0x1, 0xc, 0x80000000, 0x8, 0x2, 0x8000, 0xffc00000, 0x7, 0x4, 0x1, 0x5, 0x200, 0x5, 0xb7, 0x5, 0x101, 0x69d, 0x7, 0x8, 0x7, 0x0, 0x7, 0x8, 0x30, 0x81, 0x881, 0x2, 0x5, 0x400, 0xfff, 0x3, 0x6, 0x8, 0x8000, 0x4, 0x6, 0x2, 0x5, 0x6, 0x1, 0x0, 0x31, 0x3, 0x8, 0x1f0ba98d, 0x4, 0x401, 0x5, 0x6, 0x9, 0x6, 0x1, 0x857, 0x8, 0xa, 0x0, 0x6, 0xfffffff8, 0xff, 0x9, 0x4, 0x800, 0x2ce8a2f8]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xa1b, 0x6, 0x1, 0x7f, 0x6, 0x1, 0x2, 0x1, 0x8, 0x2, 0x5, 0x20000000, 0x9, 0x96, 0xffffff00, 0xffffd2c1, 0xbbd, 0x5, 0x1, 0xffffff73, 0x6, 0x1, 0xd, 0x731, 0x7, 0x7fff, 0x4, 0x7, 0x8, 0x8, 0xa, 0x3, 0xfffffffd, 0x0, 0x4, 0x6, 0x3, 0x8, 0x7, 0xff, 0x5, 0xfffffff7, 0x6, 0x8, 0x6, 0x8, 0x5f2, 0x9, 0xffff3bcc, 0x2, 0xf, 0x9, 0x8, 0x0, 0x5, 0x2, 0x2, 0x8, 0x0, 0xb502, 0x9, 0x7e, 0x8, 0xa, 0x4, 0xf116, 0x0, 0xc6, 0x7, 0x8a, 0x81c, 0x1, 0x5, 0x0, 0x2, 0x5, 0x7f, 0x8, 0xfffffff8, 0x10001, 0x2, 0x2, 0xfffffff8, 0x8, 0xe5, 0x29, 0x9, 0x5, 0x3, 0xd, 0x7, 0xf0f, 0xf, 0x0, 0x6, 0x4, 0x5, 0x47, 0x6, 0xe, 0x7fffffff, 0x1, 0x3, 0x80000000, 0x3db, 0x0, 0x2, 0x8, 0x63, 0x3, 0xfffffff8, 0x1, 0xb, 0x6, 0x10, 0x9, 0x78, 0xf7, 0x7, 0x8d6, 0x0, 0x5, 0x9, 0x0, 0x7fff, 0x400, 0x3, 0x8, 0x10000, 0x8001, 0x9, 0x4, 0xfffffbff, 0x0, 0x0, 0x3, 0x5, 0x8, 0x8, 0x7, 0x55, 0x9, 0xaa, 0x9, 0x0, 0x6, 0x8b3, 0x4, 0xc155, 0x9, 0x0, 0x7, 0x8a0, 0x7, 0x7fffffff, 0x1, 0x9, 0x100, 0x3ff, 0x9, 0x8, 0x8, 0x3, 0x5, 0x2, 0x5, 0x3c, 0x7, 0x6, 0x40, 0x7, 0xfda8, 0x3, 0xb8, 0x5, 0x8, 0x8, 0xa00000, 0x6, 0x4, 0x6, 0xf072, 0x4, 0x5, 0x6, 0xa, 0x5, 0x9, 0x0, 0xe1d, 0x30, 0xffffc246, 0x6, 0x2, 0x0, 0xfffffffb, 0x678, 0x4, 0xff, 0x1, 0xbf5, 0x8, 0xb8b, 0x8, 0xdd, 0x1, 0x6, 0x1, 0x85a7, 0x0, 0x5, 0xc810, 0xf5, 0x603, 0x2ebd, 0xd23f218, 0x9, 0x5, 0x2, 0x2, 0x5, 0xffffffff, 0x2, 0xcbf, 0x7, 0x9, 0x1, 0x7, 0xc29d, 0x7, 0x200, 0x7fffffff, 0x6, 0x7fff, 0x7, 0xe, 0x1000, 0xffff, 0x9651, 0x400, 0x4, 0x3, 0x7, 0x7, 0x3, 0xffffffff, 0x4, 0xfffffff8, 0x1, 0x1, 0x3ff, 0x6, 0x6, 0x8, 0x800]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x4, 0xd, 0x70000000, 0x2, 0xc26, 0x0, 0x7fffffff, 0x9, 0x4, 0x9, 0x4, 0x7, 0x1, 0x9, 0x8341, 0x6, 0xc000, 0xfffffff7, 0x4, 0x13a, 0x2, 0x80000001, 0x1, 0x3, 0x3, 0x2, 0xe, 0x7c8, 0xbe5, 0x2, 0x7, 0xb, 0xea0, 0x1, 0x0, 0x101, 0xc5aa, 0x8, 0x0, 0x9, 0xfffffffc, 0x8, 0x1, 0x6, 0x9, 0x4, 0x7, 0x400, 0x283a, 0xeb97, 0x0, 0xa6, 0x9, 0x3016, 0x6, 0x9, 0xa8, 0x2, 0xffffff52, 0x200, 0x4d3, 0x9, 0x4, 0x1, 0xd9, 0x8671, 0x3ff, 0x1, 0x4, 0x6, 0xfffeffff, 0x0, 0x8, 0x7d1, 0x3e, 0xa19e, 0x101, 0x6, 0x8, 0x7533c55c, 0x8, 0x6, 0x6, 0x1000, 0xa, 0x2, 0x695, 0x401, 0x3, 0x55, 0x8, 0x0, 0x2, 0x5f, 0x8, 0xbb, 0x8000000, 0x1a27b69, 0x71, 0xffff8000, 0x3, 0x1ff, 0x7ff, 0x23d, 0x8001, 0x5d35c9f, 0x275aec1a, 0x3, 0xd269, 0x101, 0x4, 0x8001000, 0x9e, 0x2, 0x7, 0x2, 0x1, 0x7, 0x4, 0x1, 0xffe, 0x2, 0x9d4a, 0x3, 0x8, 0x4, 0x127152ff, 0x1, 0xa5fb, 0xcd1, 0x7c5b, 0xffffffff, 0x10, 0x9, 0xfffffffd, 0x174000, 0x4, 0x4, 0x8, 0xa, 0x2400, 0x80000000, 0x95, 0x6, 0x8, 0xfffffffa, 0x7ff, 0xde3, 0x4ba2, 0x3, 0x3, 0x6, 0x3966, 0x200, 0x6, 0x2, 0x200, 0x7, 0x3, 0x8, 0xffff, 0x3667, 0x4, 0xffff, 0x1ff, 0x3, 0x9, 0x8b, 0xffff, 0x703, 0x4, 0x4adfc6bc, 0x2, 0xd866, 0x4, 0x6, 0x6, 0x3a, 0x3000000, 0x800, 0x8001, 0x1, 0x6, 0x5, 0x2, 0x80, 0x1, 0x2, 0x5, 0x4, 0x62de, 0x7f, 0x6, 0x4, 0x0, 0xfffffff8, 0x2, 0x4, 0x1, 0xad53, 0x0, 0x5, 0x100, 0x0, 0x95, 0x5, 0x7, 0xa, 0x5, 0xfeb7, 0x2, 0x3, 0xedb22e31, 0x3, 0xd651, 0xca9, 0x9, 0x8, 0x80000001, 0x2, 0x8, 0x0, 0x2, 0xfffff0b0, 0xd6, 0x6, 0x6, 0x40, 0x9, 0xfffffffb, 0x7, 0x3, 0x2, 0xfffffff7, 0x2, 0x4, 0x4, 0x8, 0xe, 0x0, 0x4f, 0x0, 0x1, 0x1, 0x2, 0x27, 0x4, 0x3ff, 0x20e0, 0x1, 0xfffffffb, 0x200, 0x3, 0x4000000, 0xbaf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x13, 0x0, 0x5, 0xffffffc0, 0xc, {0x6, 0x2, 0x9b, 0x8, 0xb, 0x7}, {0x5, 0x2, 0x4, 0x7fff, 0x2, 0xc}, 0xe, 0x89, 0x4}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x5, 0x9, 0x3, {0x6, 0x0, 0x3ff, 0x3c22, 0x1, 0x175e982f}, {0xc, 0x1, 0x31c1, 0x3ff, 0x9, 0xfffffffe}, 0x7, 0x7, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x10000000, 0x9, 0x6c7d, 0x3, {0x0, 0x2, 0x4b3b, 0x4, 0x1, 0xffff}, {0x6, 0x1, 0x1, 0x9, 0xf, 0x9b6}, 0x8, 0x1, 0x100}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x589, 0xa, 0x6, 0x10000, 0x5, 0x730, 0x2, 0x80, 0x80000001, 0x6b5, 0x1, 0x7ff, 0x1ff, 0x1, 0xff, 0x401, 0xfff, 0x7, 0x6, 0x5, 0x8001, 0x1, 0x904, 0x2, 0x7a9, 0x0, 0x2, 0x3dc, 0x3, 0x3, 0x8, 0x2, 0x9, 0x4, 0xf, 0x1, 0x6, 0x2, 0x8, 0x1, 0xfe, 0xfffffff7, 0x0, 0xbf, 0x4, 0x5, 0x3, 0x6235, 0xfffffffe, 0x6, 0x4, 0x3, 0xe1f4, 0x3, 0x5, 0x0, 0x3, 0xfffffffd, 0x8, 0xf, 0x100, 0xb60, 0x8, 0x8000, 0x5, 0xf, 0x6, 0x3ff, 0x10001, 0x5, 0xfffffff7, 0x0, 0x6, 0xd, 0x8000, 0x140000, 0x8001, 0x8, 0x4, 0x3, 0x80, 0x9, 0x1000, 0x7, 0x80a, 0x6, 0xffffffff, 0x1, 0x1, 0xfe0000, 0xa, 0x2, 0x3, 0x3, 0x4, 0x7, 0x7a1, 0x8, 0x80000000, 0x7fffffff, 0x7fff, 0x1, 0x7, 0x2, 0xfffffffb, 0x2, 0x3, 0x8, 0xe9ad, 0x7, 0x8000, 0xe, 0x5, 0x4, 0x4, 0xfffffffa, 0x8, 0x4, 0x80, 0x11, 0x6, 0xfffff356, 0x1, 0x401, 0x4, 0xb, 0x0, 0x7fffffff, 0x6, 0x1f6, 0x5, 0xae, 0x62, 0x1, 0x5, 0xe, 0x4a, 0x5, 0xffff, 0xffffd2a8, 0x9, 0x0, 0x9, 0xc, 0x81, 0x9, 0x6, 0x0, 0x6, 0x6, 0xfff, 0x8, 0xffff, 0xfffffff7, 0xd, 0x8, 0x4d25, 0x48651cb3, 0x7f0b, 0x1, 0x1000, 0xce, 0x8, 0xa70, 0x800, 0x3, 0x10, 0x0, 0x2, 0x562d, 0x5, 0x800, 0x0, 0x5, 0x82, 0x1, 0x2, 0x8, 0xb012, 0x3, 0x5, 0x77c36fbe, 0xffff698e, 0x6, 0x4, 0x7, 0x8, 0x3, 0xff, 0x7, 0x10001, 0x10, 0x2, 0x5b67, 0x81, 0x80000000, 0x0, 0x8001, 0x200, 0x6, 0x100000, 0x3, 0x8, 0x5, 0x6, 0x2, 0x9, 0xf, 0x82, 0x1, 0x4, 0xc02, 0x3, 0x6, 0x0, 0x2, 0x8, 0x3, 0x8, 0x8, 0x0, 0x81, 0x0, 0x4, 0xffffff1d, 0x6, 0x200, 0x1, 0x4, 0x1, 0x6, 0x10000, 0x80000000, 0x80000001, 0xa68, 0xb3, 0x6, 0x405, 0xed8, 0x8, 0x5, 0x5, 0x8000, 0x9, 0x9, 0x401, 0x9, 0x6, 0xaea5, 0x8, 0x2, 0x6, 0x775e, 0x7ff, 0x3, 0xc79c]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x5e, 0xffffc625, 0x400, 0x80000000, 0x3, 0x0, 0x7e2e, 0x9, 0x9, 0x8, 0x0, 0x9, 0x7, 0x400, 0xa9, 0x100, 0x80000000, 0x7, 0x3, 0x4a, 0x6, 0x0, 0x3, 0x7, 0x0, 0x4, 0x6, 0x200, 0x1, 0x8, 0x2, 0xffffffff, 0x0, 0x400, 0x1, 0x401, 0x3, 0x1, 0xffffffff, 0x0, 0x7, 0x8, 0x3ff, 0x8, 0x5, 0x667, 0xfffffff7, 0x6, 0xcc3, 0x9e94, 0xfffff130, 0x4, 0x7e, 0x101, 0x1, 0x9, 0x1, 0x7f, 0x7, 0x9c1, 0x2, 0xe6, 0x1, 0xfffffffe, 0x1, 0xfff, 0x2, 0x5, 0xf6, 0x5, 0xf, 0x2, 0x9, 0x40, 0xfffffca0, 0x7fff, 0x9, 0x0, 0x1, 0x2e, 0x3, 0x1, 0xbb, 0x0, 0x4, 0x1000, 0x4, 0x2, 0x8, 0x7fff, 0x1, 0x9, 0xffffffff, 0x2, 0x7, 0xc0, 0x1ff, 0x4, 0x401, 0x7, 0x101, 0x0, 0x6, 0x9, 0x7fff, 0x6, 0x6, 0x80000000, 0x5, 0x4, 0x4d, 0x3, 0x401, 0x4, 0xffffff7d, 0x8, 0x1, 0x5, 0x4, 0x80000000, 0x2, 0x7, 0x1, 0x401, 0x1ff, 0x2, 0x6, 0x9, 0x4, 0x5, 0x5, 0xd, 0x5, 0x8001, 0x1ff, 0x9, 0x2, 0x3d5, 0x3, 0x2, 0x4, 0x6, 0x5, 0xe6, 0x2000, 0x3ff, 0x10001, 0x9, 0x100, 0x9, 0xe, 0x1, 0x7, 0x5, 0x2, 0x9, 0xffff79cc, 0x7, 0x8, 0x6, 0xc, 0x1, 0x8000, 0x1, 0x4, 0x33, 0x401, 0x6, 0x101, 0x1800, 0x7, 0xffff0a24, 0xd, 0x2, 0x1, 0x0, 0x4, 0x3, 0x2049, 0x0, 0x560, 0x81, 0xfffffffa, 0x400, 0xfffffff8, 0x3, 0x5, 0x8, 0x5, 0x8, 0x7, 0x7, 0x3, 0x1, 0x1, 0x8001, 0xff, 0xffffffff, 0x80, 0x9, 0x7e6, 0x3ff, 0x9, 0x3, 0xffff55d5, 0x7, 0x9, 0x3, 0x7, 0x0, 0x2, 0x8, 0xf, 0x1ff, 0x0, 0x7, 0x1, 0x70, 0x6, 0x54200, 0x100, 0x8, 0x6, 0xd, 0x8000, 0x8, 0x2, 0x3, 0x8, 0x7, 0x9, 0x0, 0x3, 0x3, 0x3, 0x5, 0x7ff, 0x1ea00, 0x9, 0x1c, 0x200, 0x7, 0x5, 0x1, 0x3, 0x7, 0x9, 0xeba8, 0x4, 0x5, 0xc651, 0x5, 0x9, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0x8, 0x0, 0x6, 0x3, 0xfff, 0xe, 0x7fffffff, 0x49c, 0x7ff, 0x4, 0x3, 0x7ff, 0x5, 0x200, 0x122, 0x8, 0x3, 0x6870d826, 0xfffffff7, 0x2, 0x9, 0x58e191cf, 0x3, 0x6, 0xbc, 0x8, 0x2333, 0x1, 0x1ff, 0xff, 0x8000, 0x5, 0x8, 0x6, 0x8001, 0x4, 0xf3, 0x7, 0x80000001, 0x1, 0x5, 0x40000000, 0x80000001, 0x3, 0xa000000, 0x79, 0x8, 0x5, 0x7, 0xff, 0x5, 0xf, 0x1, 0x4, 0x9, 0x4, 0x7, 0xf4, 0x5, 0x4, 0x1, 0x1, 0x0, 0x3, 0x401, 0x8, 0xe4000000, 0xcd4e, 0xfff, 0x200, 0x9, 0x69a, 0x40, 0x0, 0x9, 0xb3, 0x7, 0x7, 0x8, 0xcb96, 0x32c9, 0x3, 0x13b, 0x3, 0x4, 0x3, 0x7, 0x9, 0xc53, 0xa, 0x1000, 0xfffffffd, 0x5, 0x4, 0xffffffff, 0x7, 0x6, 0x8, 0x0, 0x7, 0x80, 0x6, 0x10, 0x2, 0x1, 0x2, 0x7, 0x1, 0x3, 0xe, 0x7, 0x200, 0x6, 0x9, 0x7, 0x7fffffff, 0x81, 0x5, 0xf, 0x7, 0x3, 0x8, 0x3, 0x6, 0x9, 0x2ce, 0x1, 0xe0000000, 0x9, 0x3, 0xf67, 0xb, 0x4, 0x3, 0x1, 0x4, 0xb51, 0x7, 0x3, 0x111a, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0x3, 0x6, 0x4, 0x2, 0x9acc, 0x1, 0xe352, 0x0, 0x8, 0xd957, 0x1ff, 0x400, 0x2, 0x10000, 0x3, 0x2, 0x8, 0x6, 0xf, 0x7f, 0xfff, 0x7, 0x4, 0x7, 0xb, 0x1, 0xa, 0x2, 0x2, 0x8, 0x9, 0x8, 0x4, 0xb, 0x7fff, 0x5, 0x7, 0x7, 0x6, 0x1ff, 0x6, 0xf, 0x9, 0x9cf, 0xa, 0x8, 0x0, 0x4, 0x55f6, 0x8000, 0xd, 0x100, 0x800, 0x10, 0x9, 0x80000000, 0x9, 0x6, 0x3, 0x3, 0x8, 0xfff, 0x6a25, 0x6, 0xfffffff7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x3, 0x10001, 0x4, 0x3, 0x7, 0x1, 0x10000, 0x6, 0x9, 0xac74, 0x10000, 0x6, 0xffffffff, 0x0, 0x6, 0x9, 0x1, 0x81, 0x2, 0x3c, 0x3, 0x7f, 0x6, 0xed38bf9, 0x0, 0x272, 0x8000, 0xfffffff0, 0x7, 0x2a2, 0x6, 0x80000000, 0x7fffffff, 0x6, 0x9, 0x3, 0x5, 0x16f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x4, 0x2, 0x9, 0x3, 0xffffff80, 0x2, 0x8001, 0x20000, 0x6, 0xcb, 0x8, 0x5, 0x1ff, 0xfff, 0xa99, 0xfffffffd, 0x3, 0x7fff, 0xe2d, 0x7, 0x8, 0x2515, 0x6, 0x3, 0x3, 0xfffffffd, 0x6, 0x5, 0x9, 0x8, 0x8, 0x2, 0x1, 0xfffffffa, 0x3c, 0x8, 0x7, 0xd, 0x9, 0x0, 0x0, 0xaa, 0x6b75, 0x8, 0xa0, 0x1, 0x6, 0x10000, 0xffff, 0x1, 0xf, 0xfff, 0xaf, 0x10001, 0xdc5, 0x1dc6, 0x3, 0xf0, 0x7f, 0xf21a, 0x16a, 0x7, 0xe600, 0x4, 0x3, 0x58, 0x2, 0xfffffff8, 0x10, 0x4, 0x7, 0xfffffff9, 0x6, 0x7ff, 0x101, 0x8, 0x3, 0x6, 0x7d41, 0x2, 0x2, 0x2, 0x80000000, 0x9, 0x4, 0x0, 0x4, 0xa73b, 0x2, 0x2, 0xfffffff9, 0xef, 0x5, 0x2, 0x101, 0x8001, 0x4, 0x91, 0x1, 0xe5, 0x8, 0x7, 0x7, 0x3, 0x80000000, 0x3, 0x8, 0x2, 0x2, 0xc, 0xfffffffe, 0x101, 0x60, 0x5, 0xc, 0x9, 0x40, 0x3, 0x4, 0x6f7, 0x40, 0x4, 0xffffffdf, 0x7, 0x8, 0x766, 0x0, 0xffff7fff, 0x7f, 0xfffffff7, 0x900, 0x7, 0xfffffff9, 0x1, 0x4, 0x8, 0x8001, 0x10000, 0x5, 0x1, 0x2, 0x93e, 0x7, 0x8459, 0x400, 0x6, 0xfffffff7, 0x1, 0x5, 0x3, 0x3, 0x0, 0x92c, 0x80, 0x2, 0xfffffffc, 0x2, 0xfffffff7, 0xf390, 0x3937a564, 0x5, 0x4, 0x8001, 0x1e38, 0x4, 0x5, 0x6, 0x7, 0x9, 0x100, 0x8, 0x9, 0x7ff, 0x3, 0x2ac, 0x9, 0x66, 0x8, 0x3, 0x0, 0x1, 0xb, 0x4, 0x8, 0x5105, 0x6, 0x5, 0x0, 0xdb7, 0xfffffff8, 0xfffffff8, 0x6, 0x401, 0xffff, 0x2, 0xf, 0x7, 0x5, 0x1000, 0x1, 0x7, 0x7ff, 0x100, 0x3, 0x3, 0x401, 0x7fffffff, 0x0, 0x9, 0x2, 0x2, 0x400, 0xe, 0x1, 0xcc2c, 0x4, 0x1, 0x4, 0x8, 0xa, 0x8, 0xfff, 0x5, 0x5, 0xff, 0xfffffff9, 0x0, 0xab42, 0x40, 0x5, 0x1a90, 0x1ff, 0xf, 0x4, 0x1, 0xc898, 0x6, 0xd7b0, 0x6, 0x7, 0x2d, 0x9, 0x0, 0x4, 0x6, 0x8, 0x6, 0xffffffff, 0x5f2, 0x10000, 0x3, 0x0, 0x400, 0xa]}]]}, {0x49, 0x6, "5192c055527dc63f454e2d0e1c2baee37006ed858efb759c9982d31a39df29715574b1212f1cac496c3cd819ca0473dbbb07d30cb539fe71522d4d234eb7204aba09b27208"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x1068, 0x13, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x1ff, 0x6, 0x80000001, 0x7}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe0d3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10000}]}, {0x1001, 0x6, "771740303f2d3f082d4b9c89afcb1a0829f8cb940c10dd9a4f043465bb36184548b4244233e3bf56044e23e9e3335af6e6579331a450257093a08045b788f83b17c217e5e88534689886794fe414afcd0925806aab3902ddd3a0adf5836c6aace3ef0a828541f416ed7fe658e94927b4b3ac6bc4de2cfe86c7d517a3a9fa579f5f7155c89c731f2cdb55c0849e8d6b17beabe9d48ffd54cc6ad175f99b7a27bf9e908d4eb90dc8af571a75dd00ab4a22f2a0842fd0ca3ff20454aae7872fedf5aa4d9faa1b2f80844e362f619a8bbf8ec3df5daa58083c9f1258b0b2ef38702c5b7a3f5b6b4f2c53ad90f0afafa52fef61abf4b5d33784af60fc2d4dea466cdfa90c46f5605382475fde3512bf31309a0ea26d259b12228b70fafd09c50490827b8f7a3b16026f9cb307143c0face54ac3ec50d674c7b54a085e9e629801110183812827fa0cdef54c66c56b1b85965871eedced2466be9a787f276c4bfd4a9f51efbe5ac8ebd6e64b4be9d2d203e68bcb08f45d4c0da566bbb52d222d13ce5f2c24f3ea1307b0a1f2488a0e270cc2176ed8effc3a40bb70bf9cab130164cdb165ecba05ff3ee1c5d2575704f51117c14271abc72de37e1e24093ca4f9acf5b75ecbb94f3444a5fafad761602185a14022f771ee613b7a3b8e01a9388df3b438df620dcbf6ca504e90289045a692b6663d30d2dfa08dc68559fe205aaa2bb6cabc614e2d728535f4c5ea8f195a4ab5ed1ee5e2faa7d3354b3d6be65e20f8be6110c3cce30ba70ec7a9345261da79e6987bee96ed7e7dce28993430750d79bcbd4924ff324d1c427418275326d111ad89be48b78089ab9c39a084f526714e460d70b21e1c1a636eebe51409d738650674971c83cb6aa58626ea7fb0a509eb482f3fef4b27400b63a9b4df9f10568709b4b7c056983a39774342738d41961f48dada85bed8816fa853f738ec9027b132d7d7e657653e021bb5667f4ddb7160bdfab14cf4300921fa6c9e0a6125ee2161a863ca8f977b32ca6dcf117b0b5b782500b278c00d61816856904f8548c5f90b73e3c8369dc94a96bb2006222cc0ce5155f6cb7f8cec693d1da0cedb2006f44ea86a40911ff7b1783a4970d11649483f603abd8ffe2a285884826dcd81e9df8781406e6d24ec4846201f59e7429a4aa64112ba49013daad07cb98ae3e01b3d691d683ed9d369d1cca27046753e6d3ef15795053e18d30bf2fc18d597b458a1e855b0ddd7ba2e3deedfe5e31dcedbc8e78103125899cdda41392dfebcbf51ee350c1b8fc6c0eff5556c085341371267898c36dfe750a4182fc4aa07dfa9c62c78bac9b773e23e3f0921d31fa4378d725083c695401f5015e867004f5220df57eb8903a5a9413eae87b522cb2d8f38bc808dcc57b4a29f2cd3bdb5591fa3181d9093d9a174fb4e1cf227f23c6287ac93aa705f9dcd36dbaa0f6812780a173dd79093c7a192ad6f6b876126dc73d5cdfcabad73238fc5639cac7312aad1f39cea886257ababf139a463e7852ca55a759e1766e44d3a63ee3d96d749af9f8dd450b0e372e59aea8e03302a7adae48d0cd107257fb66b4c589fc6928d0060cf89222b0f3c7700e5ec09573067ff33b7ad1602f9187cc1e3613d0497143845f748c160636f99ffd6169b03db6d5d74ca390dab7e311bc213dd31696e935c791249bff047d4ed6071fc4152cf48a02e51f70d39e96de8d38e45ad2bef35dcf6dd9c94e6e7a04961aac5d63bd3e7b1f45b0b27862b784eccea4da2573c95c2dc83174270374d23efeedc17701531439bb5c360f86b199779f66af670e95fdecc8a38de6b8156b7030b38f75f75e860547c78fbd141e0bbd29ccf69d8266c880261f62ea40e7703bb0bf82d0a7b848eb52c6cc1eb3adb18b90d73a1fbf4360a746b548012fb2f1aeb03ad84f8b7dd6bdc5f5c26a6a6aff1718754cc21d0f856faeb815a7a716510d562fed1da10035f16a918c88265cdcc752a0d458dd99e34811d973598436885a0ae2ba75d23f1fb7adf41ee03721eb99b3c81e717bc65503e8f07a22b13bc0aee2ce5aad4dab5099ae6513b16854d1206347def3d6aa4e05486f3e062e9c744a201cb348c11d353abd2a58415eaf9f8e32e84061068d1a37146494034a2bb3e0fbce0a20e6090d7f9eeeaa0cea717347394070cdb1a1d10ed61e23b1bc1228c79b8357418430904155afc8862311797d75420205e60c53a8033d36384d5e78afd114a571ffaf199173a1e77bb71652ca65b37ccebc0d4a431cd49fd55c4dc5013072a65c9ed30999120fffef07299fc50c6aebded0b30e8831937edba6d48419ee0f2dc2d47ad6c2bc8e72c07ed95f5d638ffaa44ecbad452b394a12bda1179beafcf712c1206448ff6bcae9b7c90a2e98febc27ea6d390894f30f2d27557b8a42a3fb21192964ade4a610ec7abca285747ccac3c61db15d823097c4b52fd4df8f23dd41fa56ad898029df5da7b668827043fd0cca049184af39305e78484f9cffac987e27ec6466daa54f5bf65be7d52eced4911a2bc09ea43addae8a39477a570d659db23ba4b62e56e1b2588a9f51bbf6561634d2000e1b2eee370027b78419c2a5bf44511ba958b5a5a8ffc23b3744ab3a293b5bdce1c2f7d8faf0994551a8272a7e21c036f5af42e41686e5c56467efe9a4f28ccfd23caff6a8047299c0889bd0e33d56b8464fb15092e9b291bdd6d4acb0299d0afcd21f68b3b7ff05100cf660925c97b7000be7480dc06f3cb873151ca65631d7ab0e376ceaacb977ba69614e3795c12aff0e576d6998166c83ff8f661830ae891365fa4db802dbca08a5519a6bc3fc0f1bef1ec8ce2181f73780537caaebedaebf52f3735394301063753ac9cf4bd9bc4f88ce29778053e1f3651e1e14448cf04d6754c7f087c70acaa3896c224c6ab57f03b7fc46036b69bab225f14c480040fd155c6d105eccd4cf7e6f3f17237a0cbd2863703cd6afb5ea6c6a23bc4c5e98201dfcc8ffd4a3b336f54edc202248cb7bc07cf4b36c63e08e9218e4dc2ff2df1d13c304a038afbd50e7cf216de582ce2572052619c97de00f029aa1b6ef80fecb7385f99de1525262c28c46ac6f433e8eaec99b2fda1ab96ac389b51c9fa6eac3e4abbc945b85706d3b1971ab895fcaf9bb0e2674043c7e842555401eeaa4495c928d23143e1c305a932d424a8307614591d8cacc9152292d989ff5d93771413a553921767f491dd22477664dcb40269e1b1ded3b2c9e6ea9622152a43c74e2414287eb40ccfbee24a7603f273db93ad4f3783132ad3a4c7f476e4d324ffdc847afab7ca175d84ae8ee8f77fb92e589c126e4ba04c6b75f55036b7bf92bc50ebbf668b1f885264cb59704d85b98a0c572c55d48bf4bcc88d1f5d9efe65bf2d76fa6ae1b8efcb3ee378bf7b6a717d4a8fd63f5855d2ac80169474dd5664fe590e954603c3641810209c1b849e617fb3a5781293ee9602c99970e0ca581f83c24f17677b48bb92f6c5191ee07d6ecd6ac8a06c8c2438a10f9d85d14ce64384931f799a1a62ae69e0d071006387d75a2ea991de3101cc6cfda173f4fdd6bd79e0433650a9c82bb96623623f9325270ee714d119d36e1e5abf190f7412dcc7f92eb34d577f889e4a458c81ab058f8756773f0a8aff18357398fdda41d786fc5c6dc90cf4130440e6732e1d0d1ca112e4f19b75668699e236d0fcb4c5b3a53d931a4dcb49a484e34d72ac48fcd3ab7d2e804878a1fd0424c7719a1c3a5292cd888fe3cc78d4dd07656972c5b61fc3c510161eb17a2e41eea566ea06d7d43fea758d1ce49d115d419ff878fd8866508d04ca2b94cc4ad12e6077b7e63f5749644a02b48544a19139d13539ee5da3cd7cac3a7e56e7b3b10ff99adfe7a86ca37d9bbe3b05d0b68faf33761e1977e82b3f7066ea40ccfcb7fa8d6ad0f91c1bd27fe746e5e1f0781017f1932ac9385ec3cbf061ca2fcf02a669d650135cfd915c1f95ba255f8de31827756192cba68fca72c4a8c9632fbec0cb663288e2d5adf439cceb4067ddbb42f9f979422faf6580b77370c6e699a0dc1963794db81d6bb01827f896ee087eed8e7414f3442b2a8f5a40fdfbffa91c574eca3708ce5d271772cb539571f75609d4e2a9bc101f2dc56d6135de1b508cfeb1ab2d5de9aa8943c3a19591186944459f7254f4d3fd568d6e42129f8b2f3d5dc9b69448aeb448f80cddf08a9120ebd223922bd02734c410d370a12e0959d0964d015f55978d5c088daa2234e9389fa27c4edd139f6312de20c82a957b5d26893b304a0b92f7ce4c2a987efb30438f61cf0aae06ec7eba7d52338cbff775df0e13e08b030b94917e468d407931ab17bd395f9c6a313d7bff2a895e5b92ebb21cba3613e664188cd24e05e422647e926d2aab36a488465c844e67757c1f99de88aff79aec362d8523f997b6a6168f61cb968087db8d4b4293be003ccab0c2769d484d8e23675607f18988f34a537e31bba19356b9b4d4ecae6dea0b5d1f700f8c7d6ce084fde7a62a22da2a42d22e54cde525da4a6a064b9c28b53d0af89f03277c6f6f08ba86a394218890dde830b321ab3b63dd44815fc5268c26682b8e24109a952c470a7ac7929963536da7de37d7fbb674250bb7502119a4c9d4af177a8e48e338e4eb74a2fc54aee40e328cbb672934a84794f8475c51f5c312c77a15bec146c1944643c71ec754e71103990618e0491a7a61ae610e2a800c9760e45d27b7d43f84129ee0f89be8c5632c487a625031542c5e4d43cb42b5ef24ee61358cfb947c2fc0a418dc6b944d576d97aaf5794321642495f051145b61e6761836caa2e793e3d91ea8612879269b5894db9d13aae059c9f72179b53252577a113ffd21d41c398e61c8267a582b723bdbb30985f6af103363675d9d92a110dc720a6e305e729367d6b664c3214b2b12778d919b9063b434e416fdd41e848f87058701ebe344313a6b98d2917921975f8198f8f243513d67384035f3cf416ebd34dce88329135ecf94fa13c3ae35e23ef35d19019cd70be24202113f664d703e70ea841ebd7d56fbdcf15339417f5533b34d3850ec16e9c90b549b8f6883f16bd32f531a3f9eb107bdb7eeb84db5f5d00087da7595e7dfe7247c01c0c57e41c052d2b6929a3ce7242c996d64c0b020677ec20597a99b69ad7b216b0ff85344cc4ca5bdd605472cf8b51437de55d493928dd6702a3e51c520541ed2eb87d4b8860ab095d42690447155c96f7e9954b6d50c7f69a85778a47feae5178df0d54a0c1a64620020e2e63db98761f45439b8a03d3ea1efb73affdeaa697464ffebfced8914d6df29b3cb0b3bd69f86c869d70eb8c02995429cf806271a05bc9cd741086e0e1565d3c74f240e63620f1d12149d1201c20d5e747e641b3023c800b92e81411ad98971a5929285d6239acf4435a0f29295bf819bc1d85ba117e060a9aae358c3e7cd7d342163909dedfee3d62acfa3ab2b0a8f64a96857dfd0928222640c4a8fcfbdad79d3538a21d1afa5d4b0ce7cbafbea3ae1d0df6b88eb6328d3789b7c3c844b583de1ac749ae8bff70a57ded3658606f07fa8db5ac43eb7eaec3578efb48e4469c26363004db9bbb1eb0101016c01c62953ef91b4210b256ebd43180b997afd2587394898c651acdb4842e1b60fdda52284077c2e0a9bbc563bafd1d708e188839b131e870b92ee8b9a4391c8272880bf837dc22cb58cd2d91fe3e94db6e2fdb17b2a5acf4d955ee80f121dbb77930b15e4fab38c6b01f5b12eee87a881"}, {0xc}, {0xc, 0x8, {0x0, 0x33ba8f2575083a8d}}}}, @m_mpls={0x130, 0x1d, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x81}]}, {0xf1, 0x6, "343e636ba37ec86460586a63906b95b95c15559b6137fc161321b800d8b96791ddacd0bfc22ce27d072be9b58c71624107ec01102a5142e8762b0d2780c6a4a2866692487c8c6de0bc35ffc92a242c49aa88e0020e7f39f2ac53d3b7fe9b0210771b2b2286ccd58e25c1da103023988e34b56a03d64a001f158f8773e6e3ec4e7cbd9065e8f090eacd3da847321fd948bb683c59f719c343214e425efb4e1104f4d28b9c33252790f5f068b65f397656fb1540e6db8633321b2c811e77b3eefc21b33aed60552e69cf2cc64970e95b7fd086bd8fe4f330111a55bae5b2e01eb830154d480a73abf66d83fc518a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_vlan={0x90, 0x12, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbcb}]}, {0x51, 0x6, "c05a542969384ee89f23d58c605fefd08309a584a5978aee0f0e276db819d738310f2b4e0ade4562dbffaed1ed07c4ce87d79eff9d34aab2b1b454eac1280dcea2397dd3efe3a41685ae9f4e29"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0xd0, 0x1b, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0x6, 0x20000000, 0x22f9, 0x7}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3ff, 0x5, 0x1, 0x5}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x4, 0xff, 0x2}, 0x39}}]}, {0x4d, 0x6, "d0049cf57629aeda27ea9ef46596bb558f476ddef931c6c40d2957db66817aa21bdeb9dcb0a5fca2c442de495d1bab4f60bbcc64a5068d4ffd5f8d6d4ae9e1a4630f29576b553a1c91"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x14c, 0x1, [@m_tunnel_key={0x100, 0x12, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x9d, 0x6, "b01718d9b9de2735181bc1cb7a639730092c8210bb054c13f5650996b2dc92d6e3069b442342b1e8b4b309b5a7c63ba15f1be3ee67c7ab3c3fd7d9b1896940b3b0c1e54178307676576d06f9fefe4274888047709918c4923754976f26640904faa8e3da66828ac88fa15c59771429f0ade9a2e1977aeb984e2baefbb357fc5beb5a57db2809cc925700eb3d7009664bfdcb6a2f83f2dcc2c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x48, 0x9, 0x0, 0x0, {{0xf}, {0x4}, {0x16, 0x6, "9ebba0e2ac1c880a2a241dd97431cb302901"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0xc000, 0x100, 0x5, 0x8, 0x6, 0x4, 0x8b9, 0x8, 0x1, 0x0, 0x7ff, 0x7f, 0xd45, 0x8000, 0x5, 0xf, 0xe050, 0x8001, 0x4, 0x8, 0x9, 0x5, 0xfffffff8, 0x8f, 0x1, 0x7ae78f0d, 0xfffffff9, 0x3, 0x400, 0xffffffff, 0x0, 0x0, 0xfffffb80, 0xf3b, 0x80000000, 0x4, 0x5, 0x84c9, 0x4, 0x10001, 0x1, 0x10, 0x40, 0x4, 0x2, 0x0, 0x100, 0xac4, 0x6, 0x1, 0x5, 0xf, 0xb, 0x10001, 0xffffff6b, 0x81, 0x1, 0x3, 0x2, 0x5150, 0x1, 0x28ce, 0x9, 0x8001, 0x8b0, 0x3, 0x4, 0x4, 0x3e1, 0x8, 0x7, 0x6624, 0x7ff, 0xe688, 0x6, 0x3, 0x4, 0x9, 0x10000, 0x5f42, 0x1ff, 0x2, 0x8, 0x0, 0x1, 0x1ff, 0x6, 0x800, 0x8001, 0xffffffff, 0x4dbb, 0x3, 0x3ff, 0x7, 0x9, 0x2, 0x992, 0x800, 0x7ff, 0x5f6, 0xa52, 0x8000, 0x70000, 0x6, 0xba, 0x3, 0x0, 0x5, 0x8, 0x7ff, 0x2, 0x2, 0x2, 0x0, 0xe5, 0x0, 0x8, 0x6, 0xf, 0xfffff800, 0x10001, 0xde67, 0x7, 0x47, 0x8000, 0x1000, 0x0, 0x4, 0xe, 0x7fff, 0xffffffff, 0x7ff, 0xfffffffc, 0x3, 0xfffffff8, 0x7, 0x10, 0xffff, 0x3, 0xa188, 0x1ff, 0x9, 0x3, 0x2, 0x4, 0x800, 0x1, 0x2, 0x7, 0x8, 0x200, 0x7, 0x0, 0x4, 0x40, 0x0, 0x2c94, 0x80000001, 0x1ff, 0xe, 0x9, 0x37, 0x0, 0x5, 0x8, 0x0, 0x0, 0x9, 0x1, 0x6, 0x40, 0x7fffffff, 0x80, 0x817, 0x7f, 0x7, 0x8, 0x0, 0x8, 0x5, 0x7, 0x1, 0x7ff, 0xfffffffa, 0xdb4e, 0x80, 0x1f, 0x4, 0xb7, 0x7, 0x2, 0xfc5, 0x6206, 0x1, 0x3, 0x1000, 0x1, 0xd80d, 0x5938, 0xff, 0x10, 0x9, 0x4, 0x8, 0xe, 0xfffffff8, 0x9, 0x8fb0, 0x9, 0xfff, 0xa3f4, 0x9, 0x3, 0x959, 0x5, 0xa, 0x4, 0x7ff, 0x7, 0x0, 0x0, 0x6, 0x0, 0x8001, 0x1, 0xa0, 0x5, 0x1, 0x800, 0xa6e, 0x401, 0xffffffff, 0x81, 0x5, 0x9132, 0x80000000, 0x7, 0x7fffffff, 0x9, 0x7, 0x0, 0x5, 0x6, 0x2, 0x7, 0x9, 0x9, 0x1, 0x4, 0x80, 0x0, 0x9]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x3ec4}, 0x1, 0x0, 0x0, 0x400}, 0x44040) 1m26.26371753s ago: executing program 2 (id=5846): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x1a09}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x2, 0x8}, {0xc, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4048090) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x4) (async) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r11, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @broadcast}, 0x10) connect$llc(r11, &(0x7f0000000340)={0x1a, 0x322, 0xfe, 0x1, 0x4, 0x90, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) (async) r12 = socket$kcm(0x10, 0x400000002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) write$cgroup_subtree(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) (async, rerun: 32) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x00'/28], 0x50) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async, rerun: 32) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000), &(0x7f0000000080)) (rerun: 32) 1m25.944182812s ago: executing program 2 (id=5847): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x178, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x168, 0xf2, 0x0, 0x1, [@generic="9da74f73f2cde825eb4fc0cf23583a9ffb42296ff84054642abbdaf859ad8aef809412d3ac12991b7341fb5c0adec6f60eacf1a6ded0bef717f0b07b5b11c756a01248e8dab16b1828200ecfc35e1549ada726a46991ae60c00152ab72117dd312b5dd45890ac4e6cb3b8c160d5aec67a707", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d16080600000000000000f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x178}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m24.37115003s ago: executing program 4 (id=5848): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) (rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000004100010026bd7000040000000100000004004880100001800c00108004000580040008800c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = socket$inet_sctp(0x2, 0x3, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x1, 0x0, 0x2}}, 0x26) r5 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x24, 0x64, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20844) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x2, 0x1, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x65, 0x0, 0x6, 0x29, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0xf, 0x62, [@multicast1, @local, @multicast2]}, @rr={0x7, 0xf, 0xbd, [@local, @multicast2, @local]}, @cipso={0x86, 0x10, 0x1, [{0x2, 0x4, "8ac1"}, {0x0, 0x6, "4752aa23"}]}, @end, @generic={0x83, 0xc, "56f9468fe606ba6bc251"}]}}}}}) (async, rerun: 32) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000000000000900000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100410000009500000000000000c5000200fcffffff3d00f8ff00000000bf91000000000000b702000003000000850000002a000000b7000000000000000100000001000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xf, 0xc}, {0xffff, 0x8}, {0x3, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r12 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r13 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) 1m24.364242263s ago: executing program 3 (id=5849): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getpid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x2c0e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) 1m24.270161205s ago: executing program 0 (id=5850): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbc, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x2}, @in6={0xa, 0x4e21, 0xffa, @empty, 0xff}, @in6={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, @in6={0xa, 0x4e20, 0xfffff352, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x903, @local, 0x4}, @in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x17300000}}, 0x3, 0x1}, 0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1, 0x5}, &(0x7f0000000240)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffff7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000400)={0xc, 0x6, 0x4, 0x7, 0x7, 0x2, 0x2, 0x8, 0x6, 0x1, 0xff, 0xe, 0x4, 0x4}, 0xe) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000440)={0x4a6}, 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000480)={0x1, [0xfcc7]}, 0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x6, {{0xa, 0x4e24, 0x1, @empty, 0x8}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x400, @loopback, 0x7fffffff}}, {{0xa, 0x4e21, 0x1, @loopback, 0x100}}, {{0xa, 0x4e21, 0x9d5a, @remote, 0x2}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {{0xa, 0x4e23, 0x3ff, @local, 0x101}}, {{0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xe0000}}, {{0xa, 0x4e20, 0x69, @empty}}, {{0xa, 0x4e22, 0x6, @mcast1}}]}, 0x490) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x40010, r2, 0x15e12000) sendto$inet6(r0, &(0x7f0000000980)="d7aab0c176843ccb2594ce6216a98bb912ba51e02469af679bab2198622b1abad7ce31658b86002e56c374a050eb930ab58c30ea34b84a7436c15d1c96c6d6175d60a4574bd6adaeec51ab56dcdcd1d84a497dedce", 0x55, 0x24000000, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000a00)={0x6, 'pim6reg0\x00', {0x8}, 0x5}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000a40)={0x6, 'dvmrp0\x00', {0x2}, 0x7ff}) sendto$inet6(r0, &(0x7f0000000a80)="e99408a4420c5cd5323b62229595510b6887b1088eac9e8af628ba9fcbffe1a93dfa1729658993", 0x27, 0x5, &(0x7f0000000ac0)={0xa, 0x4e21, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000b00)={r1, 0xff}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000cc0)={r3, 0x10c, &(0x7f0000000b80)=[@in6={0xa, 0x4e22, 0x7fffffff, @mcast2, 0x40}, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, @in6={0xa, 0x4e24, 0xa2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, @in6={0xa, 0x4e22, 0x100000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x82f}, @in6={0xa, 0x4e21, 0x4, @local, 0x6}, @in6={0xa, 0x4e21, 0xfffffffb, @remote, 0x9}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x0, @private1, 0x85}]}, &(0x7f0000000d00)=0x10) r4 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r4, &(0x7f0000000d40), &(0x7f0000000dc0)=0x6e, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x78, r7, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xf, 0x31}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x339}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe97}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc5c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1035}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)=@o_path={&(0x7f0000001140)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{0x1}, &(0x7f0000001100), &(0x7f00000011c0)=r9}, 0x20) r10 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r10, &(0x7f0000001480)={&(0x7f0000001240)=@x25={0x9, @remote}, 0x80, &(0x7f0000001400)=[{&(0x7f00000012c0)=""/34, 0x22}, {&(0x7f0000001300)=""/196, 0xc4}], 0x2, &(0x7f0000001440)=""/47, 0x2f}, 0x40000002) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000014c0)={0x0, 0x8, 0x5, 0x1, 0x200}, 0x14) 1m24.037883223s ago: executing program 4 (id=5851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="08020000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="a801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b"], 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x40) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1m23.846628379s ago: executing program 4 (id=5852): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r1, 0x84, 0x82, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000}, 0x94) 1m23.675620381s ago: executing program 4 (id=5853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000028000000850000007a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1m23.587228183s ago: executing program 4 (id=5854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x7ffe}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x3, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x38a, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r6, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xfa}], 0x1}, 0x20000885) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x24, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r13, 0x1, 0x29, &(0x7f0000000240), &(0x7f0000000140)=0xc) 1m23.282083476s ago: executing program 3 (id=5855): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x20008000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x1299, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/21, 0x15}, 0x4000004}], 0x1, 0x45833af96e4b39ff, 0x0) 1m23.235302979s ago: executing program 0 (id=5856): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x628}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r1}, 0x99) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast1}, 0x1, 0x0, 0x2, 0x4}}, 0x2e) 0s ago: executing program 32 (id=5847): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x178, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x168, 0xf2, 0x0, 0x1, [@generic="9da74f73f2cde825eb4fc0cf23583a9ffb42296ff84054642abbdaf859ad8aef809412d3ac12991b7341fb5c0adec6f60eacf1a6ded0bef717f0b07b5b11c756a01248e8dab16b1828200ecfc35e1549ada726a46991ae60c00152ab72117dd312b5dd45890ac4e6cb3b8c160d5aec67a707", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d16080600000000000000f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x178}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): evice bond1 [ 831.453876][T25389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.482284][T25389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 831.492790][T25389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 831.501681][T25389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 831.510385][T25389] 8021q: adding VLAN 0 to HW filter on device bond6 [ 831.519541][T25389] 8021q: adding VLAN 0 to HW filter on device bond7 [ 831.538831][T25389] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 831.547394][T25389] 8021q: adding VLAN 0 to HW filter on device bond8 [ 831.555062][T25389] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 831.564217][T25389] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 831.572969][T25403] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.602124][T25389] ip6gretap0: entered promiscuous mode [ 831.622335][T25389] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 831.631276][T25389] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 831.639568][T25389] 8021q: adding VLAN 0 to HW filter on device bond9 [ 831.646469][T25407] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.659278][T25389] 8021q: adding VLAN 0 to HW filter on device bond10 [ 831.668948][T25389] 8021q: adding VLAN 0 to HW filter on device bond11 [ 831.678315][T25389] 8021q: adding VLAN 0 to HW filter on device bond12 [ 831.692919][T25407] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.717954][T25389] 8021q: adding VLAN 0 to HW filter on device bond13 [ 831.730098][T25389] 8021q: adding VLAN 0 to HW filter on device eth0 [ 831.740490][T25389] 8021q: adding VLAN 0 to HW filter on device eth1 [ 831.750856][T25389] 8021q: adding VLAN 0 to HW filter on device eth2 [ 831.757415][T25403] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.772843][T25389] 8021q: adding VLAN 0 to HW filter on device eth3 [ 831.782822][T25389] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 831.816288][T25407] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.871077][T11045] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.879337][T11045] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.892091][T11045] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 831.900849][T11045] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.909087][T11045] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.936859][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.974680][T11045] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 831.983400][T11045] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.991624][T11045] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.999831][T11045] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 832.008174][T11045] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.016392][T11045] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.025765][T11045] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 832.141671][T25401] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 832.171065][T25401] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 832.178886][ T7218] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 832.308258][T25401] bond14: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 832.345568][T25401] bond14: (slave veth7): making interface the new active one [ 832.368145][T25450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5040'. [ 832.386433][T25401] bond14: active interface up! [ 832.431550][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5038'. [ 832.457215][T25449] netlink: 'syz.4.5038': attribute type 1 has an invalid length. [ 832.546849][T25449] bond14: (slave bridge0): Enslaving as a backup interface with an up link [ 832.555842][ T7218] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 832.634696][T25456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5041'. [ 832.690845][T25449] macvlan3: entered promiscuous mode [ 832.696224][T25449] macvlan3: entered allmulticast mode [ 832.734723][T25449] bond14: entered promiscuous mode [ 832.739935][T25449] bridge0: entered promiscuous mode [ 832.746290][T25449] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 832.767033][T25449] bond14: left promiscuous mode [ 832.771963][T25449] bridge0: left promiscuous mode [ 832.954060][ T7232] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 833.037248][T25472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5047'. [ 833.047302][T25472] syzkaller1: entered promiscuous mode [ 833.052815][T25472] syzkaller1: entered allmulticast mode [ 833.670068][T25502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5053'. [ 833.680170][T25502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 833.689670][T25502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5053'. [ 833.844732][T25509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5055'. [ 833.879637][T25497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.317928][T25526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5060'. [ 834.394939][T25527] bond13: (slave dummy0): Releasing active interface [ 834.414393][T25527] netlink: 'syz.0.5060': attribute type 10 has an invalid length. [ 834.431306][T25527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5060'. [ 834.453575][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5061'. [ 834.469970][T25529] batadv0: entered promiscuous mode [ 834.476459][T25529] macvlan5: entered promiscuous mode [ 834.481998][T25529] macvlan5: entered allmulticast mode [ 834.487414][T25529] batadv0: entered allmulticast mode [ 834.494122][T25529] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 834.525491][T25527] dummy0: entered promiscuous mode [ 834.530853][ T7218] dummy0 speed is unknown, defaulting to 1000 [ 834.584676][T25521] 8021q: VLANs not supported on ip6_vti0 [ 834.591115][T25523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5059'. [ 834.605243][T25523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5059'. [ 834.841953][T25541] netlink: 'syz.4.5065': attribute type 1 has an invalid length. [ 834.885627][T25541] 8021q: adding VLAN 0 to HW filter on device bond16 [ 834.956684][T25545] gre2: entered allmulticast mode [ 835.005694][T25543] vlan12: entered allmulticast mode [ 835.011090][T25543] bond16: entered allmulticast mode [ 835.342739][T25558] pimreg9: entered allmulticast mode [ 835.357928][T25558] macsec1: entered promiscuous mode [ 835.833472][T11042] net_ratelimit: 108 callbacks suppressed [ 835.833492][T11042] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 835.842258][T25403] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 835.853542][T11042] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 835.900823][T25403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 836.004059][T25408] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.035298][T25592] netlink: 'syz.0.5078': attribute type 1 has an invalid length. [ 836.052568][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.068806][T25587] 8021q: adding VLAN 0 to HW filter on device bond15 [ 836.141622][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.174853][T25592] 8021q: adding VLAN 0 to HW filter on device bond21 [ 836.231690][T25408] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.291081][T25592] vlan16: entered allmulticast mode [ 836.296560][T25592] bond21: entered allmulticast mode [ 836.309516][T25605] netlink: 'syz.4.5079': attribute type 1 has an invalid length. [ 836.343527][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.395270][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 836.447076][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.492555][T25605] 8021q: adding VLAN 0 to HW filter on device bond17 [ 836.653254][T25626] netlink: 'syz.1.5086': attribute type 13 has an invalid length. [ 836.701925][T25628] IPv6: NLM_F_CREATE should be specified when creating new route [ 836.713961][T25629] vlan14: entered promiscuous mode [ 836.719184][T25629] bridge0: entered promiscuous mode [ 836.856361][T25633] veth1_to_hsr: entered promiscuous mode [ 836.933991][T25645] netlink: 'syz.2.5085': attribute type 30 has an invalid length. [ 837.082181][T25650] netlink: 'syz.1.5091': attribute type 1 has an invalid length. [ 837.156653][T25650] 8021q: adding VLAN 0 to HW filter on device bond16 [ 837.219630][T25650] vlan8: entered allmulticast mode [ 837.249349][T25650] bond16: entered allmulticast mode [ 838.145690][T25699] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 838.181795][T25699] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 838.281029][T25702] netlink: 'syz.4.5106': attribute type 1 has an invalid length. [ 838.379756][T25702] 8021q: adding VLAN 0 to HW filter on device bond18 [ 838.627800][T25702] vlan15: entered allmulticast mode [ 838.633074][T25702] bond18: entered allmulticast mode [ 838.892718][T25722] __nla_validate_parse: 23 callbacks suppressed [ 838.892738][T25722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5112'. [ 839.054920][T25734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5114'. [ 839.491104][T25750] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 840.109762][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5122'. [ 840.390923][T25764] netlink: 'syz.2.5122': attribute type 15 has an invalid length. [ 840.398864][T25764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5122'. [ 840.413420][T25761] lo speed is unknown, defaulting to 1000 [ 840.520437][T25772] netlink: 'syz.2.5122': attribute type 9 has an invalid length. [ 840.741278][T25761] dummy0 speed is unknown, defaulting to 1000 [ 840.749273][T25761] wlan0 speed is unknown, defaulting to 1000 [ 840.873179][T25399] net_ratelimit: 85 callbacks suppressed [ 840.873199][T25399] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 840.907233][T25785] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 840.927460][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 840.940638][T11042] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 840.949280][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 840.963584][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 841.050851][T25407] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 841.166521][T25399] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 841.196822][T25791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5129'. [ 841.266723][T25408] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 841.321862][T25407] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 841.386609][T25791] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.5129'. [ 841.396116][T25791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5129'. [ 841.405115][T25791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5129'. [ 841.414113][T25791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5129'. [ 841.615312][T25800] syzkaller1: left promiscuous mode [ 841.631100][T25800] syzkaller1: left allmulticast mode [ 842.413911][T25798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 842.760785][T25823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5138'. [ 843.016642][T25824] veth7: entered allmulticast mode [ 843.072376][T25843] netlink: 'syz.1.5144': attribute type 3 has an invalid length. [ 843.085581][T25843] netlink: 'syz.1.5144': attribute type 23 has an invalid length. [ 843.440594][T25856] netlink: 'syz.3.5148': attribute type 12 has an invalid length. [ 843.449641][T25856] netlink: 'syz.3.5148': attribute type 12 has an invalid length. [ 843.538142][T25858] netlink: 'syz.3.5149': attribute type 1 has an invalid length. [ 843.652003][T25861] netlink: 'syz.3.5149': attribute type 5 has an invalid length. [ 843.922887][T25867] sctp: [Deprecated]: syz.4.5152 (pid 25867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.922887][T25867] Use struct sctp_sack_info instead [ 844.023057][T25876] netlink: 'syz.4.5155': attribute type 1 has an invalid length. [ 844.066958][T25876] 8021q: adding VLAN 0 to HW filter on device bond19 [ 844.091855][T25876] bond19: (slave gretap1): making interface the new active one [ 844.103002][T25876] bond19: (slave gretap1): Enslaving as an active interface with an up link [ 844.121891][T25876] bond19 (unregistering): (slave gretap1): Releasing active interface [ 844.132636][T25876] bond19 (unregistering): Released all slaves [ 844.495433][T25896] syzkaller0: entered promiscuous mode [ 844.500970][T25896] syzkaller0: entered allmulticast mode [ 844.534798][T16681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 844.556556][T25896] tipc: Enabled bearer , priority 0 [ 844.589227][T25896] tipc: Resetting bearer [ 844.651509][T25905] netlink: 'syz.4.5161': attribute type 10 has an invalid length. [ 844.668584][T25905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.699432][T25905] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 844.715165][T25905] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 844.813697][T25895] tipc: Resetting bearer [ 844.888964][T25895] tipc: Disabling bearer [ 844.900375][T11045] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 845.308759][ T7226] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 845.371204][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 845.472973][T25935] __nla_validate_parse: 6 callbacks suppressed [ 845.472995][T25935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5170'. [ 845.492260][T25935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5170'. [ 845.713486][T25950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5172'. [ 845.774178][T25952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5174'. [ 845.922986][T11045] net_ratelimit: 92 callbacks suppressed [ 845.923007][T11045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 845.944917][T11045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 845.960294][T25406] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 845.990452][T25401] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 845.998577][T25406] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 846.022504][T25957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5175'. [ 846.037855][T11045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 846.051350][T11045] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 846.141921][T25406] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 846.149760][T25406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 846.173545][T25967] netlink: 'syz.4.5178': attribute type 7 has an invalid length. [ 846.251347][T11045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 846.259155][T11045] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 846.333840][T25939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.418370][T25406] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 846.515105][T25969] lo speed is unknown, defaulting to 1000 [ 846.608551][T25979] netlink: 'syz.1.5182': attribute type 1 has an invalid length. [ 846.743480][T25980] dvmrp0: left allmulticast mode [ 846.804809][T25979] tipc: Enabling of bearer rejected, failed to enable media [ 846.852761][T25979] veth9: entered allmulticast mode [ 846.875033][T25979] bond17: (slave veth9): Enslaving as an active interface with a down link [ 846.902231][T25989] bond17: (slave veth0_to_bond): making interface the new active one [ 846.912148][T25989] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 846.935905][ T5823] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 846.954800][T25979] bond17: (slave veth0_to_bond): Releasing active interface [ 847.007499][T25969] dummy0 speed is unknown, defaulting to 1000 [ 847.038726][T25969] wlan0 speed is unknown, defaulting to 1000 [ 847.116780][T25995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5184'. [ 847.263093][T26002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5186'. [ 847.581211][T26005] syzkaller0: entered promiscuous mode [ 847.586878][T26005] syzkaller0: entered allmulticast mode [ 847.673426][ T5836] page_pool_release_retry() stalled pool shutdown: id 346, 1 inflight 60 sec [ 847.782716][T26008] block nbd4: server does not support multiple connections per device. [ 847.796357][T26008] block nbd4: shutting down sockets [ 848.373461][T26038] sctp: [Deprecated]: syz.0.5195 (pid 26038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 848.373461][T26038] Use struct sctp_sack_info instead [ 848.573312][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5194'. [ 849.163967][T26062] netlink: 'syz.1.5204': attribute type 1 has an invalid length. [ 849.246110][T26062] bond18: (slave gretap1): making interface the new active one [ 849.254699][T26062] bond18: (slave gretap1): Enslaving as an active interface with an up link [ 849.267156][T26060] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5203'. [ 849.276479][T26060] NCSI netlink: No device for ifindex 0 [ 849.312493][T26062] vlan9: entered allmulticast mode [ 849.325792][T26062] bond18: entered allmulticast mode [ 849.353570][T26062] gretap1: entered allmulticast mode [ 849.363261][T26062] bond18: (slave vlan9): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 850.125309][T26105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5213'. [ 850.391641][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 850.659094][T26086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.967460][T26137] veth0: entered promiscuous mode [ 850.973536][T25406] net_ratelimit: 96 callbacks suppressed [ 850.973558][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 850.985857][T26135] veth0: left promiscuous mode [ 850.993955][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 851.040632][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 851.065530][T11042] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 851.156136][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 851.170803][T11042] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 851.264496][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 851.274266][T11042] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 851.390694][T25401] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 851.414871][T25401] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 851.667381][T26172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5230'. [ 852.208177][T26197] netlink: 'syz.3.5237': attribute type 1 has an invalid length. [ 852.220869][T26197] netlink: 'syz.3.5237': attribute type 4 has an invalid length. [ 852.228672][T26197] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5237'. [ 852.244873][T26197] tipc: Enabling of bearer rejected, failed to enable media [ 852.286269][T26202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5238'. [ 852.306156][T26197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5237'. [ 852.325888][T26202] macvtap0: entered promiscuous mode [ 852.563176][T26212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5240'. [ 852.572210][T26212] nbd: must specify at least one socket [ 852.779034][T26220] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 852.807353][T26223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5245'. [ 852.865488][T26223] batadv_slave_0: entered promiscuous mode [ 852.986443][T26214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.046436][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 853.121762][T26231] lo speed is unknown, defaulting to 1000 [ 853.639164][T26231] dummy0 speed is unknown, defaulting to 1000 [ 853.647437][T26231] wlan0 speed is unknown, defaulting to 1000 [ 854.032803][T26245] netlink: 'syz.0.5251': attribute type 2 has an invalid length. [ 854.067478][T26245] netlink: 'syz.0.5251': attribute type 8 has an invalid length. [ 854.086682][T26245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5251'. [ 854.142944][T26249] netlink: 'syz.0.5251': attribute type 2 has an invalid length. [ 854.150743][T26249] netlink: 'syz.0.5251': attribute type 8 has an invalid length. [ 854.158513][T26249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5251'. [ 854.270622][T26243] veth1_to_hsr: left promiscuous mode [ 854.428332][T26243] veth3: left allmulticast mode [ 854.471747][T26243] vlan4: left allmulticast mode [ 854.476678][T26243] bond9: left allmulticast mode [ 854.494968][T26243] vlan5: left allmulticast mode [ 854.499887][T26243] bond10: left allmulticast mode [ 854.530058][T26243] vlan6: left allmulticast mode [ 854.534985][T26243] bond11: left allmulticast mode [ 854.571562][T26243] gre2: left allmulticast mode [ 854.580517][T26243] vlan8: left allmulticast mode [ 854.585537][T26243] bond16: left allmulticast mode [ 854.593918][T26243] veth9: left allmulticast mode [ 854.675587][T26252] kthread_run failed with err -4 [ 854.686301][T11042] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.694717][T11042] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.703108][T11042] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 854.711614][T11042] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.719988][T11042] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.728373][T11042] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 854.838882][T11042] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.847305][T11042] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.924394][T11042] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 854.933133][T11042] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.941541][T11042] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.949929][T11042] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 855.345888][T26270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5259'. [ 855.356240][T26270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5259'. [ 856.455915][T25401] net_ratelimit: 65 callbacks suppressed [ 856.455938][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 856.476063][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 857.114213][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 857.128670][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 857.685493][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 857.699948][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 858.291350][T25408] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 858.305683][T25408] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 858.904171][T25408] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 858.919517][T25408] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 859.028939][T26342] FAULT_INJECTION: forcing a failure. [ 859.028939][T26342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.043359][T26342] CPU: 1 UID: 0 PID: 26342 Comm: syz.3.5275 Not tainted syzkaller #0 PREEMPT(full) [ 859.043390][T26342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 859.043405][T26342] Call Trace: [ 859.043414][T26342] [ 859.043423][T26342] dump_stack_lvl+0xe8/0x150 [ 859.043466][T26342] should_fail_ex+0x40c/0x560 [ 859.043501][T26342] _copy_from_iter+0x1d3/0x1660 [ 859.043530][T26342] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 859.043575][T26342] ? __pfx_policy_nodemask+0x10/0x10 [ 859.043613][T26342] ? __pfx__copy_from_iter+0x10/0x10 [ 859.043646][T26342] ? alloc_pages_mpol+0x24a/0x380 [ 859.043691][T26342] af_alg_sendmsg+0x14c3/0x2250 [ 859.043856][T26342] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 859.043880][T26342] ? __might_fault+0xaf/0x130 [ 859.043905][T26342] ? __pfx_aa_sk_perm+0x10/0x10 [ 859.043943][T26342] ? aa_sock_msg_perm+0xf1/0x1b0 [ 859.043967][T26342] ? skcipher_sendmsg+0x26/0xf0 [ 859.043998][T26342] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 859.044025][T26342] sock_sendmsg_nosec+0x13a/0x180 [ 859.044058][T26342] ____sys_sendmsg+0x54e/0x850 [ 859.044099][T26342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.044144][T26342] ? import_iovec+0x73/0xa0 [ 859.044181][T26342] ___sys_sendmsg+0x2a5/0x360 [ 859.044228][T26342] ? __lock_acquire+0x683/0x2cf0 [ 859.044266][T26342] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.044306][T26342] ? kstrtouint+0x6e/0xe0 [ 859.044361][T26342] ? __fget_files+0x2a/0x420 [ 859.044391][T26342] ? __fget_files+0x3a2/0x420 [ 859.044433][T26342] __sys_sendmmsg+0x273/0x4d0 [ 859.044461][T26342] ? __pfx___sys_sendmmsg+0x10/0x10 [ 859.044505][T26342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 859.044559][T26342] ? ksys_write+0x242/0x270 [ 859.044595][T26342] ? __pfx_ksys_write+0x10/0x10 [ 859.044637][T26342] __x64_sys_sendmmsg+0xa0/0xc0 [ 859.044659][T26342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.044683][T26342] do_syscall_64+0x174/0x580 [ 859.044715][T26342] ? trace_irq_disable+0x3b/0x140 [ 859.044744][T26342] ? clear_bhb_loop+0x40/0x90 [ 859.044773][T26342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.044796][T26342] RIP: 0033:0x7f2fca39de99 [ 859.044818][T26342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.044839][T26342] RSP: 002b:00007f2fcb2ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 859.044862][T26342] RAX: ffffffffffffffda RBX: 00007f2fca625fa0 RCX: 00007f2fca39de99 [ 859.044879][T26342] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 859.044893][T26342] RBP: 00007f2fcb2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 859.044906][T26342] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 859.044919][T26342] R13: 00007f2fca626038 R14: 00007f2fca625fa0 R15: 00007ffcb821c4e8 [ 859.044956][T26342] [ 859.440842][T26352] __nla_validate_parse: 3 callbacks suppressed [ 859.440863][T26352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5278'. [ 859.786065][T26375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5285'. [ 860.042864][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 861.278387][T26424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5298'. [ 861.302375][T26421] Bluetooth: MGMT ver 1.23 [ 861.458319][T26428] netlink: 36764 bytes leftover after parsing attributes in process `syz.4.5301'. [ 861.469072][T26428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5301'. [ 861.666837][T25408] net_ratelimit: 9 callbacks suppressed [ 861.666859][T25408] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 861.690120][T25408] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 861.709208][T26431] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20002 [ 861.742613][T26431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5303'. [ 862.042738][T26453] netlink: 'syz.4.5309': attribute type 13 has an invalid length. [ 862.071134][T26453] netlink: 'syz.4.5309': attribute type 17 has an invalid length. [ 862.093922][T26454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5309'. [ 862.172341][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 862.186782][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 862.340037][T26453] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 862.720428][T26481] lo speed is unknown, defaulting to 1000 [ 862.748625][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 862.763007][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 862.907480][T26488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 862.916413][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5318'. [ 862.926348][T26488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 863.208553][T26481] dummy0 speed is unknown, defaulting to 1000 [ 863.216600][T26481] wlan0 speed is unknown, defaulting to 1000 [ 863.304015][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 863.318446][T25401] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 863.343332][ T5628] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 863.359866][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 863.474034][T26504] netlink: 'syz.1.5323': attribute type 1 has an invalid length. [ 863.597571][T26504] 8021q: adding VLAN 0 to HW filter on device bond19 [ 863.720435][T26509] vlan9: entered allmulticast mode [ 863.730367][T26509] bond19: entered allmulticast mode [ 863.871610][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 864.595047][T26534] syzkaller0: entered promiscuous mode [ 864.600576][T26534] syzkaller0: entered allmulticast mode [ 866.713330][T26512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.170804][T25406] net_ratelimit: 11 callbacks suppressed [ 867.170832][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 867.190836][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 867.207904][T26569] netlink: 'syz.4.5333': attribute type 3 has an invalid length. [ 867.738810][T25399] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 867.754133][T25399] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 868.241440][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 868.255792][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 868.448372][T26571] bond20: entered allmulticast mode [ 868.457526][T26574] __nla_validate_parse: 4 callbacks suppressed [ 868.457545][T26574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5338'. [ 868.480431][T26578] macvlan3: entered promiscuous mode [ 868.485793][T26578] macvlan3: entered allmulticast mode [ 868.492209][T26578] bond20: entered promiscuous mode [ 868.502395][T26581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5338'. [ 868.543229][T26578] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 868.557205][T26578] bond20: left promiscuous mode [ 868.599837][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5341'. [ 868.666775][T26591] openvswitch: netlink: IP tunnel dst address not specified [ 868.674294][T26591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.759154][T26595] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 868.760260][T26596] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 868.882259][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 868.896604][T25406] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 869.117726][T26608] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 869.636332][T26624] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 869.662091][T26628] can: request_module (can-proto-0) failed. [ 870.030582][T26646] netlink: 'syz.1.5359': attribute type 1 has an invalid length. [ 870.176018][T26655] netlink: 'syz.4.5360': attribute type 2 has an invalid length. [ 870.320971][T26653] bond21: (slave bridge5): making interface the new active one [ 870.330012][T26653] bond21: (slave bridge5): Enslaving as an active interface with an up link [ 870.387214][T26646] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5359'. [ 870.441769][T26646] bond21: entered promiscuous mode [ 870.465823][T26646] bridge5: entered promiscuous mode [ 870.496190][T26646] bond21: entered allmulticast mode [ 870.509063][T26663] FAULT_INJECTION: forcing a failure. [ 870.509063][T26663] name failslab, interval 1, probability 0, space 0, times 0 [ 870.517719][T26646] bridge5: entered allmulticast mode [ 870.522197][T26663] CPU: 1 UID: 0 PID: 26663 Comm: syz.4.5363 Not tainted syzkaller #0 PREEMPT(full) [ 870.522225][T26663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 870.522239][T26663] Call Trace: [ 870.522249][T26663] [ 870.522260][T26663] dump_stack_lvl+0xe8/0x150 [ 870.522362][T26663] should_fail_ex+0x40c/0x560 [ 870.522462][T26663] should_failslab+0xa8/0x100 [ 870.522562][T26663] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 870.522624][T26663] ? skb_clone+0x212/0x3a0 [ 870.522684][T26663] ? skb_clone+0x212/0x3a0 [ 870.522757][T26663] skb_clone+0x212/0x3a0 [ 870.522829][T26663] ? dev_queue_xmit_nit+0x25c/0xac0 [ 870.523012][T26663] dev_queue_xmit_nit+0x28d/0xac0 [ 870.523104][T26663] ? dev_queue_xmit_nit+0x2d/0xac0 [ 870.523221][T26663] dev_hard_start_xmit+0x1c1/0x830 [ 870.523322][T26663] sch_direct_xmit+0x257/0x4c0 [ 870.523472][T26663] ? ktime_get+0x45/0x220 [ 870.523551][T26663] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 870.523615][T26663] ? __pfx_sch_direct_xmit+0x10/0x10 [ 870.523688][T26663] ? seqcount_lockdep_reader_access+0xea/0x100 [ 870.523775][T26663] ? ktime_get+0x1f5/0x220 [ 870.523921][T26663] __qdisc_run+0xb11/0x1620 [ 870.524066][T26663] __dev_queue_xmit+0x1c00/0x37f0 [ 870.524122][T26663] ? bpf_prog_test_run+0x2c5/0x340 [ 870.524201][T26663] ? __sys_bpf+0xa22/0xd90 [ 870.524337][T26663] ? __dev_queue_xmit+0x29b/0x37f0 [ 870.524446][T26663] ? __pfx___dev_queue_xmit+0x10/0x10 [ 870.524561][T26663] ? skb_release_data+0x30f/0xab0 [ 870.524696][T26663] __bpf_redirect+0xa76/0x1250 [ 870.524853][T26663] bpf_clone_redirect+0x319/0x4b0 [ 870.524949][T26663] ? bpf_test_run+0x1d1/0x830 [ 870.525020][T26663] bpf_prog_4653d16e8163849f+0x22/0x2a [ 870.525082][T26663] bpf_test_run+0x354/0x830 [ 870.525236][T26663] ? __pfx_bpf_test_run+0x10/0x10 [ 870.525338][T26663] ? csum_partial+0x239/0x2c0 [ 870.525471][T26663] ? skb_dst_set+0x72/0x140 [ 870.525533][T26663] bpf_prog_test_run_skb+0xe35/0x2230 [ 870.525696][T26663] ? __fget_files+0x3a2/0x420 [ 870.525768][T26663] ? __fget_files+0x2a/0x420 [ 870.525857][T26663] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 870.525947][T26663] bpf_prog_test_run+0x2c5/0x340 [ 870.526031][T26663] __sys_bpf+0xa22/0xd90 [ 870.526131][T26663] ? __pfx___sys_bpf+0x10/0x10 [ 870.526226][T26663] ? __fget_files+0x2a/0x420 [ 870.526345][T26663] ? ksys_write+0x242/0x270 [ 870.526437][T26663] ? __pfx_ksys_write+0x10/0x10 [ 870.526544][T26663] __x64_sys_bpf+0xba/0xd0 [ 870.526620][T26663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.526682][T26663] do_syscall_64+0x174/0x580 [ 870.526730][T26663] ? trace_irq_disable+0x3b/0x140 [ 870.526804][T26663] ? clear_bhb_loop+0x40/0x90 [ 870.526874][T26663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.526933][T26663] RIP: 0033:0x7f91e6b9de99 [ 870.526990][T26663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.527034][T26663] RSP: 002b:00007f91e4df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 870.527102][T26663] RAX: ffffffffffffffda RBX: 00007f91e6e25fa0 RCX: 00007f91e6b9de99 [ 870.527143][T26663] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 870.527183][T26663] RBP: 00007f91e4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 870.527216][T26663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 870.527254][T26663] R13: 00007f91e6e26038 R14: 00007f91e6e25fa0 R15: 00007ffeef34e0e8 [ 870.527373][T26663] [ 870.876032][T26646] 8021q: adding VLAN 0 to HW filter on device bond21 [ 871.100992][T26678] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.5366'. [ 871.345041][T26675] tipc: Enabled bearer , priority 0 [ 871.352646][T26681] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5365'. [ 871.420390][T26681] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5365'. [ 871.515048][T26671] tipc: Resetting bearer [ 871.795177][T26697] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5368'. [ 872.455382][T26715] netlink: 'syz.4.5373': attribute type 1 has an invalid length. [ 872.487702][T26715] bond19: option mode: invalid value (8) [ 872.497183][T26715] bond19 (unregistering): Released all slaves [ 872.536516][T25408] net_ratelimit: 10 callbacks suppressed [ 872.536538][T25408] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 872.556671][T25408] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 872.658435][T26721] batman_adv: batadv0: Interface deactivated: dummy0 [ 872.669901][T26721] batman_adv: batadv0: Removing interface: dummy0 [ 872.954682][T26722] lo speed is unknown, defaulting to 1000 [ 873.141795][T11045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 873.156224][T11045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 873.387808][T26722] dummy0 speed is unknown, defaulting to 1000 [ 873.403117][T26722] wlan0 speed is unknown, defaulting to 1000 [ 873.701510][T11045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 873.716321][T11045] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 874.123498][T26734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5376'. [ 874.326161][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 874.340592][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 874.420537][T26744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 874.439100][T26744] IPv6: NLM_F_CREATE should be set when creating new route [ 874.465783][T26745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 874.475593][T26745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5379'. [ 874.505649][T26745] nbd: socks must be embedded in a SOCK_ITEM attr [ 874.679229][T26748] udevd[26748]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 874.693220][T26748] udevd[26748]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 874.871717][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 874.886717][ T48] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 875.176185][T26770] sctp: [Deprecated]: syz.4.5385 (pid 26770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 875.176185][T26770] Use struct sctp_sack_info instead [ 875.395346][T26772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5386'. [ 875.691542][T26792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5389'. [ 875.790284][T26804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5394'. [ 875.829942][T26800] tap0: tun_chr_ioctl cmd 1074025672 [ 875.835310][T26800] tap0: ignored: set checksum disabled [ 876.014876][T26811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.652813][T26822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5399'. [ 876.671955][T26827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5400'. [ 876.875272][T26831] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 877.245465][T26859] batman_adv: batadv0: Adding interface: ip6gretap2 [ 877.258096][T26859] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.316073][T26859] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 877.560357][T26872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5411'. [ 878.090402][T25403] net_ratelimit: 12 callbacks suppressed [ 878.090442][T25403] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 878.110446][T25403] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 878.279130][T26891] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5416'. [ 878.651059][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 878.817729][T25399] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 878.832058][T25399] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 878.902051][T26909] batman_adv: batadv0: Interface deactivated: dummy0 [ 879.796548][T26909] batman_adv: batadv0: Interface deactivated: vlan3 [ 879.905424][T26909] batadv0: left allmulticast mode [ 879.980934][ T48] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.989996][ T48] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.005155][ T48] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.014097][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.023023][ T48] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.031919][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.057426][ T48] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.066832][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.649330][T26957] openvswitch: netlink: Missing valid actions attribute. [ 880.656453][T26957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.703907][T26962] __nla_validate_parse: 6 callbacks suppressed [ 880.703921][T26962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5430'. [ 881.275218][T26897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.451941][ T30] audit: type=1800 audit(1784309080.806:24): pid=26979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5435" name="memory.events" dev="tmpfs" ino=2964 res=0 errno=0 [ 881.494122][ T30] audit: type=1804 audit(1784309080.806:25): pid=26979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5435" name="/newroot/574/memory.events" dev="tmpfs" ino=2964 res=1 errno=0 [ 881.556565][T26983] lo speed is unknown, defaulting to 1000 [ 882.123882][T26983] dummy0 speed is unknown, defaulting to 1000 [ 882.172289][T26983] wlan0 speed is unknown, defaulting to 1000 [ 883.048183][T27026] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5448'. [ 883.221980][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5448'. [ 883.263766][T27035] netlink: 'syz.3.5451': attribute type 1 has an invalid length. [ 883.284351][T27026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5448'. [ 883.300807][T27026] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 883.532262][T27049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5453'. [ 883.927404][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5455'. [ 884.065579][T27079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5459'. [ 884.469169][T27083] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 884.622322][T27083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5460'. [ 884.726825][T27107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5465'. [ 884.778540][T27107] 8021q: adding VLAN 0 to HW filter on device bond19 [ 884.793719][T27109] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 884.825561][T27111] bridge1: port 1(erspan0) entered disabled state [ 884.832707][T27111] erspan0: left allmulticast mode [ 884.837823][T27111] erspan0: left promiscuous mode [ 884.844350][T27111] bridge1: port 1(erspan0) entered disabled state [ 884.878895][T27111] bond19: (slave erspan0): Enslaving as an active interface with an up link [ 885.022794][T27119] tipc: Enabling of bearer rejected, failed to enable media [ 885.138758][T27124] xt_hashlimit: size too large, truncated to 1048576 [ 885.147099][T27128] xt_hashlimit: size too large, truncated to 1048576 [ 885.579330][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 885.591109][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 885.599059][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 885.607120][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 885.617757][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 885.973616][T27143] batadv0: entered promiscuous mode [ 885.995162][T27143] macvtap2: entered promiscuous mode [ 886.000734][T27143] macvtap2: entered allmulticast mode [ 886.006152][T27143] batadv0: entered allmulticast mode [ 886.012897][T27143] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 886.039027][T27143] batadv0: left allmulticast mode [ 886.044355][T27143] batadv0: left promiscuous mode [ 886.074281][T27147] sctp: [Deprecated]: syz.1.5476 (pid 27147) Use of int in max_burst socket option. [ 886.074281][T27147] Use struct sctp_assoc_value instead [ 886.203973][T17144] bond12: (slave syz_tun): Removing an active aggregator [ 886.219711][T17144] bond12: (slave syz_tun): Releasing backup interface [ 886.393869][T27166] FAULT_INJECTION: forcing a failure. [ 886.393869][T27166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.406988][T27166] CPU: 1 UID: 0 PID: 27166 Comm: syz.3.5480 Not tainted syzkaller #0 PREEMPT(full) [ 886.407017][T27166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 886.407031][T27166] Call Trace: [ 886.407040][T27166] [ 886.407049][T27166] dump_stack_lvl+0xe8/0x150 [ 886.407088][T27166] should_fail_ex+0x40c/0x560 [ 886.407120][T27166] _copy_from_iter+0x1d3/0x1660 [ 886.407150][T27166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 886.407187][T27166] ? __pfx_policy_nodemask+0x10/0x10 [ 886.407223][T27166] ? __pfx__copy_from_iter+0x10/0x10 [ 886.407255][T27166] ? alloc_pages_mpol+0x24a/0x380 [ 886.407299][T27166] af_alg_sendmsg+0x14c3/0x2250 [ 886.407370][T27166] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 886.407394][T27166] ? __might_fault+0xaf/0x130 [ 886.407418][T27166] ? __pfx_aa_sk_perm+0x10/0x10 [ 886.407457][T27166] ? aa_sock_msg_perm+0xf1/0x1b0 [ 886.407481][T27166] ? skcipher_sendmsg+0x26/0xf0 [ 886.407512][T27166] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 886.407540][T27166] sock_sendmsg_nosec+0x13a/0x180 [ 886.407572][T27166] ____sys_sendmsg+0x54e/0x850 [ 886.407614][T27166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.407660][T27166] ? import_iovec+0x73/0xa0 [ 886.407697][T27166] ___sys_sendmsg+0x2a5/0x360 [ 886.407730][T27166] ? __lock_acquire+0x683/0x2cf0 [ 886.407767][T27166] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.407808][T27166] ? kstrtouint+0x6e/0xe0 [ 886.407873][T27166] ? __fget_files+0x2a/0x420 [ 886.407902][T27166] ? __fget_files+0x3a2/0x420 [ 886.407943][T27166] __sys_sendmmsg+0x273/0x4d0 [ 886.407973][T27166] ? __pfx___sys_sendmmsg+0x10/0x10 [ 886.408020][T27166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 886.408072][T27166] ? ksys_write+0x242/0x270 [ 886.408109][T27166] ? __pfx_ksys_write+0x10/0x10 [ 886.408152][T27166] __x64_sys_sendmmsg+0xa0/0xc0 [ 886.408174][T27166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.408199][T27166] do_syscall_64+0x174/0x580 [ 886.408231][T27166] ? trace_irq_disable+0x3b/0x140 [ 886.408260][T27166] ? clear_bhb_loop+0x40/0x90 [ 886.408289][T27166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.408311][T27166] RIP: 0033:0x7f2fca39de99 [ 886.408333][T27166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.408353][T27166] RSP: 002b:00007f2fcb2ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 886.408376][T27166] RAX: ffffffffffffffda RBX: 00007f2fca625fa0 RCX: 00007f2fca39de99 [ 886.408393][T27166] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 886.408407][T27166] RBP: 00007f2fcb2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 886.408422][T27166] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 886.408436][T27166] R13: 00007f2fca626038 R14: 00007f2fca625fa0 R15: 00007ffcb821c4e8 [ 886.408473][T27166] [ 887.006916][T27137] lo speed is unknown, defaulting to 1000 [ 887.381699][T27175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.648593][T27175] vlan2: left allmulticast mode [ 887.679371][T27175] veth1_macvtap: left allmulticast mode [ 887.686425][T27175] vlan3: left allmulticast mode [ 887.691490][T27175] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 887.702459][T27175] vlan4: left allmulticast mode [ 887.707342][T27175] bridge1: left allmulticast mode [ 887.719624][T27175] batman_adv: batadv0: Interface deactivated: macvtap1 [ 887.729034][T27175] ip6gre1: left allmulticast mode [ 887.749769][ T5637] Bluetooth: hci1: command tx timeout [ 887.776205][T27175] vlan5: left allmulticast mode [ 887.781446][T27175] bond1: left allmulticast mode [ 887.786443][T27175] geneve2: left allmulticast mode [ 887.798365][T27175] vlan6: left allmulticast mode [ 887.804531][T27175] bond2: left allmulticast mode [ 887.812899][T27175] vlan7: left allmulticast mode [ 887.817867][T27175] bond3: left allmulticast mode [ 887.825304][T27175] vlan8: left allmulticast mode [ 887.830188][T27175] bond4: left allmulticast mode [ 887.837821][T27175] vlan9: left allmulticast mode [ 887.842707][T27175] bond5: left allmulticast mode [ 887.849558][T27175] vxcan5: left allmulticast mode [ 887.874244][T27175] vlan10: left allmulticast mode [ 887.879341][T27175] bond6: left allmulticast mode [ 887.892824][T27175] vlan11: left allmulticast mode [ 887.898091][T27175] bond7: left allmulticast mode [ 887.907989][T27175] veth7: left allmulticast mode [ 887.914240][T27175] bond9: left allmulticast mode [ 887.923838][T27175] vxcan7: left allmulticast mode [ 887.929778][T27175] vlan13: left allmulticast mode [ 887.934727][T27175] bond0: left allmulticast mode [ 887.939596][T27175] bond_slave_0: left allmulticast mode [ 887.945098][T27175] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 887.980002][T27175] bridge4: left allmulticast mode [ 887.990433][T27175] bond13: left allmulticast mode [ 888.002877][T27175] vlan12: left allmulticast mode [ 888.007856][T27175] bond16: left allmulticast mode [ 888.014247][T27175] macsec1: left promiscuous mode [ 888.022320][T27175] vlan14: left promiscuous mode [ 888.027293][T27175] bridge0: left promiscuous mode [ 888.036908][T27175] vlan15: left allmulticast mode [ 888.041902][T27175] bond18: left allmulticast mode [ 888.067534][T27137] dummy0 speed is unknown, defaulting to 1000 [ 888.118143][T27137] wlan0 speed is unknown, defaulting to 1000 [ 888.173389][T27201] bond7: option resend_igmp: invalid value (2878) [ 888.180410][T27201] bond7: option resend_igmp: allowed values 0 - 255 [ 888.218944][T27201] bond7 (unregistering): Released all slaves [ 888.269419][T25406] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.278517][T25406] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.287621][T25406] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.296627][T25406] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.346902][T27205] lo speed is unknown, defaulting to 1000 [ 888.346934][T25406] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.361576][T25406] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.370604][T25406] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.379519][T25406] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.393483][T27218] nbd4: detected capacity change from 0 to 63 [ 888.576259][T27219] bond22 (unregistering): Released all slaves [ 888.665627][T27215] block nbd4: NBD_DISCONNECT [ 888.670538][T27215] block nbd4: Disconnected due to user request. [ 888.677333][T27215] block nbd4: shutting down sockets [ 888.692029][ C0] blk_print_req_error: 27 callbacks suppressed [ 888.692052][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 888.707529][ C0] buffer_io_error: 27 callbacks suppressed [ 888.707555][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 888.727384][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 888.733196][T27215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5492'. [ 888.736837][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 888.753310][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 888.762478][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 888.770249][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 888.779396][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 888.804917][ T1586] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 888.814330][ T1586] Buffer I/O error on dev nbd4, logical block 0, async page read [ 888.823929][ T1586] Buffer I/O error on dev nbd4, logical block 1, async page read [ 888.832724][ T1586] Buffer I/O error on dev nbd4, logical block 2, async page read [ 888.840854][ T1586] Buffer I/O error on dev nbd4, logical block 3, async page read [ 888.851550][ T1586] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 888.860995][ T1586] Buffer I/O error on dev nbd4, logical block 0, async page read [ 888.868849][ T1586] Buffer I/O error on dev nbd4, logical block 1, async page read [ 888.877370][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 888.893860][ T1586] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 888.903529][ T1586] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 888.915627][T27205] dummy0 speed is unknown, defaulting to 1000 [ 888.923558][T27205] wlan0 speed is unknown, defaulting to 1000 [ 888.924949][ T1586] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 888.939401][T26748] ldm_validate_partition_table(): Disk read failed. [ 888.947780][T26748] Dev nbd4: unable to read RDB block 0 [ 888.955091][T26748] nbd4: unable to read partition table [ 889.001100][T26748] ldm_validate_partition_table(): Disk read failed. [ 889.010538][T26748] Dev nbd4: unable to read RDB block 0 [ 889.019746][T26748] nbd4: unable to read partition table [ 889.326407][T27241] FAULT_INJECTION: forcing a failure. [ 889.326407][T27241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 889.345555][T27242] x_tables: duplicate underflow at hook 1 [ 889.361631][T27241] CPU: 0 UID: 0 PID: 27241 Comm: syz.4.5496 Not tainted syzkaller #0 PREEMPT(full) [ 889.361662][T27241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 889.361676][T27241] Call Trace: [ 889.361685][T27241] [ 889.361695][T27241] dump_stack_lvl+0xe8/0x150 [ 889.361736][T27241] should_fail_ex+0x40c/0x560 [ 889.361768][T27241] prepare_alloc_pages+0x230/0x650 [ 889.361810][T27241] __alloc_frozen_pages_noprof+0x12f/0x380 [ 889.361847][T27241] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 889.361885][T27241] ? __pfx_policy_nodemask+0x10/0x10 [ 889.361923][T27241] ? __pfx__copy_from_iter+0x10/0x10 [ 889.361957][T27241] alloc_pages_mpol+0x212/0x380 [ 889.361998][T27241] alloc_pages_noprof+0xac/0x2a0 [ 889.362034][T27241] af_alg_sendmsg+0x13b1/0x2250 [ 889.362087][T27241] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 889.362111][T27241] ? __might_fault+0xaf/0x130 [ 889.362136][T27241] ? __pfx_aa_sk_perm+0x10/0x10 [ 889.362175][T27241] ? aa_sock_msg_perm+0xf1/0x1b0 [ 889.362199][T27241] ? skcipher_sendmsg+0x26/0xf0 [ 889.362230][T27241] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 889.362263][T27241] sock_sendmsg_nosec+0x13a/0x180 [ 889.362295][T27241] ____sys_sendmsg+0x54e/0x850 [ 889.362337][T27241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 889.362384][T27241] ? import_iovec+0x73/0xa0 [ 889.362421][T27241] ___sys_sendmsg+0x2a5/0x360 [ 889.362454][T27241] ? __lock_acquire+0x683/0x2cf0 [ 889.362497][T27241] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.362539][T27241] ? kstrtouint+0x6e/0xe0 [ 889.362595][T27241] ? __fget_files+0x2a/0x420 [ 889.362623][T27241] ? __fget_files+0x3a2/0x420 [ 889.362665][T27241] __sys_sendmmsg+0x273/0x4d0 [ 889.362695][T27241] ? __pfx___sys_sendmmsg+0x10/0x10 [ 889.362741][T27241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 889.362794][T27241] ? ksys_write+0x242/0x270 [ 889.362831][T27241] ? __pfx_ksys_write+0x10/0x10 [ 889.362874][T27241] __x64_sys_sendmmsg+0xa0/0xc0 [ 889.362896][T27241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.362921][T27241] do_syscall_64+0x174/0x580 [ 889.362954][T27241] ? trace_irq_disable+0x3b/0x140 [ 889.362982][T27241] ? clear_bhb_loop+0x40/0x90 [ 889.363011][T27241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.363033][T27241] RIP: 0033:0x7f91e6b9de99 [ 889.363056][T27241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.363075][T27241] RSP: 002b:00007f91e4df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 889.363098][T27241] RAX: ffffffffffffffda RBX: 00007f91e6e25fa0 RCX: 00007f91e6b9de99 [ 889.363114][T27241] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 889.363128][T27241] RBP: 00007f91e4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 889.363142][T27241] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 889.363156][T27241] R13: 00007f91e6e26038 R14: 00007f91e6e25fa0 R15: 00007ffeef34e0e8 [ 889.363193][T27241] [ 889.811637][ T5637] Bluetooth: hci1: command tx timeout [ 889.838684][T27137] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.851082][T27137] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.895169][T27137] bridge_slave_0: entered allmulticast mode [ 889.913225][T27137] bridge_slave_0: entered promiscuous mode [ 889.930104][T27137] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.939125][T27137] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.946346][T27137] bridge_slave_1: entered allmulticast mode [ 889.965440][T27137] bridge_slave_1: entered promiscuous mode [ 890.163266][T27137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.189501][T27137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.198729][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5501'. [ 890.255277][T27137] team0: Port device team_slave_0 added [ 890.265276][T27137] team0: Port device team_slave_1 added [ 890.311982][T27137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.318986][T27137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.360955][T27137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.373913][T27137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.380898][T27137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.408314][T27137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.523844][T27137] hsr_slave_0: entered promiscuous mode [ 890.531135][T27137] hsr_slave_1: entered promiscuous mode [ 890.538627][T27137] debugfs: 'hsr0' already exists in 'hsr' [ 890.545725][T27137] Cannot create hsr debugfs directory [ 890.552030][T27268] lo speed is unknown, defaulting to 1000 [ 891.050020][T27137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.080658][T27268] dummy0 speed is unknown, defaulting to 1000 [ 891.081158][T27288] netlink: 'syz.2.5509': attribute type 4 has an invalid length. [ 891.107476][T27268] wlan0 speed is unknown, defaulting to 1000 [ 891.169418][T27137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.192512][T27288] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5509'. [ 891.271610][T27291] bridge3: entered promiscuous mode [ 891.276859][T27291] bridge3: entered allmulticast mode [ 891.284790][T27291] team0: Port device bridge3 added [ 891.292771][T27291] bridge0: port 1(team0) entered blocking state [ 891.299171][T27291] bridge0: port 1(team0) entered disabled state [ 891.305594][T27291] team0: entered allmulticast mode [ 891.312733][T27291] team0: entered promiscuous mode [ 891.504124][T27298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5512'. [ 891.610315][T27137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.901985][T27313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5516'. [ 891.921196][ T5637] Bluetooth: hci1: command tx timeout [ 891.985163][T27315] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5517'. [ 892.216667][T27321] lo speed is unknown, defaulting to 1000 [ 892.407224][T27137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.442895][T27321] dummy0 speed is unknown, defaulting to 1000 [ 892.451902][T27321] wlan0 speed is unknown, defaulting to 1000 [ 892.635245][T27329] syzkaller0: entered promiscuous mode [ 892.641004][T27329] syzkaller0: entered allmulticast mode [ 893.020459][T27137] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 893.118382][T27137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 893.234159][T27137] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 893.294339][T27137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 893.311713][T27137] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 893.354182][T27137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 893.408672][T27137] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 893.439377][T27137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 893.527733][T27343] syzkaller0: entered promiscuous mode [ 893.533281][T27343] syzkaller0: entered allmulticast mode [ 893.585432][T27365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5531'. [ 893.629791][T27365] sit0: Master is either lo or non-ether device [ 894.018259][ T5637] Bluetooth: hci1: command tx timeout [ 896.572354][T27137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.585551][T27395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5535'. [ 896.598263][T27395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5535'. [ 896.605930][T27137] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.623348][T11045] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.630644][T11045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.673568][T25408] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.682544][T25408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.789541][T27397] netlink: 'syz.1.5537': attribute type 21 has an invalid length. [ 896.809622][T27397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5537'. [ 897.389202][T27137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.476520][T27137] veth0_vlan: entered promiscuous mode [ 897.493177][T27137] veth1_vlan: entered promiscuous mode [ 897.537948][T27137] veth0_macvtap: entered promiscuous mode [ 897.567848][T27137] veth1_macvtap: entered promiscuous mode [ 897.591873][T27137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.606743][T27137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.620321][T27425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5543'. [ 897.633685][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.644309][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.653614][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.666549][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.819437][T25399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.857990][T25399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.941381][T25403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.950199][T25403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.139254][T11042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.148063][T11042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.177529][T11042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.186854][T11042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.437484][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 898.484561][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 898.500947][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 898.514634][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 898.526716][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 899.322890][T27447] lo speed is unknown, defaulting to 1000 [ 899.505673][T27480] netlink: 'syz.0.5555': attribute type 1 has an invalid length. [ 899.639986][T27447] dummy0 speed is unknown, defaulting to 1000 [ 899.648087][T27447] wlan0 speed is unknown, defaulting to 1000 [ 900.006508][T27447] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.013808][T27447] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.022167][T27447] bridge_slave_0: entered allmulticast mode [ 900.030020][T27447] bridge_slave_0: entered promiscuous mode [ 900.038936][T27447] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.047705][T27447] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.055655][T27447] bridge_slave_1: entered allmulticast mode [ 900.063704][T27447] bridge_slave_1: entered promiscuous mode [ 900.104593][T27447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.117668][T27447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.162604][T27447] team0: Port device team_slave_0 added [ 900.172542][T27447] team0: Port device team_slave_1 added [ 900.208565][T27447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.220017][T27447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.246475][T27447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.313630][T27447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.343285][T27447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.369242][T27447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.482197][T27447] hsr_slave_0: entered promiscuous mode [ 900.488929][T27447] hsr_slave_1: entered promiscuous mode [ 900.571405][T27447] debugfs: 'hsr0' already exists in 'hsr' [ 900.577230][T27447] Cannot create hsr debugfs directory [ 900.618934][ T5628] Bluetooth: hci3: command tx timeout [ 900.644368][T27516] FAULT_INJECTION: forcing a failure. [ 900.644368][T27516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 900.657847][T27516] CPU: 0 UID: 0 PID: 27516 Comm: syz.1.5562 Not tainted syzkaller #0 PREEMPT(full) [ 900.657877][T27516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 900.657891][T27516] Call Trace: [ 900.657901][T27516] [ 900.657911][T27516] dump_stack_lvl+0xe8/0x150 [ 900.657952][T27516] should_fail_ex+0x40c/0x560 [ 900.657985][T27516] prepare_alloc_pages+0x230/0x650 [ 900.658026][T27516] __alloc_frozen_pages_noprof+0x12f/0x380 [ 900.658062][T27516] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 900.658098][T27516] ? __pfx_policy_nodemask+0x10/0x10 [ 900.658130][T27516] ? alloc_skb_with_frags+0xc6/0x760 [ 900.658166][T27516] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 900.658194][T27516] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 900.658228][T27516] alloc_pages_mpol+0x212/0x380 [ 900.658266][T27516] alloc_pages_noprof+0xac/0x2a0 [ 900.658302][T27516] alloc_skb_with_frags+0x264/0x760 [ 900.658377][T27516] sock_alloc_send_pskb+0x878/0x990 [ 900.658427][T27516] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 900.658476][T27516] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 900.658524][T27516] unix_dgram_sendmsg+0x4da/0x17b0 [ 900.658739][T27516] ? __lock_acquire+0x683/0x2cf0 [ 900.658769][T27516] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 900.658801][T27516] ? aa_sock_msg_perm+0xda/0x1b0 [ 900.658826][T27516] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 900.658852][T27516] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 900.658877][T27516] sock_sendmsg_nosec+0x13a/0x180 [ 900.658908][T27516] ____sys_sendmsg+0x54e/0x850 [ 900.658947][T27516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 900.658992][T27516] ? import_iovec+0x73/0xa0 [ 900.659028][T27516] ___sys_sendmsg+0x2a5/0x360 [ 900.659060][T27516] ? __lock_acquire+0x683/0x2cf0 [ 900.659094][T27516] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.659168][T27516] ? __fget_files+0x2a/0x420 [ 900.659198][T27516] ? __fget_files+0x3a2/0x420 [ 900.659237][T27516] __x64_sys_sendmsg+0x1b1/0x290 [ 900.659272][T27516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 900.659325][T27516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.659355][T27516] do_syscall_64+0x174/0x580 [ 900.659386][T27516] ? trace_irq_disable+0x3b/0x140 [ 900.659413][T27516] ? clear_bhb_loop+0x40/0x90 [ 900.659440][T27516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.659461][T27516] RIP: 0033:0x7f59adb9de99 [ 900.659481][T27516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.659500][T27516] RSP: 002b:00007f59aead9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.659522][T27516] RAX: ffffffffffffffda RBX: 00007f59ade25fa0 RCX: 00007f59adb9de99 [ 900.659538][T27516] RDX: 0000000000044040 RSI: 0000200000000040 RDI: 0000000000000003 [ 900.659552][T27516] RBP: 00007f59aead9090 R08: 0000000000000000 R09: 0000000000000000 [ 900.659565][T27516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.659577][T27516] R13: 00007f59ade26038 R14: 00007f59ade25fa0 R15: 00007ffff4e183d8 [ 900.659611][T27516] [ 900.678286][T27504] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5558'. [ 901.038140][T27528] netlink: 'syz.1.5564': attribute type 10 has an invalid length. [ 901.080464][T27528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5564'. [ 901.119148][T27528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5564'. [ 901.172436][T27528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5564'. [ 901.474356][T27551] netlink: 'syz.1.5568': attribute type 1 has an invalid length. [ 901.653609][T27551] 8021q: adding VLAN 0 to HW filter on device bond22 [ 901.685245][T27560] vlan10: entered allmulticast mode [ 901.690521][T27560] bond22: entered allmulticast mode [ 901.738180][T27551] bond22: (slave geneve4): making interface the new active one [ 901.748829][T27551] geneve4: entered allmulticast mode [ 901.776720][T27551] bond22: (slave geneve4): Enslaving as an active interface with an up link [ 901.826122][T27447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.904802][T25401] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.913096][T25401] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.931331][T25401] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.948421][T25401] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.964637][T27562] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5570'. [ 902.147871][T27447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.193705][T27571] ip6gretap0: left promiscuous mode [ 902.228100][T27571] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.247015][T27571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.294701][T27571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 902.305225][T27571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 902.353717][T27571] veth1_vlan: left promiscuous mode [ 902.383378][T27571] veth0_vlan: left promiscuous mode [ 902.390820][T27571] veth0_vlan: entered promiscuous mode [ 902.399423][T27571] veth1_vlan: entered promiscuous mode [ 902.446263][T27571] veth1_macvtap: left promiscuous mode [ 902.469871][T27571] veth0_macvtap: left promiscuous mode [ 902.476964][T27571] veth0_macvtap: entered promiscuous mode [ 902.484948][T27571] veth1_macvtap: entered promiscuous mode [ 902.510639][T27571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 902.521109][T27571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 902.531830][T27571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 902.558082][T27571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 902.566890][T27571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 902.575719][T27571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 902.584769][T27571] 8021q: adding VLAN 0 to HW filter on device bond7 [ 902.595583][T27571] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 902.603152][T25403] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.612534][T27571] 8021q: adding VLAN 0 to HW filter on device bond8 [ 902.620518][T27571] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 902.630011][T27571] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 902.642411][T27571] ip6gretap0: entered promiscuous mode [ 902.659269][T11042] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.681708][T27571] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 902.690279][T27571] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 902.698444][T27571] 8021q: adding VLAN 0 to HW filter on device bond9 [ 902.709859][T27571] 8021q: adding VLAN 0 to HW filter on device bond10 [ 902.714849][ T5628] Bluetooth: hci3: command tx timeout [ 902.724110][T25403] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.735049][T27571] 8021q: adding VLAN 0 to HW filter on device bond11 [ 902.743950][T27571] 8021q: adding VLAN 0 to HW filter on device bond12 [ 902.752265][T27571] 8021q: adding VLAN 0 to HW filter on device bond13 [ 902.769578][T25403] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.792501][T27571] 8021q: adding VLAN 0 to HW filter on device eth0 [ 902.805394][T27571] 8021q: adding VLAN 0 to HW filter on device eth1 [ 902.813376][T27571] 8021q: adding VLAN 0 to HW filter on device eth2 [ 902.820983][T25406] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.829720][T27571] 8021q: adding VLAN 0 to HW filter on device eth3 [ 902.839084][T27571] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 902.847602][T27571] 8021q: adding VLAN 0 to HW filter on device bond14 [ 902.858180][T27571] 8021q: adding VLAN 0 to HW filter on device bond15 [ 902.866340][T27571] 8021q: adding VLAN 0 to HW filter on device bond16 [ 902.876584][T11045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.917782][T27571] 8021q: adding VLAN 0 to HW filter on device bond17 [ 902.943632][T11045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.953661][T27571] 8021q: adding VLAN 0 to HW filter on device bond18 [ 902.969965][T27571] 8021q: adding VLAN 0 to HW filter on device bond20 [ 902.977955][T27571] bond21: left promiscuous mode [ 902.983277][T27571] bridge5: left promiscuous mode [ 902.992621][T11045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 903.001719][T27571] batman_adv: batadv0: Interface activated: ip6gretap2 [ 903.036149][T25401] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 903.044018][T25401] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 903.062346][T25399] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 903.064962][ T7230] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 903.122568][T25399] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 903.172128][ T6737] bond17: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 903.184922][ T6737] bond17: (slave veth9): making interface the new active one [ 903.195625][ T6737] bond17: active interface up! [ 903.203146][ T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.211366][ T48] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 903.248062][ T48] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.256393][ T48] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 903.265052][ T48] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.273259][ T48] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 903.391851][T27447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.435196][ T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.443436][ T48] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 903.523483][T23014] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 903.560527][T27590] syzkaller0: entered promiscuous mode [ 903.607244][T27590] syzkaller0: entered allmulticast mode [ 903.765754][T27606] GPL: option downdelay: invalid value (18446744073709547007) [ 903.773325][T27606] GPL: option downdelay: allowed values 0 - 2147483647 [ 903.784636][T27606] GPL (unregistering): Released all slaves [ 903.857634][T27618] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5581'. [ 903.871785][T27618] Bluetooth: MGMT ver 1.23 [ 903.898824][T27447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.912767][T23014] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 904.793443][ T5628] Bluetooth: hci3: command tx timeout [ 906.807265][T27632] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 906.906382][ T5628] Bluetooth: hci3: command tx timeout [ 906.951753][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 906.990809][T27648] netlink: 'syz.1.5587': attribute type 1 has an invalid length. [ 906.998811][T27648] netlink: 'syz.1.5587': attribute type 2 has an invalid length. [ 907.014591][T27648] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5587'. [ 907.036350][T27648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5587'. [ 907.058720][T27648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5587'. [ 907.068380][T27447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 907.081294][T27447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 907.100499][T27447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 907.110690][T27447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 907.118701][T27447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 907.232732][T27447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 907.242603][T27447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 907.271920][T27447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 907.281155][T27652] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 907.418612][T27671] netlink: 'syz.1.5592': attribute type 1 has an invalid length. [ 907.445434][T27447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.465268][T27674] netlink: 'syz.2.5588': attribute type 1 has an invalid length. [ 907.480957][T27447] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.535927][T27674] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 907.552896][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.560096][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.582479][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.589687][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.661965][T11045] net_ratelimit: 75 callbacks suppressed [ 907.661985][T11045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.676810][T27683] FAULT_INJECTION: forcing a failure. [ 907.676810][T27683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.690013][T27683] CPU: 1 UID: 0 PID: 27683 Comm: syz.2.5595 Not tainted syzkaller #0 PREEMPT(full) [ 907.690043][T27683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 907.690056][T27683] Call Trace: [ 907.690065][T27683] [ 907.690075][T27683] dump_stack_lvl+0xe8/0x150 [ 907.690117][T27683] should_fail_ex+0x40c/0x560 [ 907.690149][T27683] _copy_from_iter+0x1d3/0x1660 [ 907.690179][T27683] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 907.690216][T27683] ? __pfx_policy_nodemask+0x10/0x10 [ 907.690253][T27683] ? __pfx__copy_from_iter+0x10/0x10 [ 907.690287][T27683] ? alloc_pages_mpol+0x24a/0x380 [ 907.690331][T27683] af_alg_sendmsg+0x14c3/0x2250 [ 907.690384][T27683] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 907.690407][T27683] ? __might_fault+0xaf/0x130 [ 907.690432][T27683] ? __pfx_aa_sk_perm+0x10/0x10 [ 907.690471][T27683] ? aa_sock_msg_perm+0xf1/0x1b0 [ 907.690496][T27683] ? skcipher_sendmsg+0x26/0xf0 [ 907.690526][T27683] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 907.690554][T27683] sock_sendmsg_nosec+0x13a/0x180 [ 907.690593][T27683] ____sys_sendmsg+0x54e/0x850 [ 907.690636][T27683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.690681][T27683] ? import_iovec+0x73/0xa0 [ 907.690715][T27683] ___sys_sendmsg+0x2a5/0x360 [ 907.690747][T27683] ? __lock_acquire+0x683/0x2cf0 [ 907.690782][T27683] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.690823][T27683] ? kstrtouint+0x6e/0xe0 [ 907.690880][T27683] ? __fget_files+0x2a/0x420 [ 907.690908][T27683] ? __fget_files+0x3a2/0x420 [ 907.690950][T27683] __sys_sendmmsg+0x273/0x4d0 [ 907.690978][T27683] ? __pfx___sys_sendmmsg+0x10/0x10 [ 907.691024][T27683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 907.691076][T27683] ? ksys_write+0x242/0x270 [ 907.691113][T27683] ? __pfx_ksys_write+0x10/0x10 [ 907.691156][T27683] __x64_sys_sendmmsg+0xa0/0xc0 [ 907.691178][T27683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.691203][T27683] do_syscall_64+0x174/0x580 [ 907.691234][T27683] ? trace_irq_disable+0x3b/0x140 [ 907.691263][T27683] ? clear_bhb_loop+0x40/0x90 [ 907.691291][T27683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.691314][T27683] RIP: 0033:0x7efde119de99 [ 907.691337][T27683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.691356][T27683] RSP: 002b:00007efde1fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 907.691379][T27683] RAX: ffffffffffffffda RBX: 00007efde1425fa0 RCX: 00007efde119de99 [ 907.691396][T27683] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 907.691410][T27683] RBP: 00007efde1fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 907.691423][T27683] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 907.691437][T27683] R13: 00007efde1426038 R14: 00007efde1425fa0 R15: 00007ffebaaadd58 [ 907.691474][T27683] [ 907.725070][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 908.025974][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.146163][T27447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 908.251822][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 908.306775][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 908.322688][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.373480][ T30] audit: type=1800 audit(1784309107.726:26): pid=27695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5598" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=69 res=0 errno=0 [ 908.475451][T25401] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 908.518238][T25401] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.634636][T25406] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 908.645214][T25406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.880330][T27723] xt_l2tp: missing protocol rule (udp|l2tpip) [ 908.971300][T27728] ip6erspan0: entered allmulticast mode [ 909.101688][T27447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.176457][T27447] veth0_vlan: entered promiscuous mode [ 909.198986][T27447] veth1_vlan: entered promiscuous mode [ 909.237323][T27447] veth0_macvtap: entered promiscuous mode [ 909.278199][T27447] veth1_macvtap: entered promiscuous mode [ 909.298865][T27447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.318939][T27447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.381379][T25406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.390786][T25406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.409903][T25406] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.419045][T25406] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.497036][T27747] netlink: 'syz.1.5612': attribute type 28 has an invalid length. [ 909.565952][T25406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.575395][T25406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.638766][T11045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.648154][T11045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.064356][T27753] netlink: 'syz.3.5546': attribute type 1 has an invalid length. [ 910.468652][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 910.550452][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 910.562968][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 910.575508][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 910.596534][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 910.657135][T27773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5618'. [ 910.940646][ T5628] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 911.127076][T27784] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5621'. [ 911.136443][T27785] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5621'. [ 911.287914][T27794] IPVS: length: 97 != 8 [ 911.317390][T11042] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.328061][T11042] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.337850][T11042] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 911.469405][T27782] SET target dimension over the limit! [ 911.481163][T27769] lo speed is unknown, defaulting to 1000 [ 911.811569][T27813] netlink: 'syz.4.5628': attribute type 1 has an invalid length. [ 911.864841][T27813] 8021q: adding VLAN 0 to HW filter on device bond20 [ 911.881203][T11045] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 911.881250][T27769] dummy0 speed is unknown, defaulting to 1000 [ 911.885649][T27769] wlan0 speed is unknown, defaulting to 1000 [ 911.989459][T27817] vlan16: entered allmulticast mode [ 911.994757][T27817] bond20: entered allmulticast mode [ 912.193892][T27825] netlink: 'syz.0.5629': attribute type 1 has an invalid length. [ 912.387066][T11042] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.398959][T11042] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.413517][T11042] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 912.487064][T27825] vlan2: entered allmulticast mode [ 912.492295][T27825] vlan1: entered allmulticast mode [ 912.497427][T27825] veth0_vlan: entered allmulticast mode [ 912.570052][T27769] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.577256][T27769] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.584524][T27769] bridge_slave_0: entered allmulticast mode [ 912.591859][T27769] bridge_slave_0: entered promiscuous mode [ 912.600094][T27769] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.607360][T27769] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.614518][T27769] bridge_slave_1: entered allmulticast mode [ 912.621872][T27769] bridge_slave_1: entered promiscuous mode [ 912.633200][ T5628] Bluetooth: hci2: command tx timeout [ 912.636195][T27808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.636771][T27815] netlink: 'syz.3.5627': attribute type 2 has an invalid length. [ 912.636792][T27815] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5627'. [ 912.691148][T25406] net_ratelimit: 61 callbacks suppressed [ 912.691166][T25406] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.764217][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.821842][T27769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.834489][T27769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.875920][T11045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.915547][T27769] team0: Port device team_slave_0 added [ 912.923890][T27769] team0: Port device team_slave_1 added [ 912.985180][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.058152][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.082143][T11042] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.100796][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.123863][T11042] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.135637][T11042] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 913.165039][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.198414][T27769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.233921][T25408] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.308409][T27769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.392749][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.451890][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.480833][T27769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.493923][T27769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.500925][T27769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.526923][T27769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.644620][T27855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5637'. [ 913.697239][T11042] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.726212][T11042] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.751656][T11042] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 913.828275][T27769] hsr_slave_0: entered promiscuous mode [ 913.835126][T27769] hsr_slave_1: entered promiscuous mode [ 913.841989][T27769] debugfs: 'hsr0' already exists in 'hsr' [ 913.847868][T27769] Cannot create hsr debugfs directory [ 914.029169][T27869] nbd: socks must be embedded in a SOCK_ITEM attr [ 914.036104][T27869] block nbd4: shutting down sockets [ 914.412636][T11042] vlan1: left allmulticast mode [ 914.417666][T11042] veth0_vlan: left allmulticast mode [ 914.430268][T11042] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 914.463781][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 914.615056][T27898] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5644'. [ 914.691793][ T5628] Bluetooth: hci2: command tx timeout [ 914.862493][T11042] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 914.990313][T11042] batman_adv: batadv0: Removing interface: ip6gretap2 [ 915.171709][T11042] bond18 (unregistering): (slave gretap1): Releasing active interface [ 915.179951][T11042] gretap1 (unregistering): left allmulticast mode [ 915.221977][T11042] bond22 (unregistering): (slave geneve4): Releasing active interface [ 915.230219][T11042] geneve4 (unregistering): left allmulticast mode [ 915.244648][T11042] bond13 (unregistering): (slave geneve3): Releasing backup interface [ 915.351967][T11042] bond21 (unregistering): (slave bridge5): Releasing active interface [ 915.360204][T11042] bridge5 (unregistering): left allmulticast mode [ 915.416396][T11042] bond0 (unregistering): Released all slaves [ 915.430316][T11042] bond1 (unregistering): Released all slaves [ 915.450760][T11042] bond2 (unregistering): Released all slaves [ 915.469524][T11042] bond3 (unregistering): Released all slaves [ 915.497028][T11042] bond4 (unregistering): Released all slaves [ 915.523364][T11042] bond5 (unregistering): Released all slaves [ 915.539398][T11042] bond6 (unregistering): Released all slaves [ 915.555472][T11042] bond7 (unregistering): Released all slaves [ 915.574678][T11042] bond8 (unregistering): (slave batadv2): Releasing active interface [ 915.584715][T11042] bond8 (unregistering): Released all slaves [ 915.621619][T11042] bond9 (unregistering): Released all slaves [ 915.646469][T11042] bond10 (unregistering): Released all slaves [ 915.674832][T11042] bond11 (unregistering): Released all slaves [ 915.693516][T11042] bond12 (unregistering): Released all slaves [ 915.732573][T11042] bond13 (unregistering): Released all slaves [ 915.766337][T11042] bond14 (unregistering): (slave veth7): Releasing active interface [ 915.778488][T11042] bond14 (unregistering): Released all slaves [ 915.794842][T11042] bond15 (unregistering): Released all slaves [ 915.829734][T11042] bond16 (unregistering): Released all slaves [ 915.846335][T11042] bond17 (unregistering): (slave veth9): Releasing active interface [ 915.856287][T11042] bond17 (unregistering): Released all slaves [ 915.872500][T11042] bond18 (unregistering): Released all slaves [ 915.893304][T11042] bond19 (unregistering): Released all slaves [ 915.909764][T11042] bond20 (unregistering): Released all slaves [ 915.939546][T11042] bond21 (unregistering): Released all slaves [ 915.964692][T11042] bond22 (unregistering): Released all slaves [ 916.568756][T11042] : left promiscuous mode [ 916.783329][ T5628] Bluetooth: hci2: command tx timeout [ 917.189802][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 917.238717][T27940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5651'. [ 917.295525][T27942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5650'. [ 917.384654][T27944] Bluetooth: MGMT ver 1.23 [ 917.390559][T27944] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 917.497692][T11042] tipc: Left network mode [ 917.606804][T27944] bridge_slave_0: left allmulticast mode [ 917.612834][T27944] bridge_slave_0: left promiscuous mode [ 917.618814][T27944] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.688746][T27944] bridge_slave_1: left allmulticast mode [ 917.694462][T27944] bridge_slave_1: left promiscuous mode [ 917.700321][T27944] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.894176][T27944] bond0: (slave bond_slave_0): Releasing backup interface [ 917.916065][T27944] bond0: (slave bond_slave_1): Releasing backup interface [ 917.976025][T27944] team0: Port device team_slave_0 removed [ 917.989020][T27944] team0: Port device team_slave_1 removed [ 918.002138][T27944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.009589][T27944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.018491][T27944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.025970][T27944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.034426][T27949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5652'. [ 918.047333][T27944] net_ratelimit: 14 callbacks suppressed [ 918.047348][T27944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 918.085952][T27946] team0: Port device xfrm0 added [ 918.244721][T27948] syzkaller0: entered promiscuous mode [ 918.250270][T27948] syzkaller0: entered allmulticast mode [ 918.853877][ T5628] Bluetooth: hci2: command tx timeout [ 919.065885][T27969] lo speed is unknown, defaulting to 1000 [ 919.415894][T27769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 919.440373][T27769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.459994][T27769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 919.498555][T27769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 919.514753][T27769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 919.538053][T27769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 919.546304][T27769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 919.617545][T27769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 919.734172][T27969] dummy0 speed is unknown, defaulting to 1000 [ 919.789374][T27969] wlan0 speed is unknown, defaulting to 1000 [ 920.075718][T28009] IPv6: NLM_F_CREATE should be specified when creating new route [ 920.096455][T28009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.103813][T28009] IPv6: NLM_F_CREATE should be set when creating new route [ 920.404813][T11042] hsr_slave_0: left promiscuous mode [ 920.411269][T11042] hsr_slave_1: left promiscuous mode [ 920.428934][T11042] veth1_macvtap: left promiscuous mode [ 920.436249][T11042] veth0_macvtap: left promiscuous mode [ 920.442341][T11042] veth1_vlan: left promiscuous mode [ 920.447673][T11042] veth0_vlan: left promiscuous mode [ 921.012273][T28013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5660'. [ 921.021572][T28013] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5660'. [ 921.033158][T28013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5660'. [ 921.043186][T28013] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5660'. [ 921.122159][T27769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.163344][T27769] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.199094][T25408] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.206359][T25408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.244831][T25408] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.252064][T25408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.293379][T28024] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5661'. [ 921.940461][ T7226] IPVS: starting estimator thread 0... [ 922.135315][T28044] IPVS: using max 24 ests per chain, 57600 per kthread [ 922.267310][T28042] lo speed is unknown, defaulting to 1000 [ 922.341240][T27769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.422479][T27769] veth0_vlan: entered promiscuous mode [ 922.449329][T27769] veth1_vlan: entered promiscuous mode [ 922.496012][T27769] veth0_macvtap: entered promiscuous mode [ 922.507345][T27769] veth1_macvtap: entered promiscuous mode [ 922.548775][T28047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5662'. [ 922.557904][T27769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.601307][T27769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.672044][T25406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.680940][T25406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.690616][T25406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.726709][T25406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.883493][T28066] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5662'. [ 922.906926][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.915981][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.959324][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.968367][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.999382][T28066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5662'. [ 923.191148][T28042] dummy0 speed is unknown, defaulting to 1000 [ 923.199198][T28042] wlan0 speed is unknown, defaulting to 1000 [ 923.606944][T28072] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.614527][T28072] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.691357][T28072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.705564][T28072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.817377][T25408] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.826364][T25408] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.854311][T25408] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.925062][T25408] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.951353][T28075] netlink: 'syz.4.5670': attribute type 1 has an invalid length. [ 924.034923][T28075] 8021q: adding VLAN 0 to HW filter on device bond21 [ 924.158716][T28075] vlan17: entered allmulticast mode [ 924.165882][T28075] bond21: entered allmulticast mode [ 924.683845][T28093] netlink: 'syz.4.5675': attribute type 1 has an invalid length. [ 924.735312][T28093] 8021q: adding VLAN 0 to HW filter on device bond22 [ 924.822193][T28095] vlan18: entered allmulticast mode [ 924.827598][T28095] bond22: entered allmulticast mode [ 925.019164][T11042] IPVS: stop unused estimator thread 0... [ 925.165483][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5677'. [ 925.177476][T28104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5677'. [ 926.069931][T28118] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 926.076457][T28118] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 926.085438][T28118] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 926.091936][T28118] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 926.137425][T28124] netlink: 'syz.0.5685': attribute type 30 has an invalid length. [ 926.145953][T28123] x_tables: ip_tables: ah match: only valid for protocol 51 [ 926.195794][T28129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5686'. [ 926.204875][T28129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.369251][T28138] netlink: 'syz.0.5689': attribute type 30 has an invalid length. [ 926.378773][T28138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5689'. [ 926.404489][T28134] netlink: 420 bytes leftover after parsing attributes in process `syz.4.5688'. [ 926.413641][T28134] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 927.381475][T28149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5692'. [ 927.390390][T28147] syzkaller1: entered promiscuous mode [ 927.390403][T28149] IPv6: NLM_F_CREATE should be specified when creating new route [ 927.394346][T28148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5692'. [ 927.430762][T28147] syzkaller1: entered allmulticast mode [ 927.536909][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5694'. [ 927.594847][T28157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5695'. [ 927.733914][T28159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5696'. [ 928.252702][T28167] netlink: 'syz.0.5697': attribute type 1 has an invalid length. [ 928.277595][T28167] pim6reg1: entered promiscuous mode [ 928.284981][T28167] pim6reg1: entered allmulticast mode [ 928.581681][T28178] syzkaller1: entered promiscuous mode [ 928.587653][T28178] syzkaller1: entered allmulticast mode [ 928.749023][T28181] FAULT_INJECTION: forcing a failure. [ 928.749023][T28181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.762125][T28181] CPU: 1 UID: 0 PID: 28181 Comm: syz.4.5700 Not tainted syzkaller #0 PREEMPT(full) [ 928.762152][T28181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 928.762163][T28181] Call Trace: [ 928.762170][T28181] [ 928.762177][T28181] dump_stack_lvl+0xe8/0x150 [ 928.762206][T28181] should_fail_ex+0x40c/0x560 [ 928.762230][T28181] _copy_from_iter+0x1d3/0x1660 [ 928.762252][T28181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 928.762279][T28181] ? __pfx_policy_nodemask+0x10/0x10 [ 928.762305][T28181] ? __pfx__copy_from_iter+0x10/0x10 [ 928.762328][T28181] ? alloc_pages_mpol+0x24a/0x380 [ 928.762360][T28181] af_alg_sendmsg+0x14c3/0x2250 [ 928.762396][T28181] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 928.762412][T28181] ? __might_fault+0xaf/0x130 [ 928.762429][T28181] ? __pfx_aa_sk_perm+0x10/0x10 [ 928.762457][T28181] ? aa_sock_msg_perm+0xf1/0x1b0 [ 928.762474][T28181] ? skcipher_sendmsg+0x26/0xf0 [ 928.762501][T28181] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 928.762521][T28181] sock_sendmsg_nosec+0x13a/0x180 [ 928.762543][T28181] ____sys_sendmsg+0x54e/0x850 [ 928.762573][T28181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.762605][T28181] ? import_iovec+0x73/0xa0 [ 928.762631][T28181] ___sys_sendmsg+0x2a5/0x360 [ 928.762654][T28181] ? __lock_acquire+0x683/0x2cf0 [ 928.762679][T28181] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.762720][T28181] ? kstrtouint+0x6e/0xe0 [ 928.762757][T28181] ? __fget_files+0x2a/0x420 [ 928.762777][T28181] ? __fget_files+0x3a2/0x420 [ 928.762805][T28181] __sys_sendmmsg+0x273/0x4d0 [ 928.762823][T28181] ? __pfx___sys_sendmmsg+0x10/0x10 [ 928.762855][T28181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 928.762891][T28181] ? ksys_write+0x242/0x270 [ 928.762915][T28181] ? __pfx_ksys_write+0x10/0x10 [ 928.762944][T28181] __x64_sys_sendmmsg+0xa0/0xc0 [ 928.762959][T28181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.762976][T28181] do_syscall_64+0x174/0x580 [ 928.762998][T28181] ? trace_irq_disable+0x3b/0x140 [ 928.763017][T28181] ? clear_bhb_loop+0x40/0x90 [ 928.763036][T28181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.763052][T28181] RIP: 0033:0x7f91e6b9de99 [ 928.763066][T28181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.763079][T28181] RSP: 002b:00007f91e4df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 928.763095][T28181] RAX: ffffffffffffffda RBX: 00007f91e6e25fa0 RCX: 00007f91e6b9de99 [ 928.763107][T28181] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 928.763135][T28181] RBP: 00007f91e4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 928.763145][T28181] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 928.763155][T28181] R13: 00007f91e6e26038 R14: 00007f91e6e25fa0 R15: 00007ffeef34e0e8 [ 928.763180][T28181] [ 929.073535][T27724] Bluetooth: hci4: command 0x0406 tx timeout [ 929.205962][T28188] netlink: 'syz.2.5701': attribute type 1 has an invalid length. [ 929.711704][T28210] tipc: Enabling of bearer rejected, failed to enable media [ 929.723778][T28210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 930.126041][T28224] bridge1: entered promiscuous mode [ 930.131304][T28224] bridge1: entered allmulticast mode [ 930.140733][T28224] team0: Port device bridge1 added [ 930.464699][T28238] __nla_validate_parse: 6 callbacks suppressed [ 930.464715][T28238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5720'. [ 930.482030][T28238] siw: device registration error -23 [ 930.489699][T28238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5720'. [ 930.757285][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5723'. [ 930.817290][T28247] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 930.826304][T28247] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 930.834789][T28247] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 930.976924][T28253] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5724'. [ 930.991121][T28251] netlink: 'syz.2.5726': attribute type 8 has an invalid length. [ 930.998912][T28251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5726'. [ 931.014627][T28251] bond0: entered promiscuous mode [ 931.021458][T28251] gretap0: entered promiscuous mode [ 931.028901][T28251] bond0: left promiscuous mode [ 931.036669][T28251] gretap0: left promiscuous mode [ 931.114530][T28255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5727'. [ 931.292081][T28258] netlink: 'syz.3.5728': attribute type 2 has an invalid length. [ 931.312225][T28258] netlink: 'syz.3.5728': attribute type 8 has an invalid length. [ 931.328908][T28258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5728'. [ 931.342750][T28258] netlink: 'syz.3.5728': attribute type 2 has an invalid length. [ 931.350526][T28258] netlink: 'syz.3.5728': attribute type 8 has an invalid length. [ 931.358252][T28258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5728'. [ 931.523449][T28272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5732'. [ 931.677783][T28279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5735'. [ 932.029382][T28294] netlink: 'syz.0.5741': attribute type 1 has an invalid length. [ 932.080404][T28294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 932.092117][T28294] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 932.120857][T28294] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 932.167814][T28294] bond2: (slave ip6gretap1): making interface the new active one [ 932.177245][T28294] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 932.526628][T28309] netlink: 'syz.0.5746': attribute type 83 has an invalid length. [ 932.764797][T28317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.092442][T28334] tipc: Enabling of bearer rejected, failed to enable media [ 935.742460][T28369] __nla_validate_parse: 10 callbacks suppressed [ 935.742482][T28369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5763'. [ 937.482518][T28389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5769'. [ 937.503102][T28389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5769'. [ 938.190741][ C0] sched: DL replenish lagged too much [ 938.577696][T28412] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 938.853991][T28416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5779'. [ 938.863100][T28416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5779'. [ 938.872086][T28416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5779'. [ 939.152193][T28418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5780'. [ 939.474687][T28428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5783'. [ 939.492110][T28428] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 939.694579][T28425] block nbd4: server does not support multiple connections per device. [ 939.703411][T28425] block nbd4: shutting down sockets [ 939.914277][T28440] netlink: 'syz.0.5787': attribute type 1 has an invalid length. [ 939.947418][T28440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 939.999342][T28444] netlink: 'syz.2.5785': attribute type 12 has an invalid length. [ 940.055732][T28438] veth5: entered allmulticast mode [ 940.091191][T28440] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 940.190236][T28440] macvlan2: entered promiscuous mode [ 940.195668][T28440] macvlan2: entered allmulticast mode [ 940.201784][T28440] bond3: entered promiscuous mode [ 940.207840][T28440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 940.215500][T28440] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 940.231810][T28440] bond3: left promiscuous mode [ 940.510723][T28455] netlink: 'syz.4.5788': attribute type 8 has an invalid length. [ 940.757902][T28466] netlink: 'syz.3.5789': attribute type 1 has an invalid length. [ 940.766170][T28466] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5789'. [ 940.926118][T28475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5792'. [ 940.946826][T28475] macvlan0: mtu less than device minimum [ 940.997474][T27724] block nbd4: Receive control failed (result -32) [ 941.096439][T28480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5794'. [ 941.106101][T28480] netlink: 'syz.4.5794': attribute type 9 has an invalid length. [ 941.314243][T28490] xt_hl: Unknown TTL match mode: 237 [ 941.316834][T28485] netlink: 'syz.4.5796': attribute type 1 has an invalid length. [ 941.356070][T28493] netlink: 'syz.2.5798': attribute type 1 has an invalid length. [ 941.410844][T28485] bond23: entered promiscuous mode [ 941.416609][T28485] 8021q: adding VLAN 0 to HW filter on device bond23 [ 941.460057][T28495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5798'. [ 941.513354][T28485] 8021q: adding VLAN 0 to HW filter on device bond23 [ 941.522056][T28485] bond23: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 941.532680][T28485] bond23: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 941.545967][T28485] bond23: (slave ip6gre2): making interface the new active one [ 941.553593][T28485] ip6gre2: entered promiscuous mode [ 941.560553][T28485] bond23: (slave ip6gre2): Enslaving as an active interface with an up link [ 941.607952][T28493] bond8: entered promiscuous mode [ 941.615746][T28493] 8021q: adding VLAN 0 to HW filter on device bond8 [ 941.704259][T28509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5801'. [ 941.740484][T28511] tipc: Enabling of bearer rejected, already enabled [ 941.797327][T28504] bond8: (slave bridge4): making interface the new active one [ 941.805647][T28504] bridge4: entered promiscuous mode [ 941.812848][T28504] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 942.017151][T28493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5798'. [ 942.152377][T28530] syzkaller0: entered promiscuous mode [ 942.157970][T28530] syzkaller0: entered allmulticast mode [ 942.190038][T28532] netlink: 'syz.4.5808': attribute type 1 has an invalid length. [ 942.256241][T28532] 8021q: adding VLAN 0 to HW filter on device bond24 [ 942.360501][T28532] vlan19: entered allmulticast mode [ 942.365927][T28532] bond24: entered allmulticast mode [ 942.887720][T28553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5814'. [ 942.890393][T28551] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5813'. [ 942.905703][T28551] netlink: 'syz.2.5813': attribute type 1 has an invalid length. [ 942.993987][T28555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5816'. [ 943.032170][T28557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5815'. [ 943.077297][T28557] bond9: Unable to set down delay as MII monitoring is disabled [ 943.092097][T28557] bond9 (unregistering): Released all slaves [ 943.555800][T28565] lo speed is unknown, defaulting to 1000 [ 944.005879][T28568] netlink: 'syz.4.5820': attribute type 1 has an invalid length. [ 944.023511][T28565] dummy0 speed is unknown, defaulting to 1000 [ 944.031508][T28565] wlan0 speed is unknown, defaulting to 1000 [ 944.178037][T28568] 8021q: adding VLAN 0 to HW filter on device bond25 [ 944.247603][T28568] vlan20: entered allmulticast mode [ 944.254251][T28568] bond25: entered allmulticast mode [ 944.768079][T28582] dummy0: mtu less than device minimum [ 945.503505][T28607] validate_nla: 2 callbacks suppressed [ 945.503523][T28607] netlink: 'syz.4.5832': attribute type 1 has an invalid length. [ 945.759404][T28600] 8021q: VLANs not supported on ip6_vti0 [ 945.827024][T28607] 8021q: adding VLAN 0 to HW filter on device bond26 [ 945.872826][T28614] vlan21: entered allmulticast mode [ 945.930229][T28614] bond26: entered allmulticast mode [ 946.004420][T16679] IPVS: starting estimator thread 0... [ 946.049172][T28609] bridge4: entered promiscuous mode [ 946.054546][T28609] bridge4: entered allmulticast mode [ 946.063964][T28609] team0: Port device bridge4 added [ 946.093573][T28628] bridge5: entered promiscuous mode [ 946.117257][T28628] bridge5: entered allmulticast mode [ 946.141051][T28628] team0: Port device bridge5 added [ 946.341493][T28629] IPVS: using max 26 ests per chain, 62400 per kthread [ 946.917963][T27724] block nbd5: Receive control failed (result -32) [ 946.983561][T28667] netlink: 'syz.3.5843': attribute type 1 has an invalid length. [ 947.032560][T28660] __nla_validate_parse: 6 callbacks suppressed [ 947.032580][T28660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5842'. [ 947.380275][T28667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 947.452073][T28672] vlan2: entered allmulticast mode [ 947.467450][T28672] bond1: entered allmulticast mode [ 947.577002][T28674] bond1: (slave geneve2): making interface the new active one [ 947.627887][T28674] geneve2: entered allmulticast mode [ 947.670926][T28674] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 949.721179][T28665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 950.355541][T28710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5851'. [ 950.365805][T28710] netlink: 356 bytes leftover after parsing attributes in process `syz.4.5851'. [ 950.376406][T28710] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5851'. [ 950.391033][T28710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5851'. [ 950.790139][T28717] syzkaller0: entered promiscuous mode [ 950.805733][T28717] syzkaller0: entered allmulticast mode [ 951.083630][T28719] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 982.976648][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1022.366374][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 1026.279500][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 1077.321416][T28726] Bluetooth: hci2: command tx timeout [ 1121.183397][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1217.923815][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1217.930915][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27137/1:b..l P4975/1:b..l P5359/1:b..l [ 1217.941852][ C1] rcu: (detected by 1, t=10505 jiffies, g=109953, q=735517 ncpus=2) [ 1217.949972][ C1] task:crond state:R running task stack:23248 pid:5359 tgid:5359 ppid:1 task_flags:0x400000 flags:0x00080000 [ 1217.965044][ C1] Call Trace: [ 1217.968677][ C1] [ 1217.971651][ C1] __schedule+0x17d9/0x56c0 [ 1217.976230][ C1] ? __kernel_text_address+0xd/0x30 [ 1217.981495][ C1] ? unwind_get_return_address+0x4d/0x90 [ 1217.987220][ C1] ? __pfx___schedule+0x10/0x10 [ 1217.992122][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1217.997117][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1218.002554][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1218.007635][ C1] irqentry_exit+0x14f/0x8f0 [ 1218.012278][ C1] ? trace_irq_disable+0x3b/0x140 [ 1218.017361][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1218.023391][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1218.029631][ C1] Code: 8b 3d 14 2e 89 0c 48 89 de 5b e9 13 03 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b8 ad a5 11 65 8b 15 d9 ad a5 11 81 e2 00 01 ff 00 74 [ 1218.049285][ C1] RSP: 0018:ffffc9000362fb00 EFLAGS: 00000202 [ 1218.055412][ C1] RAX: ffffffff823fa88f RBX: 0000000000000001 RCX: 0000000080000001 [ 1218.063437][ C1] RDX: ffff888030165d00 RSI: ffffffff8c4bd360 RDI: ffffffff8c4bd320 [ 1218.071457][ C1] RBP: 0000000000000000 R08: ffffffff823fa84c R09: 0000000000000000 [ 1218.079486][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffea0002389580 [ 1218.087499][ C1] R13: 00000e000014e123 R14: ffffea0002389580 R15: ffffffff823fa84c [ 1218.095520][ C1] ? __page_table_check_zero+0x6c/0x430 [ 1218.101127][ C1] ? __page_table_check_zero+0x6c/0x430 [ 1218.106720][ C1] ? __page_table_check_zero+0xaf/0x430 [ 1218.112323][ C1] __page_table_check_zero+0xaf/0x430 [ 1218.117833][ C1] ? __reset_page_owner+0x148/0x1f0 [ 1218.123085][ C1] __free_frozen_pages+0xc2e/0xd10 [ 1218.128251][ C1] ? __free_slab+0x172/0x280 [ 1218.132892][ C1] __slab_free+0x274/0x2c0 [ 1218.137368][ C1] qlist_free_all+0x99/0x100 [ 1218.142007][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1218.147514][ C1] __kasan_slab_alloc+0x22/0x80 [ 1218.152506][ C1] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1218.158023][ C1] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 1218.163693][ C1] ? do_getname+0x2e/0x250 [ 1218.168151][ C1] ? do_getname+0x2e/0x250 [ 1218.172624][ C1] do_getname+0x2e/0x250 [ 1218.176951][ C1] ? getname_flags+0x11/0x20 [ 1218.181602][ C1] do_sys_openat2+0xcc/0x200 [ 1218.186247][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1218.191495][ C1] ? rcu_is_watching+0x15/0xb0 [ 1218.196353][ C1] __x64_sys_openat+0x138/0x170 [ 1218.201259][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.207376][ C1] do_syscall_64+0x174/0x580 [ 1218.212021][ C1] ? clear_bhb_loop+0x40/0x90 [ 1218.216742][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.222699][ C1] RIP: 0033:0x7f6f77424c3a [ 1218.227157][ C1] RSP: 002b:00007ffe57fda2c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1218.235640][ C1] RAX: ffffffffffffffda RBX: 000055665bd7f2a0 RCX: 00007f6f77424c3a [ 1218.243650][ C1] RDX: 0000000000080000 RSI: 00007f6f774c145a RDI: 00000000ffffff9c [ 1218.251690][ C1] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 1218.259694][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f6f774bf7f4 [ 1218.267713][ C1] R13: 00007f6f774bf7f4 R14: 0000000000000001 R15: 000000000000002b [ 1218.275754][ C1] [ 1218.278817][ C1] task:klogd state:R running task stack:23400 pid:4975 tgid:4975 ppid:1 task_flags:0x400100 flags:0x00080000 [ 1218.292458][ C1] Call Trace: [ 1218.295810][ C1] [ 1218.298794][ C1] __schedule+0x17d9/0x56c0 [ 1218.303397][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1218.308395][ C1] ? __pfx___schedule+0x10/0x10 [ 1218.313307][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1218.318309][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1218.323390][ C1] irqentry_exit+0x14f/0x8f0 [ 1218.328042][ C1] ? trace_irq_disable+0x3b/0x140 [ 1218.333122][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1218.339158][ C1] RIP: 0010:lock_release+0x2d7/0x3c0 [ 1218.344489][ C1] Code: 0d ca 11 00 00 00 00 eb b5 e8 c5 9d 2c 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 c8 c9 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a 9e 2f 0a cc 48 8d 3d b2 56 b8 [ 1218.364137][ C1] RSP: 0018:ffffc900038df288 EFLAGS: 00000286 [ 1218.370255][ C1] RAX: b8dfa6e668f5bc00 RBX: 0000000000000206 RCX: 0000000000000046 [ 1218.378266][ C1] RDX: 0000000000000001 RSI: ffffffff8e4b0658 RDI: ffffffff8c4bd380 [ 1218.386274][ C1] RBP: ffff88807fe5aac8 R08: ffffc900038df750 R09: 0000000000000000 [ 1218.394289][ C1] R10: ffffc900038df3b8 R11: fffff5200071be79 R12: 0000000000000001 [ 1218.402303][ C1] R13: 0000000000000001 R14: ffffffff8eb59c60 R15: ffff88807fe59f00 [ 1218.410340][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1218.415495][ C1] unwind_next_frame+0x1baa/0x2550 [ 1218.420743][ C1] ? qlist_free_all+0x99/0x100 [ 1218.425586][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1218.430738][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1218.436942][ C1] arch_stack_walk+0x11b/0x150 [ 1218.441801][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1218.447481][ C1] stack_trace_save+0xa9/0x100 [ 1218.452295][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1218.457714][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1218.462795][ C1] save_stack+0x122/0x230 [ 1218.467179][ C1] ? __pfx_save_stack+0x10/0x10 [ 1218.472088][ C1] ? page_ext_get+0x22/0x2e0 [ 1218.476716][ C1] ? __free_frozen_pages+0xc1e/0xd10 [ 1218.482043][ C1] ? __slab_free+0x274/0x2c0 [ 1218.486672][ C1] ? qlist_free_all+0x99/0x100 [ 1218.491491][ C1] ? page_ext_put+0x97/0xc0 [ 1218.496050][ C1] __reset_page_owner+0x71/0x1f0 [ 1218.501051][ C1] __free_frozen_pages+0xc1e/0xd10 [ 1218.506214][ C1] ? __free_slab+0x172/0x280 [ 1218.510854][ C1] __slab_free+0x274/0x2c0 [ 1218.515337][ C1] qlist_free_all+0x99/0x100 [ 1218.519980][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1218.525499][ C1] __kasan_slab_alloc+0x22/0x80 [ 1218.530399][ C1] __kmalloc_node_track_caller_noprof+0x461/0x730 [ 1218.536859][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1218.542975][ C1] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 1218.549628][ C1] ? alloc_skb_with_frags+0xc6/0x760 [ 1218.554994][ C1] ? alloc_skb_with_frags+0xc6/0x760 [ 1218.560348][ C1] __alloc_skb+0x2bd/0x7a0 [ 1218.564824][ C1] alloc_skb_with_frags+0xc6/0x760 [ 1218.570019][ C1] ? kasan_save_track+0x4f/0x80 [ 1218.574943][ C1] ? kasan_save_track+0x3e/0x80 [ 1218.579839][ C1] ? kasan_save_free_info+0x40/0x50 [ 1218.585105][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1218.590100][ C1] ? kfree+0x1c5/0x640 [ 1218.594201][ C1] ? syslog_print+0x57c/0x610 [ 1218.598922][ C1] ? do_syslog+0x583/0x7d0 [ 1218.603391][ C1] ? __x64_sys_syslog+0x7c/0x90 [ 1218.608295][ C1] sock_alloc_send_pskb+0x878/0x990 [ 1218.613556][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1218.619333][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1218.625454][ C1] unix_dgram_sendmsg+0x4da/0x17b0 [ 1218.630612][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1218.635865][ C1] ? kfree+0x1c5/0x640 [ 1218.640008][ C1] ? syslog_print+0x57c/0x610 [ 1218.644748][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1218.650340][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 1218.655329][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1218.660922][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 1218.666009][ C1] __sys_sendto+0x408/0x5a0 [ 1218.670573][ C1] ? bpf_lsm_capable+0x9/0x20 [ 1218.675339][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1218.680432][ C1] ? ktime_get+0x1f5/0x220 [ 1218.684933][ C1] ? rcu_is_watching+0x15/0xb0 [ 1218.689772][ C1] __x64_sys_sendto+0xde/0x100 [ 1218.694604][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.700716][ C1] do_syscall_64+0x174/0x580 [ 1218.705371][ C1] ? clear_bhb_loop+0x40/0x90 [ 1218.710091][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.716021][ C1] RIP: 0033:0x7f764ad3c407 [ 1218.720476][ C1] RSP: 002b:00007ffc4310ee00 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1218.728935][ C1] RAX: ffffffffffffffda RBX: 00007f764abecc80 RCX: 00007f764ad3c407 [ 1218.736943][ C1] RDX: 0000000000000055 RSI: 00007ffc4310ef40 RDI: 0000000000000003 [ 1218.744949][ C1] RBP: 00007ffc4310f370 R08: 0000000000000000 R09: 0000000000000000 [ 1218.752994][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc4310f388 [ 1218.761004][ C1] R13: 00007ffc4310ef40 R14: 000000000000003a R15: 00007ffc4310ef40 [ 1218.769035][ C1] [ 1218.772087][ C1] task:syz-executor state:R running task stack:22608 pid:27137 tgid:27137 ppid:27129 task_flags:0x400140 flags:0x00080000 [ 1218.785633][ C1] Call Trace: [ 1218.788955][ C1] [ 1218.791929][ C1] __schedule+0x17d9/0x56c0 [ 1218.796503][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1218.801662][ C1] ? do_syscall_64+0x174/0x580 [ 1218.806483][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1218.811476][ C1] ? __pfx___schedule+0x10/0x10 [ 1218.816373][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1218.821375][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1218.826464][ C1] irqentry_exit+0x14f/0x8f0 [ 1218.831101][ C1] ? trace_irq_disable+0x3b/0x140 [ 1218.836210][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1218.842232][ C1] RIP: 0010:kasan_check_range+0x9d/0x2c0 [ 1218.847943][ C1] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 <49> ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 1218.867597][ C1] RSP: 0018:ffffc9000dbd75b0 EFLAGS: 00000246 [ 1218.873724][ C1] RAX: ffffffff823faa01 RBX: ffffffffffffffff RCX: ffffffff823fa995 [ 1218.881739][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801fc167f8 [ 1218.889775][ C1] RBP: 0000000000000002 R08: ffff88801fc167fb R09: 1ffff11003f82cff [ 1218.897831][ C1] R10: dffffc0000000000 R11: ffffed1003f82cff R12: 0000000000000001 [ 1218.905848][ C1] R13: ffff88801fc167b0 R14: ffffed1003f82d00 R15: 1ffff11003f82cff [ 1218.913877][ C1] ? __page_table_check_zero+0x221/0x430 [ 1218.919569][ C1] ? __page_table_check_zero+0x1b5/0x430 [ 1218.925267][ C1] __page_table_check_zero+0x1b5/0x430 [ 1218.930783][ C1] ? __page_table_check_zero+0x6c/0x430 [ 1218.936389][ C1] __free_frozen_pages+0xc2e/0xd10 [ 1218.941567][ C1] __slab_free+0x274/0x2c0 [ 1218.946038][ C1] ? qlist_free_all+0x8e/0x100 [ 1218.950854][ C1] qlist_free_all+0x99/0x100 [ 1218.955512][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 1218.960585][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1218.966185][ C1] __kasan_slab_alloc+0x22/0x80 [ 1218.971097][ C1] __kmalloc_noprof+0x311/0x720 [ 1218.976002][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 1218.981078][ C1] ? tomoyo_encode+0x2ad/0x570 [ 1218.985968][ C1] ? tomoyo_encode+0x2ad/0x570 [ 1218.990803][ C1] tomoyo_encode+0x2ad/0x570 [ 1218.995488][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 1219.001197][ C1] tomoyo_path_perm+0x283/0x560 [ 1219.006202][ C1] ? tomoyo_path_perm+0x251/0x560 [ 1219.011282][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1219.016770][ C1] security_inode_getattr+0x12b/0x310 [ 1219.022192][ C1] vfs_getattr+0x23/0x70 [ 1219.026492][ C1] vfs_statx_path+0x2b/0x230 [ 1219.031136][ C1] ? vfs_statx+0x107/0x200 [ 1219.035642][ C1] vfs_statx+0x12e/0x200 [ 1219.039931][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1219.044743][ C1] ? strncpy_from_user+0x150/0x2c0 [ 1219.049913][ C1] ? do_getname+0x151/0x250 [ 1219.054482][ C1] vfs_fstatat+0x11b/0x170 [ 1219.058962][ C1] __x64_sys_newfstatat+0x151/0x200 [ 1219.064214][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1219.070013][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 1219.075438][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.081549][ C1] do_syscall_64+0x174/0x580 [ 1219.086213][ C1] ? trace_irq_disable+0x3b/0x140 [ 1219.091329][ C1] ? clear_bhb_loop+0x40/0x90 [ 1219.096054][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.101988][ C1] RIP: 0033:0x7fab80b9c4da [ 1219.106439][ C1] RSP: 002b:00007ffd88a29778 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 1219.114893][ C1] RAX: ffffffffffffffda RBX: 00007fab80c3330a RCX: 00007fab80b9c4da [ 1219.122905][ C1] RDX: 00007ffd88a297a0 RSI: 00007ffd88a29830 RDI: 00000000ffffff9c [ 1219.130919][ C1] RBP: 00007ffd88a29830 R08: 00007ffd88a2a830 R09: 00000000ffffffff [ 1219.138923][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffd88a2a8c0 [ 1219.146927][ C1] R13: 00007fab80c3330a R14: 00000000000eac92 R15: 00007ffd88a2a900 [ 1219.154962][ C1] [ 1219.158016][ C1] rcu: rcu_preempt kthread starved for 10524 jiffies! g109953 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1219.169341][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1219.179371][ C1] rcu: RCU grace-period kthread stack dump: [ 1219.185384][ C1] task:rcu_preempt state:R running task stack:26848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1219.198933][ C1] Call Trace: [ 1219.202252][ C1] [ 1219.205222][ C1] __schedule+0x17d9/0x56c0 [ 1219.209789][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1219.214799][ C1] ? __pfx___schedule+0x10/0x10 [ 1219.219708][ C1] ? schedule+0x90/0x2b0 [ 1219.224026][ C1] schedule+0x164/0x2b0 [ 1219.228234][ C1] schedule_timeout+0x152/0x2c0 [ 1219.233204][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1219.238618][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1219.243947][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1219.249813][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1219.255448][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1219.260363][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1219.266568][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1219.271937][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1219.277203][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1219.281846][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1219.287093][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1219.292101][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1219.297175][ C1] kthread+0x388/0x470 [ 1219.301321][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1219.306578][ C1] ? __pfx_kthread+0x10/0x10 [ 1219.311230][ C1] ret_from_fork+0x514/0xb70 [ 1219.315888][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1219.321057][ C1] ? __switch_to+0xc89/0x1420 [ 1219.325806][ C1] ? __pfx_kthread+0x10/0x10 [ 1219.330459][ C1] ret_from_fork_asm+0x1a/0x30 [ 1219.335304][ C1] [ 1219.338353][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1219.344716][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1219.349968][ C0] NMI backtrace for cpu 0 [ 1219.349987][ C0] CPU: 0 UID: 0 PID: 25406 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1219.350019][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1219.350038][ C0] Workqueue: bat_events batadv_tt_purge [ 1219.350163][ C0] RIP: 0010:__lock_acquire+0x398/0x2cf0 [ 1219.350192][ C0] Code: 85 c0 74 1c 83 3d eb 7e b5 0e 00 75 13 48 8d 3d fe 7f b8 0e 48 c7 c6 41 35 35 8e 67 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 <41> 8b 45 20 25 ff 1f 00 00 48 0f a3 05 57 ba d1 12 73 17 48 69 c0 [ 1219.350210][ C0] RSP: 0018:ffffc90000007a58 EFLAGS: 00000002 [ 1219.350225][ C0] RAX: ffffffff941a6990 RBX: 0000000000000003 RCX: 0000000000000710 [ 1219.350239][ C0] RDX: 0000000000042000 RSI: 0000000000002000 RDI: 0000000000000000 [ 1219.350257][ C0] RBP: 0000000000000001 R08: ffffffff89a4ba8c R09: 0000000000080000 [ 1219.350270][ C0] R10: 0000000000000000 R11: ffff8880b863cf10 R12: 0000000000000710 [ 1219.350283][ C0] R13: ffff8880592749f0 R14: ffff888059273e00 R15: ffff8880592749a0 [ 1219.350298][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 1219.350314][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1219.350327][ C0] CR2: 00007f3540000000 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1219.350344][ C0] Call Trace: [ 1219.350351][ C0] [ 1219.350366][ C0] ? ip_local_deliver+0x113/0x190 [ 1219.350439][ C0] ? NF_HOOK+0x336/0x3c0 [ 1219.350462][ C0] ? process_backlog+0xf5c/0x1860 [ 1219.350534][ C0] lock_acquire+0x106/0x350 [ 1219.350558][ C0] ? process_backlog+0xf5c/0x1860 [ 1219.350590][ C0] ? rcu_is_watching+0x15/0xb0 [ 1219.350620][ C0] _raw_spin_lock_irq+0x3d/0x50 [ 1219.350644][ C0] ? process_backlog+0xf5c/0x1860 [ 1219.350668][ C0] process_backlog+0xf5c/0x1860 [ 1219.350694][ C0] ? process_backlog+0x3c3/0x1860 [ 1219.350726][ C0] __napi_poll+0xaa/0x330 [ 1219.350750][ C0] net_rx_action+0x61d/0xf50 [ 1219.350782][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1219.350812][ C0] ? sched_balance_domains+0x770/0x880 [ 1219.350842][ C0] handle_softirqs+0x225/0x840 [ 1219.350866][ C0] ? do_softirq+0x76/0xd0 [ 1219.350888][ C0] ? batadv_tt_local_purge+0x2c1/0x340 [ 1219.350912][ C0] do_softirq+0x76/0xd0 [ 1219.350931][ C0] [ 1219.350938][ C0] [ 1219.350945][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1219.350965][ C0] batadv_tt_local_purge+0x2c1/0x340 [ 1219.350993][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1219.351014][ C0] batadv_tt_purge+0x35/0xa10 [ 1219.351038][ C0] ? rcu_is_watching+0x15/0xb0 [ 1219.351068][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1219.351088][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1219.351123][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1219.351148][ C0] ? assign_work+0x3cf/0x5d0 [ 1219.351170][ C0] worker_thread+0xa47/0xfb0 [ 1219.351206][ C0] kthread+0x388/0x470 [ 1219.351236][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1219.351263][ C0] ? __pfx_kthread+0x10/0x10 [ 1219.351289][ C0] ret_from_fork+0x514/0xb70 [ 1219.351317][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1219.351343][ C0] ? __switch_to+0xc89/0x1420 [ 1219.351366][ C0] ? __pfx_kthread+0x10/0x10 [ 1219.351392][ C0] ret_from_fork_asm+0x1a/0x30 [ 1219.351418][ C0]