last executing test programs: 5.235326507s ago: executing program 3 (id=1026): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x15, 0x0, 0x2, 0x24}]}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x0, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0x100000001, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x8) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r2, &(0x7f0000000700)="b068", 0x2) 4.08425373s ago: executing program 3 (id=1038): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0xd}}]}}, &(0x7f0000001f80)=""/225, 0x32, 0xe1, 0x2}, 0x28) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x2acd9ee4, @loopback, 0xfffff001}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0xe, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000180)={0x800000000, 0x40, 0x5, 0xfffffffa, 0x2, 0x0, [{0x7, 0x9, 0x0, '\x00', 0x2000}, {0x7228, 0x6, 0x5, '\x00', 0x1000}]}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) 3.891051464s ago: executing program 3 (id=1042): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r10 = socket(0x27, 0x3, 0xfff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000006c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r11, 0x2000) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0xff11b2d5, 0x8, 0x2, 0xd2d2, 0x1, 0x6, 0x0, 0x91, 0xdfffffff, 0xb84, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x8, 0xc}}) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="306b5cf46ea767a0139b088accc7221fb7a6cdc1ecab06f5513733bd6e3e5a1730eea94c", 0x24}, {&(0x7f00000000c0)="804a003c6adcf4c282a67006a330ccdebc542d69fc89a2e6803e91cf81ed3bc03ea4306c875a41df0a81667fad602609288415eeef2128127ceb7b4001769e80d4545c2bb3ab636d9206d940e8e24372d788ef597c594e", 0x57}, {&(0x7f0000000140)="2f3535d52ccc5af654cde9232aab3136f3f472bc6532a650d6622b290f83686202", 0x21}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845) 3.861442337s ago: executing program 2 (id=1044): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}}, &(0x7f0000000380)='GPL\x00', 0x5, 0x6, &(0x7f00000004c0)=""/6, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x10, 0x8}, 0x94) 3.676935859s ago: executing program 2 (id=1046): socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000001140)=0x40) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000fc0)={'nat\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0xa, 0x7, 0x7f2a, 0x1ff, 0x1]}, &(0x7f0000000000)=0x78) 3.134452854s ago: executing program 3 (id=1052): syz_emit_ethernet(0x14b7, &(0x7f0000001740)={@broadcast, @broadcast, @void, {@mpls_uc={0x8847, {[{0x5}, {0xef}], @ipv6=@icmpv6={0xf, 0x6, "a0bf78", 0x1479, 0x3a, 0x7e, @mcast1, @local, {[@hopopts={0x0, 0xd, '\x00', [@generic={0x6, 0x29, "5be18bd650d2c213ea01af31643e2bf0e26a432069da470429986d32ea8220495a56e41efddbf9201c"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x6}}, @ra={0x5, 0x2, 0x9}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x4, 0x4, [0x40]}}]}, @routing={0x4, 0xa, 0x2, 0x0, 0x0, [@remote, @private2, @private0={0xfc, 0x0, '\x00', 0xff}, @dev={0xfe, 0x80, '\x00', 0x6}, @loopback]}, @srh={0x32, 0xa, 0x4, 0x5, 0xe6, 0x20, 0x6, [@private1={0xfc, 0x1, '\x00', 0x11}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x4, 0x200, "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"}, {0x1f, 0x1e, "90746768d1eadd3739c27bd8b2bca5a8fe17ba01f760ce3eda337d4fc303474ac7f9166c2ce2ab3fa3908ed911cbe8287ea699e23dc29649b40d22d9aa3ab212452ecacbd208dd834c0fc1e518779eaa7e4dbe036573d690e6dd55e7be4988eb0ac67de79110e7f2995f8e5b704e058b96dfc2896cbdf4ffde9b8c592f9d88345c7fe93453fbe684a9a2f580163c69a0344371408c7d2c750ca387e558c936e66d61c97f75c8ae5060117107e24beda94796a12dd4432f458a8be41ee652685e2b1c60c04a4ad48e30acc582a396f1982bd9927fa97b73343adb914e263c7257a16535d9c965da86f2d5cf972c01989824eb21dc50"}, {0x4, 0x16, "6b7d8bae9cf5dae47efbfefc96e41722fed5c9e562200e8d056d1dc6d8371e259bfd2ba4d49551b1bee26a36db06da8bab62a37aaa3f176f7bcfdc9a3e842bf093763acef826e20ebb0a1d76d1fe070d3356090b4c24a0f99876c7ad99976cf188b77d81379dc88c37ca4d55bef8721d5949296c782cb28cbcb105ae4aa8336f3fa36efe6ea2e5c73647aeaeb487faf90bdbb91b9bb56418a32559fdc9659dd0578525cc08fbf9a4d029e4bb173ba1cb336b3b2c89"}, {0x3, 0x14, "9af5d23a5adec4c95f0b32b3b41b7824dcbecef573e28641c7745fae7cc29ba0d7fbccc2b9c35dcf51d68fd34cbc8db082e53bdbb92074e066b34a8b6dae740a01c0e9598ab8576ffa608fbced8b733e87bbd677e7a4d0388fbcbf1b4aa1928295c825dde28e24af9ab34573cb4936bd5e8f020dba4e64f8315dde10384957de4c55204b3e4287d0b65ce24d485569fe9cff93efd9586f60e51f3b9e0fc8"}, {0x5, 0x1b, "784f4e5ffe9cc08b09cb8254fee65b1345a3455d26804f58c98497998b30f176c1e15c91733472431eb99e5d4451db360d810b8b977d143cc705f8ddf762c2aad4a4458ecb61ca802febac03dc4ad92782e9cf24cf4a56bafd0a43ff74a1f49188897df42637503c3351f6529033546096ca2cc954f5ebf53c20d86c24ba5a5a4fa37f0f7523f349e2d0bd8224809ec243cfffc76f861a0014d93aba268f88c2c111eaaac6d414130be277235a61d15b606d04451941f731e9c2cfa2841147bb96cef73996bad920dc94ec6710c574ea5f86251648c58c"}]}}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x19) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c00)=@newchain={0x2b18, 0x64, 0x0, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0xf, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0x8, 0xff}}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}, @filter_kind_options=@f_fw={{0x7}, {0x2acc, 0x2, [@TCA_FW_ACT={0x1254, 0x4, [@m_skbmod={0x198, 0x20, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x0, 0x0, 0xaa4, 0x6}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x7, 0x0, 0x3, 0x8}, 0x4}}]}, {0xea, 0x6, "e749ef97df7fd62b57fd4c2d9b565de55b89601260862d3e110ce15bbdcc816bc75bd2576aece2c22c79e4881a6d5858de71fc366940c21d2a40cbac4cc0fbe03002a013bc2bf7590e9afeb461e56043008356b5b8a9a1f58738cd23b2053331ed45555eaeb4c33d878e0d2d843f6ad208ec02324e374a796f3e7ff87821e8554ed2ebe322b81304902cc8fb543d7f56777365ec8e0eb76cd2bdeeead19ebf35b5ed1d4925c1fd4b3d013252de9ba322eb41d33245b4a8f4e5b9c3d4af73972a03cb833efa25efda75b9d6d15f7b259f3e5c3e79217663bde3a695aef5db3b756315c5c6d177"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x10b8, 0x9, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x1000, 0x10000000, 0x3, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '[,-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x557, 0x3ff, 0x5, 0xb, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x826, 0xa, 0x3, 0x3, 0xa7bd}}, @TCA_DEF_PARMS={0x18, 0x2, {0x57c1, 0x0, 0x7, 0x1f9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xa, 0x6, 0xffffff29, 0x80000001}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x7f, 0x8, 0x3, 0xfffffff1, 0xff, 0x80000000, 0x21, 0x5, 0x2, 0xffff, 0x5, 0x1, 0x5, 0x1044, 0x6, 0x3c, 0xffff, 0x65, 0x2, 0x5, 0x2, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x1, 0x2, 0x0, 0x3, 0x7fff, 0x0, 0x4, 0xc, 0x8, 0x95d, 0x80000000, 0x7, 0xe, 0x8, 0xc00, 0xb161, 0x2, 0x4, 0xfffffff0, 0x1, 0x9, 0x9, 0x3, 0x5, 0x4, 0x7ff, 0x3, 0xfffff168, 0xff, 0x904d, 0x4, 0x7, 0x0, 0x10001, 0x0, 0x1, 0x8c, 0x3ff, 0xff, 0x1, 0x5, 0x400, 0x1, 0x1, 0x4, 0x9, 0x1, 0x5, 0x5, 0x6, 0x1, 0x2, 0xfffffff9, 0x4, 0xe, 0x7ff, 0x1, 0x8659, 0xff, 0x0, 0x6, 0x9, 0x0, 0x6, 0x3, 0x9, 0x2, 0x1, 0xd, 0x537, 0x3, 0x7fffffff, 0x4, 0x638, 0x426, 0x8e, 0x0, 0x3, 0x3, 0x5, 0x6, 0x2543, 0x9, 0x1, 0x0, 0x2, 0x9, 0x0, 0xfffffffe, 0x7, 0x4, 0x9, 0x1, 0x5, 0xfffffffb, 0x6, 0x80, 0xd, 0x7ff, 0x7fc, 0x0, 0x2, 0x80000001, 0x4, 0x2, 0x1000, 0x9, 0x9, 0x2, 0xe1e, 0x9, 0x6, 0x9, 0x11a600, 0xa, 0x6, 0x800, 0x1, 0x9, 0x8, 0x86, 0x8001, 0x7, 0x7, 0x2, 0x3, 0x0, 0x8, 0x1, 0x1, 0x0, 0x200, 0x0, 0xa7, 0x9, 0x101, 0xfffffff6, 0x8d, 0x4, 0x6, 0x1, 0x1, 0x4da, 0x0, 0x4, 0x5f2e, 0x7, 0x0, 0x2, 0x2, 0x2, 0xd, 0x0, 0xfffffff9, 0x7, 0xfffffff9, 0x1ff, 0x1, 0xf, 0x4, 0x1, 0xe, 0x400, 0x400, 0x40, 0x2, 0x81, 0x2, 0x3d0a, 0x0, 0x1ff, 0xffffffff, 0x3, 0x2, 0x6, 0x1, 0x7f, 0xffffffff, 0x800, 0x7, 0x695, 0x5, 0x7, 0x1000, 0xc6, 0x1ff, 0x0, 0x3, 0x2, 0x3, 0x5, 0x4, 0x8, 0x1, 0x3, 0xfffffff7, 0x9, 0x9, 0x0, 0xab, 0x9, 0x2, 0x3, 0x6, 0x4, 0x400, 0x1, 0x1, 0x2, 0x5, 0x7c41, 0x4, 0x8001, 0x0, 0x7, 0x2, 0x400, 0x3, 0x6, 0x67, 0x9, 0x7ff, 0x9, 0x9, 0xfffffffa, 0x582, 0x4e3a, 0x7ff]}]}, @TCA_FW_POLICE={0x1050, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x80000000, 0x6, 0x28000, 0x2, 0x1, 0x838b, 0x5, 0x7e, 0x7, 0x3, 0x10001, 0x280, 0xe119, 0x34ce2d29, 0x3, 0x0, 0x9, 0x6, 0x6, 0x101, 0x0, 0x4047, 0xfffffff7, 0x2, 0x8b1, 0x4, 0x0, 0x200, 0xfffffff7, 0x400, 0x35b, 0x4, 0x6, 0x6, 0x3, 0x7, 0x4, 0x2, 0x81, 0x6, 0x0, 0x5, 0x0, 0x7, 0xfffffe00, 0x9, 0x5, 0x7, 0x5, 0x2, 0xf98, 0xffff, 0xd9c, 0xfffff801, 0x4, 0xfffffff8, 0x7, 0x8, 0x8, 0x4, 0x10000, 0x7, 0x8, 0xf93, 0x7ff, 0x80, 0x1, 0xf01edce, 0x0, 0x82, 0x4620, 0xa64, 0x5, 0x8, 0x5, 0x1, 0x800, 0x64, 0x1, 0xa, 0x9, 0x8, 0x7ff, 0x5, 0x6, 0x2, 0x5f69, 0x9, 0xffffff7f, 0x8001, 0x8000, 0xfffffff8, 0x7, 0x1a, 0x2, 0x200, 0x5, 0x4, 0x7ff, 0x9, 0x7, 0xffff0001, 0x8c, 0xd, 0x3, 0x3ff, 0xb47, 0x3, 0x990b, 0xfde8, 0x8000, 0x8, 0x1, 0xcb, 0x7e7, 0xe, 0xfffffff8, 0xffffff26, 0x2, 0x6000000, 0x1, 0x1b3, 0x9, 0x6, 0x7be, 0x7, 0x20fea221, 0x1ff, 0x57b0, 0x0, 0xb0d5, 0xa, 0xfffffffb, 0xa, 0x0, 0x1, 0x2, 0x1, 0x16c3, 0x9, 0x901c, 0x5, 0x2, 0x9c, 0x5, 0x20, 0x1ad, 0x4, 0x0, 0x1, 0x0, 0xffffffd9, 0x40, 0x5, 0x3, 0x0, 0x10001, 0x7, 0x8001, 0x1ff, 0x4, 0x9, 0xfffffffd, 0xa, 0x7, 0x4, 0x6, 0xffff, 0xffff0b43, 0xafa4, 0x3, 0x3f702105, 0x7, 0x3ff, 0xc00, 0x6, 0x4, 0x0, 0x5, 0x3, 0xf8e4, 0xb07d, 0x0, 0x6, 0x1, 0x5, 0x1, 0x80, 0xff000, 0xff, 0x3, 0x7, 0x9, 0x40000000, 0x9, 0x7, 0x1937b763, 0x8041, 0x1356, 0x8, 0x7, 0xfffffffc, 0x9, 0xa69, 0x1, 0x2, 0x885, 0x4, 0x4, 0x7, 0x2, 0x67d, 0xffff, 0x3, 0x2664, 0xa8, 0x100, 0x0, 0x7f, 0x0, 0xb52, 0xc, 0x5, 0x7fffffff, 0xa00000, 0x1, 0xb, 0x6, 0x2, 0x1, 0x3, 0x0, 0x7, 0x1, 0x80, 0x7, 0x1000, 0x2, 0xfffffff7, 0xf9, 0x3, 0x591, 0x1, 0x2, 0x6, 0x1, 0x40, 0x10, 0x800, 0x0, 0x380, 0x7fff, 0x1, 0xf3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x8, 0x8, 0x6, 0x6, 0x100, 0x8, 0xe2, 0x32c664e0, 0x1, 0x2, 0x1, 0x3, 0x1, 0xf66f, 0x76d3886f, 0x5, 0x2, 0x1, 0xffffffff, 0xffff, 0x5, 0x1000, 0x9, 0x0, 0x8001, 0x6, 0x6, 0x73, 0x4, 0x2, 0x7e57, 0xd4, 0x200, 0x100, 0x800, 0x3ff, 0x8001, 0x7fffffff, 0x6, 0xb, 0x38b, 0x10000, 0x6, 0x1, 0x8, 0x9, 0x6, 0x7, 0x2e97, 0x6, 0x8, 0x6, 0x8001, 0x7, 0x0, 0x2, 0x5, 0x45d, 0x9, 0x1, 0x5, 0x4, 0x380000, 0x0, 0x1000, 0xe, 0x3c193560, 0x0, 0x8, 0x42c3, 0xffffffff, 0x80000000, 0xca, 0x2, 0x1, 0x81, 0x9, 0x9, 0x8c27, 0x9, 0x6, 0x3, 0x9, 0x8, 0x9, 0x1, 0x4, 0x5, 0xef, 0x3e0, 0x600, 0x4, 0x9, 0x44, 0xd, 0x8, 0x7f, 0xa51a, 0x3ff, 0x9, 0xffff, 0x1, 0x14, 0x5, 0x7083df2d, 0x69, 0x8, 0x0, 0x5, 0x3, 0x9, 0x4cadca98, 0x6, 0x6, 0x0, 0xc, 0xd301, 0x0, 0x0, 0xe, 0xf, 0x9, 0x9, 0x7, 0x74, 0x7, 0x7, 0xd, 0x0, 0x80000001, 0x3, 0x5, 0x7, 0xb699, 0x4, 0x8, 0x8, 0x9, 0xa29a, 0x200, 0x9, 0x7, 0xe3d, 0x0, 0xd, 0xffff, 0xac795140, 0x5c, 0xae, 0xd, 0x0, 0x4d03, 0x9, 0x5, 0x5c48242c, 0x1, 0x614, 0x5, 0xcfcd, 0xfffffff8, 0x3, 0x18b1, 0xe, 0xfffffffd, 0xff, 0x100, 0xe, 0x200, 0xfffffffa, 0x8, 0xe2e6, 0x100, 0x200, 0x401, 0xffffffff, 0x0, 0x101, 0x1, 0x800, 0x7f56, 0x9, 0x80000001, 0x6, 0x5, 0xbd26, 0x568f5eff, 0x2, 0x7, 0x8, 0x49e5a560, 0xffff0000, 0xb4ee, 0xc, 0x8, 0x8, 0x81, 0xff, 0x101, 0xfffffffe, 0x2, 0x3, 0x5, 0x2, 0x10e, 0x4, 0x7ff, 0x7fff, 0x8, 0x7fff, 0xffff8001, 0x9539, 0x4, 0x35cb, 0x38, 0x0, 0x8, 0x3, 0x9, 0x7, 0x5, 0x23, 0x7fffffff, 0x4, 0x4, 0xd0, 0x4, 0x415, 0x2, 0x4, 0x6, 0x9, 0x5, 0x2, 0x2, 0x0, 0x2, 0x7fff, 0x800, 0x5, 0xffffffff, 0xa620, 0x8, 0x8001, 0x5, 0x6, 0xfff, 0x1, 0x3, 0x80e, 0x80000001, 0x401, 0x401, 0xffffffff, 0x8000, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x0, 0x2, 0xfffffffb, 0x10, {0x2, 0x0, 0xf, 0x7, 0x7, 0xe98a}, {0x1, 0x0, 0x101, 0x4, 0x1, 0x7}, 0x3, 0x3ff, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1f, 0xab3, 0xc, 0x0, 0x54fc, 0x9, 0xe, 0x1, 0x1000, 0x7ff, 0x80, 0x1, 0xfffffffa, 0x400, 0x1ff, 0x3, 0x9, 0xba, 0x8, 0x58f, 0x80000000, 0x6, 0x100, 0x7, 0xfffff000, 0x7, 0x47, 0x7, 0xffffff92, 0x5b13, 0x0, 0x401, 0x7, 0x401, 0xfff, 0x9, 0x59, 0x2, 0x2, 0xc0, 0x7, 0xf, 0x4, 0x5, 0x7fffffff, 0x7b49, 0x7, 0x3, 0x4, 0x184, 0x6, 0x9e0e, 0x3, 0x101, 0x100, 0x5, 0x8001, 0x8, 0xff, 0x6, 0x1, 0x4, 0x3, 0xfffffff8, 0x3, 0xf, 0xe, 0x100, 0x1, 0x6, 0x7, 0x6, 0x5, 0x100, 0xfffffffd, 0xffffffff, 0x65f92402, 0x0, 0x7, 0x0, 0x40, 0x100, 0x3, 0x995, 0x5, 0x709a3eea, 0xf, 0x8, 0x3f94d244, 0x1, 0xffff0000, 0x7b33, 0x6, 0x9, 0x3, 0x6, 0x3, 0xfffffffe, 0x4, 0x5, 0xf, 0x10000, 0x4, 0x5, 0x4, 0xb, 0x7, 0x347aebc0, 0x5, 0x6, 0x2, 0x0, 0x55, 0x5, 0x62e, 0x2, 0x800, 0xa6, 0x8, 0x745e, 0x4, 0x7, 0x1, 0x2, 0x8, 0x8, 0xc34, 0x0, 0x885, 0x7, 0xd, 0x6, 0xfffffff8, 0x1, 0x7fff, 0x9, 0xe, 0x1, 0x800, 0xb5, 0x4, 0x3ff, 0x3, 0x80, 0x6, 0x0, 0xf441, 0x6, 0x905c, 0xee4, 0x8001, 0x2, 0xfc2e, 0x0, 0x5, 0x1ff, 0xffffffff, 0x8001, 0x2, 0x8, 0x1000, 0x13c, 0x4, 0x8000, 0x745c, 0x3ff, 0x1ed3, 0x3, 0x7, 0x1000, 0x0, 0x7, 0x2d, 0xffff, 0xffffffff, 0x4, 0x80000000, 0x1, 0x4, 0xfa98, 0x2, 0x3, 0x400, 0x3, 0x2, 0x6, 0x5, 0x6, 0x1, 0x1000, 0x9, 0x7, 0x114600, 0xe, 0x8, 0x98cc, 0x10000, 0x4, 0x800, 0x4, 0x81, 0xffff9bb0, 0xca99, 0x9d, 0x6, 0x81, 0x5, 0x9, 0xffffffa3, 0xc18a, 0xfffffff7, 0x3, 0x8, 0x7, 0x7, 0x4, 0x9, 0x1ff, 0x3, 0xfffffffd, 0x50, 0x6, 0x8000, 0x7, 0xffffffff, 0x8, 0xd, 0x4, 0x0, 0xb891, 0x4, 0x800, 0x0, 0x9, 0x4, 0x1, 0xfffff50f, 0x861, 0x388, 0xfffffffc, 0x4, 0x8, 0x5, 0x0, 0x1, 0x0, 0x9, 0x6, 0x0, 0x1, 0x1, 0x7, 0xa, 0x2, 0xb, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0xbc, 0x8, 0x1, 0x80000000, 0xf8, 0xffff, 0x1, 0x9, 0x2, 0x0, 0x7, 0x4, 0x431, 0x1000, 0x8, 0x400, 0x9ef, 0x8, 0x8000, 0x401, 0x4, 0x2, 0x8, 0x4, 0xfffffffb, 0xea, 0xbf0, 0x8, 0x9, 0x4, 0x7ff, 0xb, 0x1, 0xb756, 0x19b0000, 0xfffffff9, 0x7349, 0x5, 0x5, 0x400, 0x8000, 0x7, 0x1, 0x80000001, 0x7, 0x3, 0xffffffff, 0x9, 0x5, 0x400, 0x3, 0x2, 0x0, 0x3, 0x2, 0x3, 0x21, 0x75cc, 0x4, 0x4, 0x1, 0x9, 0x6, 0x2, 0xba60, 0x10000, 0x1000, 0x6, 0x5, 0x237, 0x84, 0x1, 0xf3c, 0x3, 0x2, 0x1654, 0xac, 0x3, 0xffff, 0x500000, 0xffff, 0x5, 0x3, 0x5, 0xf, 0x5, 0xfffffff9, 0x9, 0x6, 0x759f, 0x399, 0x4b9, 0xa8, 0x7, 0x8, 0x0, 0x3, 0x8, 0x8, 0x10000, 0xfff, 0x8001, 0xe, 0x9, 0x9, 0xb7, 0x5, 0x8000, 0x10001, 0x1, 0x7fffffff, 0x9, 0x101, 0x7, 0x7, 0x6, 0x2, 0x9, 0x9, 0x9655, 0x8, 0x4, 0x4e0b, 0x81, 0x2, 0x7, 0x10001, 0x8, 0x38000000, 0x0, 0x0, 0x7f, 0x5, 0xa0000000, 0x0, 0x1, 0x9, 0x7, 0x0, 0x8000, 0x4, 0x9, 0x490, 0x7, 0xfffffffe, 0xd, 0x4, 0x8, 0x9, 0x9, 0x4, 0x5, 0x5, 0x0, 0x6, 0xff, 0x3, 0x2f7, 0x2, 0x5, 0x2, 0x6, 0x8, 0x7, 0xf, 0x80000001, 0x1, 0x6, 0x8000, 0x5, 0x6af, 0x400000, 0x6de3d9c3, 0x6, 0x8, 0x5, 0x6, 0x0, 0xd8, 0xc000000, 0xc94, 0x9, 0x3, 0xffffffff, 0x3ff, 0xe06, 0x9, 0xfffffb78, 0x401, 0x1, 0x4, 0x1, 0x4, 0xfff, 0x7, 0x96, 0x0, 0x8, 0x2, 0x1fd, 0x5, 0x8001, 0x3, 0x8d, 0x16e77790, 0x673, 0x200, 0x5, 0x3, 0x5, 0x1, 0x7, 0xb3f, 0x2, 0x80000001, 0x33308608, 0x9, 0x77, 0x8, 0xf24, 0x8000, 0x9, 0xffff, 0xa8, 0x7fff, 0x800, 0xa5, 0x10000, 0xfff, 0x3, 0x7fffffff, 0x1, 0x93, 0x101, 0x86, 0x1, 0x9224, 0x6596, 0x9, 0x2, 0xc, 0x1, 0xfffffffd, 0x800, 0x81, 0xfffffffc, 0xc, 0x81, 0x8, 0x8, 0x1, 0x3, 0x7, 0x3]}]}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff8, 0x1, 0x5b, 0xffff, 0x3, 0x40, 0xd, 0x2, 0x8, 0x5, 0xf, 0x5, 0x80, 0x9, 0x7, 0xd, 0x3, 0x4, 0x4, 0x200, 0x8, 0x10001, 0x5532c7b1, 0xffffffff, 0x80000000, 0x7, 0x4f, 0x2, 0x19cb, 0xffff0000, 0x6, 0x7, 0x4e60, 0xf, 0xd1, 0x7, 0x7, 0x7, 0x10001, 0x9, 0x5, 0x5, 0x7fff, 0x80000001, 0x8, 0x4, 0x47, 0x6, 0x7, 0x0, 0xfc1, 0x1, 0x1be1, 0x40, 0x8, 0x8001, 0x4, 0x7, 0x9, 0x1000, 0x40, 0x9, 0xe7e8aae, 0xeb2, 0x5, 0x7, 0x9, 0x0, 0x1, 0x57, 0x80000000, 0xf, 0xd7, 0x7, 0xff, 0x0, 0x9, 0x1, 0x9, 0x3, 0x340, 0x1, 0x9, 0x3, 0x4, 0x2, 0x6, 0x8, 0x2, 0x6, 0x7f, 0x1ff, 0x401, 0x2, 0x1, 0x6, 0x0, 0xfffffff9, 0x0, 0xbf4b, 0x0, 0x6, 0x4, 0x3, 0x2, 0x6, 0xffffffff, 0x5, 0x0, 0x8, 0xfffffffa, 0x522, 0x1, 0x81, 0x5, 0x7fffffff, 0x9, 0x5, 0x9, 0x4, 0xe0, 0x1, 0x1, 0x3, 0x8, 0x0, 0x3, 0x1000, 0x7, 0x0, 0x1, 0x1, 0x8f78, 0x2, 0x2, 0x3bfb, 0x8cb2, 0x5, 0x9, 0x3000000, 0x8, 0x80000000, 0xe8, 0x0, 0x100, 0xffff, 0x5, 0x6, 0x9, 0xc112, 0xfffffeff, 0xffffff35, 0x7, 0x67, 0x10001, 0x2, 0x0, 0x9, 0x9, 0x3, 0x2, 0x3482, 0x4, 0xfffffff7, 0x4, 0x1, 0x1, 0x35bd, 0x5, 0x8, 0x4, 0x8a3d, 0x27, 0x6, 0x6, 0x0, 0x7, 0x2, 0x18000, 0x8, 0x3, 0x64, 0xd4b4, 0x8000, 0x4, 0xa43, 0xfff, 0xaec, 0x7, 0x4, 0x3, 0x7, 0x1, 0x7, 0xffffffff, 0x2, 0x0, 0xff, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x5, 0xe, 0x80000000, 0x3, 0x8, 0x7, 0x8, 0x6, 0x6, 0x80000001, 0x7, 0x8, 0xfffffffb, 0x2, 0x5, 0xc, 0x8, 0x5, 0x3, 0x9, 0x100, 0x1, 0x2, 0x3d4d, 0x1, 0x9, 0x3, 0xffffff90, 0x6, 0x3, 0x8, 0x5, 0x8, 0x4, 0x80000000, 0x75, 0x4, 0x0, 0x9, 0x4, 0x5, 0x7, 0xfffffffe, 0x6, 0xfff, 0xb422, 0x61, 0x401, 0x7, 0x0, 0x2, 0x2, 0x7, 0xff]}]}]}}]}, 0x2b18}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.950157289s ago: executing program 0 (id=1054): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x5f0, 0x5}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) recvmsg$can_raw(r0, &(0x7f0000000500)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/30, 0x1e}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x3}, 0x12101) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9b}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000980)={'gretap0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0xa61, 0x9, {{0x2e, 0x4, 0x1, 0x4, 0xb8, 0x65, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@rr={0x7, 0xf, 0x81, [@remote, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x54, 0xce, 0x3, 0x5, [{@multicast1, 0x9}, {@empty, 0x6}, {@empty, 0x7}, {@empty, 0x5}, {@broadcast, 0x3}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x4}, {@empty, 0x1}]}, @timestamp_prespec={0x44, 0x2c, 0x2d, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x36}, 0xbb1}, {@local}, {@empty, 0x4}, {@multicast1, 0x50000}, {@empty, 0x9}]}, @rr={0x7, 0x13, 0x23, [@remote, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010102, @multicast1]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x23, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0xf, 0xa, 0x76180b65166ca26e, 0xfffffffffffffff0, 0xfffffffffffffff4}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @exit, @alu={0x7, 0x0, 0x2, 0x5, 0x0, 0x4, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x2, 0x2, 0xa, 0x20}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='syzkaller\x00', 0x8000, 0x36, &(0x7f0000000840)=""/54, 0x41100, 0x1e, '\x00', r5, @flow_dissector=0x11, r0, 0x8, &(0x7f00000009c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x3, &(0x7f0000000a00)=[r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0], &(0x7f0000000a40)=[{0x0, 0x4, 0x9, 0x4}, {0x5, 0x2, 0x6}, {0x5, 0x2, 0x1, 0xa}], 0x10, 0xffffffff}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xd0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r7, 0x604860ee899944da, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x4}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r8 = accept4(r3, &(0x7f0000000d80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000e00)=0x80, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xfc, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc4}, 0x20008090) write$ppp(r0, &(0x7f0000001000)="f0f9658cdc002c1d442b2b6d3f79e41033f45e6216643ddbad23ec2808b8cfd69787e3d0123a788950cabd551ba1a6ecc206f8cb11fe6ba617b370ee599f76325f3829146306833ef50850129f031503f9f6b6d0048159fe78dd738a18fb713adb5fbe4609edf224ec00bd56a44e1ae655a2e09ada5342bd696d03e8eb469ab8f9c28ac3e9f9b38c99ca9d2c0adaed8facfb845fc4bdde128e", 0x99) sendmsg$nl_route(r8, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd28, 0x25dfdbfd, {0x2, 0x10, 0x20, 0xd, 0xc, 0x0, 0x0, 0x7, 0x1000b}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c08c}, 0x81c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x30, r1, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8051}, 0x40) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000001300), 0x3) sendto$inet6(r0, &(0x7f0000001340)="cc70d311a3479a8794b66cf7a3c65187", 0x10, 0x4000, &(0x7f0000001380)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}, 0x1c) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xbc, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc081}, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000001540)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000001580)=0x2c) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), r6) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r11, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'pimreg\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$bt_hci(r10, 0x0, 0x3, &(0x7f0000001700)=""/240, &(0x7f0000001800)=0xf0) 2.698991551s ago: executing program 0 (id=1055): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40302, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000d000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000001100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001c80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000034c0)="b3", 0x1}], 0x1}}], 0x1, 0x20000084) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x7ff, 0x2, 0x1, 0x401, 0x7, 0x9, 0x779, r6}, 0x20) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x5) close(r1) 2.418370447s ago: executing program 2 (id=1057): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000100001042abd7000feffffff00000000", @ANYRES32=r1, @ANYBLOB="82490000ca0107001c0037800b00010067726574617000000c00028008400400ffff0000050027"], 0x44}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2001, &(0x7f0000000040)={@align=0x42, {0x9, 0x40, 0x5, 0x100000001}}, 0x800, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40084) getsockopt$inet6_int(r6, 0x29, 0xcf, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x8, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x4000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000006c40)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000200)='3+', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a80)="55f2669b", 0x4}], 0x1, &(0x7f0000000bc0)}}], 0x2, 0x4004851) 2.306764944s ago: executing program 3 (id=1058): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0xa3, 0x2) close(r3) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_int(r6, &(0x7f0000001480)=0x2, 0x12) splice(r4, 0x0, r3, 0x0, 0x3ffff9, 0x2) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850602160000ff6122314a0008005c376685fc28d4d57eeaf2999d78dcfecb95edd6c7", @ANYRES32=r8, @ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xffff0000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r8}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r10}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.235485294s ago: executing program 4 (id=1059): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x9, 0x1, {{0x3, 0x1, 0x8, 0x22, 0xff}, {0x4, 0x2, 0x3, 0xa159, 0xffe, 0x9}, 0x3, 0x6, 0x41e}}]}}]}, 0x58}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@deltfilter={0x94, 0x2d, 0x230, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xa, 0xc}, {0xb, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xe1}}, @filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x3}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c884}, 0x24000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r9, @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a428040000000000241de3d7e4caefd179300000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB="71961ca9d1939325e8ec5aa8b134cf175497ee500092e10e96ae94b3b5fca4272ad725912f6b481736b9930c20562197b80612d39a703ff84bc5fe9bc20c61a2b2962edef83e20b6a1dbd21c6b1e39bad5ae3681e798584cf0bb81db6b4cc96399ff059276a62d51193061f6d6c8f81298997c4eeca536053ab64ab7562854b4d97d1ccc859eedf1d7bb3b7576b4625e86e71f5fe56ba98bc011246bcb956365188c87d15151d8209fc3d80fdbb6b83cde44cfb9531bc8e819172797c243f9888329b38fb7af5fd91adeccb70b5f24a563abe2f4e7b4d76acdb8c92ff7b1e1750571e61e71cc9691f6ac5b371ed42c0e590eb7acc0ee661dbdb6b85505755ac4ef118b6478d4b9e02ce07bdf32a2bc4f4960f043813875fff20ef67f0c2e4fd013c7369e8dd83b4470ca887413f0001d28abda8fea069ca8825a4c22fd16c5c5a0be444f124cbf9eaca8913446e4e4bfcf981fc6ea03cbcfab70fbca2e3d8d7461dc6e4e2e2365fd3276222638866ddb177d8ad9a1b992"], 0x3c}}, 0x8000) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) 2.042757018s ago: executing program 0 (id=1061): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x200000, &(0x7f00000000c0)={@align=0x6, {0x0, 0x9946, 0x9, 0x200}}, 0x10, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xc6}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x20040811) unshare(0x28000600) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r2, 0x118, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b1b, &(0x7f0000000040)) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', r6, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r7, r6, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8001, 0xde, &(0x7f00000198c0)=""/222, 0x0, 0x30, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff177c}, 0x94) 1.873864489s ago: executing program 1 (id=1062): r0 = socket(0x10, 0x80002, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="948bd33cc5622b4306e68d8caf2c479a7e1e20466cdaf158a68e1bb8152d2adcc12ebcceca792839763583249b0471e8d42fbd34c2aa87dfa1aa249d4939d9a327405ad0c69ea0644a8b59f89cba4fc1", 0x50}], 0x1, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @loopback}}}], 0x20}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0) 1.852470693s ago: executing program 4 (id=1063): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 1.630479881s ago: executing program 4 (id=1064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000280)={'wlan1\x00', @multicast}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000090702000000000000800705", @ANYRES32=r3, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4004004}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, 0x0, 0x23) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x1, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}}, 0x20004000) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0x6}, {0xc, 0xd}, {0xfff2, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x200}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1b}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r11 = socket(0x2b, 0x6, 0x2) setsockopt$inet6_mtu(r11, 0x29, 0x1e, 0x0, 0x15) 1.629980516s ago: executing program 2 (id=1065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}}, 0x4000090) 1.629441291s ago: executing program 0 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)="dc60d5e3ba68594ada8cfc6b26dfb9505537e74bedb5203c1e857f5e1fad354bed8146970fc8ee12f85b31b276d61af99022c3c1e81fa7b7387e8c863f41e255b8fe58427fcf25dc"}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) 1.629034532s ago: executing program 1 (id=1067): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], @dest_unreach={0x1, 0x4, 0x0, 0x80, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@hopopts={0xbe}], "7bf354a4d44f873e"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e23, 0xc01, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffe7ffff}, 0x1c) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000006b00)={&(0x7f0000006940)=[0x0, 0x0, 0x0, &(0x7f0000000200)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x5}, &(0x7f0000000540)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, 0x0, 0x0, &(0x7f0000000500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, 0x0, &(0x7f0000000580)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000000000000100000008000100000000001400048005000300070000002bfc0300070000000800020001000000180008801400078008bb"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.202846265s ago: executing program 0 (id=1068): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0xb}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x100}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}], 0x64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x18, r2, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x300}, 0x8000) 1.145697517s ago: executing program 3 (id=1069): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x15, 0x0, 0x2, 0x24}]}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x0, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0x100000001, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x8) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r2, &(0x7f0000000700)="b068", 0x2) 1.00457924s ago: executing program 1 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100)) close(0x3) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x18, 0x41, 0x1, 0x70bd29, 0x4, {0x3}, [@nested={0x4, 0x47}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 763.46095ms ago: executing program 0 (id=1071): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001080), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x1c}}, 0x2000080) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0x0, 0x4107}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000080), &(0x7f0000000380)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r9, &(0x7f0000000300)="b7336c6fa97eeefb494e72900ec75bb045e57f507d80a05a88344694547778a8987c05abc65ab054189a527f5dea22dbd7b3", &(0x7f0000000600)=""/240}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0x0], 0x50) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r10, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 670.482128ms ago: executing program 4 (id=1072): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e20, 0x3ff, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1, 0x4d6, 0x6c}, @in=@remote, {0xfffffffffffffffd, 0x9, 0x100006, 0xffff, 0x8251c, 0x9, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xe, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x4845}, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=0x1, 0x32, 0x0, 0xe030, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x6, &(0x7f0000000700)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query], &(0x7f0000000740)='syzkaller\x00', 0xc6dc, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x7, 0xfffeffff, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map=r4, r2, 0x2e, 0xc, 0x0, @void, @value=r5, @void, @void, r3}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e20, 0x3ff, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1, 0x4d6, 0x6c}, @in=@remote, {0xfffffffffffffffd, 0x9, 0x100006, 0xffff, 0x8251c, 0x9, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xe, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x4845}, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async) bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=0x1, 0x32, 0x0, 0xe030, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0]}, 0x40) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x6, &(0x7f0000000700)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query], &(0x7f0000000740)='syzkaller\x00', 0xc6dc, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x7, 0xfffeffff, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map=r4, r2, 0x2e, 0xc, 0x0, @void, @value=r5, @void, @void, r3}, 0x20) (async) 649.898505ms ago: executing program 2 (id=1073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f0000000180)=0x4, 0x4) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x8000000000000001, 0x643, 0x8, 0x2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)='C', 0x1}], 0x1}, 0x800c0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x840) socket$inet_udp(0x2, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @any, 0xfff0, 0x2}, 0xe) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="4ac58330a04e12aa081878ff995109e0e9a5c5efd3b3d1ddd5bf147d79007ba1658953de6a7a39445767be63b01bed85fa451b0ac1cd263e59a86b5fc5660d929bd974c62fc881d3e77f8f5abff04c087c1b5f9cb0ef4c7bb1d8700e58a030b03e0cfc1a2f3f2e905aa89f99c546cdbeee9cb3d8585aaccba128e9e2af140eb9e7ab65ba27", 0x85}, {&(0x7f0000000240)="f2d45d966c87f1bb537eee10095627b32d828a0bdfb4c042742c84707d57894695420f0477f957620af039f9878f6b3591f27abba2b31f4c50181d1bd2c98421e963ed8fe67762862b0491523b0bf7dd116d7a0fb4adc96eed07f1314169b61053fcc710303c0ea754e16190d05df10587e819967e1a4bffd5f3a9e9b6c94d1cd9b8b72fc642a2faf4e69294f3123abfad", 0x91}, {&(0x7f00000003c0)="cfff6758d9216a6ff9c467087e13919d646717c404eff758f8d5bfb838608382d4d0f4b4cc5ec865fc9d8aacf56ed68c136afe839b6bd9ff60bda802dfc6b4630be84232939d2100688ee264a6e44e1862e8e7a7b135c06ce1ec59559ddc2ec5fcba67a27470fa6af562696c8b5018ccd1d3951f45ec4458b4c8e470fea5aac50a33259564ba968830214f3113c58882d46081820c9eb54d8de46bf76175678b4b7116254f5d22ef4430", 0xaa}, {&(0x7f0000000480)="9329bfc8d557a9db108dea83b63e58e3c5cad6fe050000000000000050d519b6c035569d1728ee38abef555b073b9dc7ac0ac178ed94766e72032c84658b7ddb65bf989a6b985fbbb9821f12b9e72653cda17f9454ce4dbe653688452b583968c6b50ad5d08cfaf555672bcbb63690baef3a1b9c3337238e906db35a9ebd15595aa4ae99c34f3cd9fe652638403359bcb4b9102ea38351fff90fb1e3c96b7a53df9c1300000000", 0xa7}, {&(0x7f0000000540)="367ee18f5d060c6ea2f6cd6321ec08de6706b41a4dbd5c3fdee0e94061e88f7bbc381ca1c215f7afde32df6630f9b9b27321369bccef8d006ab55757a2b0c45647787c9c010984d4e1230411bf8e08b8e48dbc75c69f000f2cd2182f05", 0x5d}, {&(0x7f00000005c0)="7a49f0fc53e59075d9d4d78e3e3a365050e1f447312d415c375def8514863057d7113a04039b41cc140a5e599c1abc1c6dadcf1fcf", 0xf4}], 0x6) 603.551471ms ago: executing program 1 (id=1074): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000001440)=@ethtool_perm_addr={0x4b, 0x1d, "448d389f70d679d21a50a3831682cc6597a4a4ca4d08f8dd8b3f9fdd99"}}) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800) (async, rerun: 64) bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (rerun: 64) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="03accb1eac586e4a80b8409f861b0da7", 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="b9ff05000000000c5c26fc000000", 0x0, 0x7fff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 405.584752ms ago: executing program 4 (id=1075): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x2c020400) (async) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r1, &(0x7f0000001b80)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/104, 0x68}, {&(0x7f0000001a00)=""/198, 0xc6}], 0x5}, 0x3b}], 0x1, 0x0, &(0x7f0000001bc0)) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@ipv4_newnexthop={0x30, 0x68, 0x100, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x3, 0x0, 0x18}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x410) (async) unshare(0x10040080) 272.596331ms ago: executing program 1 (id=1076): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x48) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000280)={&(0x7f00000000c0), 0x0, 0x4, 0x0, 0x6, 0x0, 0x3, 0x8, 0xfffffffc}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 191.100743ms ago: executing program 2 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async) r1 = epoll_create1(0x80000) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000040)=0x100000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000080)=""/64, 0x40}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 75.663342ms ago: executing program 4 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r2, 0x60b, 0x70bd2d, 0x40, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x39, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000001a40)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340020000a06030000000000000000000708000000000000000000000900020073797a30ffad0400088000"/52], 0x34}, 0x1, 0x0, 0x0, 0x24040001}, 0xc004) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r6) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000480)={0x6c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x6c}, 0x1, 0x4000000000000000}, 0x4000080) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="80000020", @ANYRES16=r8, @ANYBLOB="00022abd7000fedbdf250100000010000400000000000900000001000100050005000200000014000100ff010000000000000000000000000001080003"], 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r11 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000400)) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x147}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000) (async) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500), 0x4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x28}}, 0xc080) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010025bd7000fedbdf25690000000c00990003000000540000000500d2000a0000000500d200030000000500d3000600d07b14c40600ffffffffffff00000600d400070000000a000600ffffffffffff00000500d2000f0000000600d40008000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000811}, 0x810) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=ANY=[@ANYBLOB="300000002d0007012bbd7000fedbdf25087c0000100001800c001000f3ffffffffffffff0c0003800800030000000400"], 0x30}}, 0x4008030) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="500100001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000800000300012800b00010062726964676500002000028005002d00010000000c001e000200000000000000080003000b000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x8001) 0s ago: executing program 1 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000011300000000000000000500000a28000900000a03c75c000000000000000a00000708000240000000020900010073797a31010000002c000000030a210100003300000000006fe2d453e4f2087d7262b7fdbb7ca4da000a0000070900010073797a310000000009008e69bbd3c09cc6a0b637f36cea886cfe737f1c8e8eeda83df5b5ba7cbafa06de7aacb9ab24dd9389bcc16e36b5da118abec271862eded60efa37665de1c9731065e166923fcfa093f3f05f5d96395aa1eceb4a7c69496c68075f0536c3", @ANYBLOB="24c5ef42073e9e44203af1a6a8b2f2788c8ac3daca2d8b753ea55d2a5e76505a26e784775f3fd9d8696782854fc4b7308fb6fa3bf3cd3216d70bc91e0dd7d0efbc34db26876fe764fad8685356539d88dec235e4632e21e415543a20d98345dec9414ae0e5dc684f7aad325d1f7f5d8c091b68c14abb2a0bd1e8f9a5f3c9d5331324c8d0f84da30fba4bb6b60fd68533dbfa1e1a0882604ef960eec023f06b45dbb40aa6786d2652e6b0cdaddde7a738f4b5bdc5c564d5a9e970b1a50075f711439ee94f02"], 0x7c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4000804) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32", @ANYRES64=r0], 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x20040040) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETLINK(r1, 0x400454cd, 0x104) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 75.293547][ T5607] cgroup: Unknown subsys name 'net' [ 75.388981][ T5607] cgroup: Unknown subsys name 'cpuset' [ 75.398363][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.995641][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.942615][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.967143][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.974718][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.983678][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.991147][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.008296][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.019466][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.027201][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.029265][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.042158][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.045879][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.052452][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.059592][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.070309][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.077787][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.079809][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.087679][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.102020][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.120126][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.136182][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.172633][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.183985][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.193343][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.202322][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.210305][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.864861][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.875728][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.882949][ T5628] bridge_slave_0: entered allmulticast mode [ 82.890791][ T5628] bridge_slave_0: entered promiscuous mode [ 82.930253][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.937585][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.944709][ T5628] bridge_slave_1: entered allmulticast mode [ 82.952313][ T5628] bridge_slave_1: entered promiscuous mode [ 82.994889][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.002158][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.009619][ T5632] bridge_slave_0: entered allmulticast mode [ 83.017588][ T5632] bridge_slave_0: entered promiscuous mode [ 83.027164][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.034300][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.041672][ T5632] bridge_slave_1: entered allmulticast mode [ 83.049310][ T5632] bridge_slave_1: entered promiscuous mode [ 83.126734][ T5626] Bluetooth: hci0: command tx timeout [ 83.161224][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.172972][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.196731][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.206021][ T5626] Bluetooth: hci3: command tx timeout [ 83.215951][ T5626] Bluetooth: hci2: command tx timeout [ 83.215960][ T5630] Bluetooth: hci1: command tx timeout [ 83.231889][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.295711][ T5626] Bluetooth: hci4: command tx timeout [ 83.338294][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.345574][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.352722][ T5620] bridge_slave_0: entered allmulticast mode [ 83.360215][ T5620] bridge_slave_0: entered promiscuous mode [ 83.380383][ T5632] team0: Port device team_slave_0 added [ 83.393007][ T5628] team0: Port device team_slave_0 added [ 83.401134][ T5628] team0: Port device team_slave_1 added [ 83.407836][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.414984][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.422196][ T5620] bridge_slave_1: entered allmulticast mode [ 83.429676][ T5620] bridge_slave_1: entered promiscuous mode [ 83.436598][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.443723][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.451287][ T5619] bridge_slave_0: entered allmulticast mode [ 83.458487][ T5619] bridge_slave_0: entered promiscuous mode [ 83.467966][ T5632] team0: Port device team_slave_1 added [ 83.504204][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.511421][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.518723][ T5619] bridge_slave_1: entered allmulticast mode [ 83.526386][ T5619] bridge_slave_1: entered promiscuous mode [ 83.599508][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.606753][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.632734][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.647170][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.666578][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.673568][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.699718][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.724292][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.731370][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.757495][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.770706][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.782289][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.791996][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.799191][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.825150][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.836263][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.843524][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.850778][ T5624] bridge_slave_0: entered allmulticast mode [ 83.858501][ T5624] bridge_slave_0: entered promiscuous mode [ 83.885015][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.901208][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.908938][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.916139][ T5624] bridge_slave_1: entered allmulticast mode [ 83.923285][ T5624] bridge_slave_1: entered promiscuous mode [ 83.992098][ T5620] team0: Port device team_slave_0 added [ 84.001024][ T5620] team0: Port device team_slave_1 added [ 84.009299][ T5619] team0: Port device team_slave_0 added [ 84.055320][ T5619] team0: Port device team_slave_1 added [ 84.064076][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.079261][ T5628] hsr_slave_0: entered promiscuous mode [ 84.086098][ T5628] hsr_slave_1: entered promiscuous mode [ 84.126275][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.141499][ T5632] hsr_slave_0: entered promiscuous mode [ 84.148084][ T5632] hsr_slave_1: entered promiscuous mode [ 84.154137][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 84.160414][ T5632] Cannot create hsr debugfs directory [ 84.166890][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.173848][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.200305][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.243410][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.250696][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.276751][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.288331][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.295362][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.321348][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.352200][ T5624] team0: Port device team_slave_0 added [ 84.366164][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.373156][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.399232][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.432984][ T5624] team0: Port device team_slave_1 added [ 84.488976][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.496062][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.522012][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.534542][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.541558][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.567611][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.677338][ T5620] hsr_slave_0: entered promiscuous mode [ 84.683842][ T5620] hsr_slave_1: entered promiscuous mode [ 84.690318][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 84.696129][ T5620] Cannot create hsr debugfs directory [ 84.753651][ T5619] hsr_slave_0: entered promiscuous mode [ 84.760138][ T5619] hsr_slave_1: entered promiscuous mode [ 84.766382][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 84.772115][ T5619] Cannot create hsr debugfs directory [ 84.822967][ T5624] hsr_slave_0: entered promiscuous mode [ 84.829726][ T5624] hsr_slave_1: entered promiscuous mode [ 84.835977][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 84.841735][ T5624] Cannot create hsr debugfs directory [ 85.206371][ T5626] Bluetooth: hci0: command tx timeout [ 85.236444][ T5628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.250356][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.258555][ T5628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.269505][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.286263][ T5626] Bluetooth: hci2: command tx timeout [ 85.286588][ T5630] Bluetooth: hci3: command tx timeout [ 85.297913][ T5626] Bluetooth: hci1: command tx timeout [ 85.307508][ T5628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.318460][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.326407][ T5628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.336164][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.365835][ T5626] Bluetooth: hci4: command tx timeout [ 85.431556][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.442926][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.451353][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.462566][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.475199][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.486747][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.495353][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.507090][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.601423][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.614859][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.623250][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.634622][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.644141][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.654173][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.668698][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.679808][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.776735][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.817497][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.828964][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.836931][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.847442][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.866332][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.877033][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.885100][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.894603][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.909599][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.937372][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.944809][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.994124][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.001305][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.032453][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.059809][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.069056][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.088812][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.099031][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.107265][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.117871][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.133441][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.144443][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.158120][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.199769][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.206904][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.217399][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.224517][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.240987][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.316474][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.352325][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.359545][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.370155][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.377371][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.443901][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.621229][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.642127][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.649354][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.714987][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.722336][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.749922][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.856849][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.910166][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.917422][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.998055][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.005267][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.292124][ T5626] Bluetooth: hci0: command tx timeout [ 87.366552][ T5626] Bluetooth: hci3: command tx timeout [ 87.366582][ T5630] Bluetooth: hci1: command tx timeout [ 87.372028][ T5631] Bluetooth: hci2: command tx timeout [ 87.446531][ T5630] Bluetooth: hci4: command tx timeout [ 87.584081][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.843244][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.056980][ T5632] veth0_vlan: entered promiscuous mode [ 88.110138][ T5632] veth1_vlan: entered promiscuous mode [ 88.129267][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.290593][ T5632] veth0_macvtap: entered promiscuous mode [ 88.329486][ T5632] veth1_macvtap: entered promiscuous mode [ 88.379241][ T5620] veth0_vlan: entered promiscuous mode [ 88.400309][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.434699][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.459286][ T5620] veth1_vlan: entered promiscuous mode [ 88.466569][ T5628] veth0_vlan: entered promiscuous mode [ 88.478183][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.504053][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.536572][ T5628] veth1_vlan: entered promiscuous mode [ 88.600246][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.611210][ T5624] veth0_vlan: entered promiscuous mode [ 88.675315][ T5620] veth0_macvtap: entered promiscuous mode [ 88.685038][ T5628] veth0_macvtap: entered promiscuous mode [ 88.692575][ T5619] veth0_vlan: entered promiscuous mode [ 88.699368][ T5624] veth1_vlan: entered promiscuous mode [ 88.720508][ T5620] veth1_macvtap: entered promiscuous mode [ 88.744921][ T5628] veth1_macvtap: entered promiscuous mode [ 88.761452][ T5788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.777016][ T5788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.786454][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.802464][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.820369][ T5619] veth1_vlan: entered promiscuous mode [ 88.852099][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.872297][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.881537][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.889922][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.912544][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.932209][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.961301][ T5624] veth0_macvtap: entered promiscuous mode [ 88.981702][ T5632] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.044547][ T5624] veth1_macvtap: entered promiscuous mode [ 89.157956][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.168871][ T5619] veth0_macvtap: entered promiscuous mode [ 89.215149][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.232227][ T5619] veth1_macvtap: entered promiscuous mode [ 89.276563][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.308135][ T5824] pim6reg: entered allmulticast mode [ 89.345960][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.362751][ T5788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.372462][ T5630] Bluetooth: hci0: command tx timeout [ 89.375100][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.380508][ T5788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.414803][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.446285][ T5630] Bluetooth: hci3: command tx timeout [ 89.448172][ T5631] Bluetooth: hci1: command tx timeout [ 89.457501][ T5626] Bluetooth: hci2: command tx timeout [ 89.460278][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.476445][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.485269][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.522550][ T5826] žÿ: renamed from team_slave_1 (while UP) [ 89.528728][ T5626] Bluetooth: hci4: command tx timeout [ 89.543021][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.561678][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.572593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.601406][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.609687][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.630710][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.727187][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.746729][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.771533][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.884620][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.888490][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.909084][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.944993][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.073353][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.082233][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.117198][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.260344][ T5840] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9'. [ 90.281829][ T5831] bond1: Unable to set up delay as MII monitoring is disabled [ 90.296109][ T5831] bond1 (unregistering): Released all slaves [ 90.382796][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.396396][ T5842] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.424913][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.435904][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.467064][ T5842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.497917][ T91] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.555778][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.599153][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.657296][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.705637][ T91] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.806466][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.877958][ T5852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 90.938779][ T5858] netlink: 'syz.3.13': attribute type 11 has an invalid length. [ 90.971987][ T5858] netlink: 'syz.3.13': attribute type 4 has an invalid length. [ 91.006904][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.283610][ T5867] syz.4.16 uses obsolete (PF_INET,SOCK_PACKET) [ 91.409937][ T5871] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 91.434351][ T5872] Zero length message leads to an empty skb [ 91.652777][ T5877] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 91.673507][ T5872] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 91.679909][ T809] cfg80211: failed to load regulatory.db [ 91.737457][ T5872] bond1 (unregistering): Released all slaves [ 91.754655][ T5881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.221603][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 92.335336][ T5894] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 92.454053][ T5894] team0: Port device dummy0 added [ 92.722779][ T5915] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 93.256921][ T5930] netlink: 'syz.2.31': attribute type 3 has an invalid length. [ 93.589969][ T5936] block nbd0: server does not support multiple connections per device. [ 93.618212][ T5936] block nbd0: shutting down sockets [ 93.647131][ T5943] Bluetooth: MGMT ver 1.23 [ 94.181110][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 96.803002][ T5966] veth0_macvtap: left promiscuous mode [ 96.882677][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 96.909248][ T5939] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.913239][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 96.924103][ T5939] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 97.041012][ T5939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.057023][ T5939] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 97.106649][ T5939] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.117582][ T5939] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 97.171295][ T5939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.185799][ T5939] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 97.224041][ T5939] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 97.242343][ T5939] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 98.082683][ T6039] netlink: 'syz.2.45': attribute type 46 has an invalid length. [ 98.110566][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 98.412825][ T6050] syzkaller1: entered promiscuous mode [ 98.481445][ T6050] syzkaller1: entered allmulticast mode [ 98.781916][ T6066] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 98.832483][ T6066] veth0_to_batadv: entered promiscuous mode [ 98.851575][ T6066] veth0_to_batadv: entered allmulticast mode [ 98.968157][ T6066] macvlan2: entered promiscuous mode [ 98.991433][ T6066] macvlan2: entered allmulticast mode [ 99.363632][ T6084] netlink: 52 bytes leftover after parsing attributes in process `syz.2.56'. [ 99.393457][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.401639][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.450445][ T6087] netlink: 76 bytes leftover after parsing attributes in process `syz.2.56'. [ 99.509561][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.517256][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.524847][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.532041][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.603020][ T6087] netlink: 52 bytes leftover after parsing attributes in process `syz.2.56'. [ 99.627215][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.634513][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.696187][ T6094] netlink: 144 bytes leftover after parsing attributes in process `syz.1.58'. [ 100.055983][ T6112] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 100.649022][ T6133] syzkaller0: entered promiscuous mode [ 100.677624][ T6133] syzkaller0: entered allmulticast mode [ 100.715548][ T6133] netlink: 'syz.0.66': attribute type 12 has an invalid length. [ 100.742672][ T6133] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 100.774673][ T6133] netlink: 148 bytes leftover after parsing attributes in process `syz.0.66'. [ 100.807756][ T6133] netlink: 'syz.0.66': attribute type 1 has an invalid length. [ 100.825836][ T6133] netlink: 'syz.0.66': attribute type 2 has an invalid length. [ 101.361373][ T6158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.936544][ T6179] syz_tun: entered allmulticast mode [ 101.983876][ T6177] syz_tun: left allmulticast mode [ 102.168183][ T6183] block nbd0: server does not support multiple connections per device. [ 102.188520][ T6183] block nbd0: shutting down sockets [ 102.483075][ T6195] FAULT_INJECTION: forcing a failure. [ 102.483075][ T6195] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.566329][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(full) [ 102.566359][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.566379][ T6195] Call Trace: [ 102.566387][ T6195] [ 102.566409][ T6195] dump_stack_lvl+0xe8/0x150 [ 102.566458][ T6195] should_fail_ex+0x40c/0x560 [ 102.566491][ T6195] _copy_from_user+0x2d/0xb0 [ 102.566513][ T6195] ____sys_sendmsg+0x303/0x850 [ 102.566546][ T6195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.566583][ T6195] ? import_iovec+0x73/0xa0 [ 102.566606][ T6195] ___sys_sendmsg+0x2a5/0x360 [ 102.566631][ T6195] ? __lock_acquire+0x683/0x2cf0 [ 102.566665][ T6195] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.566697][ T6195] ? kstrtouint+0x6e/0xe0 [ 102.566752][ T6195] ? __fget_files+0x2a/0x420 [ 102.566780][ T6195] ? __fget_files+0x3a2/0x420 [ 102.566820][ T6195] __sys_sendmmsg+0x273/0x4d0 [ 102.566853][ T6195] ? __pfx___sys_sendmmsg+0x10/0x10 [ 102.566889][ T6195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.566934][ T6195] ? ksys_write+0x242/0x270 [ 102.566957][ T6195] ? __pfx_ksys_write+0x10/0x10 [ 102.566986][ T6195] __x64_sys_sendmmsg+0xa0/0xc0 [ 102.567012][ T6195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.567034][ T6195] do_syscall_64+0x174/0x580 [ 102.567062][ T6195] ? trace_irq_disable+0x3b/0x140 [ 102.567089][ T6195] ? clear_bhb_loop+0x40/0x90 [ 102.567119][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.567141][ T6195] RIP: 0033:0x7f7a4df9e019 [ 102.567166][ T6195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.567183][ T6195] RSP: 002b:00007f7a4ee18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.567205][ T6195] RAX: ffffffffffffffda RBX: 00007f7a4e225fa0 RCX: 00007f7a4df9e019 [ 102.567219][ T6195] RDX: 0000000000000001 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 102.567232][ T6195] RBP: 00007f7a4ee18090 R08: 0000000000000000 R09: 0000000000000000 [ 102.567244][ T6195] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 102.567256][ T6195] R13: 00007f7a4e226038 R14: 00007f7a4e225fa0 R15: 00007fff8ecd4cb8 [ 102.567298][ T6195] [ 103.018988][ T6206] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 103.301336][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 103.513198][ T6232] netlink: 144 bytes leftover after parsing attributes in process `syz.1.85'. [ 103.750029][ T1014] IPVS: starting estimator thread 0... [ 103.854038][ T6244] FAULT_INJECTION: forcing a failure. [ 103.854038][ T6244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.876831][ T6241] IPVS: using max 28 ests per chain, 67200 per kthread [ 103.911018][ T6244] CPU: 1 UID: 0 PID: 6244 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(full) [ 103.911041][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.911052][ T6244] Call Trace: [ 103.911059][ T6244] [ 103.911067][ T6244] dump_stack_lvl+0xe8/0x150 [ 103.911099][ T6244] should_fail_ex+0x40c/0x560 [ 103.911128][ T6244] _copy_to_user+0x31/0xb0 [ 103.911149][ T6244] simple_read_from_buffer+0xe1/0x170 [ 103.911180][ T6244] proc_fail_nth_read+0x1bb/0x230 [ 103.911211][ T6244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.911241][ T6244] ? rw_verify_area+0x24a/0x4c0 [ 103.911261][ T6244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.911287][ T6244] vfs_read+0x213/0xa80 [ 103.911309][ T6244] ? __pfx___mutex_lock+0x10/0x10 [ 103.911337][ T6244] ? __pfx_vfs_read+0x10/0x10 [ 103.911356][ T6244] ? __fget_files+0x2a/0x420 [ 103.911385][ T6244] ? __fget_files+0x3a2/0x420 [ 103.911410][ T6244] ? __fget_files+0x2a/0x420 [ 103.911444][ T6244] ksys_read+0x150/0x270 [ 103.911465][ T6244] ? __pfx_ksys_read+0x10/0x10 [ 103.911491][ T6244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.911512][ T6244] do_syscall_64+0x174/0x580 [ 103.911542][ T6244] ? trace_irq_disable+0x3b/0x140 [ 103.911584][ T6244] ? clear_bhb_loop+0x40/0x90 [ 103.911614][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.911636][ T6244] RIP: 0033:0x7f6da975e84e [ 103.911662][ T6244] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.911680][ T6244] RSP: 002b:00007f6daa699fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.911702][ T6244] RAX: ffffffffffffffda RBX: 00007f6daa69a6c0 RCX: 00007f6da975e84e [ 103.911717][ T6244] RDX: 000000000000000f RSI: 00007f6daa69a0a0 RDI: 0000000000000004 [ 103.911730][ T6244] RBP: 00007f6daa69a090 R08: 0000000000000000 R09: 0000000000000000 [ 103.911742][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.911754][ T6244] R13: 00007f6da9a26038 R14: 00007f6da9a25fa0 R15: 00007ffc26f2a9a8 [ 103.911789][ T6244] [ 105.592990][ T6306] netlink: 666 bytes leftover after parsing attributes in process `syz.1.104'. [ 105.744298][ T6310] netlink: 'syz.1.104': attribute type 5 has an invalid length. [ 106.504506][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.109'. [ 106.530683][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 106.600299][ T6326] netlink: 'syz.0.109': attribute type 4 has an invalid length. [ 106.656260][ T6326] netlink: 152 bytes leftover after parsing attributes in process `syz.0.109'. [ 106.730047][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'. [ 107.116507][ T6360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.117'. [ 107.352564][ T6371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.118'. [ 107.413192][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 107.431592][ T6384] netlink: 'syz.4.120': attribute type 11 has an invalid length. [ 107.473932][ T6384] netlink: 'syz.4.120': attribute type 4 has an invalid length. [ 108.309572][ T6429] __nla_validate_parse: 1 callbacks suppressed [ 108.309591][ T6429] netlink: 36 bytes leftover after parsing attributes in process `syz.4.132'. [ 108.474905][ T6439] netlink: 'syz.4.134': attribute type 11 has an invalid length. [ 108.562396][ T6439] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 109.133592][ T6456] ªªªªª2: renamed from lo (while UP) [ 109.598600][ T6476] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 109.722789][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'. [ 110.037159][ T6476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.337002][ T6520] netlink: 'syz.2.149': attribute type 11 has an invalid length. [ 110.343383][ T6521] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 110.370885][ T6520] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 110.389896][ T6521] netlink: 76 bytes leftover after parsing attributes in process `syz.3.150'. [ 110.418274][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 110.705102][ T6542] xt_hashlimit: size too large, truncated to 1048576 [ 111.131521][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 111.184543][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 111.266912][ T6567] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 111.428055][ T6573] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 111.470152][ T6573] netlink: 'syz.1.162': attribute type 2 has an invalid length. [ 111.820909][ T6589] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 111.845219][ T6586] bond1: option resend_igmp: invalid value (2878) [ 111.853821][ T6586] bond1: option resend_igmp: allowed values 0 - 255 [ 111.866996][ T6586] bond1 (unregistering): Released all slaves [ 111.892075][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 111.958314][ T6602] netlink: 'syz.3.170': attribute type 11 has an invalid length. [ 111.969789][ T6585] bond1: option resend_igmp: invalid value (2878) [ 111.976761][ T6585] bond1: option resend_igmp: allowed values 0 - 255 [ 111.985102][ T6585] bond1 (unregistering): Released all slaves [ 112.084667][ T6589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.094468][ T6608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.171'. [ 112.239681][ T6608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.171'. [ 112.409391][ T6615] Bluetooth: MGMT ver 1.23 [ 112.435384][ T6615] netlink: 'syz.1.173': attribute type 4 has an invalid length. [ 112.447667][ T6615] netlink: 'syz.1.173': attribute type 4 has an invalid length. [ 112.549458][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.557711][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.904192][ T6615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.932943][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 112.952207][ T6615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.212320][ T6648] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.296548][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.320554][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.388216][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.420157][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.694624][ T6680] __nla_validate_parse: 1 callbacks suppressed [ 113.694655][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 113.788418][ T6684] batadv_slave_1: entered promiscuous mode [ 113.804376][ T6691] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 113.805799][ T6680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.850402][ T6680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.948730][ T6698] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 114.013596][ T6691] bond1: (slave bond_slave_1): Device is not our slave [ 114.047805][ T6691] bond1: option active_slave: invalid value (bond_slave_1) [ 114.089833][ T6691] bond1 (unregistering): Released all slaves [ 114.197412][ T6683] batadv_slave_1: left promiscuous mode [ 114.373073][ T6716] netlink: 'syz.3.199': attribute type 11 has an invalid length. [ 114.403724][ T6716] netlink: 'syz.3.199': attribute type 4 has an invalid length. [ 114.449288][ T6724] netlink: 64 bytes leftover after parsing attributes in process `syz.2.200'. [ 115.250324][ T6769] netlink: 17 bytes leftover after parsing attributes in process `syz.3.214'. [ 115.503771][ T6780] x_tables: duplicate underflow at hook 2 [ 115.511042][ T6781] x_tables: duplicate underflow at hook 2 [ 115.666502][ T6783] bond1: option updelay: invalid value (18446744073709518847) [ 115.693447][ T6783] bond1: option updelay: allowed values 0 - 2147483647 [ 115.704996][ T6783] bond1 (unregistering): Released all slaves [ 115.719755][ T6792] sctp: [Deprecated]: syz.0.221 (pid 6792) Use of int in max_burst socket option. [ 115.719755][ T6792] Use struct sctp_assoc_value instead [ 115.827158][ T6792] sctp: [Deprecated]: syz.0.221 (pid 6792) Use of int in max_burst socket option deprecated. [ 115.827158][ T6792] Use struct sctp_assoc_value instead [ 115.957912][ T12] IPVS: starting estimator thread 0... [ 116.076191][ T6796] IPVS: using max 28 ests per chain, 67200 per kthread [ 116.133336][ T6800] netlink: 'syz.0.223': attribute type 12 has an invalid length. [ 116.239237][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 116.320101][ T6812] xt_TCPMSS: Only works on TCP SYN packets [ 116.449109][ T6812] bridge_slave_1: left allmulticast mode [ 116.476229][ T6812] bridge_slave_1: left promiscuous mode [ 116.491153][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.547862][ T6812] bridge_slave_0: left allmulticast mode [ 116.577011][ T6812] bridge_slave_0: left promiscuous mode [ 116.610735][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.758932][ T6832] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 117.227852][ T6847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.234'. [ 117.275333][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 117.696030][ T6872] ip6gre1: entered promiscuous mode [ 117.714897][ T6872] ip6gre1: entered allmulticast mode [ 117.931704][ T6892] syzkaller0: entered promiscuous mode [ 117.937408][ T6892] syzkaller0: entered allmulticast mode [ 118.540336][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 118.552960][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 118.613504][ T6921] openvswitch: netlink: IP tunnel dst address not specified [ 118.816809][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'. [ 119.052837][ T6946] IPVS: Error connecting to the multicast addr [ 119.266387][ T6966] bridge0: port 3(ip6gretap0) entered blocking state [ 119.288135][ T6966] bridge0: port 3(ip6gretap0) entered disabled state [ 119.303695][ T6966] ip6gretap0: entered allmulticast mode [ 119.323167][ T6966] ip6gretap0: entered promiscuous mode [ 119.372713][ T6976] netlink: 'syz.1.268': attribute type 29 has an invalid length. [ 119.380864][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 119.542603][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 119.556761][ T6985] netlink: 'syz.2.270': attribute type 10 has an invalid length. [ 119.699144][ T6990] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 119.747246][ T6990] bond1 (unregistering): Released all slaves [ 119.897124][ T6993] bridge1: port 1(erspan0) entered blocking state [ 119.905248][ T6993] bridge1: port 1(erspan0) entered disabled state [ 119.938678][ T6993] erspan0: entered allmulticast mode [ 119.962662][ T6993] erspan0: entered promiscuous mode [ 119.975627][ T6993] bridge1: port 1(erspan0) entered blocking state [ 119.982225][ T6993] bridge1: port 1(erspan0) entered forwarding state [ 120.072842][ T7013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.085737][ T7006] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 120.103653][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 120.129805][ T7013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.843400][ T7040] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 121.264053][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 121.364144][ T7058] bond2: Invalid ad_actor_system MAC address. [ 121.371354][ T7058] bond2: option ad_actor_system: invalid value (7) [ 123.948081][ T7058] bond2 (unregistering): Released all slaves [ 124.201433][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 124.259857][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 124.309369][ T7070] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 124.421802][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.298'. [ 125.563704][ T7132] netlink: 'syz.3.310': attribute type 61 has an invalid length. [ 125.853166][ T7090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.126233][ T7140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.311'. [ 126.188982][ T7142] atomic_op ffff888055e68198 conn xmit_atomic 0000000000000000 [ 126.311165][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 126.352381][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 126.926498][ T7161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.944048][ T7161] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.986511][ T7161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.159078][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.192304][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.234418][ T7161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.253935][ T7161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.267791][ T7161] veth0_vlan: left promiscuous mode [ 127.277538][ T7161] veth0_vlan: entered promiscuous mode [ 127.316300][ T7161] veth1_macvtap: left promiscuous mode [ 127.326647][ T7161] veth0_macvtap: left promiscuous mode [ 127.333701][ T7161] veth0_macvtap: entered promiscuous mode [ 127.344219][ T7161] veth1_macvtap: entered promiscuous mode [ 127.369034][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.390575][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.414718][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.436496][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.450017][ T7161] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 127.619836][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.756698][ T7206] netlink: 'syz.1.325': attribute type 11 has an invalid length. [ 127.789634][ T7206] netlink: 'syz.1.325': attribute type 4 has an invalid length. [ 127.857048][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.891047][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.942959][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.985124][ T7211] veth1_to_bridge: entered allmulticast mode [ 128.031972][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 128.081552][ T7211] netlink: 'syz.2.328': attribute type 9 has an invalid length. [ 128.109027][ T7211] netlink: 'syz.2.328': attribute type 6 has an invalid length. [ 128.139216][ T7210] veth1_to_bridge: left allmulticast mode [ 128.333363][ T7219] pimreg: tun_chr_ioctl cmd 21731 [ 128.863884][ T7201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.037535][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 129.278829][ T7248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.650836][ T7270] warning: `syz.3.347' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.781292][ T7274] netlink: 'syz.1.348': attribute type 11 has an invalid length. [ 129.789874][ T7274] netlink: 'syz.1.348': attribute type 4 has an invalid length. [ 130.561440][ T7292] netlink: 68 bytes leftover after parsing attributes in process `syz.0.351'. [ 130.886505][ T7298] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 131.982021][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 132.018985][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 132.130397][ T7324] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 132.160108][ T7324] netlink: 'syz.3.362': attribute type 2 has an invalid length. [ 132.182980][ T7326] netlink: 160 bytes leftover after parsing attributes in process `syz.2.363'. [ 132.183797][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 132.213120][ T7326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.363'. [ 132.335990][ T7324] ¿: entered promiscuous mode [ 132.474755][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 132.570744][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.579434][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.704098][ T7338] netlink: 14 bytes leftover after parsing attributes in process `syz.3.365'. [ 132.750716][ T7347] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 132.768495][ T7347] netlink: 232 bytes leftover after parsing attributes in process `syz.2.366'. [ 132.780794][ T7347] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 132.784590][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.367'. [ 132.798288][ T7349] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 132.812918][ T7349] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 133.086315][ T7358] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 133.114226][ T7358] dvmrp1: linktype set to 271 [ 133.197964][ T1014] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 133.240514][ T7364] netlink: 'syz.1.374': attribute type 2 has an invalid length. [ 133.540593][ T7376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.725800][ T7382] netlink: 'syz.1.380': attribute type 11 has an invalid length. [ 133.756904][ T7382] netlink: 'syz.1.380': attribute type 4 has an invalid length. [ 134.085703][ T1014] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.123836][ T1014] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.170188][ T1014] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.351538][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.893656][ T7421] netlink: 'syz.3.391': attribute type 10 has an invalid length. [ 135.069793][ T35] IPVS: starting estimator thread 0... [ 135.185720][ T7431] IPVS: using max 24 ests per chain, 57600 per kthread [ 135.887286][ T7455] __nla_validate_parse: 3 callbacks suppressed [ 135.887304][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.404'. [ 135.970537][ T7459] syzkaller1: entered promiscuous mode [ 135.980566][ T7459] syzkaller1: entered allmulticast mode [ 135.996681][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 136.274473][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 136.513730][ T7477] netlink: 100 bytes leftover after parsing attributes in process `syz.3.409'. [ 136.552993][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 136.621566][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 136.662668][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 136.675744][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 136.759539][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.414'. [ 136.981257][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.416'. [ 137.150569][ T7516] sctp: [Deprecated]: syz.0.413 (pid 7516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.150569][ T7516] Use struct sctp_sack_info instead [ 137.507395][ T7526] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 139.320456][ T7526] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 140.630541][ T7545] ip6gre1: entered promiscuous mode [ 140.644123][ T7545] ip6gre1: entered allmulticast mode [ 140.653723][ T5783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.662932][ T5783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.675991][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.700409][ T7563] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 140.745139][ T7559] veth0_macvtap: left promiscuous mode [ 140.947744][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.052054][ T7583] netlink: 'syz.4.434': attribute type 11 has an invalid length. [ 141.060483][ T7583] netlink: 'syz.4.434': attribute type 4 has an invalid length. [ 141.608958][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.663627][ T7600] syzkaller1: entered promiscuous mode [ 141.683219][ T7600] syzkaller1: entered allmulticast mode [ 142.099830][ T7619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.560278][ T7629] ip6tnl2: entered allmulticast mode [ 142.593224][ T7634] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 142.689276][ T7638] netlink: 'syz.2.445': attribute type 4 has an invalid length. [ 142.690251][ T7634] __nla_validate_parse: 3 callbacks suppressed [ 142.690299][ T7634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.442'. [ 142.825903][ T7645] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 142.834508][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.447'. [ 142.983351][ T7657] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 143.309494][ T7677] syzkaller0: entered promiscuous mode [ 143.382090][ T7677] syzkaller0: entered allmulticast mode [ 143.712391][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 143.769655][ T7696] netlink: 48 bytes leftover after parsing attributes in process `syz.1.458'. [ 143.848204][ T7697] bond1: ARP target 9.0.0.0 is already present [ 143.878143][ T7697] bond1: option arp_ip_target: invalid value (9) [ 143.911114][ T7697] bond1 (unregistering): Released all slaves [ 144.028194][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 144.077664][ T7699] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 144.384651][ T7722] netlink: 60 bytes leftover after parsing attributes in process `syz.4.463'. [ 144.491084][ T7723] netlink: 60 bytes leftover after parsing attributes in process `syz.4.463'. [ 144.701322][ T7726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.965930][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.252578][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.467'. [ 145.295279][ T7733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.303974][ T7733] IPv6: NLM_F_CREATE should be set when creating new route [ 146.211627][ T7775] netlink: 'syz.4.476': attribute type 1 has an invalid length. [ 146.237456][ T7775] netlink: 244 bytes leftover after parsing attributes in process `syz.4.476'. [ 146.265050][ T7775] NCSI netlink: No device for ifindex 1667330563 [ 146.482881][ T7788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.479'. [ 146.573891][ T7794] netlink: 'syz.2.481': attribute type 210 has an invalid length. [ 146.985649][ T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.015159][ T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.055831][ T5783] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.085906][ T5783] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.187549][ T7815] SET target dimension over the limit! [ 147.205561][ T7815] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 147.325477][ T7819] netlink: 'syz.1.487': attribute type 10 has an invalid length. [ 147.753071][ T7841] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 147.823931][ T7841] bond2: entered promiscuous mode [ 147.831651][ T7841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.223907][ T7864] __nla_validate_parse: 6 callbacks suppressed [ 148.223923][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.500'. [ 148.464704][ T7820] infiniband syz1: set active [ 148.479651][ T7820] infiniband syz1: added bridge_slave_1 [ 148.630824][ T7820] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 148.671006][ T7820] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 148.688840][ T7820] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 148.737831][ T7880] netlink: 'syz.3.503': attribute type 10 has an invalid length. [ 148.790828][ T7880] syz_tun: entered promiscuous mode [ 148.850364][ T7880] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.860888][ T7820] RDS/IB: syz1: added [ 148.865330][ T7820] smc: adding ib device syz1 with port count 1 [ 148.875738][ T7820] smc: ib device syz1 port 1 has no pnetid [ 148.959132][ T7888] ip6tnl1: entered allmulticast mode [ 148.978061][ T214] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 148.997108][ T214] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.015708][ T5623] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.227939][ T7893] syzkaller0: entered promiscuous mode [ 149.248825][ T7893] syzkaller0: entered allmulticast mode [ 149.404356][ T7899] bridge0: port 4(veth0_virt_wifi) entered blocking state [ 149.422011][ T7899] bridge0: port 4(veth0_virt_wifi) entered disabled state [ 149.429469][ T42] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.457815][ T7899] veth0_virt_wifi: entered allmulticast mode [ 149.491357][ T7899] veth0_virt_wifi: entered promiscuous mode [ 149.516969][ T5623] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.697687][ T7914] netlink: 76 bytes leftover after parsing attributes in process `syz.0.514'. [ 149.738220][ T7914] netlink: 48 bytes leftover after parsing attributes in process `syz.0.514'. [ 149.790691][ T7918] netlink: 59 bytes leftover after parsing attributes in process `syz.0.514'. [ 149.855389][ T7921] syz.2.516: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.879880][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: syz.2.516 Not tainted syzkaller #0 PREEMPT(full) [ 149.879907][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.879921][ T7921] Call Trace: [ 149.879929][ T7921] [ 149.879939][ T7921] dump_stack_lvl+0xe8/0x150 [ 149.880000][ T7921] warn_alloc+0x24c/0x270 [ 149.880033][ T7921] ? stack_depot_save_flags+0x33/0x800 [ 149.880069][ T7921] ? __pfx_warn_alloc+0x10/0x10 [ 149.880101][ T7921] ? kasan_save_track+0x3e/0x80 [ 149.880130][ T7921] ? __kasan_kmalloc+0x93/0xb0 [ 149.880163][ T7921] ? xsk_setsockopt+0x52a/0x960 [ 149.880188][ T7921] ? do_sock_setsockopt+0x17c/0x1b0 [ 149.880214][ T7921] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 149.880266][ T7921] ? do_syscall_64+0x174/0x580 [ 149.880294][ T7921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.880327][ T7921] __vmalloc_node_range_noprof+0x12c/0x1730 [ 149.880394][ T7921] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.880422][ T7921] ? __kasan_kmalloc+0x93/0xb0 [ 149.880450][ T7921] ? __kmalloc_cache_noprof+0x32d/0x660 [ 149.880476][ T7921] ? __kmalloc_cache_noprof+0x150/0x660 [ 149.880504][ T7921] vmalloc_user_noprof+0xad/0xe0 [ 149.880546][ T7921] ? xskq_create+0xbf/0x170 [ 149.880572][ T7921] xskq_create+0xbf/0x170 [ 149.880601][ T7921] xsk_init_queue+0x8a/0xe0 [ 149.880640][ T7921] xsk_setsockopt+0x52a/0x960 [ 149.880662][ T7921] ? __fget_files+0x2a/0x420 [ 149.880689][ T7921] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.880712][ T7921] ? __pfx_aa_sk_perm+0x10/0x10 [ 149.880735][ T7921] ? aa_sock_opt_perm+0xff/0x1a0 [ 149.880759][ T7921] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 149.880779][ T7921] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.880803][ T7921] do_sock_setsockopt+0x17c/0x1b0 [ 149.880830][ T7921] __x64_sys_setsockopt+0x13d/0x1b0 [ 149.880855][ T7921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.880876][ T7921] do_syscall_64+0x174/0x580 [ 149.880900][ T7921] ? trace_irq_disable+0x3b/0x140 [ 149.880925][ T7921] ? clear_bhb_loop+0x40/0x90 [ 149.880949][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.880968][ T7921] RIP: 0033:0x7fd07c99e019 [ 149.880998][ T7921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.881014][ T7921] RSP: 002b:00007fd07d8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.881033][ T7921] RAX: ffffffffffffffda RBX: 00007fd07cc25fa0 RCX: 00007fd07c99e019 [ 149.881047][ T7921] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 149.881058][ T7921] RBP: 00007fd07ca3500c R08: 0000000000000004 R09: 0000000000000000 [ 149.881070][ T7921] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.881082][ T7921] R13: 00007fd07cc26038 R14: 00007fd07cc25fa0 R15: 00007fff262cb0e8 [ 149.881112][ T7921] [ 149.881940][ T7921] Mem-Info: [ 150.197991][ T7921] active_anon:5981 inactive_anon:0 isolated_anon:0 [ 150.197991][ T7921] active_file:0 inactive_file:43124 isolated_file:0 [ 150.197991][ T7921] unevictable:790 dirty:145 writeback:0 [ 150.197991][ T7921] slab_reclaimable:10114 slab_unreclaimable:97285 [ 150.197991][ T7921] mapped:31472 shmem:1310 pagetables:1262 [ 150.197991][ T7921] sec_pagetables:0 bounce:0 [ 150.197991][ T7921] kernel_misc_reclaimable:0 [ 150.197991][ T7921] free:1325833 free_pcp:13731 free_cma:0 [ 150.262699][ T7921] Node 0 active_anon:23824kB inactive_anon:0kB active_file:0kB inactive_file:172288kB unevictable:1624kB isolated(anon):0kB isolated(file):0kB mapped:125888kB dirty:576kB writeback:0kB shmem:3704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12528kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 150.312686][ T7921] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 150.349092][ T7921] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.381632][ T7931] kthread_run failed with err -4 [ 150.383444][ T7921] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 150.394742][ T7921] Node 0 DMA32 free:1352244kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23824kB inactive_anon:0kB active_file:0kB inactive_file:172288kB unevictable:1624kB writepending:576kB zspages:0kB present:3129332kB managed:2548512kB mlocked:88kB bounce:0kB free_pcp:54848kB local_pcp:29312kB free_cma:0kB [ 150.432348][ T7921] lowmem_reserve[]: 0 0 0 0 0 [ 150.441432][ T7921] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.474310][ T7921] lowmem_reserve[]: 0 0 0 0 0 [ 150.479604][ T7921] Node 1 Normal free:3935840kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.520067][ T7921] lowmem_reserve[]: 0 0 0 0 0 [ 150.530195][ T7921] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.543587][ T7921] Node 0 DMA32: 868*4kB (UME) 553*8kB (UME) 593*16kB (UM) 262*32kB (UME) 68*64kB (UME) 43*128kB (UME) 20*256kB (UME) 15*512kB (M) 5*1024kB (UM) 6*2048kB (ME) 314*4096kB (UM) = 1351976kB [ 150.572712][ T7921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 150.595302][ T7921] Node 1 Normal: 0*4kB 4*8kB (UM) 4*16kB (UM) 6*32kB (UM) 7*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935840kB [ 150.653345][ T7921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.682404][ T7921] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.695261][ T7921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.732489][ T7921] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.782445][ T7921] 44408 total pagecache pages [ 150.796441][ T7921] 0 pages in swap cache [ 150.840929][ T7921] Free swap = 124996kB [ 150.862677][ T7921] Total swap = 124996kB [ 150.879978][ T7921] 2097051 pages RAM [ 150.900605][ T7921] 0 pages HighMem/MovableOnly [ 150.916337][ T7921] 428243 pages reserved [ 150.939923][ T7921] 0 pages cma reserved [ 151.068144][ T7952] netlink: 144 bytes leftover after parsing attributes in process `syz.0.522'. [ 152.214448][ T8010] netlink: 'syz.2.538': attribute type 2 has an invalid length. [ 152.320047][ T8014] netlink: 'syz.3.539': attribute type 11 has an invalid length. [ 152.337684][ T8014] netlink: 'syz.3.539': attribute type 4 has an invalid length. [ 152.474205][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.566771][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.049097][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 153.184748][ T8046] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 153.250023][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.547'. [ 153.302294][ T8046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.369263][ T8048] bond3 (unregistering): Released all slaves [ 153.398342][ T8050] bond3: entered promiscuous mode [ 153.433184][ T8046] team0: Port device dummy0 removed [ 153.483971][ T8046] bond3: (slave dummy0): making interface the new active one [ 153.491955][ T8046] dummy0: entered promiscuous mode [ 153.500433][ T8046] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 153.628666][ T8059] tun0: tun_chr_ioctl cmd 2148553947 [ 153.685560][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.716852][ T8071] trusted_key: syz.0.555 sent an empty control message without MSG_MORE. [ 153.753173][ T8071] netlink: 27 bytes leftover after parsing attributes in process `syz.0.555'. [ 153.839082][ T8079] netlink: 144 bytes leftover after parsing attributes in process `syz.3.556'. [ 154.060679][ T8087] netlink: 'syz.4.559': attribute type 11 has an invalid length. [ 154.068652][ T8087] netlink: 'syz.4.559': attribute type 4 has an invalid length. [ 154.211083][ T8095] batman_adv: batadv0: Adding interface: vlan4 [ 154.218718][ T8095] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.244784][ T8095] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 154.849557][ T8127] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 155.005388][ T8134] netlink: 144 bytes leftover after parsing attributes in process `syz.0.570'. [ 155.570627][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.579'. [ 155.637583][ T8164] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 155.651565][ T29] audit: type=1107 audit(1785532512.461:2): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*Y?X˜ñ]aþ8¿ËâÇÝpöpÿ5©‹w”²êlËO)C21sä³EÚÈ— ‹â E6h ~¯ØMãn¨o›f'¦†ö‹gXÅèôH‰' [ 155.709093][ T8175] netlink: 'syz.1.582': attribute type 11 has an invalid length. [ 155.709536][ T29] audit: type=1107 audit(1785532512.471:3): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*Y?X˜ñ]aþ8¿ËâÇÝpöpÿ5©‹w”²êlËO)C21sä³EÚÈ— ‹â E6h ~¯ØMãn¨o›f'¦†ö‹gXÅèôH‰' [ 155.737104][ T8175] netlink: 'syz.1.582': attribute type 4 has an invalid length. [ 155.979480][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.585'. [ 156.020106][ T8186] netlink: 144 bytes leftover after parsing attributes in process `syz.2.584'. [ 156.613379][ T5639] udevd[5639]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 156.664905][ T5639] udevd[5639]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 157.061438][ T8231] netlink: 'syz.1.597': attribute type 11 has an invalid length. [ 157.093084][ T8231] netlink: 'syz.1.597': attribute type 4 has an invalid length. [ 157.353565][ T8238] openvswitch: netlink: Message has 1 unknown bytes. [ 157.394785][ T8238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.593947][ T8245] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 157.643208][ T8249] netlink: 'syz.2.592': attribute type 4 has an invalid length. [ 157.830992][ T8245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.957997][ T8261] bond1: (slave gretap1): making interface the new active one [ 157.984780][ T8261] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 158.000827][ T8254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.602'. [ 158.419209][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 158.430093][ T8280] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 158.445630][ T8284] netlink: 59 bytes leftover after parsing attributes in process `syz.3.607'. [ 158.696085][ T8295] netlink: 'syz.3.607': attribute type 16 has an invalid length. [ 158.706313][ T8297] netlink: 'syz.1.611': attribute type 11 has an invalid length. [ 158.727429][ T8295] netlink: 'syz.3.607': attribute type 17 has an invalid length. [ 158.738896][ T8297] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 158.851350][ T8295] syz_tun: left promiscuous mode [ 158.916520][ T8303] netlink: 56 bytes leftover after parsing attributes in process `syz.2.612'. [ 158.965810][ T8295] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 159.410052][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 159.508875][ T8320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.566957][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 159.591738][ T8327] syzkaller0: entered promiscuous mode [ 159.610186][ T8332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.622'. [ 159.622510][ T8327] syzkaller0: entered allmulticast mode [ 159.649454][ T8327] tipc: Started in network mode [ 159.668255][ T8327] tipc: Node identity e6681d821647, cluster identity 4711 [ 159.677042][ T8327] tipc: Enabled bearer , priority 0 [ 159.809833][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 159.817812][ T8338] netlink: 'syz.3.624': attribute type 11 has an invalid length. [ 159.827157][ T8338] netlink: 'syz.3.624': attribute type 4 has an invalid length. [ 159.863041][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 159.896310][ T8337] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 159.897211][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 159.965651][ T8327] tipc: Resetting bearer [ 160.085079][ T8348] Bluetooth: MGMT ver 1.23 [ 160.114188][ T8326] tipc: Resetting bearer [ 160.144473][ T8326] tipc: Disabling bearer [ 160.162411][ T8348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.194906][ T8348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.195160][ T8343] netlink: 3 bytes leftover after parsing attributes in process `syz.4.623'. [ 160.936990][ T48] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.977373][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.110845][ T8389] netlink: 'syz.1.639': attribute type 3 has an invalid length. [ 161.365757][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.760484][ T8424] netlink: 'syz.2.647': attribute type 11 has an invalid length. [ 161.802556][ T8424] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 162.086968][ T8432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.171461][ T8431] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 162.915646][ T8468] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 163.024780][ T8479] netlink: 'syz.2.661': attribute type 11 has an invalid length. [ 163.041979][ T8479] netlink: 'syz.2.661': attribute type 4 has an invalid length. [ 163.544226][ T8504] __nla_validate_parse: 5 callbacks suppressed [ 163.544247][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 163.765754][ T8504] dvmrp8: entered allmulticast mode [ 164.234379][ T8522] syzkaller0: entered promiscuous mode [ 164.258432][ T8522] syzkaller0: entered allmulticast mode [ 164.304792][ T8522] netlink: 84 bytes leftover after parsing attributes in process `syz.4.672'. [ 164.748074][ T8522] syz.4.672 (8522) used greatest stack depth: 19648 bytes left [ 164.860923][ T8533] netlink: 'syz.1.675': attribute type 11 has an invalid length. [ 164.885926][ T8533] netlink: 'syz.1.675': attribute type 4 has an invalid length. [ 165.068154][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 165.100370][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 165.327111][ T8546] netlink: 'syz.0.680': attribute type 21 has an invalid length. [ 165.400566][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 165.409684][ T8552] netlink: 'syz.1.681': attribute type 29 has an invalid length. [ 165.423534][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 165.455315][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 165.481214][ T8554] netlink: 'syz.1.681': attribute type 29 has an invalid length. [ 165.503259][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 165.514476][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.541332][ T35] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.567490][ T8551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.586956][ T35] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.620969][ T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.802414][ T8559] 8021q: VLANs not supported on ip6tnl0 [ 166.027479][ T8568] netlink: 224 bytes leftover after parsing attributes in process `syz.0.687'. [ 166.052960][ T8572] netlink: 'syz.3.688': attribute type 11 has an invalid length. [ 166.073167][ T8572] netlink: 'syz.3.688': attribute type 4 has an invalid length. [ 166.394443][ T8585] netlink: 32 bytes leftover after parsing attributes in process `syz.0.690'. [ 166.653950][ T8591] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 166.773377][ T8598] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 167.397399][ T8617] gre2: entered allmulticast mode [ 167.798857][ T8635] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 167.831932][ T8635] netlink: 'syz.0.707': attribute type 3 has an invalid length. [ 167.913574][ T8639] bridge0: port 4(veth0_virt_wifi) entered blocking state [ 167.920949][ T8639] bridge0: port 4(veth0_virt_wifi) entered forwarding state [ 167.928884][ T8639] bridge0: port 3(ip6gretap0) entered blocking state [ 167.935795][ T8639] bridge0: port 3(ip6gretap0) entered forwarding state [ 167.942955][ T8639] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.950209][ T8639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.957763][ T8639] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.964963][ T8639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.074369][ T8639] bridge0: entered promiscuous mode [ 168.088951][ T8649] netlink: 'syz.4.711': attribute type 11 has an invalid length. [ 168.110382][ T8639] bridge0: entered allmulticast mode [ 168.125593][ T8649] netlink: 'syz.4.711': attribute type 4 has an invalid length. [ 168.135328][ T8647] (: renamed from bridge_slave_0 (while UP) [ 168.543576][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a66cc00: rx timeout, send abort [ 168.613346][ T8660] bridge0: port 5(wlan1) entered blocking state [ 168.626780][ T8660] bridge0: port 5(wlan1) entered disabled state [ 168.653046][ T8660] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 168.690560][ T8662] __nla_validate_parse: 9 callbacks suppressed [ 168.690579][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 168.707565][ T8665] netlink: 204 bytes leftover after parsing attributes in process `syz.3.717'. [ 168.723971][ T8660] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 168.739370][ T8665] netlink: 820 bytes leftover after parsing attributes in process `syz.3.717'. [ 168.748721][ T8665] netlink: 820 bytes leftover after parsing attributes in process `syz.3.717'. [ 168.909342][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.719'. [ 169.010006][ T8673] netlink: 144 bytes leftover after parsing attributes in process `syz.2.718'. [ 169.053676][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a66cc00: abort rx timeout. Force session deactivation [ 169.115314][ T8675] tipc: Started in network mode [ 169.132330][ T8675] tipc: Node identity 4246, cluster identity 4711 [ 169.163561][ T8675] tipc: Node number set to 16966 [ 169.462338][ T8692] netlink: 820 bytes leftover after parsing attributes in process `syz.4.726'. [ 169.472331][ T8692] netlink: 820 bytes leftover after parsing attributes in process `syz.4.726'. [ 169.478850][ T8691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.725'. [ 169.521724][ T8691] netlink: 'syz.0.725': attribute type 2 has an invalid length. [ 169.602297][ T8691] : entered promiscuous mode [ 169.651304][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 170.513456][ T8713] SET target dimension over the limit! [ 170.561829][ T8713] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 170.616528][ T8719] netlink: 'syz.0.731': attribute type 83 has an invalid length. [ 170.627333][ T8713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.673100][ T8713] team0: Port device bond0 added [ 170.881695][ T8725] netlink: 'syz.0.733': attribute type 11 has an invalid length. [ 170.928833][ T8725] netlink: 'syz.0.733': attribute type 4 has an invalid length. [ 171.137799][ T8733] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 171.559148][ T8753] syzkaller0: entered promiscuous mode [ 171.567950][ T8753] syzkaller0: entered allmulticast mode [ 171.582040][ T8753] netlink: 'syz.3.740': attribute type 2 has an invalid length. [ 171.606275][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.657793][ T8753] : entered promiscuous mode [ 172.477415][ T8778] syzkaller0: entered promiscuous mode [ 172.501803][ T8778] syzkaller0: entered allmulticast mode [ 172.662423][ T8788] netlink: 'syz.1.751': attribute type 12 has an invalid length. [ 172.844437][ T8796] netlink: 'syz.2.753': attribute type 11 has an invalid length. [ 172.874637][ T8796] netlink: 'syz.2.753': attribute type 4 has an invalid length. [ 173.198064][ T8788] netlink: 'syz.1.751': attribute type 12 has an invalid length. [ 173.213139][ T5783] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.238283][ T5783] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.257447][ T5783] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.315933][ T5783] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.417114][ T8812] block nbd0: server does not support multiple connections per device. [ 173.447241][ T35] IPVS: starting estimator thread 0... [ 173.454025][ T8812] block nbd0: shutting down sockets [ 173.567144][ T8829] IPVS: using max 26 ests per chain, 62400 per kthread [ 173.928931][ T8839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.117363][ T8847] netlink: 'syz.3.768': attribute type 11 has an invalid length. [ 174.138666][ T8839] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 174.154904][ T8847] netlink: 'syz.3.768': attribute type 4 has an invalid length. [ 174.189599][ T8849] __nla_validate_parse: 15 callbacks suppressed [ 174.189618][ T8849] netlink: 88 bytes leftover after parsing attributes in process `syz.2.769'. [ 174.240683][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 174.323590][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.770'. [ 174.365263][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 175.221573][ T8889] netlink: 32 bytes leftover after parsing attributes in process `syz.4.781'. [ 175.237478][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 175.266684][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 175.291448][ T8893] tipc: Started in network mode [ 175.303272][ T8893] tipc: Node identity 9a96a0726e39, cluster identity 4711 [ 175.330490][ T8893] tipc: Enabled bearer , priority 0 [ 175.336959][ T8892] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 175.349721][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 175.383232][ T8894] syzkaller0: entered promiscuous mode [ 175.423109][ T8894] syzkaller0: entered allmulticast mode [ 175.661004][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.668849][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.021730][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.072026][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.252443][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 176.280120][ T8927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.786'. [ 176.351221][ T8899] tipc: Resetting bearer [ 176.387555][ T8891] tipc: Resetting bearer [ 176.682947][ T8891] tipc: Disabling bearer [ 176.730391][ T8919] tipc: Node number set to 4105150578 [ 176.755567][ T1014] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.796049][ T57] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.843552][ T57] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.879341][ T8945] netlink: 'syz.2.789': attribute type 2 has an invalid length. [ 176.930079][ T1014] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.193011][ T8952] xt_connbytes: Forcing CT accounting to be enabled [ 178.005584][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.047497][ T8976] ±ÿ: renamed from lo (while UP) [ 178.078569][ T8985] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 178.544629][ T8997] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 178.631727][ T8998] netlink: zone id is out of range [ 178.652342][ T8998] netlink: get zone limit has 4 unknown bytes [ 179.021770][ T9013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.205268][ T9031] __nla_validate_parse: 5 callbacks suppressed [ 179.205286][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 179.236485][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 179.278485][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 179.343951][ T9043] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 179.547964][ T9043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.586031][ T9047] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 179.667705][ T35] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.804929][ T9065] bridge0: entered promiscuous mode [ 179.811716][ T214] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.812698][ T9065] bridge0: entered allmulticast mode [ 179.842359][ T9065] team0: Port device bridge0 added [ 179.859901][ T9066] bridge0: port 1(team0) entered blocking state [ 179.879382][ T9066] bridge0: port 1(team0) entered disabled state [ 179.898352][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 179.907567][ T9066] team0: entered allmulticast mode [ 179.907614][ T9066] team_slave_0: entered allmulticast mode [ 179.907726][ T9066] team_slave_1: entered allmulticast mode [ 179.952559][ T9066] team0: left allmulticast mode [ 179.960327][ T9066] team_slave_0: left allmulticast mode [ 179.968488][ T9066] team_slave_1: left allmulticast mode [ 180.167739][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 180.203306][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 180.250499][ T9079] netlink: 'syz.1.823': attribute type 12 has an invalid length. [ 180.296186][ T9079] netlink: 'syz.1.823': attribute type 14 has an invalid length. [ 180.514877][ T9093] openvswitch: netlink: IP tunnel dst address not specified [ 180.543196][ T9098] batadv_slave_1: entered promiscuous mode [ 180.551492][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 180.643120][ T9099] netlink: 300 bytes leftover after parsing attributes in process `syz.4.829'. [ 180.884050][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 180.968605][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 181.070941][ T9116] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 181.291426][ T9096] batadv_slave_1: left promiscuous mode [ 181.325366][ T9116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.404399][ T9116] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 181.918684][ T9149] nbd: socks must be embedded in a SOCK_ITEM attr [ 181.962696][ T9159] macsec1: entered promiscuous mode [ 182.235102][ T9169] pim6reg1: entered promiscuous mode [ 182.259991][ T9169] pim6reg1: entered allmulticast mode [ 182.426620][ T9176] pim6reg: entered allmulticast mode [ 182.457254][ T9178] xt_l2tp: invalid flags combination: 0 [ 183.680273][ T9231] syzkaller0: entered promiscuous mode [ 183.692986][ T9231] syzkaller0: entered allmulticast mode [ 183.777386][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.433100][ T9269] syzkaller1: entered promiscuous mode [ 184.450433][ T9269] syzkaller1: entered allmulticast mode [ 184.752515][ T9283] __nla_validate_parse: 6 callbacks suppressed [ 184.752533][ T9283] netlink: 80 bytes leftover after parsing attributes in process `syz.4.867'. [ 184.864360][ T9286] netlink: 144 bytes leftover after parsing attributes in process `syz.3.868'. [ 185.007412][ T9296] netlink: 'syz.1.871': attribute type 4 has an invalid length. [ 185.015151][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.871'. [ 185.042977][ T9291] tipc: Started in network mode [ 185.064846][ T9291] tipc: Node identity 32e0a2d2a2b4, cluster identity 4711 [ 185.106639][ T9291] tipc: Enabled bearer , priority 0 [ 185.139080][ T9293] syzkaller0: entered promiscuous mode [ 185.166045][ T9293] syzkaller0: entered allmulticast mode [ 185.196434][ T9291] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 185.304301][ T9291] tipc: Resetting bearer [ 185.361593][ T9290] tipc: Resetting bearer [ 185.454271][ T9290] tipc: Disabling bearer [ 186.119612][ T9303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.325299][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.333424][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.978846][ T9308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.032368][ T9308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.401171][ T9308] ip6gre1: left promiscuous mode [ 187.406661][ T9308] ip6gre1: left allmulticast mode [ 187.552372][ T9334] tipc: Enabled bearer , priority 0 [ 187.564220][ T9335] syzkaller0: entered promiscuous mode [ 187.584024][ T9335] syzkaller0: entered allmulticast mode [ 187.621401][ T5783] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.662337][ T5783] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.719452][ T5783] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.747572][ T5783] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.810277][ T9337] tipc: Resetting bearer [ 187.854265][ T9337] tipc: Disabling bearer [ 187.863680][ T9363] xt_HMARK: proto mask must be zero with L3 mode [ 187.886258][ T9365] netlink: 144 bytes leftover after parsing attributes in process `syz.2.884'. [ 188.141605][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 188.286993][ T9387] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002 [ 188.504040][ T9395] netlink: 'syz.1.894': attribute type 11 has an invalid length. [ 188.522576][ T9395] netlink: 'syz.1.894': attribute type 4 has an invalid length. [ 188.924830][ T9416] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 188.973682][ T9416] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 189.001313][ T9416] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 189.009671][ T9416] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 189.023577][ T9418] netlink: 144 bytes leftover after parsing attributes in process `syz.0.901'. [ 189.047533][ T9416] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 189.056024][ T9416] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 189.063987][ T9416] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 189.095010][ T9416] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 189.178766][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 189.298037][ T9389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.472323][ T9436] netlink: 'syz.1.906': attribute type 11 has an invalid length. [ 189.482945][ T9440] netlink: 76 bytes leftover after parsing attributes in process `syz.0.905'. [ 189.952547][ T9465] syz_tun: entered allmulticast mode [ 190.068110][ T9469] validate_nla: 58 callbacks suppressed [ 190.068129][ T9469] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 190.068317][ T9465] pim6reg: entered allmulticast mode [ 190.096133][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.137519][ T9473] pim6reg: left allmulticast mode [ 190.142873][ T9469] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 190.157765][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.165924][ T9473] syz_tun: left allmulticast mode [ 190.185875][ T9469] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 190.194904][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.208418][ T9476] netlink: 'syz.2.916': attribute type 10 has an invalid length. [ 190.216751][ T9469] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 190.224583][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.244792][ T9469] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 190.254332][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.265240][ T9469] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 190.273295][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.304172][ T9469] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 190.340312][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.391429][ T9476] team0: Port device dummy0 added [ 190.404176][ T9469] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 190.442598][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.493267][ T9469] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 190.513817][ T9484] pim6reg1: entered promiscuous mode [ 190.519786][ T9484] pim6reg1: entered allmulticast mode [ 190.524581][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.539362][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.679264][ T9493] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 190.783286][ T9497] Bluetooth: MGMT ver 1.23 [ 190.949617][ T9501] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.702293][ T9534] sctp: [Deprecated]: syz.2.931 (pid 9534) Use of int in max_burst socket option. [ 191.702293][ T9534] Use struct sctp_assoc_value instead [ 191.749944][ T9503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.872231][ T9539] netlink: zone id is out of range [ 191.890372][ T9539] netlink: zone id is out of range [ 191.904612][ T9539] netlink: zone id is out of range [ 191.911409][ T9539] netlink: zone id is out of range [ 191.917596][ T9539] netlink: zone id is out of range [ 191.923776][ T9539] netlink: zone id is out of range [ 191.945877][ T9539] netlink: zone id is out of range [ 191.951117][ T9539] netlink: zone id is out of range [ 191.967961][ T9539] netlink: zone id is out of range [ 191.979211][ T9539] netlink: zone id is out of range [ 192.767313][ T9571] tipc: Failed to remove unknown binding: 66,1,1/0:1527843094/1527843096 [ 192.807860][ T9571] tipc: Enabling of bearer rejected, failed to enable media [ 194.007486][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.015695][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.581615][ T9604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.891102][ T9664] syzkaller0: entered promiscuous mode [ 194.903474][ T9664] syzkaller0: entered allmulticast mode [ 195.489671][ T9685] __nla_validate_parse: 60 callbacks suppressed [ 195.489693][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 195.508426][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.737023][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.949186][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'. [ 196.111601][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 196.997724][ T9711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.234173][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 197.379141][ T9773] netlink: 52 bytes leftover after parsing attributes in process `syz.4.986'. [ 197.394684][ T9763] syzkaller0: entered promiscuous mode [ 197.414987][ T9763] syzkaller0: entered allmulticast mode [ 197.766478][ T9796] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 197.772105][ T9795] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 198.595634][ T9820] bridge2: entered promiscuous mode [ 198.616848][ T9820] bridge2: entered allmulticast mode [ 198.704277][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 198.760952][ T9827] ipvlan2: entered allmulticast mode [ 198.766882][ T9827] syz_tun: entered allmulticast mode [ 198.923361][ T9832] validate_nla: 56 callbacks suppressed [ 198.923381][ T9832] netlink: 'syz.2.1004': attribute type 1 has an invalid length. [ 199.049984][ T9832] bond3: entered promiscuous mode [ 199.067381][ T9832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.174309][ T9838] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.196440][ T9838] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 199.249394][ T9838] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 199.288875][ T9838] bond3: (slave ipip0): making interface the new active one [ 199.298287][ T29] audit: type=1804 audit(1785532556.111:4): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1006" name="/newroot/176/cgroup.controllers" dev="tmpfs" ino=917 res=1 errno=0 [ 199.307075][ T9838] ipip0: entered promiscuous mode [ 199.348562][ T9843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1007'. [ 199.360357][ T29] audit: type=1800 audit(1785532556.131:5): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1006" name="cgroup.controllers" dev="tmpfs" ino=917 res=0 errno=0 [ 199.388233][ T9838] bond3: (slave ipip0): Enslaving as an active interface with an up link [ 199.588521][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 199.620471][ T9845] netlink: 'syz.4.1008': attribute type 5 has an invalid length. [ 199.636879][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 199.654445][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 199.665574][ T9828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.673901][ T9855] netlink: 'syz.4.1008': attribute type 5 has an invalid length. [ 199.722806][ T9847] syzkaller0: entered promiscuous mode [ 199.744801][ T9857] netlink: 'syz.2.1012': attribute type 11 has an invalid length. [ 199.745666][ T9847] syzkaller0: entered allmulticast mode [ 199.775660][ T9853] bridge2: entered promiscuous mode [ 199.791479][ T9853] bridge2: entered allmulticast mode [ 199.817518][ T9853] team0: Port device bridge2 added [ 199.830835][ T9858] bridge0: port 1(team0) entered blocking state [ 199.851305][ T9858] bridge0: port 1(team0) entered disabled state [ 199.866957][ T9858] team0: entered allmulticast mode [ 199.876960][ T9858] team_slave_0: entered allmulticast mode [ 199.890364][ T9858] team_slave_1: entered allmulticast mode [ 199.919795][ T9858] team0: left allmulticast mode [ 199.925133][ T9858] team_slave_0: left allmulticast mode [ 199.932413][ T9858] team_slave_1: left allmulticast mode [ 202.121327][ T9906] __nla_validate_parse: 4 callbacks suppressed [ 202.121349][ T9906] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1022'. [ 202.561953][ T9919] netlink: 'syz.0.1025': attribute type 14 has an invalid length. [ 202.581882][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 202.843047][ T9925] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1027'. [ 203.041139][ T9928] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1028'. [ 203.717817][ T9950] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 204.083745][ T9969] netlink: 'syz.0.1040': attribute type 13 has an invalid length. [ 204.138176][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1040'. [ 204.238070][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 204.255685][ T9981] net_ratelimit: 12 callbacks suppressed [ 204.255700][ T9981] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 204.323181][ T9983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1047'. [ 204.432114][ T5351] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 204.460200][ T9975] bond0: (slave bond_slave_0): Releasing backup interface [ 204.545303][ T9975] bond_slave_0: entered promiscuous mode [ 204.565576][ T9975] bond_slave_0: entered allmulticast mode [ 204.663879][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 204.703134][ T9994] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1050'. [ 204.735492][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 205.002057][T10000] netlink: 'syz.3.1052': attribute type 7 has an invalid length. [ 205.037844][T10000] netlink: 'syz.3.1052': attribute type 7 has an invalid length. [ 205.090270][T10000] netlink: 'syz.3.1052': attribute type 39 has an invalid length. [ 205.368008][ T5351] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 205.805870][T10039] netlink: 'syz.4.1059': attribute type 1 has an invalid length. [ 205.978580][T10039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.991309][T10047] : renamed from dummy0 [ 206.165777][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.422515][T10100] __nla_validate_parse: 5 callbacks suppressed [ 207.422534][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 207.496040][T10100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1073'. [ 207.945320][ C0] ================================================================== [ 207.953468][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 207.961491][ C0] Read of size 2 at addr ffff888151e32df4 by task syz.2.1077/10123 [ 207.969417][ C0] [ 207.971791][ C0] CPU: 0 UID: 0 PID: 10123 Comm: syz.2.1077 Not tainted syzkaller #0 PREEMPT(full) [ 207.971820][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.971834][ C0] Call Trace: [ 207.971843][ C0] [ 207.971852][ C0] dump_stack_lvl+0xe8/0x150 [ 207.971890][ C0] print_address_description+0x55/0x1e0 [ 207.971922][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 207.971952][ C0] print_report+0x58/0x70 [ 207.971980][ C0] kasan_report+0x117/0x150 [ 207.972018][ C0] ? __lock_acquire+0x683/0x2cf0 [ 207.972055][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 207.972091][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 207.972129][ C0] __dev_queue_xmit+0x27f/0x3820 [ 207.972164][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 207.972191][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 207.972219][ C0] ? ebt_do_table+0x2605/0x27d0 [ 207.972250][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 207.972276][ C0] ? ebt_do_table+0x2605/0x27d0 [ 207.972305][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 207.972337][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 207.972370][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 207.972408][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 207.972439][ C0] ? br_nf_post_routing+0xf0/0xee0 [ 207.972472][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 207.972498][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 207.972523][ C0] NF_HOOK+0x360/0x3f0 [ 207.972544][ C0] ? net_generic+0x1e/0x240 [ 207.972571][ C0] ? NF_HOOK+0xa2/0x3f0 [ 207.972592][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 207.972616][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 207.972648][ C0] br_forward_finish+0xd3/0x130 [ 207.972670][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 207.972700][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 207.972723][ C0] NF_HOOK+0x360/0x3f0 [ 207.972748][ C0] ? NF_HOOK+0xa2/0x3f0 [ 207.972769][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 207.972794][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 207.972820][ C0] ? br_handle_vlan+0x5e/0x530 [ 207.972856][ C0] __br_forward+0x397/0x540 [ 207.972876][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 207.972902][ C0] br_flood+0x3e6/0x8d0 [ 207.972934][ C0] br_handle_frame_finish+0x1175/0x1990 [ 207.972969][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 207.972997][ C0] ? net_generic+0x1e/0x240 [ 207.973029][ C0] ? net_generic+0x1e/0x240 [ 207.973053][ C0] ? net_generic+0x1e/0x240 [ 207.973079][ C0] ? br_cfm_config_fill_info+0x410/0x1730 [ 207.973107][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 207.973140][ C0] br_handle_frame+0x81b/0x1510 [ 207.973173][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 207.973202][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 207.973234][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 207.973265][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 207.973308][ C0] ? __lock_acquire+0x683/0x2cf0 [ 207.973341][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 207.973375][ C0] ? __lock_acquire+0x683/0x2cf0 [ 207.973416][ C0] ? unwind_next_frame+0x8f/0x2550 [ 207.973438][ C0] ? lock_acquire+0x106/0x350 [ 207.973473][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 207.973517][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 207.973570][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 207.973604][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 207.973642][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 207.973676][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 207.973711][ C0] ? dev_gro_receive+0x1097/0x2380 [ 207.973743][ C0] napi_complete_done+0x299/0x730 [ 207.973780][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 207.973816][ C0] ? gro_cell_poll+0x175/0x5d0 [ 207.973841][ C0] gro_cell_poll+0x5ab/0x5d0 [ 207.973869][ C0] ? gro_cell_poll+0x175/0x5d0 [ 207.973892][ C0] __napi_poll+0xaa/0x330 [ 207.973914][ C0] net_rx_action+0x61d/0xf50 [ 207.973943][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 207.973964][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 207.973995][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 207.974032][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 207.974058][ C0] ? sched_clock+0x3f/0x60 [ 207.974094][ C0] handle_softirqs+0x225/0x840 [ 207.974122][ C0] ? do_softirq+0x76/0xd0 [ 207.974150][ C0] ? tun_rx_batched+0x185/0x790 [ 207.974184][ C0] do_softirq+0x76/0xd0 [ 207.974209][ C0] [ 207.974217][ C0] [ 207.974225][ C0] __local_bh_enable_ip+0xf8/0x130 [ 207.974251][ C0] ? tun_rx_batched+0x185/0x790 [ 207.974283][ C0] tun_rx_batched+0x616/0x790 [ 207.974321][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 207.974355][ C0] ? tun_get_user+0x2717/0x4370 [ 207.974388][ C0] ? tun_get_user+0x2717/0x4370 [ 207.974422][ C0] ? tun_get_user+0x23cb/0x4370 [ 207.974454][ C0] ? tun_get_user+0x23cb/0x4370 [ 207.974486][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 207.974511][ C0] ? tun_get_user+0x2717/0x4370 [ 207.974544][ C0] ? tun_get_user+0x2717/0x4370 [ 207.974576][ C0] tun_get_user+0x2b44/0x4370 [ 207.974618][ C0] ? aa_file_perm+0x18b/0x15f0 [ 207.974648][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 207.974673][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 207.974708][ C0] ? __lock_acquire+0x683/0x2cf0 [ 207.974742][ C0] ? __pfx___futex_wait+0x10/0x10 [ 207.974773][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 207.974806][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 207.974837][ C0] ? tun_get+0x1c/0x2f0 [ 207.974869][ C0] ? tun_get+0x1c/0x2f0 [ 207.974904][ C0] ? tun_get+0x1c/0x2f0 [ 207.974935][ C0] ? tun_get+0x1c/0x2f0 [ 207.974970][ C0] tun_chr_write_iter+0x113/0x200 [ 207.975004][ C0] vfs_write+0x612/0xba0 [ 207.975040][ C0] ? __pfx_vfs_write+0x10/0x10 [ 207.975066][ C0] ? __fget_files+0x2a/0x420 [ 207.975102][ C0] ksys_write+0x150/0x270 [ 207.975125][ C0] ? __pfx_ksys_write+0x10/0x10 [ 207.975150][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.975175][ C0] do_syscall_64+0x174/0x580 [ 207.975204][ C0] ? trace_irq_disable+0x3b/0x140 [ 207.975233][ C0] ? clear_bhb_loop+0x40/0x90 [ 207.975259][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.975281][ C0] RIP: 0033:0x7fd07c99e019 [ 207.975302][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.975321][ C0] RSP: 002b:00007fd07d8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.975346][ C0] RAX: ffffffffffffffda RBX: 00007fd07cc25fa0 RCX: 00007fd07c99e019 [ 207.975363][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 207.975377][ C0] RBP: 00007fd07ca3500c R08: 0000000000000000 R09: 0000000000000000 [ 207.975391][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.975404][ C0] R13: 00007fd07cc26038 R14: 00007fd07cc25fa0 R15: 00007fff262cb0e8 [ 207.975431][ C0] [ 207.975439][ C0] [ 208.641713][ C0] The buggy address belongs to the physical page: [ 208.648147][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x151e32 [ 208.656997][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 208.664207][ C0] raw: 057ff00000000000 ffffea0005478c88 ffffea0005478c88 0000000000000000 [ 208.672815][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 208.681413][ C0] page dumped because: kasan: bad access detected [ 208.687855][ C0] page_owner info is not present (never set?) [ 208.693931][ C0] [ 208.696270][ C0] Memory state around the buggy address: [ 208.701909][ C0] ffff888151e32c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 208.709994][ C0] ffff888151e32d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 208.718085][ C0] >ffff888151e32d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 208.726157][ C0] ^ [ 208.733909][ C0] ffff888151e32e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 208.742073][ C0] ffff888151e32e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 208.750174][ C0] ================================================================== [ 208.758559][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.765782][ C0] CPU: 0 UID: 0 PID: 10123 Comm: syz.2.1077 Not tainted syzkaller #0 PREEMPT(full) [ 208.775184][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.785275][ C0] Call Trace: [ 208.788578][ C0] [ 208.791453][ C0] vpanic+0x56c/0xa60 [ 208.795479][ C0] ? __pfx_vpanic+0x10/0x10 [ 208.800009][ C0] panic+0xc5/0xd0 [ 208.803754][ C0] ? __pfx_panic+0x10/0x10 [ 208.808185][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 208.813832][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 208.819480][ C0] check_panic_on_warn+0x89/0xb0 [ 208.824446][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 208.830106][ C0] end_report+0x73/0x170 [ 208.834366][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 208.840007][ C0] kasan_report+0x128/0x150 [ 208.844527][ C0] ? __lock_acquire+0x683/0x2cf0 [ 208.849484][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 208.855140][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 208.860629][ C0] __dev_queue_xmit+0x27f/0x3820 [ 208.865580][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 208.870878][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 208.876088][ C0] ? ebt_do_table+0x2605/0x27d0 [ 208.880959][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 208.886268][ C0] ? ebt_do_table+0x2605/0x27d0 [ 208.891136][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 208.896466][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 208.901682][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 208.907079][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 208.912383][ C0] ? br_nf_post_routing+0xf0/0xee0 [ 208.917528][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 208.922922][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 208.928834][ C0] NF_HOOK+0x360/0x3f0 [ 208.932913][ C0] ? net_generic+0x1e/0x240 [ 208.937444][ C0] ? NF_HOOK+0xa2/0x3f0 [ 208.941615][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 208.946208][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 208.952109][ C0] br_forward_finish+0xd3/0x130 [ 208.956967][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 208.962875][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 208.968349][ C0] NF_HOOK+0x360/0x3f0 [ 208.972429][ C0] ? NF_HOOK+0xa2/0x3f0 [ 208.976608][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 208.981212][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 208.986681][ C0] ? br_handle_vlan+0x5e/0x530 [ 208.991467][ C0] __br_forward+0x397/0x540 [ 208.995969][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 209.001431][ C0] br_flood+0x3e6/0x8d0 [ 209.005606][ C0] br_handle_frame_finish+0x1175/0x1990 [ 209.011165][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 209.017073][ C0] ? net_generic+0x1e/0x240 [ 209.021594][ C0] ? net_generic+0x1e/0x240 [ 209.026099][ C0] ? net_generic+0x1e/0x240 [ 209.030612][ C0] ? br_cfm_config_fill_info+0x410/0x1730 [ 209.036348][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 209.041567][ C0] br_handle_frame+0x81b/0x1510 [ 209.046441][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 209.051749][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 209.057665][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 209.062980][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 209.068654][ C0] ? __lock_acquire+0x683/0x2cf0 [ 209.073621][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 209.079713][ C0] ? __lock_acquire+0x683/0x2cf0 [ 209.084678][ C0] ? unwind_next_frame+0x8f/0x2550 [ 209.089810][ C0] ? lock_acquire+0x106/0x350 [ 209.094517][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 209.100536][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 209.107064][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 209.112721][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 209.118903][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 209.125274][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 209.131982][ C0] ? dev_gro_receive+0x1097/0x2380 [ 209.137126][ C0] napi_complete_done+0x299/0x730 [ 209.142196][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 209.147768][ C0] ? gro_cell_poll+0x175/0x5d0 [ 209.152547][ C0] gro_cell_poll+0x5ab/0x5d0 [ 209.157156][ C0] ? gro_cell_poll+0x175/0x5d0 [ 209.161933][ C0] __napi_poll+0xaa/0x330 [ 209.166300][ C0] net_rx_action+0x61d/0xf50 [ 209.170915][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 209.176079][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 209.181291][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 209.186582][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 209.191790][ C0] ? sched_clock+0x3f/0x60 [ 209.196235][ C0] handle_softirqs+0x225/0x840 [ 209.201011][ C0] ? do_softirq+0x76/0xd0 [ 209.205352][ C0] ? tun_rx_batched+0x185/0x790 [ 209.210220][ C0] do_softirq+0x76/0xd0 [ 209.214392][ C0] [ 209.217337][ C0] [ 209.220285][ C0] __local_bh_enable_ip+0xf8/0x130 [ 209.225441][ C0] ? tun_rx_batched+0x185/0x790 [ 209.230320][ C0] tun_rx_batched+0x616/0x790 [ 209.235030][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 209.240255][ C0] ? tun_get_user+0x2717/0x4370 [ 209.245132][ C0] ? tun_get_user+0x2717/0x4370 [ 209.249995][ C0] ? tun_get_user+0x23cb/0x4370 [ 209.254863][ C0] ? tun_get_user+0x23cb/0x4370 [ 209.259725][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 209.265026][ C0] ? tun_get_user+0x2717/0x4370 [ 209.269889][ C0] ? tun_get_user+0x2717/0x4370 [ 209.274757][ C0] tun_get_user+0x2b44/0x4370 [ 209.279460][ C0] ? aa_file_perm+0x18b/0x15f0 [ 209.284238][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 209.289033][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 209.294076][ C0] ? __lock_acquire+0x683/0x2cf0 [ 209.299021][ C0] ? __pfx___futex_wait+0x10/0x10 [ 209.304061][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 209.309196][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 209.314675][ C0] ? tun_get+0x1c/0x2f0 [ 209.318842][ C0] ? tun_get+0x1c/0x2f0 [ 209.323012][ C0] ? tun_get+0x1c/0x2f0 [ 209.327193][ C0] ? tun_get+0x1c/0x2f0 [ 209.331367][ C0] tun_chr_write_iter+0x113/0x200 [ 209.336460][ C0] vfs_write+0x612/0xba0 [ 209.340760][ C0] ? __pfx_vfs_write+0x10/0x10 [ 209.345545][ C0] ? __fget_files+0x2a/0x420 [ 209.350160][ C0] ksys_write+0x150/0x270 [ 209.354500][ C0] ? __pfx_ksys_write+0x10/0x10 [ 209.359363][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.365451][ C0] do_syscall_64+0x174/0x580 [ 209.370066][ C0] ? trace_irq_disable+0x3b/0x140 [ 209.375115][ C0] ? clear_bhb_loop+0x40/0x90 [ 209.379816][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.385722][ C0] RIP: 0033:0x7fd07c99e019 [ 209.390233][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.409860][ C0] RSP: 002b:00007fd07d8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.418301][ C0] RAX: ffffffffffffffda RBX: 00007fd07cc25fa0 RCX: 00007fd07c99e019 [ 209.426342][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 209.434320][ C0] RBP: 00007fd07ca3500c R08: 0000000000000000 R09: 0000000000000000 [ 209.442301][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.450292][ C0] R13: 00007fd07cc26038 R14: 00007fd07cc25fa0 R15: 00007fff262cb0e8 [ 209.458334][ C0] [ 209.461976][ C0] Kernel Offset: disabled [ 209.466309][ C0] Rebooting in 86400 seconds..