last executing test programs: 36.483692454s ago: executing program 3 (id=3184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 36.353494253s ago: executing program 3 (id=3185): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x88}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}]}, 0x3c}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e23, 0x3, @loopback, 0xc0000000}, {0xa, 0x4e20, 0x4, @empty, 0x6cbc}, 0x0, {[0x9, 0x3, 0x4, 0x80000000, 0x24, 0x49, 0x7, 0x101]}}, 0x5c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='L@\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf2507000000080001004300000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000800000001f8ffff1400040076657468305f6d616376746170000000080005000e000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="280027bd7000ffdbdf256a00000008000300", @ANYRES32=r10, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x4, 0x2, {0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) bind$xdp(r2, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) 35.743954614s ago: executing program 3 (id=3189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000002300090424bd7000ffd3df25020000008ab35e4b00c501843860fa5146907bc2fbbe022b476db3554149f7627fb4dade7c30c6080b9a42f85d9163b8ff42d115016e171316ed296d4eb853ab24d1fbe2be9c5f1ba7e3efe5c7e0e1f66bce5c84a27ff7cfac887b97459bba06"], 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000022c0)=@newchain={0x32d4, 0x64, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x12, 0x10}, {0xc, 0x6}, {0xfff2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0xbe}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x81}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x3}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "84c48a5fe10198f5e52b3eb1d2bf067c"}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x320, 0x2, [@TCA_MATCHALL_ACT={0x154, 0x2, [@m_ctinfo={0xf8, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0xc2, 0x6, "1710bde8a6e81bd70e333530a1907ebc4c2df924b44ec7aee0787af41cf25f2891d28736e3ca9b78968eb23c413e10523d1ca69af40261a90c0a557165bbb19e1b4d61ee56e46a7fa4f8f3c1b70f0ff2144fd3aa211bd7a5417ddd69e50822985979767b2748ab33b27ec553b0628a5521696e60025e244c69004ef2d1d7272b1a587f53cebbc8e95e898a5cff67ccee8da36ab6baebadc25095cd24751924abebcac1c815f8d29c2be341a923887e73eac7f603eeb348b4a4b09429fb50"}, {0xc}, {0xc, 0x8, {0xbf841280c247cbfd, 0x1}}}}, @m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, ' '}, @TCA_DEF_PARMS={0x18, 0x2, {0x10000, 0x7, 0x10000000, 0x8001, 0x9}}]}, {0x9, 0x6, "e5a40e07dd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x1a0, 0x2, [@m_ct={0x14c, 0xd, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0xf}}, @TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0xffffffffffffffff, 0x7, 0x8}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_MARK={0x8, 0x5, 0x8}]}, {0xec, 0x6, "5103b8417af297944f53f278006b952a3d30b45801b1ec4b5f0e576eb576282d258ed107b75c55309e211347e3a4a598bd12b9ba0ca7a3e631228d436a4af1e70be858be4a53c47aeafcdf1c4f41bebe6a9b40808bf8d55d13058f2af86d76efb5d51bdf8f8575ad5e878c9d71b3c4d96f69620f1121835ea9011b97bef89a1ac11757fd68d86494e9a9be3c541a25aeb1cdfa2d9321cff73faa2547e8717b59ba98d525381441adfa02f1b574bef41dde1386a6a9d72c983494cb097f5bbb75879c07ec9677acbbcd8cb592b3b7ff5b045168de57b05aac34b1546f9b62eb13221cc6def1057c81"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x50, 0xe, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb282}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xfff3}}]}, {0x9, 0x6, "2c708d21f4"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1fffe}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xad, 0x1}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2ee4, 0x2, [@TCA_CGROUP_EMATCHES={0x134, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0xfffd}, {{0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xa3, 0x1, 0x1}, {0x5, 0x3, 0xa4, 0x4, 0xd}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xf0, 0x2, 0x0, 0x1, [@TCF_EM_META={0xac, 0x3, 0x0, 0x0, {{0xb, 0x4, 0xf}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x0, 0x2}, {0xa73, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_VAR="45f53f562f06e30143", @TCF_META_TYPE_VAR="ff0e", @TCF_META_TYPE_VAR="40ed6821a3", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="82e08dba43ebbbb2", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x905, 0x10, 0x2}, {0xfa5, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="3ea91c", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="19d35ccfb0dca3e32c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x3, 0x1}, {0x6, 0x29, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xe, 0x2}, {0x3, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e8ebcc", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="43ffdec7967b11", @TCF_META_TYPE_VAR="a2caa15a007ed1"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x3}, {0x1, 0xfffffbbe, 0x6, 0xffffff01}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfff9, 0x7, 0x4}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x10, 0x8, 0x1000}, {0x4, 0x6, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_ACT={0x2dac, 0x1, [@m_ctinfo={0x80, 0x6, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}]}, {0x39, 0x6, "c3c0ab292f03000000ba7aa50b5bbd097594b0f54742a70001000000107952b7df41040be73fd2de800e45e0b75af910ecb1e14d00"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x5c, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x400, 0x3, 0x40, 0x10}, 0x2, r4}}]}, {0xf, 0x6, "f02f5a5ef14d069cf0b56f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x17c, 0x17, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x5, 0x20000000, 0x1, 0x9}, 0x147765290cede2ec, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x1, 0x10000000, 0x3, 0xd8c}, 0x0, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6ead, 0x8, 0x10000000, 0x5, 0xf1}, 0x3, r4}}]}, {0xef, 0x6, "6b3317b165f6451fda31ce5a9cc4598d6fbbb2add7a45a26344ba9fcbfb1112c27a5776291b24f849258e4961d6ed1a025a0b0b6f7bec7cb7ade6a1171d25dff61b1023cde62719ff85d2b2b99b5c89696bdf1bc42248a133ba845580c5549fb2122e319b9ddee23f3efa0b5d4dd28499a663f6550f41a87d79b0372cafbfa458804c39d17f365670076361877bcbd38c3972d7908cdb1bf9a9687cdd6ba683ee9405c2068af67c93f476598cbe98fa9c1bce82e89a679b009c0a2c0aef9fa54c405e21f02c95b4e89289f89da8f3780e400988a92933be227876339c92b6df79827ec59bf892248b5bd8c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x2b50, 0x11, 0x0, 0x0, {{0xb}, {0x2b18, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x9, 0x10000, 0x0, {0x3, 0x1, 0x3, 0x1000, 0x4, 0x217c}, {0x5, 0x0, 0xfd2, 0x2, 0x9, 0x2}, 0xee0f, 0x9, 0x80000000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x3, 0x2, 0x4, {0xbd, 0x2, 0xc, 0xe, 0x3, 0x9}, {0x1, 0x2, 0x34fc, 0x4, 0x7, 0x200}, 0xc, 0x4, 0xcf72}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xf, 0x3, 0x5d, 0x200, 0x879f, 0x4, 0x0, 0x6, 0x8, 0xa, 0xd9b, 0x7, 0x4, 0x7, 0x9, 0x0, 0x80000001, 0x1, 0x1, 0x28, 0x600, 0x0, 0x5, 0x9, 0x5, 0x7, 0x4f7, 0x8, 0x3ff, 0x249, 0x3a70, 0xfffffff7, 0xfffff119, 0x8, 0x9, 0xb, 0x1, 0x7, 0x6, 0x0, 0x1000, 0x40, 0x1, 0xc, 0xc0000, 0x7ff, 0x9, 0x6, 0x40, 0x80, 0xffff, 0x0, 0xfffffff1, 0x80000001, 0x4, 0x3, 0x4, 0x6, 0x975, 0x4, 0xc, 0x0, 0x9, 0xd, 0x456, 0x4, 0x8a, 0x0, 0x7fff, 0x3, 0x0, 0xfffffffe, 0x5d62, 0x5, 0x2, 0x4, 0x800, 0xc, 0x0, 0x6, 0x1, 0x3, 0x3, 0x2, 0x2, 0xffff, 0x7, 0x7, 0x0, 0x1, 0x9, 0x7, 0x7, 0x3a2, 0x7fffffff, 0xcf, 0x2, 0x5, 0x1, 0x9bb, 0x8, 0x5, 0x2de, 0x0, 0x1b1, 0x8, 0x6, 0x3, 0x5, 0x3, 0x10001, 0x9, 0x9, 0x3, 0xe, 0xfffffff9, 0xec0, 0x8, 0x4, 0xc3e2, 0x9, 0x0, 0x5ec, 0x2, 0x401, 0x6, 0x2, 0x2, 0x53, 0xb, 0x8, 0x6, 0x7, 0x0, 0x8, 0x3ff, 0x2af, 0xffff, 0x1ff, 0x6, 0x90d2, 0x8, 0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x7, 0x1, 0x80000000, 0xfffffffe, 0x1, 0x9, 0x0, 0x7f, 0x6, 0xc, 0x8001, 0x6a0e, 0x5, 0x3, 0xfb, 0x3ff, 0x5, 0x4, 0x1, 0x10000, 0x0, 0x9, 0x0, 0x7, 0x9, 0xa96, 0xfff, 0xec3f, 0x1, 0x5, 0x0, 0x4, 0x4, 0x7, 0x17e, 0x7, 0x2, 0x417, 0xf5c6, 0x1, 0x7, 0x10000, 0x7, 0x2, 0x9, 0x3, 0x6, 0x2, 0xd304, 0x1ff, 0x4, 0xfffffffe, 0xa, 0x26b, 0x5, 0xfffffff4, 0xfffff800, 0x8, 0x7, 0x9, 0x5, 0xffffff75, 0x4, 0x0, 0x8, 0x7f, 0xfffffffa, 0x3, 0x4, 0x7, 0x6, 0x0, 0x6, 0x5, 0x3, 0x7, 0x1ba1378d, 0x9, 0x2, 0x80000000, 0x3ff, 0x8d, 0x4, 0x7f33, 0x7fffffff, 0x7, 0x5, 0x1, 0x0, 0xa, 0x0, 0x1000, 0x6, 0x3, 0x9, 0x2, 0x3, 0x4, 0x6, 0x5, 0x0, 0x0, 0x0, 0xf, 0x7, 0x10000, 0xe865]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x80000000, 0x7ad, 0x7, 0x6, 0x10001, 0x19d, 0x8, 0x1, 0x4, 0x6, 0x101, 0x0, 0x0, 0x1afe, 0xa1, 0x4, 0x80000000, 0x2, 0xffff, 0x5, 0x416, 0xe685, 0x80000001, 0x80000001, 0xffffffff, 0x8001, 0x4, 0x4, 0x2, 0x0, 0x9, 0x1, 0x3ab5, 0xb211, 0x6, 0x1, 0x8001, 0x7, 0x4, 0x9, 0x1, 0x0, 0x5, 0x5, 0x2, 0x76d1, 0x120000, 0x5c, 0x80000, 0x5, 0x0, 0x7, 0x9, 0x0, 0x6, 0xfff, 0x65b4, 0x9, 0x2, 0x6, 0x13, 0x481c, 0x3, 0x6, 0x2, 0x80, 0xfff, 0x5, 0x8, 0x3, 0x6, 0x8000, 0xc, 0x97, 0x5, 0x8, 0x9, 0x7, 0x9, 0x80, 0xe31, 0x0, 0xe, 0xd0, 0x8, 0x5, 0xfffffff8, 0x7, 0x7, 0x8001, 0x7fffffff, 0x2, 0x84e75e1, 0x0, 0x100, 0x0, 0x8, 0x5, 0x7, 0x80000001, 0xff, 0x92, 0x8000, 0x3, 0x0, 0xfe1, 0x401, 0x40, 0x401, 0x0, 0x1ff, 0xb, 0x4, 0x9, 0x9, 0x7fff, 0x956, 0xa8, 0x0, 0x8, 0x6, 0x4, 0x0, 0x401, 0x9, 0x4, 0x1, 0x2, 0xd, 0x400, 0x3, 0x8, 0x8, 0x7ff, 0x3, 0x6, 0x5, 0x1, 0xd264, 0xffff22f7, 0x244, 0x8, 0x3, 0x4, 0x3, 0x1, 0x5, 0x8001, 0x9, 0x1, 0x9, 0x1, 0x5b09, 0x4, 0x29eb, 0x5, 0x3, 0x6, 0xff, 0xd5d3, 0x0, 0x6f3, 0xff, 0x3, 0x2, 0x0, 0x5, 0xfffffbff, 0x7ff, 0x6, 0x8, 0x3, 0x8, 0xfff, 0xd9e, 0x1e, 0x7, 0x8, 0x9b, 0x7, 0x80, 0x2, 0xb, 0x1000, 0xc, 0x5, 0x6, 0xffff, 0x3b7f, 0x0, 0x9, 0x7, 0x2, 0x8, 0xf, 0x7, 0x100, 0x8, 0x5, 0x81, 0x8, 0x3ff, 0x9, 0x3, 0x2, 0x9, 0x8, 0x1, 0x0, 0x7, 0x9, 0x3, 0x795, 0x9, 0x8, 0x10, 0x14ed, 0x101, 0x6000000, 0x4, 0x6, 0x5, 0x2, 0x200, 0x5, 0x6, 0x400, 0x7, 0x2a, 0xfffffff7, 0x10, 0x7fffffff, 0x5, 0x200, 0x81, 0x0, 0x1, 0x5, 0x3, 0x6, 0x4, 0x4, 0x8, 0x8000, 0x2, 0x535, 0x4, 0x1, 0x8, 0x8, 0x800, 0x7fffffff, 0xfffffffd, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xf, 0x0, 0x1, 0x9, 0x6, 0x0, 0x7ff, 0x8000, 0x9, 0x8001, 0xa, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x0, 0x8, 0xe, 0x12a, 0x8, 0x0, 0x10001, 0x1, 0x8, 0x0, 0x1, 0x67, 0x10e7, 0x967, 0x400, 0xe, 0x1, 0x2, 0x4, 0x3, 0x8, 0xb, 0xffe00, 0xffffffff, 0xc000000, 0x8, 0x2, 0xa16e, 0xac7c, 0x4, 0xd, 0x5, 0x80, 0x3, 0x0, 0x3, 0xd8, 0x8, 0x4, 0xf, 0xee5, 0x101, 0xdb, 0x4, 0x7, 0x0, 0x8, 0x8, 0x8000, 0x100, 0x100, 0x10, 0x428, 0x6, 0x7, 0xe, 0xe, 0x3, 0x3, 0x3, 0x5, 0x9, 0x6b24, 0x2, 0x4, 0x7, 0x2, 0x8, 0x8, 0x1, 0x3a, 0x9, 0x7f, 0x2, 0xfffffffc, 0x200, 0xc, 0x4000000, 0x194, 0xd, 0x10000, 0x0, 0x1, 0xcf00, 0x2, 0x9e, 0xfffffffe, 0x2, 0x3, 0xffffffff, 0x0, 0x1000, 0x5, 0x7fffffff, 0x1ff, 0x2, 0x3, 0xff, 0x81, 0x1, 0x75f, 0xfffffffe, 0x1fc78bdd, 0x3, 0xbd, 0x1000, 0x5650, 0x0, 0x9, 0x7, 0x86, 0x5, 0x800, 0x9fcd, 0x312, 0x1, 0x6, 0x2, 0xffffffff, 0x8, 0x9, 0x2, 0x1, 0xfffffff9, 0xe4, 0x7, 0x40, 0x31, 0x4, 0xffff, 0x8, 0x0, 0x4, 0xe64, 0x0, 0x0, 0x1, 0x7, 0xfffffff8, 0x2, 0x1ff, 0x0, 0xfff, 0xe69, 0x6, 0x4b3, 0x0, 0x200000, 0xffffffff, 0x80, 0x7, 0x2, 0xe, 0x8, 0x1f1, 0x8, 0xf, 0xbc2e, 0xfffffffb, 0xa72e, 0x1, 0x2, 0x8, 0x3, 0x6, 0x0, 0x3, 0x4, 0x0, 0x2, 0xccd, 0x0, 0x9, 0x7fff, 0xc, 0x20000000, 0x9, 0x3, 0x80, 0x7, 0x2, 0x9, 0x3, 0x3, 0x9, 0xfffffffa, 0x43, 0x7ff, 0x7, 0x9, 0x2, 0x6, 0x3, 0x4, 0x5, 0xfff, 0xb19a, 0x8001, 0xa, 0x4, 0x8, 0x10000, 0x86, 0x4, 0x2, 0x5, 0x1000000, 0x6, 0x80000000, 0x6, 0xb, 0x8, 0x2, 0xfff, 0x4, 0x3, 0x8, 0x1, 0x5ac0, 0x1, 0x9, 0x1, 0x3, 0x521123e5, 0x6, 0x40, 0xd, 0x10000, 0x1, 0x8, 0x5, 0xbfe, 0x5e, 0x1, 0x7, 0xffff, 0x9, 0xf, 0x13f, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0x3, 0x100, 0x7ff, 0x6, 0xc2, 0x4, 0x1c20, 0xffffffff, 0x5, 0x2, 0x7f, 0x7, 0x5, 0x4, 0x7, 0x80000000, 0x7279, 0x7, 0x6, 0x46, 0x3aede581, 0xffffffff, 0x7ff, 0x5, 0x3, 0xce, 0x80000000, 0x7f, 0xd, 0x4, 0x7fff, 0xc977, 0x2, 0x5, 0x5, 0x6, 0x5afa, 0x78c, 0x0, 0x2, 0xd, 0x1, 0x4, 0x7, 0xa, 0x7, 0x3, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x7, 0x400, 0x1ff, 0x8000, 0x9, 0x6, 0x401, 0x9, 0x4, 0xff, 0xfffff284, 0x8, 0xffff, 0x24000, 0xf7, 0x5, 0x9, 0x2, 0xfffffffc, 0x2ab, 0x6, 0x7fff, 0x9af, 0x7c06deb, 0x3, 0x4, 0x8000, 0x313, 0x8, 0x2, 0x9, 0x80000001, 0xfffffffd, 0x6, 0x100, 0x8, 0xc, 0x80000000, 0xbd00, 0x2, 0x7fffffff, 0x7, 0x1000, 0x80000000, 0xffffb849, 0x6c, 0x6, 0x1000, 0x5, 0x1, 0x9, 0x5, 0x3, 0x1, 0x9, 0x2, 0x9, 0xfffffffc, 0x1, 0xffffffff, 0x10, 0x1, 0x7, 0xe, 0xc1a, 0x0, 0xfffffff8, 0xffffffad, 0x2, 0x11c9, 0x2, 0x5, 0x200, 0xc8, 0x7, 0x5, 0x677, 0x2, 0x80, 0xff, 0x800, 0x2, 0xb7, 0x10000, 0x1b8, 0x6, 0x1, 0x9, 0x0, 0xa7, 0x9, 0x80000001, 0x7, 0x2f83, 0x1, 0x0, 0x5, 0xfffff800, 0x8, 0x730b4951, 0xd, 0x1ff, 0x3, 0x1000, 0x1, 0xf, 0xfffffc00, 0x7, 0x6, 0x1e3, 0x8, 0x10001, 0xfffffffc, 0x0, 0x9, 0x5, 0x1, 0x5, 0x5, 0x6, 0x7, 0x3, 0x2, 0xe9f, 0x10001, 0x5, 0x328f4aaf, 0x8, 0x1, 0x9, 0xef, 0xfffffffe, 0x6, 0x8, 0x1, 0x5, 0x5, 0x7ff, 0xffff4f7f, 0x9, 0x3, 0x800, 0xf, 0x2, 0xffff7fff, 0x7, 0x7, 0xff, 0xfffffe01, 0x9, 0x6, 0x9, 0xfffff000, 0x6, 0x165, 0xfd, 0x63, 0x77, 0x7, 0xb, 0x1, 0x1, 0x468, 0x0, 0xffffffff, 0x2, 0x0, 0x200, 0x7fffffff, 0x7, 0x10001, 0x7, 0x0, 0x6, 0xfffffff9, 0x1a5, 0x1, 0xad9c, 0xfffffff8, 0x4, 0x3, 0x9, 0x5aba, 0x7, 0x9a, 0x8, 0x4, 0x9, 0x6, 0x46b7, 0x5, 0x0, 0x3c2, 0x1, 0x40, 0x8a2c, 0x182, 0x8, 0xb, 0xef, 0x9, 0xffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xffffffff, 0xb, 0x3ff, 0x7, 0x44, 0xffff, 0x7, 0x1, 0x800, 0x0, 0xa71f, 0x7, 0x6, 0x1, 0xed64, 0x81, 0x4, 0x9, 0x8, 0x2, 0x98, 0x40, 0x4, 0x3, 0x7, 0x4, 0x3, 0x0, 0xd, 0x879e, 0x9, 0x7, 0x5, 0x1, 0x3, 0x4, 0x1, 0x8, 0x4, 0x5, 0x7, 0x3, 0x1, 0x4, 0x80, 0x5, 0x7, 0x29, 0x81, 0xe900, 0x8e8, 0x5, 0x1991, 0x8, 0xff, 0xfffffffb, 0x6, 0x401, 0xffffff00, 0x8, 0x6, 0xffff43b3, 0x8, 0x7, 0x4, 0x0, 0x9, 0x81, 0xfffffffc, 0x3, 0x7, 0xff, 0x7ff, 0x3, 0x400, 0x0, 0x3, 0xb, 0x904, 0x1, 0x6, 0x1, 0x9, 0x4, 0x6, 0x9cf, 0x0, 0x8, 0x5, 0x6, 0x9, 0x0, 0x10, 0x4, 0x3, 0x4a, 0x5, 0x80000000, 0xfffffffa, 0x2, 0x5, 0x2, 0xffffffff, 0x3, 0x10001, 0x10001, 0x5, 0x1, 0x67, 0x48a, 0x400, 0x1000, 0xea, 0x5, 0x0, 0x7, 0x8001, 0x3, 0xa, 0x80, 0x7, 0xd, 0xd, 0x4, 0x7f, 0xffff, 0x8001, 0x9, 0x1ff, 0xa, 0x81, 0xc6a, 0x8, 0xd0000000, 0x401, 0x1ff, 0x164000, 0x400, 0x1, 0xc, 0x0, 0x7, 0x7f, 0x4, 0x7, 0x6, 0x3b76, 0x9dc, 0x3, 0xb, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x3, 0xc, 0xfffffff9, 0xfffffff8, 0x81, 0x2, 0x7fffffff, 0x3, 0x4, 0x0, 0x1000, 0x1, 0x7, 0x9, 0x9, 0x0, 0x6, 0x80000000, 0xffffffff, 0x7fff, 0xa00, 0x3, 0x7, 0xc474, 0x6, 0x4, 0xffffffff, 0xea7, 0x800, 0x2, 0x13e1, 0xf5, 0xa2, 0x7, 0x22, 0x7, 0xc, 0xfff, 0x4, 0x3, 0x9, 0x9, 0x5, 0xa9, 0x2, 0x1, 0x3, 0x2, 0x5, 0x1, 0x485b, 0x6, 0xfffffffc, 0xc, 0x5, 0x9, 0x5, 0x5, 0x7fff, 0x7af5, 0x3, 0xd, 0x0, 0x80, 0x7f, 0xff, 0x4, 0x2152, 0x1, 0x6, 0x0, 0xc0, 0x7, 0x7fff, 0x532d, 0x35a4, 0xe9, 0x7, 0x1, 0x2, 0x85, 0xe0, 0x37e4, 0x4, 0x7fffffff, 0xffff8000, 0x4, 0x1, 0xe, 0x2, 0x7106, 0x4, 0x5, 0x401, 0x80000000, 0x2, 0x7f, 0x10001, 0x1, 0x9]}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd8f}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff0}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0xc9ea, 0x1, 0x9, 0x7, 0x9, 0x7, 0x21815718, 0xffffffff, 0x1fac, 0xf, 0x8, 0x1, 0x2, 0x4, 0x169, 0x0, 0xff, 0x7, 0x90c, 0x3, 0xd, 0x0, 0xfffffffd, 0x9199, 0x2, 0x20, 0x2, 0x6, 0x8, 0x8, 0x9, 0x3, 0x3ff, 0x10b, 0x5, 0xf41b, 0x9, 0x9000, 0x4, 0x6, 0xfffffffb, 0x3ff, 0xf, 0x2, 0x5, 0xc, 0x1, 0x1ff, 0x11, 0x0, 0x7, 0x80, 0x9, 0x6, 0x9, 0x9, 0x2, 0x80, 0x8, 0xc, 0x8, 0x7, 0x401, 0x5, 0x8, 0x4, 0x83, 0x3, 0x7, 0x5, 0xfa, 0x20000000, 0x1000, 0x3, 0x8, 0x1, 0x8, 0x3, 0x2, 0x3, 0xbe, 0x6, 0x1000, 0x7, 0x5, 0x2, 0x0, 0xc, 0x1000, 0x80000000, 0x0, 0x0, 0x3, 0x3, 0x7, 0xb7a, 0x5, 0xef08, 0x2, 0x1, 0x6, 0x8000, 0x70, 0x0, 0x7, 0xfffffffe, 0x9, 0x5, 0x40, 0x8, 0x2, 0x9, 0x9, 0x4f52, 0x599, 0x5, 0x0, 0x40, 0x8, 0x8ada, 0x40, 0x0, 0xdc41, 0x6, 0x7, 0x6, 0x8, 0xfff, 0x3817, 0x4, 0x5, 0x8, 0x200, 0x7, 0x8, 0xfff, 0x5, 0x7, 0x0, 0x401, 0x1b0, 0x34, 0x8, 0x3, 0x0, 0x7, 0xf, 0x0, 0x44, 0x7, 0xffff7fb6, 0xe48, 0x0, 0xe77, 0x3, 0x40, 0x93, 0x6efa6185, 0x4, 0x6, 0x7, 0x7ff, 0x2, 0x6, 0x6, 0x17, 0x401, 0x8, 0x8, 0xb, 0x6, 0x5, 0x8, 0x1000100, 0x5, 0x3, 0x0, 0x0, 0x85, 0x8, 0x9, 0xab6, 0x7d1, 0xf, 0x81, 0x6, 0x3, 0xd25d, 0xc, 0x8, 0x8, 0x3, 0x8, 0x7fff, 0x6, 0x5, 0x1ff, 0x9, 0x7, 0xd5f, 0x1, 0x3ff, 0x1, 0x3, 0x80000000, 0x6, 0x7, 0x0, 0x2, 0x3, 0x4, 0x7, 0x4, 0x1, 0x5, 0x8, 0xd, 0x5, 0xd9, 0xfffffffe, 0xe4, 0x45d7, 0x73, 0x4, 0xffffffff, 0x0, 0x1000, 0x7, 0x2c9, 0x6, 0x0, 0xfad, 0x3ff, 0x9, 0x7, 0x2, 0xcbd, 0x7, 0x7, 0x2, 0x4, 0x0, 0x6, 0x1, 0xe, 0x9, 0x20, 0xa, 0x0, 0x9, 0xd, 0x7305e947, 0x4, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x7, 0xe09, 0x7fff, {0x2, 0x2, 0x7, 0xfff5, 0x167, 0xc}, {0xc0, 0x0, 0x642, 0x2, 0x8000, 0x1}, 0x1ff, 0x81, 0x3}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x10000000, 0x2000000, 0xf, 0x3, {0x4, 0x0, 0xce, 0x9, 0xff80, 0x8001}, {0xc9, 0x0, 0xe3, 0x8, 0xf456, 0x6}, 0x2, 0x4d, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfd, 0x2, 0x80000000, 0xfffffff8, 0x200, {0x8, 0x2, 0x0, 0x74b, 0x401, 0x401}, {0x7f, 0x1, 0x1, 0x5, 0x10, 0xfffffbff}, 0x1, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0xffffffffffffffff, 0x26c, 0x101, 0x800, {0xff, 0x0, 0xf, 0x1, 0x2, 0x81}, {0xed, 0x0, 0x9, 0x10, 0x8, 0xbbef}, 0x2, 0x7, 0x1}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x1, 0x8, 0x6, 0x3, 0x7, 0x7, 0x404f, 0x6, 0x6, 0x400, 0xffff, 0x5, 0x10000, 0x8, 0x5, 0x6, 0x1000, 0x6, 0x9d5, 0xfffffff8, 0x4bc2, 0xffffff93, 0xd, 0xf, 0xb14, 0x4, 0x1, 0x5ef, 0x80000000, 0x10001, 0x9, 0x2, 0x10001, 0x35, 0x5, 0x70, 0x80000000, 0x200, 0xfffffffe, 0x2bc8, 0x8, 0xeec6, 0x40, 0x7, 0xff1, 0x506e, 0x5, 0xe, 0x7, 0x9, 0x0, 0xffff, 0x4, 0x6, 0x5, 0x8, 0x1, 0xc2bb, 0xd, 0x8001, 0x6, 0x7, 0x7ff, 0x4, 0x7, 0x200, 0x2, 0x7, 0x9, 0x2, 0x7fffffff, 0x7, 0xe9e99100, 0x7ff, 0x9, 0xffffff40, 0xff, 0x5eb6, 0xa, 0x9, 0x8, 0xd, 0x80, 0x6, 0x7, 0xffffff31, 0xfffffffe, 0x49fd, 0x6, 0xfffffff9, 0x6, 0x800, 0x401, 0x9, 0x29eebac2, 0x2, 0x7, 0x1, 0x9, 0x6, 0xefd1, 0x8092, 0x6, 0x2, 0x0, 0x4, 0x1, 0xfffff28f, 0x5, 0xed, 0x9, 0xf72, 0x7, 0x4, 0x69, 0x6cf, 0xe9, 0xd43, 0x5, 0x8001, 0x4, 0x3, 0x5, 0xc9b, 0x1, 0xfffffffc, 0xb, 0xc2, 0x94, 0x6, 0x46e00000, 0x1, 0x9, 0x7, 0x10000, 0x8, 0x80000000, 0x55d8, 0x2, 0x81b, 0x7, 0xfffffff9, 0x2, 0x85c, 0x9, 0x7f, 0x2, 0x9, 0xfffffffd, 0x4, 0x8a, 0x5, 0x0, 0x40, 0x1, 0x0, 0x5, 0x5, 0x40, 0x3, 0xd35e, 0xf, 0x448f, 0x100, 0xc000, 0xffffffff, 0x2, 0xfffff3c7, 0xcb, 0x80000001, 0x0, 0x0, 0xa, 0x0, 0x6, 0x1, 0x7, 0x401, 0x33111666, 0x9, 0x6283, 0x0, 0x80000001, 0x7, 0xc, 0xb09, 0xfffff528, 0x1e, 0x1, 0x9, 0x9, 0x6, 0x400, 0x6, 0x2, 0x3, 0x800, 0x1, 0xfffffff9, 0x8000, 0xc0, 0x93181fcf, 0x8, 0x1, 0x6, 0xe2b9fdf, 0x7, 0x1c, 0x6, 0x3d3, 0x0, 0x7fff, 0x0, 0x1efb, 0x3, 0x3, 0x3, 0x8, 0x9, 0x7, 0x401, 0x8001, 0x6, 0xc5d, 0x9, 0xc2, 0x0, 0x7, 0x6, 0x7, 0x2, 0x9, 0x0, 0x9, 0x3, 0x4cb9, 0xfffffff7, 0x1, 0x9, 0x80, 0x8, 0x401, 0x94aa, 0x6, 0x1e, 0xfffffff5, 0xfffffff7, 0x7, 0x7, 0x1000, 0x7, 0x3, 0xc, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x7, 0x7, 0xa0a, 0x5b8, 0x80000000, 0xff, 0x5, 0x1, 0x93e, 0x0, 0x5, 0x6, 0x1, 0x8, 0x100, 0xff, 0x3, 0xd, 0x8, 0x0, 0x1, 0x6, 0x6, 0x5, 0x8, 0x666cb329, 0x8001, 0x9, 0x9, 0x1, 0x7, 0x9, 0x7, 0x3, 0x6, 0x5, 0x3, 0x0, 0x4, 0x8, 0x6, 0x10, 0x0, 0xdb, 0x6, 0x0, 0x80000000, 0x2, 0x12, 0x6, 0x2, 0xdc, 0x6, 0xe312, 0x4, 0xff, 0x200, 0x2, 0x7fffffff, 0x0, 0x1, 0x9, 0x35e, 0x564, 0xff00, 0x9, 0x8, 0x7, 0x2, 0x4, 0x7, 0xc000000, 0x3, 0x101, 0x6, 0xffff, 0x40000, 0xffffff4d, 0x4, 0xc2, 0x2, 0x48dd, 0x9, 0x1, 0x2, 0x0, 0xb2, 0x5, 0x894, 0x41, 0x3, 0x9, 0xf15, 0x3, 0x6, 0x9, 0x7, 0x6, 0x3, 0x6, 0x7f, 0x8000, 0xe, 0xffffffd4, 0xa, 0x9, 0xfffffff8, 0x6, 0x11db, 0x4, 0xc, 0x5, 0xc26, 0x1, 0x4, 0x3, 0xfff, 0x400, 0xffffff1f, 0x1344d63e, 0x6, 0x9, 0x1a986f29, 0x9, 0x1dd4, 0xf, 0x5, 0x3, 0x5, 0x7, 0x8, 0x3b959529, 0xddc, 0x4, 0x7, 0xc000, 0x9, 0x5, 0x9, 0x3, 0x3, 0xb, 0x3, 0x3, 0xd1fa, 0x5, 0x3, 0x5, 0x6, 0x377, 0x8, 0x1, 0x3, 0x1, 0x1, 0xa, 0x50d, 0x5, 0xfffffffc, 0x6d6, 0x7, 0x40, 0xb1c, 0x671, 0xfffffff7, 0x4, 0x0, 0x7ff, 0x2, 0x0, 0x2, 0x9, 0x239, 0xc, 0xe, 0x7, 0x1ff, 0x80000000, 0x7ff, 0x4, 0xfffffffc, 0xfffffff1, 0x8, 0x66d, 0x7, 0x7, 0x5, 0x4, 0x8, 0xbd8d, 0x5, 0xfffffffc, 0xb7, 0x0, 0x7, 0x6, 0x10001, 0x1, 0x66a8, 0x0, 0x0, 0x7fff, 0x1000, 0x7, 0x5, 0x7, 0x0, 0xb9, 0x9, 0x89a, 0x4, 0x8, 0x8, 0x1, 0x8000, 0x7, 0x3, 0x4, 0xe0f, 0x8, 0x2, 0x25686635, 0xdb9, 0x8, 0x8001, 0x3, 0x4d, 0x4, 0x35, 0x80000000, 0xc4f, 0x4, 0x0, 0x5ed0, 0x6, 0x3, 0x9ea00, 0xfffffff8, 0x16a, 0x1, 0x8a, 0x9, 0x98, 0x5, 0x7, 0x80, 0xd4, 0xb, 0x4, 0x7, 0x1, 0xd96d, 0xffffff72, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe6a8, 0x6, 0x5, 0xc, 0x276, {0x3, 0x0, 0x4, 0x7, 0x8, 0x2}, {0xb, 0x2, 0x401, 0xd, 0x9, 0x4}, 0x4, 0x2ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2f, 0x6, 0x8, 0x8, 0xf32a, {0xde, 0x0, 0xa, 0x1, 0x2, 0x71}, {0xbe, 0x1, 0x2, 0x1, 0x7, 0xef18}, 0x7ff, 0x0, 0x5}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x401, 0x1, 0x3b7000, 0x1, 0x110, 0xdbb, 0x101, 0x5, 0x3, 0xc000, 0x1, 0x1, 0x80000001, 0x8, 0x10001, 0x9, 0x2, 0x3, 0x6, 0x6, 0x101, 0x8000, 0x7ff, 0x9, 0x0, 0x5, 0xfffffff8, 0x7f, 0x7f, 0x0, 0xfffffff9, 0x5, 0xe, 0x31f7, 0x5, 0x800, 0x9, 0xb5, 0x2, 0x7, 0x777, 0xa, 0xffff, 0x6, 0x8000, 0x4, 0x2, 0xffffffff, 0x5782, 0x8b4, 0x1, 0x0, 0x0, 0x6, 0x10000, 0x4, 0x1, 0x8a, 0x3, 0x8, 0x7, 0x7, 0x0, 0x8, 0x7fffffff, 0x2eda, 0x3, 0x800, 0xad, 0x7, 0x8, 0x5, 0x9, 0x0, 0xe3, 0x3, 0x5, 0x9, 0x0, 0x1ff, 0x78c9, 0x1, 0x4, 0x8, 0x2, 0xb, 0x192, 0x7, 0xc0000, 0xffffffdf, 0xf4, 0x0, 0x6f4c, 0x29, 0xfff, 0x1, 0x2, 0x0, 0x3, 0x4, 0x4, 0x10000, 0xfb09, 0x10000, 0xfffffffa, 0x2, 0x2, 0x2707, 0x4, 0x1ff, 0x92, 0xfffffffa, 0x0, 0x9, 0x6, 0x2, 0x80000001, 0x72, 0x7ff, 0x3ff, 0x5, 0x524a, 0x7, 0x1, 0x7, 0x886dba77, 0x7, 0xfff, 0x2, 0xc2, 0x797c, 0x7fff, 0x8, 0x4, 0x6, 0x4, 0x5, 0x9, 0x800, 0xff, 0x6, 0x6, 0x3, 0xb33, 0xff, 0x432b574e, 0x1, 0x4, 0x0, 0x80, 0x1, 0x1, 0x5, 0x7, 0x8c0, 0xfffffffc, 0x20000, 0xfffffffb, 0x2, 0x4, 0x0, 0x4a3, 0x42b80ded, 0x7fff, 0x80000000, 0x9, 0x8, 0xa, 0x4, 0x1, 0x8, 0x5c, 0x4, 0x1, 0x1, 0x7, 0x0, 0x9, 0x2, 0x7fff, 0x0, 0x8001, 0x71, 0x8, 0x2, 0x9, 0x4000000, 0x5, 0x9, 0x55758459, 0x100, 0xffffffff, 0x0, 0x88, 0x9, 0x1ff, 0x3, 0x3, 0xffffffff, 0x9, 0xc000000, 0x6, 0xe2bf, 0x6, 0x6, 0x6, 0x1, 0xb76, 0x4, 0x2, 0x2, 0x7, 0xad, 0x5, 0x3, 0x1, 0xd2d, 0x8, 0x8, 0x10000, 0x4, 0x6, 0x3, 0x80000000, 0x2, 0xff, 0x9, 0x5, 0x1, 0x9, 0x0, 0x5, 0x80, 0x80000001, 0x5, 0x3, 0xfffffb05, 0x916, 0xd3ea, 0x3, 0x80, 0xfffffffe, 0x10, 0x2, 0x3, 0x41, 0x100, 0xc, 0x2, 0xfff, 0x504, 0xfffffff7, 0xb, 0x6bd7df9d, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x7, 0xa, 0x1, 0x6, {0xfc, 0x2, 0x7, 0x0, 0xfffa, 0xfffffff8}, {0x78, 0x1, 0x2e, 0x7, 0xdf, 0x2}, 0x7, 0x6, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1000, 0x3aae, 0x6, 0xffffffff, 0x218, 0x6, 0x8, 0x0, 0xc, 0x9, 0x3, 0x8001, 0x7, 0x0, 0xfffffafc, 0x6, 0x0, 0x5, 0x5, 0x5, 0x8, 0x4, 0x3, 0x2, 0x0, 0x4, 0x6, 0x200, 0x4, 0x1, 0x5, 0x2, 0x0, 0xf57, 0x400, 0x8, 0x0, 0x200, 0x4, 0x9, 0xff, 0x349, 0x2, 0x1, 0x7, 0x0, 0xfffffffe, 0x8, 0x4, 0x2, 0x5, 0x5, 0x1, 0x8, 0x7e48, 0x400, 0xf, 0xf0, 0xabe8, 0xd9, 0x7, 0x5, 0x2, 0xe, 0x1, 0x0, 0x7, 0x3488, 0x1, 0x2, 0xe, 0xc7, 0x0, 0x9, 0xfffffffd, 0x3, 0xc, 0xc, 0x3, 0xf93, 0x1, 0x9, 0x29, 0x8, 0x9, 0xe62d, 0x4, 0x100, 0x8, 0x7, 0x70c, 0x3, 0x1, 0x8001, 0x3, 0x8, 0xfffffff6, 0x100, 0xfffffffc, 0x4, 0x3, 0xdd90, 0x2, 0xffffff7f, 0x3ff, 0x10001, 0xfffffffa, 0x8, 0x101, 0x5, 0x4, 0x914, 0x2, 0xeb9, 0x9, 0x6, 0x401, 0x10, 0x4, 0x8, 0x3, 0x5, 0x3, 0x8, 0x5, 0x2, 0x8, 0xda, 0x0, 0x0, 0x2, 0xba2e, 0x200, 0x7f, 0xe, 0x100, 0x1, 0x3e, 0x5, 0x7fff, 0x8135, 0xfdf, 0x2, 0x6, 0x7fffffff, 0x4, 0x4, 0xffff8000, 0x2bd, 0x3, 0xfffff001, 0x4, 0x7fffffff, 0xfc33, 0xfffff088, 0x0, 0x4, 0x6, 0xb, 0x80, 0xfff, 0x1000, 0x10000000, 0xfcbc, 0x80000000, 0x0, 0x1, 0x0, 0x8, 0x3, 0x3ff, 0x2, 0x1, 0xe57, 0x0, 0x5, 0x4, 0x401, 0x3, 0x8, 0x200, 0x7, 0x4, 0xbfb, 0x1, 0x8, 0xff, 0x9, 0x8, 0x8, 0xffffffff, 0x84d, 0x2, 0x6, 0x6, 0xffff, 0xffffffff, 0x1, 0x3, 0x8, 0x0, 0x94, 0xffff, 0x3, 0xfffffff9, 0xcd6, 0x3, 0x200, 0xdf8a, 0x80, 0x400, 0x9, 0x5, 0x1000, 0x8, 0x622, 0x7, 0x9, 0x1, 0x101, 0x785, 0xbc, 0x7d, 0xf58, 0x4, 0x1, 0x5, 0x5, 0x3, 0x3, 0x0, 0x37, 0x6, 0x138f6414, 0x1, 0xfffffff9, 0x10, 0x5, 0xffffffff, 0x1ff, 0x3, 0x80, 0x7, 0x1, 0x0, 0x14, 0x1, 0x6, 0x101, 0x5, 0x6303548, 0x4, 0x8, 0x1, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]]}, {0xd, 0x6, "b308b0752c8f1c4f5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x32d4}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r7) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x9, 0x5, [0x7, 0x4, 0x7, 0xfff, 0x34]}, &(0x7f0000000440)=0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000000480)={r12, @in6={{0xa, 0x4e23, 0x3, @local, 0xffff4040}}, 0x9, 0x3ff}, &(0x7f00000005c0)=0x90) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r13, 0xc038943b, &(0x7f0000000240)={0x2, 0x8, '\x00', 0x0, &(0x7f00000001c0)=[0x0]}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 32) 35.335821187s ago: executing program 3 (id=3191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x6, 0x40000000007, 0x6811220e, 0x20000100000003, 0x480000000, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3506, 0x1, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r8, 0x607, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xffffffff, 0x0, 0x9}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x16, 0x1, 0x200, 0x0, {0x11}}, 0x14}}, 0x8000) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 31.33727965s ago: executing program 3 (id=3200): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x401, 0x6061, 0x800, 0x8c0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, r0, 0x5, 0x1, 0x0, 0x9}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x24008081}, 0x24000800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x1, 0x4, 0x2, 0x2, 0x8, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000080)=0x6, 0x4) ioctl$sock_ifreq(r5, 0x8971, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) r7 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r7, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d8dd8f69a6c2df36202e14997e2262c8ca3ff57548ddca45", 0x18}], 0x1, 0x0, 0x0, 0x4c944}], 0x1, 0x40840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x15}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 30.381559269s ago: executing program 3 (id=3208): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @multicast1, 0x0}, &(0x7f0000000140)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) socket$kcm(0xa, 0x2, 0x0) 10.37480827s ago: executing program 0 (id=3319): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x44, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0xf, 0x2}]}}, "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"}}, 0xfce) 9.551670752s ago: executing program 4 (id=3324): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r2, r3, 0x2f, 0x18, 0x4}, 0x20) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 6.125094163s ago: executing program 0 (id=3325): r0 = socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) unshare(0x2020600) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 6.050822991s ago: executing program 1 (id=3326): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x4048800, 0x0, 0x0) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32, @ANYBLOB="0b1b050000000000440012800b000100697036677265000034000280"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f000000060002400000000024000480080002400000000008"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async, rerun: 32) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (rerun: 32) ioctl$NS_GET_OWNER_UID(r4, 0xb704, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000003640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="f1060a22a94afd9ba1401b99c1982d1fa941fe91a5519f3e68ad22540ea63c8767d961c863aff1086d5d0707d47df43102863479695b4a22dc73065fee4569487a41fd9eacd1d108d0cf5f6ccf6cbee02056e835966f61da42872c66a741df2a9945e87036d608ef1686a6ee43680896653357925c34622b166a37967a7f28be60c3697d08282daaac8c807cfcd1703806248df4815c279e687f1b0f18f4529dd6672a3cfd0aa62e7ddaad4f45919a0324e37311b20f75386f1a2ae9d1433e12880ffa551d2d14c5a35ef7b2c78519ab60d0b10bce2e07b555f181bbce0d4e7035cf47205c5937ef1331dec092259362e134b60fa8e6fb48bbf6e259ddb77d73e25699b32029a2b24a396539786b2b56ab991e13fdcb04dbcf3918be781c845ea1ed8e7518bd3842eccc2adc515a5db8ee81a50c7c11a0f6a7eefaa45c8d44e250a01022fa5ec7545b4629ab93864c8be88974afafedb0f14de24de4f3008d6d097a2b3d0aa77584077650a4aecff5f98322dd4d370b83b27ed4dd7e75bc76e53e8246c5aa0829bfa382f8d15b6496afe8a24ef3bcff4a738ec0b4f220d6e75453f41412bfd52b06e489bc27f1cb67813ee8b7364cd51af7876154cf24f70a866901eb98fa72c5fbd07aa9daa76e7fff67f552d4b0a1fc7cf314edf6689ba0320d046077ebed6ff5f121256113778000006c95290fd252a82f175bd37459931dc78b03408210202e6419f8c218d0ee38e625122798ba09ae508cc74ca1ba794a610eb46ffe8e686c495195459b60cb918a81eb32047c569a9e138730bfd9de141d7719deb89e3cd64c6c9b7497aaf710ec187cfe97c47298c909048444a8353d92f2ab1ef9ac885232687c0e7c211f37ae080bd08fa9e6de312aca5e4aea575dd2e5ea40fd2813f01085dbb2fc6aed786b73fcaf21f52a0532aae1e716c4ad11f1e540fac58e071a43ee2c835fdeb707aa3b29ab8120af6e8d10f06368d1f601c72759ed0c54c5307e2e5097372d8e70b9c19348cd5d9edb650811245acf2ddfc2d0735afcde4ca9087491eac8d8d4a6579af8e1d3138bd7740c303e56651456682ba99233b501cf83dc67a0650f5cb8013b9db550f8498f488e02c90657e27647e17b2f54ad80ac0c473f8ed1ba66da1a131a829e0643be5dca0c6452ead10161d2a2488c3c6b69cb7dd31956523bbf48d387c2c4b3e6f8cd2ec5782c141ed96686cc9c273977bdd22f427df070fee0d6b005a8e9fd88578c4a27f42a017fc1253c7e238ec7ecd2aa5c061bb9a7a246df77f266519d1fbbde0a2a383f414d3e197c96f60ee84a864c5c56746e6250959b6694f0e8758054fd90d22084ed4bc182d6783452f7a4b7e4deb59e335eca7a23a47590f98f0643045cadc654ae12ccf200863e50f61c425d5dd96c88f17f158211c430594752da6abc66b1c0af2c279a6badb7b6ff196f6130342209bee6533e2062f5674ead8831d7ab8b986f96c5b9edd4972816f3190af268aa3885564a6c9ab52cd0512973c1f93ea72a72ed74de7a8a066f0dfb34e0832c1fdbd3ebd26df6fbb11adee59a8126504873e970034b4c1409d2e4e24a12c5f1dd491a4d05ff79ad645631e8c749997be4386aba60ef8b2004375269d1a92290c355f6930943106f82a0e4618be5318cc5f497bcbfbdf856aa058e746c277a7fc1e337513a57957a2dbb8181148f51e09a1ca39fe28846848e9d71c8b2bd799f4e41a324faca8da607dd38d5d5e1af3d00898bbc9d600ee572b90c8016c9e00ea93041267e40efb0a8347afc4fec3f45ef31360270fbc20c89be606195c99740c69078b7d762c4162fd7656da78052949df300bfae7a980e6e4a2d7e2cb7826fe3b826df50874c35a1f5c6f158221b17c3796565191bdff4b10b1cfb31e853e30680fe18440ed75c5e19fbe5704110c18285f02953fe17892f671cae6876e8c7b658cfa1713ee80265011b742bd8148ff8352b9195e67ba80111d6def40f89284d9e9e44d5730a0dbe0a7b11c79bb686e2ad26f8f4dce659fcbf0b4d2d09b84be3183056049345ba1a5eeb86419becf2abd60111b8c02331a267323e5343d2ced00b1b8476938eef6e8b25c954fce56eca4fc164493748b135ceca0a8031e8cbf6a82bd19b1552743710d8c75f21f4184eeb7d8040fad6e5bf917e0149ab42b4b45281cb9dd790b3f4ff3eb55f269bb7c4b4dc393aaddbf868267c1d528536f0c7fcbe7ae352f02807fe507083886448c391cbf3d2510e8b859811084fb6fb88a0b4f97be72adf104ef95df765ee4f04a4b6ad25b3afbc8e125d326b47a17633cb406c446873600df17d15a5e04022746025ee955a5e12802a7bf4357f1d41bfc77e8b75fe2f9ba779533b4a9fee4e3152bf8c122350fe107dcc06b0f14ac8d661b698f865ebd89874daa4a5cf545a01becd8833a250a84e8cff403698078cca3bc6230610316d8888d44ffa88edbfb7073ac57c7301b39227c1f5f672768ca8c3c1e3cba85aa7cb51193055f0b2beaec08d64eb8f946bfc79c58445eed9a0b5fb853db7d7d67504a1401292919a8cddd158f26454e45b1e5066c7f073d9c6eaf968d8d603c754e2d6a1fc52fe02c2367952b85bdaf13862e1137f673a63960e7904b84934c101b6bf009561f58ffbebbad6b66a76aa3669ceaf5bf3c0fc2f15951d6e848877c6eb6678cbdaec99351326cb001abe0081cf571efc415c62af052d86053e1da794b375f16d4c579a3504392ce3a490de234db2954f6c33f3d255b251d7d021faac5c2978b176f2020b4a5b52dfebf67d7407ff90890c1cb71b10598e6efa728b520e4fa8736b0fad9684ff6757b9ed8bda6f9a5fb2440a11150c56a67f9bf07d0e729da3d2bc9229fd6f55eab9d7a78eb3a38a5d675d5ea9fea2c6f0e4687fd44e865b654cc6e0dbcc4c8cfc96f578fb08176cd47e65d663695de9ecdc68f7e2d4c9aa752f1ced5948903abacc220e4c7989b1a0ab7d83e6cdb8dea52454702d666f73badade892e7be5f9f685f8440aa7c0483d01de0c3843b03d3ba25441065d2b680d65ba1a5cb4f3ca7157a93263702e12e2951e5f2289fd0fe446e36daf2989cea88f7fc9c1ab7296f87ad78f2b33194c87f9bd035223d5b832a8cbce70ee7246108db45b82f8770c5f778a80de89bfba5ce4f8176835d78bc896485f568a66841535694d3f2c7b354724c959840b7d8944ddf289516c5e028bdd55e8893353c3d5aa5233584368cce2b9a3ecee8e8c3ea453c3065aff5e25ede21fc37f26277e2e0336b1b8aabd6f4f2486b92823db859b9be4ce6da60812b003a727e58490ebbbce0652961b7098ae695069ab75fb8a9f6ca29379010b511d85747db517caa3e2f69c2f42948d454291b3e8dc2ae035f8ffc9b829e4776b36ae5ccfb90f49015ad092799916140830a0f6399c25ae9130fdd994e046ad5ba3485b70874646d00e34932021590250c74021d5a5120b9c4d10c9e360cf24774f42ae9991e2f21ae1e8ef4cff3dddab6f9c1e7505dabc21a1044eb18a988d947ae3ff0246c9ef378537d0924d7b5ca38be25548e125e284805691ccfd4459023a864171ed38816ef691348dbe55a68be6306e340cd6e5e91242dd4505adf5b9a4b2db9e984ab805f01b45c512a55bb105d9d89c388626b7073b1feecdc8034bdd4996120b367283f906ab9265f2a6706969f03202551ef09e00d81868a27117184a59ce781d129f5d5cfecb90e956f50af52c033058a1270b3f54452de45b7e2aab11883762854581bfe0a485757073012c2658d7d17b1d7fbfa7f6e2f6ff01e49897d80d66cf23c04deb32dc71806728c556a7e910f8e77c8bb87aeeda37a8741cb14e3b1585c5772c99f75e46c91bfd4786b941522a301bbff5288faf7b194dc4dd25d33043c9865c1eaa657e62ffec2316637275dbd2cca496f31b4a8b40ea6f5004726af38a13002053776fdb527c12156da407840867b49486b0930ed833b1ffde227e1df677c69d5f3d7db954302e33b928570515e9e933aefbea3024474d392f279e0b3bed71885f1a49fe4a70a7a31b1d88bfb761ec90fcffc3f5314dbf517a665518f49af033315cd06e53d0bb36475c045cb7f2206359cbef0e44d82ab8ac2958d6d02a42f10defea53aaa3b16439ab13e820e1668d4d4b8d882077a9540cdc68bd37ec86123d11538fae6a3502424d09f16f9063e06433e8c39eec9d430bbeb4b4dadd18bbfb0f7b207a3928048d781b4a7ec540e5c2dbd6b100c9591640c88a538401ae398e3ea3b7abb943fd7a4a81c173c75ff0fff112d9054747949da9b945ea0760c4b84c1e9a53810b44f6167d07419adce381229be72b942baca74f972266f0570093c48d3e7e74512704b9dea0bffac57827f8cb12343830317983178f8b4cb97b802a578dbc069c961a5509228c927f3e86a4744b39d0b21990539ef6b64895794e52a54edb61bbf35e504c3e2a36783538de51891306ab5acf9214094dd238e676fe27a0141db1c6f0324f10de0b4a30bed5f23631f439c36f6f1e97e1278cf8f240f1fdf18968dc5661fb585b37c59f7adf826aa7f8c3037a6060a84ecb8e2e714d8adece9319a0736460dcbf1a315de8df6afa4a254ab13bf0fe60cb3da6e56a384b4ab32cf0b2ee1144a7d344a8a41b853ea49c44501c0ae119a582c0b291cd70727a02cb9eee7eaea2a0c175bfdbb29283c70f6f325a7f0b9b427e6e33d442c7ecb7e4731ae4edf979c73d25e57f8f4340a68c425277fa34fca8271b1970dda65acafe584e93a4ef5eea5b2fe2ad97cbb598772b57a008854994368cb3d2b5f580c6c84be61fbd98d8a65e6add1c2ae2617d818d609a15dc6e42b6f1d4d873b697a6ba41396582279729f33605e7e1602f4be76156e0ed8e3e8bfd5094aa4b07d43da7d99755e1f82fd5f8ceb789f7b635234bb1dbe242ab7aeff34b6af6fc4a4ed63b632f0b5f7fbd189b6e2fe8f9615cceb6f84bc5cacc3a3007010b3f4cd333149efb89845c4ed81e4231cbf331f8c06cc15c80fc8f56ce7b945a57e5b66f14ed0fd146936914d28936e5a117c5b5341066a00eaaac32627c7eda31baea2eb2fe003773c0d39a551a08bf53f6af1879ec803e8a5bad774cfdc8eb5f74be32faec60cf40ccc17cf67070870c1862f0805f1245ecec3d5e3449f1bcf39af9b6660819836f4db6858c8a2e136f34f451ddab5af3f78d6e55ba3e97b66b71e1b820dff2d3b46553f47d2e3c7b69fcd03ec8ccdeeb73b3e89ab62375acb2851138eeec5284f87135f7b1ca1d7c8e1a4ebf530d0d59f228a87fefe61e8d4806db9d04118506a539338eeaa4266b81a3d44dd461dce6bdfe9e74890aead455a5e7210170ec67be3cf81adc193b5232ca153f0a6508d8bff9f37be5ba46cf2abd3422f6b2f62a38d65e8aae29b359f9d1c539dabce5d2d4c1f4cabd2155c41412654f9302a38041810e0c0e2296b0371a9a5429fd244be8afb0d1fb2157aea5bd2ffb622c1870f1786cf21f1f4271907af9fdd79730b1eb4baeda2279312219d989d46a822bb0336b9adffef6bfb197a62d7d7d75784cddef5952c80bf862e7b2fce008c11e75d8e587e71df8647c35fab4215fac22444aaf9a4f9da44a56ec46a22a08c6242d7e17a247841152585a4a51c6d16617a92400f67e8be756d04e4410ce851c58f479b0c181264e51fba972e83c1b869ee5a0bb16a2d0a096fa44f4596cf48fa3164b4025359d7c41efbb3606176ce9d24348acca36a5d969cffc7dd2e97cb23fa02da0f2", @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280", @ANYRES32=r3, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYBLOB="c1ea583e2a73e4df25172fb60b3e8411163a607fba743153ade2f03043119afb22c468cfc0547b450b75a662a63c56f3b340405678bc61717dcde325a25d20f4fc49ecae4ff33cda69d984ef3cc0ffcbc5cb3e796e3c49c702c8b3aa054cdf22dd03bae60679d17739a411c78b1d7b"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 5.888140514s ago: executing program 2 (id=3327): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x8000}, 0x50) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000580), 0x58}}], 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xf, 0x0, &(0x7f0000000640)="e0b9540db7f96a7ed38703e9ab0200", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e0021002bbd70000000000007004000"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x1, 0xa7e, 0x4000033}, 0x2c) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x202, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000140)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="58000000000000000000000002"], 0x58}, 0x4840) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.849190195s ago: executing program 0 (id=3328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'macvtap0\x00'}}, 0x1e) recvmmsg(r4, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0xffffff34}], 0x1, 0x62, 0x0) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r4, &(0x7f0000000f80)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/183, 0xb7}], 0x1}, 0x6}, {{0x0, 0x0, 0x0}, 0x4579}], 0x2, 0x120, &(0x7f0000001080)) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x5, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$packet_buf(r5, 0x107, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5.679780757s ago: executing program 4 (id=3329): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000001c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 5.679230168s ago: executing program 1 (id=3330): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x40, r3, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r8 = gettid() r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r9) connect$unix(r9, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000040)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000040)=0x2b68, 0x4) connect$inet(r11, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r11, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvmmsg(r11, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0xfffffe01}], 0x1, 0x2000, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESOCT=r10], 0x1c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r12) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="0010001075189111149a883ac06078020bf058f09dde9f8a55d00af57ae6fb5633d9ff09055fad9dca158534c8594681a5f5979dfbae719871d24947b5a0c593478106a8e9e517519864dbff1edee6d40e9728da6e96436c1418887549b3482d24c851a7036112e2787d7a3947125f9263f4cde65bf5b8c4923e37ea17a9ccb4289fddba57aedf44e1d4914297848d155ce0a6615ad701133c1703113e4573d8cf1dfc073168eedb843d", @ANYBLOB="9e738957133f0b61dcf47a32ba6cd832e048df45db14265d99ad204f41efaa990ff66bd25cebd34a2c9eb9f24253181cf8c764a1eb741903b0a93d1835", @ANYBLOB="010029bd7000fdd3df2521000000050020000100000009001f007068793100000000"], 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) 5.616549415s ago: executing program 2 (id=3331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001002bbd700000000100e00000020000000000000000000000000000000000000000009a000000f8000000000000000200000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000fe0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x324}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000, 0x80ff}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 5.443140551s ago: executing program 4 (id=3332): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x3}, 0x7}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r1, &(0x7f0000000240), 0x20000000}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000000827bd70000000000000000000", @ANYRES32=r11, @ANYBLOB="00030000000000001c002b801a000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="687f38442e33e53fca095e95a54efae2d5d5f1d127f236bef64dbfe352fc0d1c6b9a", @ANYRES32, @ANYBLOB="050011000900000008002300ffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x40094}, 0x884) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 5.390808847s ago: executing program 2 (id=3333): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000b02120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.019869293s ago: executing program 2 (id=3334): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x57}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYBLOB="a5e6"], 0x35c}, 0x1, 0x0, 0x0, 0x400a800}, 0x4010) 4.791816337s ago: executing program 0 (id=3335): accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000000c0)=0xfffffffffffffe97) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x8884) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) epoll_create1(0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x31b49, 0x40001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x74) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000340)=""/74, 0x4a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/93, 0x5d}], 0x1}}], 0x2, 0x41, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, 0x0, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x1, 0x0, 0xd, 0x4101}, 0x0) 4.696874604s ago: executing program 1 (id=3336): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000020000002000000c02000000000000000000000d0000000000006130"], 0x0, 0x35}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaaa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 695.794721ms ago: executing program 4 (id=3337): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x2a, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xad}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000005c0)={0xff, @remote, 0x4e22, 0x3, 'wrr\x00', 0x5, 0x7, 0x32}, 0x2c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'tunl0\x00'}) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b00130000000800150002000000080015000300000008004f000000000008004a000100000008004c"], 0x50}, 0x1, 0x0, 0x0, 0x2000c091}, 0x4004080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x13, 0x0, &(0x7f0000000fc0)="cc9ff4088b00000000000000000000ef1b0ef8", 0xfffffffffffffffd, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x12}, [0xffffff00, 0xffffff, 0xffffffff, 0xffffff00], [0x0, 0xff, 0xffffff00], 'bridge0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x87, 0x7f, 0x4}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x67, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 695.425506ms ago: executing program 1 (id=3338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 647.033668ms ago: executing program 0 (id=3339): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f05000000000000000100000005000000004f0030"], &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300002004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x9, r4, 0x14}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000000022b5790e5e1ebd53883f6cf5cefe83dcd8685a1096c701d4c677a07dcbac38979ae8bd0804ad848bccf2c88f53ac500773b6af48301a501b46ab8c406dcdd488ba7a1cc9a0f730c7c0ac4bf0e5ce573c2c7d4e08f1e3192b17cb5a2f63862b5b8b398fe4f01daa28197c00e7b805a41609", @ANYRES16=0x0, @ANYBLOB="100026bd7000ffdbdf25270000000c009900010000003600000017003400b6927d09f818f00186af609898b05a1249c5f3000a000600ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x20044801}, 0x4000001) (async) write(r6, &(0x7f0000000100)="520003000100b8", 0x7) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x1f, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffe, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000800)=""/4096, 0x40f00, 0x66, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001840)={0x0, 0x1, 0x7, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000001880)=[r1, 0xffffffffffffffff], &(0x7f00000018c0)=[{0x2, 0x2, 0xd, 0x7}, {0x4, 0x3, 0x5}, {0x0, 0x3, 0x1, 0x5}, {0x3, 0x1, 0x9, 0xb}], 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={r7, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000001b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0x9, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40000) 632.473998ms ago: executing program 2 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = socket$packet(0x11, 0xa, 0x300) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000040)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="d5a8831d2294e66ae37468d71b2b2d96ed2add223cacb0073e44ef090d0cb29db3aa02cec3671a927be9e7ee26fd29f2cdfe005b8e0a1045878c1db0d18a7f7e60fca15f52e417f955863d03cb74fa0c1e0cf0cbbc91baef039d3217dc3e"], 0xaf) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r8, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000f00)={{r4}, r9, 0x14, @unused=[0x0, 0xfffffffffffffffb, 0x7f, 0xffffffffffffb377], @name="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"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000480)={{r2}, r9, 0x1a, @inherit={0x70, &(0x7f00000001c0)={0x1, 0x5, 0x1, 0x7, {0x19, 0x6, 0x1, 0x100000001, 0x5}, [0x2, 0x8, 0x0, 0x0, 0x3]}}, @subvolid=0x8}) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(xchacha12-generic,sha1)\x00'}, 0x58) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x39) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) 343.90303ms ago: executing program 4 (id=3341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000a00ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001"], 0x80}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xc8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000c020101010000000000020000000000291c4187800a000100704ea30220bfbf512e39333100000008001a4000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="2c11000040000701fefffffffedbdf25017c0000040042801400018010000400cab1893a20b8d2a93521800a00110280fc101180f7"], 0x112c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240016002000000000773b087a4ffe536050ce37f17000fbdbdf2502000000000000031b"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) 343.631043ms ago: executing program 1 (id=3342): r0 = socket(0x10, 0x3, 0x800000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070600000000000000002d00000005002b0001000000060406000100000008002f00050000000c0005000201aaaaaaaaaaaa0a0001007770616e30000000"], 0x44}}, 0x20048840) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000480), 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 64) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5800000010001fff2dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x0, 0x210, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x39}, [0xff000000, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bond_slave_0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xc65ec123d57cf83, 0x7, 0x8, 0x12}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4=@multicast1, @ipv4=@private=0xa010101, @port=0x4e20, @gre_key=0xabfc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'nicvf0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x3c, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x64, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010101, @ipv6=@mcast1, @port=0x4e21, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) (async) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001600014a478d41319ce6840a000200000000000004000000"], 0x1c}}, 0x8000) 343.162908ms ago: executing program 2 (id=3343): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r4, &(0x7f0000000100), 0xa, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6], 0x7c}}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000340)) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x4000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003a0096eef56015fc0701002000000000e6ffff0a00000008"], 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x10) 172.87055ms ago: executing program 0 (id=3344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x43, "80d7cc8ed6322defd5a87e36125d382bfe6e1782f54f7a1171cc727770cbc2cfa4371296e6e88fb49a081c5a2340aafbf99bd8c9d57b96e71110fea1696bca5fe57efd"}, &(0x7f00000002c0)=0x4b) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x4e, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}}, 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0xfff}, {{&(0x7f0000000e80)=@l2tp, 0x80, 0x0}}], 0x2, 0x42, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002440), 0x400, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448cb, 0x0) ioctl$sock_bt_hci(r11, 0x400448e2, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r10, &(0x7f0000000380)}, 0x20) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r12, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r12, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x48, '\x00', r2, @fallback=0x26, r3, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x5, 0x1, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000006c0)=[r4, r9, r10, 0xffffffffffffffff], &(0x7f0000000700)=[{0x0, 0x2, 0x1, 0x1}, {0x1, 0x5, 0xb, 0x2}, {0x2, 0x4, 0xf, 0x4}, {0x2, 0x3, 0x1, 0x4}, {0x3, 0x3, 0x4, 0xb}, {0x3, 0x2, 0x7, 0x1}, {0x0, 0x1, 0x8, 0x6}], 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 151.010153ms ago: executing program 4 (id=3345): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1304000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) read$alg(r5, &(0x7f0000000000)=""/13, 0xd) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c000280080005000100"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="55154733b614c986f67e774000000005142a002dbd7000ffdbdf250800010001000000080097decfc1efd1f79e010001000000080003000340000008000100000000000800030003000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000890}, 0x4000000) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10010, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x25, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r6, 0x0, r1}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) 0s ago: executing program 1 (id=3346): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7eb, @mcast1, 0x8}, 0x1c) unshare(0x400) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x50002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14) sendto$inet(r0, &(0x7f00000010c0)="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", 0x1000, 0x4, &(0x7f00000020c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) kernel console output (not intermixed with test programs): parsing attributes in process `syz.3.1845'. [ 343.671515][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'. [ 343.721449][T12801] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.1845'. [ 343.731139][T12801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'. [ 343.740586][T12801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'. [ 343.751385][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'. [ 343.978313][ T6529] IPVS: starting estimator thread 0... [ 344.077843][T12830] IPVS: using max 29 ests per chain, 69600 per kthread [ 344.211151][T12841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1859'. [ 344.242701][T12841] netlink: 'syz.0.1859': attribute type 7 has an invalid length. [ 344.259113][T12841] netlink: 'syz.0.1859': attribute type 8 has an invalid length. [ 344.280477][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 344.397080][T12852] ªªªªªª speed is unknown, defaulting to 1000 [ 344.476751][T12856] tipc: Enabled bearer , priority 0 [ 344.490774][T12856] syzkaller0: entered promiscuous mode [ 344.496832][T12856] syzkaller0: entered allmulticast mode [ 344.519248][T12861] netlink: 'syz.0.1865': attribute type 3 has an invalid length. [ 344.722764][T12866] tipc: Resetting bearer [ 344.738412][T12855] tipc: Resetting bearer [ 344.755052][T12855] tipc: Disabling bearer [ 345.089609][T12885] netlink: 'syz.4.1870': attribute type 5 has an invalid length. [ 345.661892][T12912] netlink: 'syz.4.1880': attribute type 15 has an invalid length. [ 346.391100][T12927] syzkaller1: entered promiscuous mode [ 346.406240][T12927] syzkaller1: entered allmulticast mode [ 346.685819][T12958] netlink: 'syz.4.1892': attribute type 10 has an invalid length. [ 346.706745][T12955] netlink: 'syz.2.1893': attribute type 9 has an invalid length. [ 346.709795][T12958] __nla_validate_parse: 3 callbacks suppressed [ 346.709811][T12958] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1892'. [ 347.111382][T12977] syzkaller0: entered promiscuous mode [ 347.126576][T12977] syzkaller0: entered allmulticast mode [ 347.188340][T12977] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 347.307936][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 347.363796][T12990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1903'. [ 347.388519][T12991] batadv_slave_0: entered promiscuous mode [ 347.594629][T12989] batadv_slave_0: left promiscuous mode [ 348.044460][T13025] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 348.099984][T13025] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 348.116622][T13025] netlink: 'syz.2.1916': attribute type 2 has an invalid length. [ 348.542936][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1927'. [ 348.553425][T13055] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1926'. [ 348.593511][T13055] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1926'. [ 348.631765][T13061] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.1929'. [ 348.645552][T13054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1927'. [ 348.659240][T13061] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.1929'. [ 348.856870][T13067] ªªªªªª speed is unknown, defaulting to 1000 [ 349.215044][T13084] openvswitch: netlink: Multiple metadata blocks provided [ 349.392016][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1937'. [ 350.028977][ T30] audit: type=1800 audit(1778650010.244:9): pid=13109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1941" name="memory.events" dev="tmpfs" ino=1987 res=0 errno=0 [ 350.204359][T13114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.999876][T13165] lo: Caught tx_queue_len zero misconfig [ 351.011055][T13165] netem: change failed [ 351.084230][T13168] netlink: set zone limit has 4 unknown bytes [ 351.184968][T13168] netlink: set zone limit has 4 unknown bytes [ 352.107503][T13208] tipc: Enabled bearer , priority 0 [ 352.126857][T13208] syzkaller0: entered promiscuous mode [ 352.136301][T13208] syzkaller0: entered allmulticast mode [ 352.218222][T13208] tipc: Resetting bearer [ 352.271253][T13207] tipc: Resetting bearer [ 352.312013][T13207] tipc: Disabling bearer [ 352.377256][T13219] syzkaller0: entered promiscuous mode [ 352.383897][T13219] syzkaller0: entered allmulticast mode [ 352.398147][T13218] : renamed from vlan0 [ 352.419672][T13229] validate_nla: 3 callbacks suppressed [ 352.419689][T13229] netlink: 'syz.1.1975': attribute type 1 has an invalid length. [ 352.513499][T13235] __nla_validate_parse: 15 callbacks suppressed [ 352.513518][T13235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'. [ 352.515758][T13229] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.587771][T13242] netlink: 'syz.3.1976': attribute type 1 has an invalid length. [ 352.599465][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 352.777809][T13250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1982'. [ 352.788306][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1980'. [ 352.842668][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1980'. [ 352.873868][T13246] team3: entered promiscuous mode [ 352.880315][T13246] team3: entered allmulticast mode [ 352.887578][T13246] 8021q: adding VLAN 0 to HW filter on device team3 [ 352.931028][T13254] team4: entered promiscuous mode [ 352.937076][T13254] team4: entered allmulticast mode [ 352.942846][T13254] 8021q: adding VLAN 0 to HW filter on device team4 [ 353.018098][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 353.091335][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'. [ 353.152288][T13263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1986'. [ 353.226992][T13266] syzkaller1: entered promiscuous mode [ 353.237536][T13266] syzkaller1: entered allmulticast mode [ 353.424542][T13277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1992'. [ 353.440439][T13277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'. [ 353.768096][T13297] netlink: 'syz.2.1998': attribute type 1 has an invalid length. [ 354.322415][T13317] openvswitch: netlink: Message has 4 unknown bytes. [ 354.343092][T13298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.360329][T13298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.376827][T13298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.387875][T13298] geneve2: left promiscuous mode [ 354.403726][T13318] netlink: 'syz.3.2002': attribute type 4 has an invalid length. [ 354.671054][T13297] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 354.722817][ T8687] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.753748][ T8687] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.825442][ T8687] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.855393][ T8687] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.891473][ T8680] tipc: Subscription rejected, illegal request [ 355.119153][T13342] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 355.154296][T13342] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 355.181799][T13342] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 355.407414][T13346] block nbd0: server does not support multiple connections per device. [ 355.491794][T13346] block nbd0: shutting down sockets [ 355.580172][T13360] ªªªªªª speed is unknown, defaulting to 1000 [ 356.890294][T13428] veth1_to_team: entered promiscuous mode [ 356.927621][T13428] gretap0: entered promiscuous mode [ 356.934385][T13428] debugfs: 'hsr1' already exists in 'hsr' [ 356.940917][T13428] Cannot create hsr debugfs directory [ 356.946814][T13428] hsr1: entered promiscuous mode [ 357.459545][T13453] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 357.603424][T13453] bond12 (unregistering): Released all slaves [ 357.659795][T13468] netlink: 'syz.1.2043': attribute type 1 has an invalid length. [ 357.682649][T13468] netlink: 'syz.1.2043': attribute type 2 has an invalid length. [ 357.699089][T13472] netem: change failed [ 358.036123][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.090708][T13484] __nla_validate_parse: 13 callbacks suppressed [ 358.090731][T13484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2048'. [ 358.235413][T13488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2049'. [ 358.247380][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 358.276629][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'. [ 358.290848][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2047'. [ 358.634152][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 358.650660][T13508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2054'. [ 358.833491][T13524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2059'. [ 358.999541][T13524] bond12: entered allmulticast mode [ 359.089458][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 359.355355][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 359.406377][T13557] netlink: 'syz.0.2067': attribute type 8 has an invalid length. [ 359.500784][T13563] FAULT_INJECTION: forcing a failure. [ 359.500784][T13563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.532982][T13565] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 359.533518][T13563] CPU: 1 UID: 0 PID: 13563 Comm: syz.3.2070 Not tainted syzkaller #0 PREEMPT(full) [ 359.533541][T13563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 359.533551][T13563] Call Trace: [ 359.533558][T13563] [ 359.533566][T13563] dump_stack_lvl+0xe8/0x150 [ 359.533592][T13563] should_fail_ex+0x412/0x560 [ 359.533619][T13563] _copy_from_user+0x2d/0xb0 [ 359.533645][T13563] ___sys_sendmsg+0x1c6/0x360 [ 359.533670][T13563] ? __lock_acquire+0x6b5/0x2cf0 [ 359.533692][T13563] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.533748][T13563] ? __fget_files+0x2a/0x420 [ 359.533768][T13563] ? __fget_files+0x3a0/0x420 [ 359.533796][T13563] __x64_sys_sendmsg+0x1bd/0x2a0 [ 359.533823][T13563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.533857][T13563] ? __pfx_ksys_write+0x10/0x10 [ 359.533889][T13563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.533907][T13563] do_syscall_64+0x15f/0xf80 [ 359.533925][T13563] ? clear_bhb_loop+0x40/0x90 [ 359.533946][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.533963][T13563] RIP: 0033:0x7fab12f9ce59 [ 359.533979][T13563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.533993][T13563] RSP: 002b:00007fab13e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.534011][T13563] RAX: ffffffffffffffda RBX: 00007fab13215fa0 RCX: 00007fab12f9ce59 [ 359.534024][T13563] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000003 [ 359.534035][T13563] RBP: 00007fab13e67090 R08: 0000000000000000 R09: 0000000000000000 [ 359.534046][T13563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.534056][T13563] R13: 00007fab13216038 R14: 00007fab13215fa0 R15: 00007ffd69591b78 [ 359.534084][T13563] [ 359.787218][T13567] syzkaller0: entered promiscuous mode [ 359.795191][T13567] syzkaller0: entered allmulticast mode [ 359.934238][T13550] block nbd0: server does not support multiple connections per device. [ 359.949265][T13550] block nbd0: shutting down sockets [ 360.840995][T13613] block nbd0: server does not support multiple connections per device. [ 360.867011][T13613] block nbd0: shutting down sockets [ 360.896263][T13620] netlink: 'syz.2.2087': attribute type 1 has an invalid length. [ 361.519371][T13635] ªªªªªª speed is unknown, defaulting to 1000 [ 362.126503][T13654] vlan1: entered promiscuous mode [ 362.679199][T13674] vlan0: entered promiscuous mode [ 362.913032][T13676] netlink: 'syz.0.2101': attribute type 4 has an invalid length. [ 362.956714][T13687] vlan3: entered promiscuous mode [ 362.964264][T13688] netlink: 'syz.0.2101': attribute type 4 has an invalid length. [ 363.052723][T13688] netlink: 'syz.0.2101': attribute type 4 has an invalid length. [ 363.340492][T13698] __nla_validate_parse: 6 callbacks suppressed [ 363.340513][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2104'. [ 363.712177][T13719] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.800514][T13724] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2113'. [ 364.152526][T13730] ªªªªªª speed is unknown, defaulting to 1000 [ 364.188456][T13736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2116'. [ 364.368276][T13740] ªªªªªª speed is unknown, defaulting to 1000 [ 365.679887][T13685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.953628][T13784] netlink: 'syz.1.2129': attribute type 2 has an invalid length. [ 366.961780][T13784] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2129'. [ 366.972312][T13784] nbd: must specify a size in bytes for the device [ 366.981136][T13784] block nbd1: NBD_DISCONNECT [ 366.986545][T13784] block nbd1: Send disconnect failed -32 [ 366.994736][T13784] block nbd1: shutting down sockets [ 367.506544][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 367.621428][T13796] netlink: 'syz.1.2133': attribute type 1 has an invalid length. [ 368.930237][T13792] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2132'. [ 369.241346][T13809] smbdirect: ib_dev[syz1] removed [ 369.355711][T13813] netlink: 'syz.0.2137': attribute type 6 has an invalid length. [ 369.374330][T13813] netlink: 'syz.0.2137': attribute type 7 has an invalid length. [ 369.385866][T13813] netlink: 'syz.0.2137': attribute type 8 has an invalid length. [ 369.395085][T13813] netlink: 'syz.0.2137': attribute type 7 has an invalid length. [ 369.456561][T13830] openvswitch: netlink: Duplicate or invalid key (type 0). [ 369.464018][T13830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.476673][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'. [ 369.648478][T13836] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 369.657100][T13826] block nbd0: server does not support multiple connections per device. [ 369.701651][T13830] syzkaller0: entered promiscuous mode [ 369.712487][T13826] block nbd0: shutting down sockets [ 369.724654][T13830] syzkaller0: entered allmulticast mode [ 369.763207][T13843] netlink: 'syz.3.2143': attribute type 2 has an invalid length. [ 370.128397][T13854] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2148'. [ 370.401179][T13879] netlink: 'syz.0.2155': attribute type 11 has an invalid length. [ 370.547881][T13889] Bluetooth: MGMT ver 1.23 [ 370.562310][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 370.601796][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 370.623089][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 370.638084][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 370.648730][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 370.658660][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 370.668562][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 370.690185][T13884] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 371.204773][T13925] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 371.319685][T13932] xfrm1: entered allmulticast mode [ 371.558014][T13942] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 371.803142][T13950] ªªªªªª speed is unknown, defaulting to 1000 [ 372.039324][T13961] syzkaller0: entered promiscuous mode [ 372.057915][T13961] syzkaller0: entered allmulticast mode [ 372.479168][T13990] veth1_to_team: entered promiscuous mode [ 372.514425][T13990] veth1_to_team: left promiscuous mode [ 372.548554][T13995] netlink: 'syz.4.2191': attribute type 3 has an invalid length. [ 373.897575][T14030] ªªªªªª speed is unknown, defaulting to 1000 [ 373.897588][T14028] netlink: 'syz.4.2199': attribute type 13 has an invalid length. [ 373.897604][T14028] netlink: 'syz.4.2199': attribute type 17 has an invalid length. [ 373.957497][T14028] netlink: 'syz.4.2199': attribute type 27 has an invalid length. [ 374.029555][T14040] __nla_validate_parse: 29 callbacks suppressed [ 374.029574][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 374.264053][T14048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2204'. [ 376.103052][T14017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.342747][T14063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2207'. [ 376.380872][ T30] audit: type=1800 audit(1778650036.594:10): pid=14069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2210" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2292 res=0 errno=0 [ 376.733535][T14076] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 376.817350][T14088] sctp: [Deprecated]: syz.0.2214 (pid 14088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.817350][T14088] Use struct sctp_sack_info instead [ 377.111516][T14094] bond5: entered allmulticast mode [ 377.130139][T14094] macvlan2: entered promiscuous mode [ 377.137087][T14094] macvlan2: entered allmulticast mode [ 377.277763][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 377.309385][T14097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2219'. [ 377.312004][T14099] veth0: entered promiscuous mode [ 377.402257][T14098] veth0: left promiscuous mode [ 377.732159][T14120] netlink: 'syz.4.2227': attribute type 1 has an invalid length. [ 377.803740][T14122] netlink: 'syz.0.2229': attribute type 10 has an invalid length. [ 377.831577][T14115] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 377.940265][T14127] syzkaller0: entered promiscuous mode [ 377.946493][T14127] syzkaller0: entered allmulticast mode [ 378.044028][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2234'. [ 378.187766][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2235'. [ 378.518587][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.529233][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.594517][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 379.182187][T14191] netlink: 'syz.0.2247': attribute type 29 has an invalid length. [ 379.229548][T14191] netlink: 'syz.0.2247': attribute type 29 has an invalid length. [ 379.251759][T14191] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2247'. [ 379.261109][T14191] unsupported nla_type 58 [ 379.626631][T14213] netlink: 'syz.0.2256': attribute type 4 has an invalid length. [ 379.669427][T14215] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 379.696428][T14215] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2257'. [ 379.747730][T14222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2259'. [ 380.175400][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 380.234989][T14236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2262'. [ 380.526533][T14234] block nbd0: server does not support multiple connections per device. [ 380.542735][T14234] block nbd0: shutting down sockets [ 380.610562][T12547] ªªªªªª speed is unknown, defaulting to 1000 [ 380.831737][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 380.862145][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'. [ 380.871906][T14258] netlink: 'syz.1.2267': attribute type 18 has an invalid length. [ 380.939051][T14262] syzkaller0: entered promiscuous mode [ 380.958085][T14262] syzkaller0: entered allmulticast mode [ 380.975156][T14264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2271'. [ 381.159989][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 381.177959][T14274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2274'. [ 381.399650][T14285] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 381.939978][T14302] ªªªªªª speed is unknown, defaulting to 1000 [ 382.008524][T14316] tipc: Enabled bearer , priority 27 [ 382.055741][T14314] team_slave_1: Caught tx_queue_len zero misconfig [ 382.782706][T14340] netlink: 'syz.3.2285': attribute type 22 has an invalid length. [ 382.828903][T14340] netlink: 'syz.3.2285': attribute type 1 has an invalid length. [ 383.540790][T12546] tipc: Node number set to 1635207080 [ 383.752917][T14374] xt_TCPMSS: Only works on TCP SYN packets [ 384.273570][T14398] __nla_validate_parse: 6 callbacks suppressed [ 384.273587][T14398] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2301'. [ 384.279130][T14397] xt_hashlimit: size too large, truncated to 1048576 [ 384.353431][T14399] syz_tun: entered promiscuous mode [ 384.379661][T14399] macsec1: entered promiscuous mode [ 384.420606][T14399] syz_tun: left promiscuous mode [ 384.673544][T14416] ªªªªªª speed is unknown, defaulting to 1000 [ 384.799501][T14420] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.816271][T14420] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.924555][T14420] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.938223][T14420] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.109871][T14420] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.126401][T14420] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.411836][T14420] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.436775][T14420] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.463215][T14442] dvmrp1: entered allmulticast mode [ 385.649427][T14453] netlink: 'syz.4.2316': attribute type 2 has an invalid length. [ 385.660242][T14453] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 385.744080][T14445] ªªªªªª speed is unknown, defaulting to 1000 [ 385.775179][T14453] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2316'. [ 385.832019][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.869632][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.883957][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.900922][ T8674] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.911192][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.922503][ T8674] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.932321][T14453] bond4: entered promiscuous mode [ 385.944728][T14453] bond4: entered allmulticast mode [ 385.964574][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.977321][T14453] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.997579][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.015382][ T8674] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.024138][ T8674] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.046853][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.076588][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.101538][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.113328][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2318'. [ 386.124722][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.138747][T14458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.152543][ T8674] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.161330][ T8674] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.197661][T14461] bond5: entered promiscuous mode [ 386.203015][T14461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.240443][ T8674] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.249101][ T8674] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.270808][T14461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.286916][T14461] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 386.298781][T14461] bond5: (slave sit1): Error -95 calling set_mac_address [ 386.866281][T14488] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20002 [ 388.115793][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 389.762825][T14500] syzkaller0: entered promiscuous mode [ 389.785679][T14500] syzkaller0: entered allmulticast mode [ 389.986188][T14536] syzkaller1: entered promiscuous mode [ 390.009205][T14536] syzkaller1: entered allmulticast mode [ 390.446968][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 390.487771][T14565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2343'. [ 393.633729][T14614] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 393.793296][T14622] tap0: tun_chr_ioctl cmd 1074025680 [ 393.985038][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 394.062087][T14629] ªªªªªª speed is unknown, defaulting to 1000 [ 394.064110][T14636] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2356'. [ 394.252597][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2358'. [ 394.310250][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2361'. [ 394.321174][T14650] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 394.342921][T14649] nbd: couldn't find a device at index 65546 [ 394.363737][T14649] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2361'. [ 394.383901][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2361'. [ 394.547479][T14651] 8021q: adding VLAN 0 to HW filter on device bond8 [ 394.560448][T14651] bond7: (slave bond8): making interface the new active one [ 394.571020][T14651] bond7: (slave bond8): Enslaving as an active interface with an up link [ 394.724011][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2367'. [ 395.359834][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 395.438368][T14708] netlink: 'syz.0.2377': attribute type 3 has an invalid length. [ 395.467040][T14708] netlink: 'syz.0.2377': attribute type 3 has an invalid length. [ 395.561282][T14710] ªªªªªª speed is unknown, defaulting to 1000 [ 395.721380][T14725] x_tables: unsorted entry at hook 3 [ 395.818993][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2385'. [ 396.018758][T14742] syzkaller0: entered promiscuous mode [ 396.027716][T14742] syzkaller0: entered allmulticast mode [ 396.702481][T14779] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 398.534969][T14776] netlink: 'syz.3.2398': attribute type 8 has an invalid length. [ 398.709265][T14802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2400'. [ 398.824064][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2401'. [ 399.049458][T14823] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 399.358676][T14848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2412'. [ 399.454493][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'. [ 399.454723][T14832] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.549593][T14855] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 399.711475][T14832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.829415][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 400.187328][ T8685] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.205069][ T8685] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.256027][ T8685] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.279722][T14886] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2422'. [ 400.306218][ T8685] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.382818][T14890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2422'. [ 400.399521][ T8685] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.418694][ T8685] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.454530][ T8685] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.485160][ T8685] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.517450][T14893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2424'. [ 400.649077][T14905] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 400.698271][T14905] 8021q: adding VLAN 0 to HW filter on device bond7 [ 400.709796][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2424'. [ 400.767888][T14907] xt_hl: Unknown Hop Limit match mode: 206 [ 400.778043][T14913] netlink: 'syz.1.2429': attribute type 2 has an invalid length. [ 401.065428][T14925] __nla_validate_parse: 2 callbacks suppressed [ 401.065448][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2433'. [ 401.514412][T14949] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2442'. [ 401.642854][T14955] xfrm0: entered allmulticast mode [ 401.693342][T14955] syzkaller0: entered promiscuous mode [ 401.702015][T14955] syzkaller0: entered allmulticast mode [ 401.702834][T14957] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 401.722105][T14957] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 401.731515][T14957] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 401.790865][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2449'. [ 402.413292][T14984] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2455'. [ 402.437982][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2455'. [ 402.703390][T14993] netlink: 'syz.4.2458': attribute type 7 has an invalid length. [ 402.824030][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2461'. [ 402.957693][T14998] netlink: 'syz.1.2460': attribute type 8 has an invalid length. [ 403.048973][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 403.337020][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2468'. [ 403.459541][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2465'. [ 403.727377][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 403.837317][T15052] netlink: 'syz.4.2474': attribute type 15 has an invalid length. [ 404.328912][T15036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.446926][T15051] team0: No ports can be present during mode change [ 404.467806][T15047] ªªªªªª speed is unknown, defaulting to 1000 [ 404.756835][T15070] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 404.838276][T15072] ªªªªªª speed is unknown, defaulting to 1000 [ 405.000661][T15083] vlan0: entered promiscuous mode [ 405.025332][T15083] syzkaller0: entered promiscuous mode [ 405.035825][T15083] syzkaller0: entered allmulticast mode [ 405.444094][T15107] netlink: 'syz.3.2491': attribute type 39 has an invalid length. [ 406.260959][T15124] __nla_validate_parse: 8 callbacks suppressed [ 406.260980][T15124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2495'. [ 406.377721][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 406.390953][T15130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2498'. [ 406.410323][T15128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 406.453326][T15128] batman_adv: batadv0: Adding interface: ip6gretap2 [ 406.472369][T15128] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1552. [ 406.507902][T15128] batman_adv: batadv0: Interface activated: ip6gretap2 [ 406.508880][T15140] FAULT_INJECTION: forcing a failure. [ 406.508880][T15140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.533076][T15140] CPU: 0 UID: 0 PID: 15140 Comm: syz.4.2498 Not tainted syzkaller #0 PREEMPT(full) [ 406.533104][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.533118][T15140] Call Trace: [ 406.533128][T15140] [ 406.533136][T15140] dump_stack_lvl+0xe8/0x150 [ 406.533162][T15140] should_fail_ex+0x412/0x560 [ 406.533192][T15140] _copy_to_user+0x31/0xb0 [ 406.533219][T15140] simple_read_from_buffer+0xe1/0x170 [ 406.533246][T15140] proc_fail_nth_read+0x1bb/0x230 [ 406.533274][T15140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.533301][T15140] ? rw_verify_area+0x2a6/0x4d0 [ 406.533325][T15140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.533350][T15140] vfs_read+0x20c/0xa70 [ 406.533379][T15140] ? __pfx___mutex_lock+0x10/0x10 [ 406.533400][T15140] ? __pfx_vfs_read+0x10/0x10 [ 406.533425][T15140] ? __fget_files+0x2a/0x420 [ 406.533451][T15140] ? __fget_files+0x3a0/0x420 [ 406.533471][T15140] ? __fget_files+0x2a/0x420 [ 406.533502][T15140] ksys_read+0x150/0x270 [ 406.533528][T15140] ? __pfx_ksys_read+0x10/0x10 [ 406.533561][T15140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.533581][T15140] do_syscall_64+0x15f/0xf80 [ 406.533598][T15140] ? trace_irq_disable+0x3b/0x140 [ 406.533623][T15140] ? clear_bhb_loop+0x40/0x90 [ 406.533646][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.533664][T15140] RIP: 0033:0x7f196f15d68e [ 406.533681][T15140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 406.533697][T15140] RSP: 002b:00007f1970046fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.533716][T15140] RAX: ffffffffffffffda RBX: 00007f19700476c0 RCX: 00007f196f15d68e [ 406.533729][T15140] RDX: 000000000000000f RSI: 00007f19700470a0 RDI: 0000000000000006 [ 406.533740][T15140] RBP: 00007f1970047090 R08: 0000000000000000 R09: 0000000000000000 [ 406.533752][T15140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.533762][T15140] R13: 00007f196f416218 R14: 00007f196f416180 R15: 00007ffc0660d348 [ 406.533794][T15140] [ 406.764902][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2500'. [ 406.780522][T15119] ªªªªªª speed is unknown, defaulting to 1000 [ 407.056974][T15156] netlink: 'syz.0.2503': attribute type 28 has an invalid length. [ 407.072530][T15156] netlink: zone id is out of range [ 407.080445][T15156] netlink: zone id is out of range [ 407.087223][T15156] netlink: zone id is out of range [ 407.093542][T15156] netlink: zone id is out of range [ 407.100399][T15156] netlink: zone id is out of range [ 407.112935][T15158] netlink: 'syz.1.2506': attribute type 1 has an invalid length. [ 407.114753][T15156] netlink: zone id is out of range [ 407.121271][T15155] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2505'. [ 407.138572][T15156] netlink: zone id is out of range [ 407.143729][T15156] netlink: zone id is out of range [ 407.233900][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2508'. [ 407.312317][T15158] 8021q: adding VLAN 0 to HW filter on device bond9 [ 407.438907][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 407.448202][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 407.610874][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 407.638985][T15187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2514'. [ 408.045200][T15215] netlink: 'syz.4.2524': attribute type 33 has an invalid length. [ 408.047837][T15217] netlink: 'syz.1.2525': attribute type 4 has an invalid length. [ 408.239787][T15226] netlink: 'syz.1.2528': attribute type 1 has an invalid length. [ 408.353438][T15226] 8021q: adding VLAN 0 to HW filter on device bond10 [ 408.373835][T15231] bond10: (slave geneve3): making interface the new active one [ 408.383103][T15231] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 408.402522][T15235] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 408.418680][T15228] ªªªªªª speed is unknown, defaulting to 1000 [ 408.443121][T15235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 408.475061][T15235] bond6: (slave veth13): Enslaving as an active interface with a down link [ 408.490991][T15235] netlink: 'syz.4.2531': attribute type 10 has an invalid length. [ 408.509708][T15235] dummy0: entered promiscuous mode [ 409.621059][T15288] net_ratelimit: 392 callbacks suppressed [ 409.621077][T15288] batadv0: mtu less than device minimum [ 409.836531][T15281] block nbd0: server does not support multiple connections per device. [ 409.850007][T15281] block nbd0: shutting down sockets [ 409.987600][T15295] bond11: Removing last arp target with arp_interval on [ 412.062516][T15294] tipc: Resetting bearer [ 412.091155][T15294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.101268][T15294] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.111842][T15294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.147132][T15294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.156797][T15294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.169491][T15294] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 412.186194][T15310] __nla_validate_parse: 17 callbacks suppressed [ 412.186214][T15310] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.2545'. [ 412.202297][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2545'. [ 412.212088][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2545'. [ 412.222338][T15310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2545'. [ 412.252833][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.260062][ T8676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.270751][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.277938][ T8676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.836492][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2557'. [ 413.063589][T15365] netlink: 'syz.3.2562': attribute type 1 has an invalid length. [ 413.250890][T15377] sctp: [Deprecated]: syz.3.2564 (pid 15377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.250890][T15377] Use struct sctp_sack_info instead [ 413.437876][T15397] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 413.538913][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2569'. [ 413.779444][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'. [ 413.795818][T15424] netlink: 'syz.0.2575': attribute type 30 has an invalid length. [ 413.906802][T15431] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2577'. [ 413.916557][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'. [ 413.931936][T15424] netlink: 'syz.0.2575': attribute type 30 has an invalid length. [ 414.344638][T15451] sctp: [Deprecated]: syz.3.2581 (pid 15451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.344638][T15451] Use struct sctp_sack_info instead [ 414.848409][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 414.870932][T15457] netlink: 'syz.1.2583': attribute type 18 has an invalid length. [ 414.882186][T15483] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.919387][T15484] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 415.611096][T15510] ªªªªªª speed is unknown, defaulting to 1000 [ 415.904129][T15526] netlink: 'syz.1.2603': attribute type 2 has an invalid length. [ 416.059130][T15533] netlink: 'syz.1.2606': attribute type 1 has an invalid length. [ 416.143529][T15538] netlink: 'syz.1.2609': attribute type 1 has an invalid length. [ 416.199678][T15538] 8021q: adding VLAN 0 to HW filter on device bond12 [ 416.357596][T15546] bond12: (slave veth7): Enslaving as an active interface with an up link [ 416.526551][T15546] netlink: 'syz.1.2609': attribute type 1 has an invalid length. [ 416.539454][T15538] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 416.551914][T15538] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 416.815422][T15576] bond13: Unable to set up delay as MII monitoring is disabled [ 416.828151][T15576] bond13 (unregistering): Released all slaves [ 417.235138][T15608] netlink: 'syz.1.2627': attribute type 10 has an invalid length. [ 417.259289][T15608] __nla_validate_parse: 7 callbacks suppressed [ 417.259305][T15608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2627'. [ 417.329060][T15608] team0: Failed to send options change via netlink (err -105) [ 417.338148][T15608] team0: Port device geneve1 added [ 417.394978][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2630'. [ 417.433578][T15617] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.451121][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2630'. [ 417.471318][ T8685] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.482516][ T8685] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.504761][ T8685] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.534201][ T8685] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.553788][T15617] syzkaller1: entered promiscuous mode [ 417.574804][T15617] syzkaller1: entered allmulticast mode [ 417.758665][T15634] netlink: 'syz.0.2637': attribute type 7 has an invalid length. [ 417.948946][T15642] 8021q: adding VLAN 0 to HW filter on device bond13 [ 418.004550][T15642] bond13: (slave veth5): Enslaving as an active interface with a down link [ 418.071570][T15642] bond13: (slave dummy0): making interface the new active one [ 418.118817][T15664] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2639'. [ 418.131110][T15642] dummy0: entered promiscuous mode [ 418.178249][T15642] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 418.253826][T15664] bond13: (slave dummy0): Releasing active interface [ 418.288607][T15664] dummy0 (unregistering): left promiscuous mode [ 418.413201][T15681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'. [ 418.644608][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 418.674213][T15691] ªªªªªª speed is unknown, defaulting to 1000 [ 418.813878][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 418.825000][T15698] netlink: 'syz.1.2652': attribute type 11 has an invalid length. [ 418.825233][T15700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2653'. [ 418.840925][T15692] ªªªªªª speed is unknown, defaulting to 1000 [ 418.858450][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 418.869978][T15700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2653'. [ 418.893359][T15703] validate_nla: 1 callbacks suppressed [ 418.893377][T15703] netlink: 'syz.3.2653': attribute type 1 has an invalid length. [ 419.082347][T15709] netlink: 'syz.1.2655': attribute type 2 has an invalid length. [ 419.576299][T15739] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 420.168915][T15769] pim6reg1: entered promiscuous mode [ 420.180049][T15769] pim6reg1: entered allmulticast mode [ 420.226818][T15775] syzkaller0: entered promiscuous mode [ 420.232375][T15775] syzkaller0: entered allmulticast mode [ 420.270556][T15775] tipc: Enabled bearer , priority 0 [ 420.284935][T15774] tipc: Resetting bearer [ 420.341934][T15774] tipc: Disabling bearer [ 420.391252][T15780] netlink: 'syz.3.2674': attribute type 6 has an invalid length. [ 420.516836][T15786] trusted_key: syz.0.2673 sent an empty control message without MSG_MORE. [ 420.533306][T15782] syzkaller0: entered promiscuous mode [ 420.539186][T15782] syzkaller0: entered allmulticast mode [ 420.601635][ T30] audit: type=1804 audit(1778650080.814:11): pid=15790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2677" name="/newroot/512/cgroup.controllers" dev="tmpfs" ino=2644 res=1 errno=0 [ 420.684205][ T30] audit: type=1800 audit(1778650080.814:12): pid=15790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2677" name="cgroup.controllers" dev="tmpfs" ino=2644 res=0 errno=0 [ 423.089664][T15797] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 423.139002][T15808] __nla_validate_parse: 11 callbacks suppressed [ 423.139019][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'. [ 423.311161][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2686'. [ 423.339145][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2688'. [ 423.359284][T15836] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 423.650095][T15833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 423.707234][T15856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2695'. [ 423.794132][T15861] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2696'. [ 424.002009][T15867] tipc: Resetting bearer [ 424.273398][T15885] netlink: 'syz.3.2701': attribute type 5 has an invalid length. [ 424.290589][T15886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2699'. [ 424.393998][T15867] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.401674][T15867] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.067760][T15867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.079438][T15867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.109195][T15871] syzkaller1: entered promiscuous mode [ 427.114902][T15871] syzkaller1: entered allmulticast mode [ 427.241033][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2702'. [ 427.349245][T15914] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2704'. [ 427.399669][T15914] bond0: left promiscuous mode [ 427.502464][T15925] atomic_op ffff888020be1198 conn xmit_atomic 0000000000000000 [ 427.526905][T15924] atomic_op ffff888036f5a198 conn xmit_atomic 0000000000000000 [ 427.830505][T15951] netlink: 'syz.4.2709': attribute type 1 has an invalid length. [ 427.893763][T15932] ªªªªªª speed is unknown, defaulting to 1000 [ 428.083699][T15955] xt_hashlimit: size too large, truncated to 1048576 [ 430.238376][T15962] bridge_slave_0 (unregistering): left allmulticast mode [ 430.246376][T15962] bridge_slave_0 (unregistering): left promiscuous mode [ 430.253530][T15962] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.524740][T15931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.546277][T15966] netlink: 'syz.4.2710': attribute type 1 has an invalid length. [ 430.583956][ T30] audit: type=1107 audit(1778650090.784:13): pid=15979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÛXàølø¤ÈÏ%Ÿe¼\^Ó< 6¶ciýLÊ®Öa¬šUN+[S§ó´åý16´8lžFet g‘¬ÉÛ?øXùWaaÖ¾kå¡ìɱjÜÈŽ9[PÜùJî- ftŽmŒ Ù‡ùàE`zåÜÍòvi%&EKâ‹\7 +º¬ù« ?3M [ 430.583956][ T30] ‘}_êí/–þ1ß„ ¨/‚GÛ¬ 6NQ>Bgþü¨Ýa ÎãœÓλ ­ÕælQôË»~oÈæ™ûzå‹ò™`j'ïÈŸËpë]M2Ý(fì«`Azuµó ¡)ËŽ¨Git¸£ÃÿËc' [ 430.621450][T15966] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2710'. [ 430.875123][T15996] netlink: 'syz.1.2715': attribute type 1 has an invalid length. [ 430.973093][T15996] bond13: (slave geneve4): making interface the new active one [ 430.982956][T15996] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 430.994521][ T8682] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.029508][ T8682] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.097925][ T8682] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.111642][T15996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2715'. [ 431.122292][ T8682] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.171929][T15996] 8021q: adding VLAN 0 to HW filter on device bond13 [ 431.213053][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2721'. [ 431.241873][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2721'. [ 431.319964][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2719'. [ 431.541461][T16032] netlink: 'syz.1.2726': attribute type 4 has an invalid length. [ 431.563956][T16032] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2726'. [ 431.743908][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'. [ 431.780308][T16043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 432.430294][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2734'. [ 432.874763][T16070] netlink: 'syz.0.2738': attribute type 1 has an invalid length. [ 432.939040][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2738'. [ 433.343409][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2748'. [ 433.551574][T16100] syzkaller0: entered promiscuous mode [ 433.564056][T16100] syzkaller0: entered allmulticast mode [ 434.096350][T16121] nbd: device at index 64 is going down [ 434.277554][T16136] netlink: 'syz.4.2757': attribute type 1 has an invalid length. [ 434.281265][T15907] udevd[15907]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 434.286922][T16136] netlink: 'syz.4.2757': attribute type 4 has an invalid length. [ 434.341185][T16136] netlink: 'syz.4.2757': attribute type 1 has an invalid length. [ 434.349462][T16136] netlink: 'syz.4.2757': attribute type 4 has an invalid length. [ 434.569264][T16143] netlink: 'syz.4.2760': attribute type 83 has an invalid length. [ 436.614895][T16162] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 436.664996][T16162] netlink: 'syz.2.2767': attribute type 2 has an invalid length. [ 436.674518][T16169] netlink: 'syz.2.2767': attribute type 49 has an invalid length. [ 436.703576][T16162] __nla_validate_parse: 6 callbacks suppressed [ 436.703762][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2767'. [ 436.732937][T16168] ip6tnl0: Caught tx_queue_len zero misconfig [ 436.742617][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2769'. [ 436.769209][T16173] openvswitch: : Dropping previously announced user features [ 436.814205][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2769'. [ 436.854509][T16173] openvswitch: : Dropping previously announced user features [ 436.930961][T16193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'. [ 436.945016][T16191] netlink: 'syz.0.2773': attribute type 1 has an invalid length. [ 437.009091][T16197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2773'. [ 437.099936][T16191] 8021q: adding VLAN 0 to HW filter on device bond14 [ 437.118330][T16197] bond14: entered promiscuous mode [ 437.128996][T16197] bond14: entered allmulticast mode [ 437.145303][T16195] xt_hashlimit: overflow, rate too high: 0 [ 437.279439][T16210] ªªªªªª speed is unknown, defaulting to 1000 [ 437.533204][T16221] syzkaller0: entered promiscuous mode [ 437.552627][T16221] syzkaller0: entered allmulticast mode [ 438.142205][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 439.854783][T16232] syzkaller0: entered promiscuous mode [ 439.860374][T16232] syzkaller0: entered allmulticast mode [ 439.869810][T16237] syzkaller0: entered promiscuous mode [ 439.875419][T16237] syzkaller0: entered allmulticast mode [ 439.916525][T16254] netlink: 'syz.2.2787': attribute type 3 has an invalid length. [ 439.924497][T16254] netlink: 'syz.2.2787': attribute type 3 has an invalid length. [ 439.960628][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.969083][T16262] netlink: 'syz.1.2789': attribute type 1 has an invalid length. [ 439.982559][T16262] netlink: 'syz.1.2789': attribute type 4 has an invalid length. [ 439.991922][T16262] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2789'. [ 440.045245][T16263] netlink: 'syz.1.2789': attribute type 1 has an invalid length. [ 440.064748][T16263] netlink: 'syz.1.2789': attribute type 4 has an invalid length. [ 440.072947][T16263] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2789'. [ 440.365309][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 440.399819][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 440.431275][T16283] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 440.634341][T16297] syzkaller0: entered promiscuous mode [ 440.658578][T16297] syzkaller0: entered allmulticast mode [ 440.763540][T16305] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.777638][T16305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.803061][T16305] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 442.033565][T16338] x_tables: duplicate underflow at hook 3 [ 444.182696][T16351] __nla_validate_parse: 5 callbacks suppressed [ 444.182715][T16351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2809'. [ 444.298577][T16351] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 444.367926][T16364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 445.136964][T16391] syzkaller0: entered promiscuous mode [ 445.142499][T16391] syzkaller0: entered allmulticast mode [ 445.208518][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2823'. [ 445.233952][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 445.247812][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2823'. [ 445.258836][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 445.268352][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2823'. [ 446.122982][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2829'. [ 446.442457][T16436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2832'. [ 446.621300][T16437] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 447.797507][T16401] syzkaller0: entered promiscuous mode [ 447.803057][T16401] syzkaller0: entered allmulticast mode [ 448.007590][T16446] syzkaller0: entered promiscuous mode [ 448.027935][T16446] syzkaller0: entered allmulticast mode [ 448.132316][T16451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2837'. [ 448.502422][T16472] can: request_module (can-proto-3) failed. [ 448.562672][T16481] netlink: 'syz.2.2845': attribute type 1 has an invalid length. [ 448.739392][T16480] syzkaller0: entered promiscuous mode [ 448.763869][T16480] syzkaller0: entered allmulticast mode [ 449.228947][T16522] __nla_validate_parse: 8 callbacks suppressed [ 449.228966][T16522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2853'. [ 450.170885][T16538] netlink: 'syz.3.2855': attribute type 39 has an invalid length. [ 451.381872][T16530] wg1 speed is unknown, defaulting to 1000 [ 451.399503][T16530] wg1 speed is unknown, defaulting to 1000 [ 451.411415][T16530] wg1 speed is unknown, defaulting to 1000 [ 451.444024][T16530] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 451.492864][T16530] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 451.519948][T16530] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 451.585313][T16546] netlink: 'syz.4.2856': attribute type 13 has an invalid length. [ 451.603573][T16530] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 451.742278][T16530] wg1 speed is unknown, defaulting to 1000 [ 451.742992][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2856'. [ 451.761443][T16553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.795337][T16530] wg1 speed is unknown, defaulting to 1000 [ 451.814745][T16568] bond0: entered promiscuous mode [ 451.821313][T16568] bond0: left promiscuous mode [ 451.835537][T16530] wg1 speed is unknown, defaulting to 1000 [ 451.865667][T16530] wg1 speed is unknown, defaulting to 1000 [ 451.884255][T16530] wg1 speed is unknown, defaulting to 1000 [ 451.933201][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2864'. [ 451.988348][T16577] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2863'. [ 452.067365][T16582] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2866'. [ 452.187703][T16592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2868'. [ 452.198012][T16592] unsupported nlmsg_type 40 [ 452.210488][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 452.339012][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'. [ 452.408428][T16604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2870'. [ 452.655958][T16615] ªªªªªª speed is unknown, defaulting to 1000 [ 452.664782][T16615] wg1 speed is unknown, defaulting to 1000 [ 453.024021][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.043002][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.053881][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.063946][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.074728][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 453.198341][T16630] ªªªªªª speed is unknown, defaulting to 1000 [ 453.210622][T16630] wg1 speed is unknown, defaulting to 1000 [ 453.492907][T16615] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 454.311373][T16675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2886'. [ 454.498432][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2891'. [ 454.515378][T16622] ªªªªªª speed is unknown, defaulting to 1000 [ 454.524143][T16671] netlink: 'syz.0.2886': attribute type 2 has an invalid length. [ 454.537927][T16671] netlink: 'syz.0.2886': attribute type 2 has an invalid length. [ 454.561005][T16686] ip6tnl2: entered allmulticast mode [ 455.155864][ T5630] Bluetooth: hci5: command tx timeout [ 457.236626][ T5630] Bluetooth: hci5: command tx timeout [ 457.409241][T16622] wg1 speed is unknown, defaulting to 1000 [ 457.409313][T16690] tunl0: Caught tx_queue_len zero misconfig [ 457.823704][T16719] netlink: 'syz.0.2893': attribute type 9 has an invalid length. [ 457.844556][T16721] netlink: 'syz.0.2893': attribute type 9 has an invalid length. [ 457.860859][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 458.199508][T16745] netlink: 'syz.1.2898': attribute type 10 has an invalid length. [ 458.230567][T16745] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2898'. [ 458.359938][T16622] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.367357][T16622] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.378385][T16622] bridge_slave_0: entered allmulticast mode [ 458.388215][T16622] bridge_slave_0: entered promiscuous mode [ 458.391930][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2900'. [ 458.403458][T16622] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.403615][T16622] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.418656][T16622] bridge_slave_1: entered allmulticast mode [ 458.426860][T16622] bridge_slave_1: entered promiscuous mode [ 458.466880][T16622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.486133][T16622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.565389][T16622] team0: Port device team_slave_0 added [ 458.576522][T16762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2900'. [ 458.581613][T16622] team0: Port device team_slave_1 added [ 458.708317][T16765] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.2903'. [ 458.772949][T16622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.796120][T16622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.857979][T16622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.883247][T16622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.899928][T16622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.928656][T16622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.039667][T16766] syzkaller0: entered promiscuous mode [ 459.047199][T16766] syzkaller0: entered allmulticast mode [ 459.166111][T16622] hsr_slave_0: entered promiscuous mode [ 459.172969][T16622] hsr_slave_1: entered promiscuous mode [ 459.180172][T16622] debugfs: 'hsr0' already exists in 'hsr' [ 459.187369][T16622] Cannot create hsr debugfs directory [ 459.322519][ T5630] Bluetooth: hci5: command tx timeout [ 461.396215][ T5630] Bluetooth: hci5: command tx timeout [ 461.398679][T16794] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 461.409644][T16794] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 461.421615][T16794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 461.501231][T16798] netlink: 'syz.3.2915': attribute type 39 has an invalid length. [ 461.552865][T16804] netlink: 'syz.3.2915': attribute type 21 has an invalid length. [ 461.569773][T16794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2913'. [ 461.586170][T16804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2915'. [ 461.722675][T16810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2918'. [ 461.983317][T16819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2918'. [ 462.020594][T16819] nbd: device at index 64 is going down [ 462.168081][T16826] bond14 (unregistering): Released all slaves [ 462.219519][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'. [ 462.246229][T16828] ip6tnl0: Caught tx_queue_len zero misconfig [ 462.271229][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2921'. [ 462.313956][T16829] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 462.516090][ T5630] Bluetooth: hci4: command 0x0405 tx timeout [ 462.798582][T16860] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2928'. [ 462.815376][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'. [ 462.828823][T16860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2928'. [ 463.093088][T16876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2934'. [ 463.164697][T16871] batadv0: entered promiscuous mode [ 463.189233][T16871] batadv0: left promiscuous mode [ 463.253294][T16882] sock: sock_set_timeout: `syz.3.2936' (pid 16882) tries to set negative timeout [ 463.312646][T16884] sock: sock_set_timeout: `syz.3.2936' (pid 16884) tries to set negative timeout [ 463.386956][T16890] netlink: 'syz.0.2939': attribute type 1 has an invalid length. [ 463.486731][T16890] 8021q: adding VLAN 0 to HW filter on device bond15 [ 463.522346][T16894] bond15: (slave gretap3): making interface the new active one [ 463.538944][T16894] bond15: (slave gretap3): Enslaving as an active interface with an up link [ 463.630234][T16890] bond15 (unregistering): (slave gretap3): Releasing active interface [ 463.659737][T16890] bond15 (unregistering): Released all slaves [ 463.712520][T16622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 463.737609][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.759604][T16622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 463.777076][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.788537][T16622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 463.822989][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.839252][T16907] syzkaller0: entered promiscuous mode [ 463.850099][T16907] syzkaller0: entered allmulticast mode [ 463.867401][T16622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 463.879952][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.932041][T16912] syzkaller1: entered promiscuous mode [ 463.941563][T16912] syzkaller1: entered allmulticast mode [ 463.953321][T16918] openvswitch: netlink: Invalid VLAN frame [ 463.967416][T16918] siw: device registration error -23 [ 464.108499][T16919] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 464.112052][T16917] smbdirect: ib_dev[syú2] removed [ 464.183296][T16919] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 464.246657][T16919] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 464.300658][T16622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.340198][T16919] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 464.413410][T16622] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.443287][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.450515][ T8672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.493698][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.500922][ T8672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.850713][T16961] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 464.932509][T16960] wg1 speed is unknown, defaulting to 1000 [ 465.334582][T16970] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 465.387422][T16973] tipc: Enabled bearer , priority 0 [ 465.419651][T16973] syzkaller0: entered promiscuous mode [ 465.425503][T16973] syzkaller0: entered allmulticast mode [ 465.459713][T16973] veth1_to_team: mtu less than device minimum [ 465.494603][T16622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.503932][T16971] tipc: Resetting bearer [ 465.531286][T16971] tipc: Disabling bearer [ 465.620186][T16622] veth0_vlan: entered promiscuous mode [ 465.714309][T16622] veth1_vlan: entered promiscuous mode [ 465.753790][T16984] netlink: 'syz.1.2963': attribute type 49 has an invalid length. [ 465.775021][T16980] hmac(sha224: left promiscuous mode [ 465.957073][T16622] veth0_macvtap: entered promiscuous mode [ 465.988786][T16622] veth1_macvtap: entered promiscuous mode [ 466.200728][T16622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.477104][T16622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.489152][T17019] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20004 [ 466.501074][T17026] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 466.532909][ T8674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.565149][ T8674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.624394][ T8674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.646339][ T8674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.665470][T17020] wg1 speed is unknown, defaulting to 1000 [ 466.736744][T17034] __nla_validate_parse: 10 callbacks suppressed [ 466.736763][T17034] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2977'. [ 466.770335][T17035] siw: device registration error -23 [ 466.778347][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 466.869294][T17037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2978'. [ 467.022346][T17043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.239792][T17054] netlink: 'syz.3.2984': attribute type 3 has an invalid length. [ 467.284222][ T8680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.309032][ T8680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.450805][T17054] block nbd3: NBD_DISCONNECT [ 467.516835][T17068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2985'. [ 467.579744][T17060] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.599293][T17060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.764454][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2986'. [ 468.341107][T17060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.368132][T17060] xfrm0: left allmulticast mode [ 468.378595][T17060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 468.389271][T17060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.403319][T17060] veth1_macvtap: left promiscuous mode [ 468.410029][T17060] veth0_macvtap: left promiscuous mode [ 468.417129][T17060] veth0_macvtap: entered promiscuous mode [ 468.423767][T17060] veth1_macvtap: entered promiscuous mode [ 468.434071][T17060] geneve1: left promiscuous mode [ 468.441141][T17060] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 468.455211][T17060] veth3: left promiscuous mode [ 468.460152][T17060] veth3: left allmulticast mode [ 468.465645][T17060] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 468.477029][T17060] hsr1: left promiscuous mode [ 468.484882][T17060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.493720][T17060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 468.503664][T17060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.514439][T17060] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 468.549866][T17065] ip6tnl3: entered allmulticast mode [ 468.561124][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.568364][ T1177] bridge0: port 2(bridge_slave_1) entered listening state [ 468.612096][ T8688] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.621273][ T8688] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.632966][ T8676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.658532][ T8676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.703700][ T8688] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.730586][ T8688] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.822123][T17084] ip6erspan0: entered promiscuous mode [ 468.858147][T17084] ip6erspan0: entered allmulticast mode [ 469.023967][ T8682] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 469.049250][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2994'. [ 469.077735][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 469.096801][ T8682] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 469.257345][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 469.328266][T17112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2997'. [ 469.494987][ T4946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.508801][ T4946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.520612][ T4946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.530591][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.539450][ T4946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.796543][ T5744] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 470.179055][T17135] syzkaller0: entered promiscuous mode [ 470.198681][T17135] syzkaller0: entered allmulticast mode [ 470.235273][T17138] ip6gre1: entered promiscuous mode [ 470.623571][T17163] IPVS: length: 75 != 8 [ 471.643575][ T50] Bluetooth: hci3: command tx timeout [ 472.755865][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 472.823929][T17117] wg1 speed is unknown, defaulting to 1000 [ 472.915544][T17193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.983155][T17188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3010'. [ 472.999874][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3012'. [ 473.180840][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3014'. [ 473.352625][T17217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3017'. [ 473.673493][T17236] syz.2.3024: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 473.691053][T17236] CPU: 0 UID: 0 PID: 17236 Comm: syz.2.3024 Not tainted syzkaller #0 PREEMPT(full) [ 473.691081][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.691094][T17236] Call Trace: [ 473.691101][T17236] [ 473.691110][T17236] dump_stack_lvl+0xe8/0x150 [ 473.691140][T17236] warn_alloc+0x249/0x340 [ 473.691171][T17236] ? stack_trace_save+0xa9/0x100 [ 473.691206][T17236] ? __pfx_warn_alloc+0x10/0x10 [ 473.691240][T17236] ? kasan_save_track+0x4f/0x80 [ 473.691265][T17236] ? kasan_save_track+0x3e/0x80 [ 473.691290][T17236] ? __kasan_kmalloc+0x93/0xb0 [ 473.691316][T17236] ? __kmalloc_cache_noprof+0x31c/0x660 [ 473.691344][T17236] ? xskq_create+0x56/0x170 [ 473.691370][T17236] ? xsk_setsockopt+0x54c/0x990 [ 473.691399][T17236] ? do_sock_setsockopt+0x17c/0x1b0 [ 473.691427][T17236] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 473.691455][T17236] ? do_syscall_64+0x15f/0xf80 [ 473.691477][T17236] __vmalloc_node_range_noprof+0x132/0x1750 [ 473.691537][T17236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 473.691573][T17236] ? __kasan_kmalloc+0x93/0xb0 [ 473.691608][T17236] vmalloc_user_noprof+0xad/0xe0 [ 473.691634][T17236] ? xskq_create+0xbf/0x170 [ 473.691660][T17236] xskq_create+0xbf/0x170 [ 473.691688][T17236] xsk_init_queue+0x8a/0xe0 [ 473.691718][T17236] xsk_setsockopt+0x54c/0x990 [ 473.691754][T17236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 473.691780][T17236] ? __pfx_aa_sk_perm+0x10/0x10 [ 473.691809][T17236] ? aa_sock_opt_perm+0xff/0x1a0 [ 473.691839][T17236] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 473.691864][T17236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 473.691891][T17236] do_sock_setsockopt+0x17c/0x1b0 [ 473.691924][T17236] __x64_sys_setsockopt+0x13d/0x1b0 [ 473.691954][T17236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.691975][T17236] do_syscall_64+0x15f/0xf80 [ 473.691993][T17236] ? trace_irq_disable+0x3b/0x140 [ 473.692022][T17236] ? clear_bhb_loop+0x40/0x90 [ 473.692046][T17236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.692065][T17236] RIP: 0033:0x7fd41519ce59 [ 473.692085][T17236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.692103][T17236] RSP: 002b:00007fd4160e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 473.692125][T17236] RAX: ffffffffffffffda RBX: 00007fd415415fa0 RCX: 00007fd41519ce59 [ 473.692140][T17236] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 473.692153][T17236] RBP: 00007fd415232d6f R08: 0000000000000004 R09: 0000000000000000 [ 473.692165][T17236] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.692178][T17236] R13: 00007fd415416038 R14: 00007fd415415fa0 R15: 00007ffeb40fca18 [ 473.692210][T17236] [ 473.692308][T17236] Mem-Info: [ 473.698105][T17230] syzkaller0: entered promiscuous mode [ 473.712628][T17236] active_anon:10334 inactive_anon:0 isolated_anon:0 [ 473.712628][T17236] active_file:3390 inactive_file:40194 isolated_file:0 [ 473.712628][T17236] unevictable:768 dirty:273 writeback:0 [ 473.712628][T17236] slab_reclaimable:11886 slab_unreclaimable:116482 [ 473.712628][T17236] mapped:29636 shmem:1292 pagetables:1794 [ 473.712628][T17236] sec_pagetables:0 bounce:0 [ 473.712628][T17236] kernel_misc_reclaimable:0 [ 473.712628][T17236] free:1280528 free_pcp:29480 free_cma:0 [ 473.720514][ T50] Bluetooth: hci3: command tx timeout [ 473.740358][T17230] syzkaller0: entered allmulticast mode [ 473.771020][T17236] Node 0 active_anon:41536kB inactive_anon:0kB active_file:13560kB inactive_file:160568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89872kB dirty:1092kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14744kB pagetables:7044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 474.080709][T17236] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 474.115332][T17236] Node 0 DMA free:11188kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:76kB local_pcp:56kB free_cma:0kB [ 474.149192][T17236] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 474.155204][T17236] Node 0 DMA32 free:1294980kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41548kB inactive_anon:0kB active_file:13560kB inactive_file:160568kB unevictable:1536kB writepending:1136kB zspages:0kB present:3129332kB managed:2552532kB mlocked:0kB bounce:0kB free_pcp:55708kB local_pcp:28048kB free_cma:0kB [ 474.204933][T17236] lowmem_reserve[]: 0 0 0 0 0 [ 474.216245][T17236] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 474.269884][T17236] lowmem_reserve[]: 0 0 0 0 0 [ 474.283268][T17236] Node 1 Normal free:3813256kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62268kB local_pcp:30000kB free_cma:0kB [ 474.317665][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.335249][T17236] lowmem_reserve[]: 0 0 0 0 0 [ 474.340513][T17236] Node 0 DMA: 1*4kB (U) 2*8kB (U) 0*16kB 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11188kB [ 474.357472][T17236] Node 0 DMA32: 4251*4kB (UME) 3683*8kB (UME) 992*16kB (UM) 133*32kB (UME) 871*64kB (UM) 982*128kB (UME) 832*256kB (UME) 538*512kB (UM) 373*1024kB (UM) 86*2048kB (UME) 0*4096kB = 1294564kB [ 474.381302][T17236] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 474.393113][T17236] Node 1 Normal: 8*4kB (UM) 15*8kB (UM) 11*16kB (UM) 16*32kB (UM) 17*64kB (UM) 10*128kB (UM) 9*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 5*2048kB (U) 924*4096kB (UM) = 3813256kB [ 474.411854][T17236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.452798][T17236] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 474.472315][T17236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.482819][T17236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 474.493826][T17236] 44872 total pagecache pages [ 474.500462][T17236] 0 pages in swap cache [ 474.504952][T17236] Free swap = 124996kB [ 474.510378][T17236] Total swap = 124996kB [ 474.529056][T17254] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3026'. [ 474.539166][T17236] 2097051 pages RAM [ 474.543087][T17236] 0 pages HighMem/MovableOnly [ 474.548899][T17236] 427136 pages reserved [ 474.553512][T17236] 0 pages cma reserved [ 474.701642][T17234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.917769][T17263] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3028'. [ 474.997287][T17234] team1: left promiscuous mode [ 475.005794][T17234] team1: left allmulticast mode [ 475.010944][T17234] team2: left promiscuous mode [ 475.016391][T17234] team2: left allmulticast mode [ 475.021409][T17234] bond4: left promiscuous mode [ 475.028796][T17234] wireguard0: left promiscuous mode [ 475.037528][T17234] bridge8: left promiscuous mode [ 475.042873][T17234] bond5: left promiscuous mode [ 475.048901][T17234] vlan0: left allmulticast mode [ 475.053779][T17234] bond6: left allmulticast mode [ 475.059185][T17234] bridge16: left allmulticast mode [ 475.064400][T17234] team3: left promiscuous mode [ 475.070596][T17234] team3: left allmulticast mode [ 475.075637][T17234] team4: left promiscuous mode [ 475.080704][T17234] team4: left allmulticast mode [ 475.086555][T17234] xfrm1: left allmulticast mode [ 475.799820][ T50] Bluetooth: hci3: command tx timeout [ 477.232230][ T8680] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.240988][ T8680] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.250317][ T8680] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.259139][ T8680] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.286182][ T8682] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.309727][ T8682] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.334088][ T8682] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.363407][ T8682] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.372603][T17117] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.380364][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.388923][T17117] bridge_slave_0: entered allmulticast mode [ 477.407890][T17117] bridge_slave_0: entered promiscuous mode [ 477.457804][T17117] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.482471][T17117] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.494502][T17117] bridge_slave_1: entered allmulticast mode [ 477.503196][T17117] bridge_slave_1: entered promiscuous mode [ 477.551891][T17279] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3034'. [ 477.633272][T17117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.679799][T17117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.739604][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3037'. [ 477.755356][T17291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3036'. [ 477.791313][T17117] team0: Port device team_slave_0 added [ 477.807941][T17117] team0: Port device team_slave_1 added [ 477.829164][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'. [ 477.876072][ T50] Bluetooth: hci3: command tx timeout [ 477.949589][T17289] bond15: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 477.963551][T17289] bond15 (unregistering): Released all slaves [ 477.983069][T17299] netlink: 'syz.1.3038': attribute type 8 has an invalid length. [ 478.071632][T17300] xt_TCPMSS: Only works on TCP SYN packets [ 478.101829][T17117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.110474][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.137750][T17117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.167413][T17117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.174409][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.201326][T17117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.301562][T17307] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 478.307559][T17117] hsr_slave_0: entered promiscuous mode [ 478.326826][T17117] hsr_slave_1: entered promiscuous mode [ 478.333004][T17117] debugfs: 'hsr0' already exists in 'hsr' [ 478.340954][T17117] Cannot create hsr debugfs directory [ 478.349810][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3042'. [ 478.399472][T17304] syzkaller0: entered promiscuous mode [ 478.405328][T17304] syzkaller0: entered allmulticast mode [ 479.304118][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 479.882785][T17352] openvswitch: netlink: Flow key attr not present in new flow. [ 479.899998][T17352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3052'. [ 481.245699][T17351] netlink: 758 bytes leftover after parsing attributes in process `syz.2.3052'. [ 481.445957][T17360] gre1: entered promiscuous mode [ 481.885070][T17387] smc: net device hsr0 applied user defined pnetid SYZ2 [ 481.891834][T17384] wg1 speed is unknown, defaulting to 1000 [ 482.043328][T17393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.089069][T17391] syzkaller0: entered promiscuous mode [ 482.094699][T17391] syzkaller0: entered allmulticast mode [ 482.432496][T17400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3066'. [ 482.592027][T17413] IPv6: addrconf: prefix option has invalid lifetime [ 482.619324][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 482.682855][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 485.246253][T17434] bond2: option lacp_rate: invalid value (128) [ 485.257902][T17434] bond2 (unregistering): Released all slaves [ 485.353162][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 485.374174][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 485.403449][T17441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3073'. [ 485.648278][T17117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.759431][T17117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.785098][T17117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.842995][T17117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.881780][T17117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.903529][T17117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.904086][T17470] netlink: 'syz.3.3081': attribute type 1 has an invalid length. [ 485.923483][T17117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 485.976247][T17117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.017381][T17470] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 486.134639][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 486.456789][T17486] syzkaller1: entered promiscuous mode [ 486.469155][T17486] syzkaller1: entered allmulticast mode [ 486.479568][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3083'. [ 486.508005][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3083'. [ 486.544579][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3083'. [ 486.945414][T17117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.946651][T17499] netlink: 'syz.2.3086': attribute type 10 has an invalid length. [ 487.005228][T17499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.052612][T17499] team0: Port device netdevsim1 added [ 487.186760][T17117] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.224168][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.231419][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.271782][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.278966][ T8674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.422773][ T8674] nci: nci_ntf_packet: unknown ntf opcode 0x39 [ 487.430231][T17117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.840301][T17537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3093'. [ 487.929205][T17545] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 488.151684][T17117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.394254][T17567] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3098'. [ 488.430626][T17117] veth0_vlan: entered promiscuous mode [ 488.451783][T17117] veth1_vlan: entered promiscuous mode [ 488.520290][T17117] veth0_macvtap: entered promiscuous mode [ 488.539032][T17117] veth1_macvtap: entered promiscuous mode [ 488.561431][T17117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.580275][T17117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.601014][ T8680] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.610634][ T8680] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.625922][ T8680] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.635366][ T8680] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.799313][T17574] wg1 speed is unknown, defaulting to 1000 [ 489.125673][T17581] wg1 speed is unknown, defaulting to 1000 [ 489.417559][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 490.292654][T17513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.397203][T17604] netlink: 'syz.1.3105': attribute type 1 has an invalid length. [ 490.403055][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.413327][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.456015][T17604] __nla_validate_parse: 3 callbacks suppressed [ 490.456034][T17604] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3105'. [ 490.594464][ T8685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.617320][ T8685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.762604][T17616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3111'. [ 490.891438][T17626] syzkaller0: entered promiscuous mode [ 490.914383][T17626] syzkaller0: entered allmulticast mode [ 490.979970][T17632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3115'. [ 491.244157][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 491.264350][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 491.280824][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 491.294352][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 491.305321][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 491.660401][T17662] xt_hashlimit: size too large, truncated to 1048576 [ 491.697108][T17662] xt_hashlimit: max too large, truncated to 1048576 [ 491.778501][T17655] x_tables: duplicate underflow at hook 1 [ 491.890110][T17672] vlan0: entered promiscuous mode [ 491.906390][T17672] geneve1: entered promiscuous mode [ 491.922108][T17672] vlan0: entered allmulticast mode [ 491.929851][T17672] geneve1: entered allmulticast mode [ 492.257022][T17637] wg1 speed is unknown, defaulting to 1000 [ 492.677680][T17706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3132'. [ 493.235286][T17637] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.242948][T17637] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.250710][T17637] bridge_slave_0: entered allmulticast mode [ 493.259382][T17637] bridge_slave_0: entered promiscuous mode [ 493.269287][T17637] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.277128][T17637] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.284494][T17637] bridge_slave_1: entered allmulticast mode [ 493.293027][T17637] bridge_slave_1: entered promiscuous mode [ 493.336032][T17637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.350084][T17637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.396314][ T5630] Bluetooth: hci4: command tx timeout [ 493.420298][T17637] team0: Port device team_slave_0 added [ 493.430363][T17637] team0: Port device team_slave_1 added [ 493.474171][T17637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.482361][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.515141][T17637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.530844][T17637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.538419][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.566804][T17637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.579440][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3139'. [ 493.600217][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3139'. [ 493.610378][T17734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.688740][T17737] syzkaller1: entered promiscuous mode [ 493.709872][T17737] syzkaller1: entered allmulticast mode [ 493.820203][T17637] hsr_slave_0: entered promiscuous mode [ 493.833069][T17718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.839838][T17637] hsr_slave_1: entered promiscuous mode [ 493.858180][T17738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3140'. [ 493.881425][T17637] debugfs: 'hsr0' already exists in 'hsr' [ 493.896164][T17637] Cannot create hsr debugfs directory [ 494.029141][T17751] ieee802154 phy0 wpan0: encryption failed: -126 [ 494.084294][T17753] ieee802154 phy0 wpan0: encryption failed: -126 [ 494.733357][T17637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.767805][T17637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.791437][T17637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 495.149332][T17637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.187906][T17637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.217280][T17637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 495.324941][T17802] 5nè‹Ò: entered promiscuous mode [ 495.424926][T17637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.450701][T17637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.474659][T17637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 495.494993][ T5630] Bluetooth: hci4: command 0x041b tx timeout [ 495.707843][T17637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.730211][T17637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.743569][T17637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 495.770325][T17823] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 496.243171][T17846] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 496.261810][T17846] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.508525][T17637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 496.556851][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 496.574816][T17851] xt_l2tp: invalid flags combination: 8 [ 496.667869][T17637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 496.709703][T17637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 496.821895][T17637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.012346][T17637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 497.050694][T17637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.074235][T17637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 497.099701][T17637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.511745][T17637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.556924][ T5630] Bluetooth: hci4: command 0x041b tx timeout [ 497.584679][T17637] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.596678][T17899] openvswitch: netlink: Key type 29 is not supported [ 497.611764][T17901] FAULT_INJECTION: forcing a failure. [ 497.611764][T17901] name failslab, interval 1, probability 0, space 0, times 0 [ 497.664647][T17901] CPU: 1 UID: 0 PID: 17901 Comm: syz.3.3178 Not tainted syzkaller #0 PREEMPT(full) [ 497.664672][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.664681][T17901] Call Trace: [ 497.664689][T17901] [ 497.664696][T17901] dump_stack_lvl+0xe8/0x150 [ 497.664721][T17901] should_fail_ex+0x412/0x560 [ 497.664746][T17901] should_failslab+0xa8/0x100 [ 497.664773][T17901] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 497.664795][T17901] ? __alloc_skb+0x186/0x7d0 [ 497.664815][T17901] ? __alloc_skb+0x1d0/0x7d0 [ 497.664841][T17901] ? __local_bh_enable_ip+0xd0/0x130 [ 497.664862][T17901] __alloc_skb+0x1d0/0x7d0 [ 497.664882][T17901] ? netlink_ack_tlv_len+0x6c/0x210 [ 497.664908][T17901] netlink_ack+0x146/0xa50 [ 497.664942][T17901] netlink_rcv_skb+0x2b6/0x4b0 [ 497.664966][T17901] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 497.664989][T17901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.665021][T17901] ? bpf_lsm_capable+0x9/0x20 [ 497.665036][T17901] ? security_capable+0x7e/0x2c0 [ 497.665064][T17901] nfnetlink_rcv+0x2c0/0x27b0 [ 497.665087][T17901] ? kernel_text_address+0xa5/0xe0 [ 497.665112][T17901] ? __kernel_text_address+0xd/0x30 [ 497.665135][T17901] ? unwind_get_return_address+0x4d/0x90 [ 497.665156][T17901] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 497.665179][T17901] ? arch_stack_walk+0xfb/0x150 [ 497.665207][T17901] ? stack_trace_save+0xa9/0x100 [ 497.665231][T17901] ? __lock_acquire+0x6b5/0x2cf0 [ 497.665247][T17901] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 497.665272][T17901] ? kasan_save_track+0x4f/0x80 [ 497.665291][T17901] ? kasan_save_track+0x3e/0x80 [ 497.665312][T17901] ? __kasan_slab_alloc+0x6c/0x80 [ 497.665334][T17901] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 497.665356][T17901] ? __alloc_skb+0x27d/0x7d0 [ 497.665375][T17901] ? netlink_sendmsg+0x5d4/0xb40 [ 497.665405][T17901] ? __lock_acquire+0x6b5/0x2cf0 [ 497.665435][T17901] ? __netlink_lookup+0xc6/0x8b0 [ 497.665468][T17901] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.665493][T17901] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.665523][T17901] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.665547][T17901] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.665577][T17901] netlink_unicast+0x75c/0x8e0 [ 497.665605][T17901] netlink_sendmsg+0x813/0xb40 [ 497.665638][T17901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.665666][T17901] ? aa_sock_msg_perm+0xf1/0x1b0 [ 497.665690][T17901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.665715][T17901] ____sys_sendmsg+0x972/0x9f0 [ 497.665741][T17901] ? __might_fault+0xaf/0x130 [ 497.665769][T17901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.665803][T17901] ? import_iovec+0x73/0xa0 [ 497.665838][T17901] ___sys_sendmsg+0x2a5/0x360 [ 497.665862][T17901] ? __lock_acquire+0x6b5/0x2cf0 [ 497.665882][T17901] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.665935][T17901] ? __fget_files+0x2a/0x420 [ 497.665954][T17901] ? __fget_files+0x3a0/0x420 [ 497.665983][T17901] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.666010][T17901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.666042][T17901] ? __pfx_ksys_write+0x10/0x10 [ 497.666072][T17901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.666092][T17901] do_syscall_64+0x15f/0xf80 [ 497.666108][T17901] ? trace_irq_disable+0x3b/0x140 [ 497.666130][T17901] ? clear_bhb_loop+0x40/0x90 [ 497.666151][T17901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.666167][T17901] RIP: 0033:0x7fab12f9ce59 [ 497.666185][T17901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.666200][T17901] RSP: 002b:00007fab13e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.666219][T17901] RAX: ffffffffffffffda RBX: 00007fab13215fa0 RCX: 00007fab12f9ce59 [ 497.666232][T17901] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 497.666244][T17901] RBP: 00007fab13e67090 R08: 0000000000000000 R09: 0000000000000000 [ 497.666254][T17901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.666265][T17901] R13: 00007fab13216038 R14: 00007fab13215fa0 R15: 00007ffd69591b78 [ 497.666294][T17901] [ 498.056912][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.064083][ T8674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.076929][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.084079][ T8674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.219968][T17911] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3180'. [ 498.303147][T17919] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3181'. [ 498.559712][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3183'. [ 498.586485][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3183'. [ 498.763682][T17934] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 498.940443][T17934] bond9 (unregistering): Released all slaves [ 499.283769][T17637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.302733][T17951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3187'. [ 499.356878][T17955] syzkaller0: entered promiscuous mode [ 499.362704][T17955] syzkaller0: entered allmulticast mode [ 499.588987][T17962] bond1 (unregistering): Released all slaves [ 499.636192][ T50] Bluetooth: hci4: command 0x041b tx timeout [ 501.404232][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.722131][ T50] Bluetooth: hci4: command 0x041b tx timeout [ 503.296972][T17637] veth0_vlan: entered promiscuous mode [ 503.514613][T17637] veth1_vlan: entered promiscuous mode [ 503.653079][T17996] xt_hashlimit: overflow, rate too high: 0 [ 503.769604][T17995] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.789076][T17995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.851228][T17995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.890293][T17995] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 503.937365][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.944642][ T8682] bridge0: port 2(bridge_slave_1) entered listening state [ 504.050107][T17637] veth0_macvtap: entered promiscuous mode [ 504.070142][T17637] veth1_macvtap: entered promiscuous mode [ 504.108942][T17637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.128545][T17637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.146505][ T8672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.159327][ T8672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.169143][ T8672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.188192][ T8672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.191055][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3203'. [ 504.217274][T18013] tipc: Started in network mode [ 504.222250][T18013] tipc: Node identity ac14140f, cluster identity 4711 [ 504.231125][T18013] tipc: New replicast peer: 255.255.255.255 [ 504.241671][T18013] tipc: Enabled bearer , priority 10 [ 504.511749][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3205'. [ 504.609385][T18025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3205'. [ 504.645070][T18024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.760263][ T8680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.778186][ T8680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.895304][T18042] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3206'. [ 504.923990][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3206'. [ 505.005504][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 505.018322][T18042] team0: Port device team_slave_0 removed [ 505.054006][ T8685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.068882][ T8685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.182305][T18044] wg1 speed is unknown, defaulting to 1000 [ 505.269824][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3211'. [ 505.302569][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3211'. [ 505.342593][T18053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.422103][T12548] tipc: Node number set to 2886997007 [ 505.533626][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3213'. [ 505.571251][T18062] openvswitch: netlink: Flow actions attr not present in new flow. [ 505.970714][T18085] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3219'. [ 506.429195][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.442909][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.454256][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.463938][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 506.472668][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.744173][ T8676] bridge_slave_1: left allmulticast mode [ 506.773495][ T8676] bridge_slave_1: left promiscuous mode [ 506.807283][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.854422][ T8676] bridge_slave_0: left allmulticast mode [ 506.868541][ T8676] bridge_slave_0: left promiscuous mode [ 506.877238][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.969304][ T8676] dvmrp1: left allmulticast mode [ 507.334086][ T8676] bond13 (unregistering): (slave geneve4): Releasing active interface [ 507.352320][ T8676] bond10 (unregistering): (slave geneve3): Releasing active interface [ 507.370056][ T8676] team0: Port device geneve1 removed [ 508.002664][ T8676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.014081][ T8676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.024779][ T8676] bond0 (unregistering): Released all slaves [ 508.037662][ T8676] bond1 (unregistering): Released all slaves [ 508.052524][ T8676] bond2 (unregistering): Released all slaves [ 508.068510][ T8676] bond3 (unregistering): Released all slaves [ 508.085509][ T8676] bond4 (unregistering): Released all slaves [ 508.103974][ T8676] bond5 (unregistering): Released all slaves [ 508.119420][ T8676] bond6 (unregistering): Released all slaves [ 508.138341][ T8676] bond7 (unregistering): (slave bond8): Releasing backup interface [ 508.149377][ T8676] bond7 (unregistering): Released all slaves [ 508.163914][ T8676] bond8 (unregistering): Released all slaves [ 508.178994][ T8676] bond9 (unregistering): Released all slaves [ 508.193357][ T8676] bond10 (unregistering): Released all slaves [ 508.219610][ T8676] bond11 (unregistering): Released all slaves [ 508.234818][ T8676] bond12 (unregistering): (slave veth7): Releasing backup interface [ 508.248836][ T8676] bond12 (unregistering): (slave batadv1): Releasing backup interface [ 508.259305][ T8676] bond12 (unregistering): Released all slaves [ 508.273643][ T8676] bond13 (unregistering): Released all slaves [ 508.291698][T18106] netlink: 'syz.1.3224': attribute type 4 has an invalid length. [ 508.318813][T18107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.383795][ T6527] syz1: Port: 1 Link DOWN [ 508.516386][ T5630] Bluetooth: hci0: command tx timeout [ 508.627796][ T30] audit: type=1804 audit(1778650168.814:14): pid=18126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3228" name="/newroot/645/cgroup.controllers" dev="tmpfs" ino=3329 res=1 errno=0 [ 508.705881][ T30] audit: type=1800 audit(1778650168.824:15): pid=18121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3228" name="cgroup.controllers" dev="tmpfs" ino=3329 res=0 errno=0 [ 508.713263][ T8676] 5nè: left promiscuous mode [ 508.809784][ T30] audit: type=1800 audit(1778650168.864:16): pid=18126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3228" name="cgroup.controllers" dev="tmpfs" ino=3329 res=0 errno=0 [ 509.016765][ T8676] tipc: Left network mode [ 509.067059][T18093] wg1 speed is unknown, defaulting to 1000 [ 509.267437][T18153] __nla_validate_parse: 4 callbacks suppressed [ 509.267456][T18153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3236'. [ 510.188076][T18176] Bluetooth: MGMT ver 1.23 [ 510.549415][T18183] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20002 [ 510.574251][T18188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3248'. [ 510.595984][ T5630] Bluetooth: hci0: command tx timeout [ 511.046480][T18209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3254'. [ 511.098786][T18093] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.132289][T18093] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.157099][T18093] bridge_slave_0: entered allmulticast mode [ 511.165127][T18093] bridge_slave_0: entered promiscuous mode [ 511.182881][T18093] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.203972][T18093] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.220484][T18093] bridge_slave_1: entered allmulticast mode [ 511.237246][T18093] bridge_slave_1: entered promiscuous mode [ 511.470207][T18093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.485382][T18093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.722802][T18231] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3259'. [ 511.940281][T18093] team0: Port device team_slave_0 added [ 512.032619][T18093] team0: Port device team_slave_1 added [ 512.048547][T18236] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3260'. [ 512.117872][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3260'. [ 512.240195][T18232] wg1 speed is unknown, defaulting to 1000 [ 512.275237][T18093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.283960][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.311283][T18093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.397124][T18093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.421442][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.453956][T18093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.468478][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3263'. [ 512.519550][T18250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3265'. [ 512.536513][ T8676] hsr_slave_0: left promiscuous mode [ 512.543425][ T8676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.571861][ T8676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.624079][ T8676] veth1_macvtap: left promiscuous mode [ 512.632753][ T8676] veth0_macvtap: left promiscuous mode [ 512.639468][ T8676] veth1_vlan: left promiscuous mode [ 512.675807][ T5630] Bluetooth: hci0: command tx timeout [ 513.008440][ T8676] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 513.064573][ T8676] team0 (unregistering): Port device team_slave_1 removed [ 513.093600][ T8676] team0 (unregistering): Port device team_slave_0 removed [ 513.150748][ T1177] smbdirect: ib_dev[syz1] removed [ 513.294561][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3265'. [ 513.332006][T18257] tipc: Enabled bearer , priority 0 [ 513.347936][T18258] syzkaller0: entered promiscuous mode [ 513.374257][T18258] syzkaller0: entered allmulticast mode [ 513.404797][T18252] tipc: Resetting bearer [ 513.500707][T18252] tipc: Disabling bearer [ 513.623378][T18093] hsr_slave_0: entered promiscuous mode [ 513.642023][T18093] hsr_slave_1: entered promiscuous mode [ 513.657225][T18093] debugfs: 'hsr0' already exists in 'hsr' [ 513.666870][T18093] Cannot create hsr debugfs directory [ 514.086089][ T8676] IPVS: stop unused estimator thread 0... [ 514.099194][ T6527] IPVS: starting estimator thread 0... [ 514.185905][T18289] IPVS: using max 27 ests per chain, 64800 per kthread [ 514.251530][T18285] veth9: entered allmulticast mode [ 514.651925][T18299] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3277'. [ 514.704571][T18302] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3277'. [ 514.755930][ T5630] Bluetooth: hci0: command tx timeout [ 514.814802][T18301] ipt_ECN: cannot use operation on non-tcp rule [ 514.839683][T18304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3280'. [ 515.063115][T18316] syz_tun: entered allmulticast mode [ 515.103087][T18320] netlink: 'syz.4.3283': attribute type 2 has an invalid length. [ 515.121305][T18320] netlink: 'syz.4.3283': attribute type 2 has an invalid length. [ 515.258818][T18319] syzkaller0: entered promiscuous mode [ 515.264466][T18319] syzkaller0: entered allmulticast mode [ 517.806818][ T5630] Bluetooth: hci0: command tx timeout [ 518.981979][T18329] syzkaller1: entered promiscuous mode [ 518.988446][T18329] syzkaller1: entered allmulticast mode [ 519.113712][T18315] syz_tun: left allmulticast mode [ 519.332926][ T8676] bridge_slave_1: left allmulticast mode [ 519.361939][ T8676] bridge_slave_1: left promiscuous mode [ 519.389840][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.421098][T18370] netlink: 'syz.1.3291': attribute type 1 has an invalid length. [ 519.542444][T18374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3291'. [ 520.141983][ T8676] bond1 (unregistering): (slave geneve2): Releasing active interface [ 520.339006][ T8676] bond3 (unregistering): (slave bridge3): Releasing active interface [ 521.293572][ T8676] bond1 (unregistering): Released all slaves [ 521.314181][ T8676] bond2 (unregistering): (slave veth5): Releasing active interface [ 521.330241][ T8676] bond2 (unregistering): Released all slaves [ 521.353824][ T8676] bond3 (unregistering): Released all slaves [ 521.375774][ T8676] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 521.384842][ T8676] bond4 (unregistering): Released all slaves [ 521.417675][ T8676] bond0 (unregistering): Released all slaves [ 521.439883][ T8676] bond5 (unregistering): Released all slaves [ 521.473079][ T8676] bond6 (unregistering): Released all slaves [ 521.493352][ T8676] bond7 (unregistering): Released all slaves [ 521.512024][ T8676] bond8 (unregistering): Released all slaves [ 521.561257][T18374] macvlan1: entered promiscuous mode [ 521.568505][T18374] macvlan1: entered allmulticast mode [ 521.574619][T18374] veth1_vlan: entered allmulticast mode [ 521.586094][T18378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.667147][T18385] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3292'. [ 521.965895][ T8676] : left promiscuous mode [ 522.033909][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'. [ 522.133783][T18425] : option downdelay: invalid value (18446744073709547007) [ 522.141528][T18425] : option downdelay: allowed values 0 - 2147483647 [ 522.158113][T18425]  (unregistering): Released all slaves [ 522.204089][ T8676] tipc: Left network mode [ 522.714769][T18093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 522.781866][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.841301][T18093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 522.918101][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.958281][T18093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 522.999697][ T8676] IPVS: stopping backup sync thread 17823 ... [ 523.043989][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.087551][T18093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 523.134216][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.307302][T18471] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3311'. [ 523.356838][T18471] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3311'. [ 523.493629][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 523.680022][T18497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3312'. [ 524.026730][T18489] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.034496][T18489] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.184055][T18489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.202265][T18489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.305720][T18489] gre1: left promiscuous mode [ 524.312768][T18489] vlan0: left promiscuous mode [ 524.319557][T18489] geneve1: left promiscuous mode [ 524.326991][T18489] vlan0: left allmulticast mode [ 524.331986][T18489] geneve1: left allmulticast mode [ 524.339819][T18495] batadv_slave_1: entered promiscuous mode [ 524.449745][T18486] batadv_slave_1: left promiscuous mode [ 524.557765][ T1124] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.595900][ T1124] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.683176][ T1124] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.737383][ T1124] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.309097][T18534] syzkaller0: entered promiscuous mode [ 525.340356][T18534] syzkaller0: entered allmulticast mode [ 528.689525][T18548] syzkaller0: entered promiscuous mode [ 528.695203][T18548] syzkaller0: entered allmulticast mode [ 529.129818][T18587] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.355445][T18093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.574925][T18093] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.675452][ T8676] veth1_to_team: left promiscuous mode [ 529.733921][ T8676] hsr_slave_0: left promiscuous mode [ 529.764058][ T8676] hsr_slave_1: left promiscuous mode [ 529.791658][ T8676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.822025][ T8676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.723121][ T8676] team0 (unregistering): Port device team_slave_1 removed [ 533.743783][ T8676] team0 (unregistering): Port device team_slave_0 removed [ 533.964250][T18620] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 533.971115][T18620] syzkaller1: linktype set to 1 [ 534.004249][T18626] batadv0: entered promiscuous mode [ 534.013156][T18626] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 534.021719][T18626] batadv0: left promiscuous mode [ 534.137353][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.144555][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.251187][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.261022][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.746291][T18698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.760356][T18703] netlink: 'syz.2.3343': attribute type 10 has an invalid length. [ 534.770307][T18700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3342'. [ 534.901649][T18703] team0: Port device dummy0 added [ 534.979671][ T8676] IPVS: stop unused estimator thread 0... [ 535.029940][T18703] netlink: 'syz.2.3343': attribute type 10 has an invalid length. [ 535.101441][T18717] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3344'. [ 535.212012][T18703] team0: Port device dummy0 removed [ 535.248020][T18703] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 535.270477][T18707] ================================================================== [ 535.278581][T18707] BUG: KASAN: slab-out-of-bounds in blk_mq_free_rqs+0xea/0x680 [ 535.286179][T18707] Read of size 8 at addr ffff888027746ac8 by task syz.2.3343/18707 [ 535.294085][T18707] [ 535.296424][T18707] CPU: 0 UID: 0 PID: 18707 Comm: syz.2.3343 Not tainted syzkaller #0 PREEMPT(full) [ 535.296452][T18707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.296465][T18707] Call Trace: [ 535.296472][T18707] [ 535.296480][T18707] dump_stack_lvl+0xe8/0x150 [ 535.296508][T18707] print_address_description+0x55/0x1e0 [ 535.296530][T18707] ? blk_mq_free_rqs+0xea/0x680 [ 535.296558][T18707] print_report+0x58/0x70 [ 535.296576][T18707] kasan_report+0x117/0x150 [ 535.296608][T18707] ? blk_mq_free_rqs+0xea/0x680 [ 535.296641][T18707] blk_mq_free_rqs+0xea/0x680 [ 535.296671][T18707] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 535.296702][T18707] blk_mq_free_map_and_rqs+0x40/0xf0 [ 535.296723][T18707] blk_mq_free_sched_res+0xeb/0x280 [ 535.296744][T18707] elevator_change_done+0x1d2/0x5f0 [ 535.296776][T18707] ? __pfx_elevator_change_done+0x10/0x10 [ 535.296806][T18707] ? elevator_change+0x2e0/0x450 [ 535.296833][T18707] elevator_change+0x321/0x450 [ 535.296865][T18707] elevator_set_none+0xb5/0x140 [ 535.296893][T18707] ? __pfx_elevator_set_none+0x10/0x10 [ 535.296924][T18707] ? xa_load+0x1db/0x210 [ 535.296955][T18707] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 535.296984][T18707] ? kernfs_add_one+0x477/0x5c0 [ 535.297010][T18707] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 535.297036][T18707] ? sysfs_add_file_mode_ns+0x259/0x300 [ 535.297062][T18707] nbd_start_device+0x17f/0xb10 [ 535.297087][T18707] ? device_create_file+0xf4/0x1b0 [ 535.297109][T18707] nbd_genl_connect+0x165b/0x1cf0 [ 535.297129][T18707] ? __pfx___nla_validate_parse+0x10/0x10 [ 535.297165][T18707] ? __pfx_nbd_genl_connect+0x10/0x10 [ 535.297188][T18707] ? rcu_is_watching+0x15/0xb0 [ 535.297213][T18707] ? trace_kmalloc+0x2a/0xf0 [ 535.297242][T18707] ? __nla_parse+0x40/0x60 [ 535.297271][T18707] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 535.297294][T18707] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 535.297320][T18707] genl_family_rcv_msg_doit+0x22a/0x330 [ 535.297346][T18707] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 535.297374][T18707] ? __lock_acquire+0x6b5/0x2cf0 [ 535.297398][T18707] genl_rcv_msg+0x61c/0x7a0 [ 535.297420][T18707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.297440][T18707] ? __pfx_nbd_genl_connect+0x10/0x10 [ 535.297465][T18707] netlink_rcv_skb+0x232/0x4b0 [ 535.297493][T18707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.297515][T18707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.297547][T18707] ? down_read+0x270/0x2e0 [ 535.297566][T18707] ? genl_rcv+0xd/0x40 [ 535.297586][T18707] genl_rcv+0x28/0x40 [ 535.297604][T18707] netlink_unicast+0x75c/0x8e0 [ 535.297633][T18707] netlink_sendmsg+0x813/0xb40 [ 535.297664][T18707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.297692][T18707] ? aa_sock_msg_perm+0xf1/0x1b0 [ 535.297717][T18707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 535.297744][T18707] ____sys_sendmsg+0x972/0x9f0 [ 535.297773][T18707] ? __might_fault+0xaf/0x130 [ 535.297799][T18707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.297831][T18707] ? import_iovec+0x73/0xa0 [ 535.297860][T18707] ___sys_sendmsg+0x2a5/0x360 [ 535.297886][T18707] ? __lock_acquire+0x6b5/0x2cf0 [ 535.297908][T18707] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.297947][T18707] ? futex_wait+0x2a2/0x390 [ 535.297986][T18707] ? __fget_files+0x2a/0x420 [ 535.298007][T18707] ? __fget_files+0x3a0/0x420 [ 535.298033][T18707] __x64_sys_sendmsg+0x1bd/0x2a0 [ 535.298063][T18707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.298095][T18707] ? rcu_is_watching+0x15/0xb0 [ 535.298123][T18707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.298143][T18707] do_syscall_64+0x15f/0xf80 [ 535.298160][T18707] ? trace_irq_disable+0x3b/0x140 [ 535.298189][T18707] ? clear_bhb_loop+0x40/0x90 [ 535.298211][T18707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.298229][T18707] RIP: 0033:0x7fd41519ce59 [ 535.298249][T18707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.298264][T18707] RSP: 002b:00007fd4160c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.298285][T18707] RAX: ffffffffffffffda RBX: 00007fd415416090 RCX: 00007fd41519ce59 [ 535.298301][T18707] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 535.298314][T18707] RBP: 00007fd415232d6f R08: 0000000000000000 R09: 0000000000000000 [ 535.298327][T18707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.298340][T18707] R13: 00007fd415416128 R14: 00007fd415416090 R15: 00007ffeb40fca18 [ 535.298363][T18707] [ 535.298370][T18707] [ 535.734221][T18707] Allocated by task 1: [ 535.738288][T18707] kasan_save_track+0x3e/0x80 [ 535.742993][T18707] __kasan_kmalloc+0x93/0xb0 [ 535.747608][T18707] __kmalloc_node_noprof+0x4e0/0x7c0 [ 535.752907][T18707] blk_mq_alloc_tag_set+0x4e3/0xfc0 [ 535.758122][T18707] nbd_dev_add+0x30e/0xb50 [ 535.762774][T18707] nbd_init+0x168/0x1f0 [ 535.767040][T18707] do_one_initcall+0x250/0x870 [ 535.771825][T18707] do_initcall_level+0x104/0x190 [ 535.776793][T18707] do_initcalls+0x59/0xa0 [ 535.781154][T18707] kernel_init_freeable+0x2a6/0x3e0 [ 535.786390][T18707] kernel_init+0x1d/0x1d0 [ 535.790737][T18707] ret_from_fork+0x514/0xb70 [ 535.795349][T18707] ret_from_fork_asm+0x1a/0x30 [ 535.800136][T18707] [ 535.802463][T18707] The buggy address belongs to the object at ffff888027746ac0 [ 535.802463][T18707] which belongs to the cache kmalloc-8 of size 8 [ 535.816173][T18707] The buggy address is located 0 bytes to the right of [ 535.816173][T18707] allocated 8-byte region [ffff888027746ac0, ffff888027746ac8) [ 535.830507][T18707] [ 535.832831][T18707] The buggy address belongs to the physical page: [ 535.839250][T18707] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27746 [ 535.848004][T18707] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 535.855104][T18707] page_type: f5(slab) [ 535.859082][T18707] raw: 00fff00000000000 ffff88813fe1a500 dead000000000100 dead000000000122 [ 535.867658][T18707] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 535.876239][T18707] page dumped because: kasan: bad access detected [ 535.882644][T18707] page_owner tracks the page as allocated [ 535.888351][T18707] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5988613545, free_ts 5984305330 [ 535.907979][T18707] post_alloc_hook+0x231/0x280 [ 535.912755][T18707] get_page_from_freelist+0x24ba/0x2540 [ 535.918304][T18707] __alloc_frozen_pages_noprof+0x18d/0x380 [ 535.924119][T18707] allocate_slab+0x77/0x660 [ 535.928618][T18707] refill_objects+0x339/0x3d0 [ 535.933285][T18707] __pcs_replace_empty_main+0x321/0x720 [ 535.938823][T18707] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 535.945243][T18707] kstrdup+0x42/0x100 [ 535.949217][T18707] __kernfs_new_node+0xaa/0x970 [ 535.954067][T18707] kernfs_new_node+0x102/0x210 [ 535.958832][T18707] kernfs_create_link+0xa7/0x200 [ 535.963774][T18707] sysfs_do_create_link_sd+0x83/0x110 [ 535.969142][T18707] device_create_sys_dev_entry+0x122/0x190 [ 535.974947][T18707] device_add+0x733/0xbb0 [ 535.979271][T18707] __add_disk+0x4be/0xd50 [ 535.983595][T18707] add_disk_fwnode+0xfb/0x480 [ 535.988265][T18707] page last free pid 77 tgid 77 stack trace: [ 535.994233][T18707] __free_frozen_pages+0xbc7/0xd30 [ 535.999351][T18707] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 536.004896][T18707] alloc_vmap_area+0xd47/0x1480 [ 536.009744][T18707] __get_vm_area_node+0x1f8/0x300 [ 536.014767][T18707] __vmalloc_node_range_noprof+0x36a/0x1750 [ 536.020748][T18707] __vmalloc_node_noprof+0xc2/0x100 [ 536.025947][T18707] dup_task_struct+0x298/0x840 [ 536.030703][T18707] copy_process+0x89b/0x4440 [ 536.035296][T18707] kernel_clone+0x284/0x8f0 [ 536.039809][T18707] user_mode_thread+0x110/0x180 [ 536.044673][T18707] call_usermodehelper_exec_work+0x5c/0x230 [ 536.050565][T18707] process_scheduled_works+0xb5d/0x1860 [ 536.056111][T18707] worker_thread+0xa53/0xfc0 [ 536.060788][T18707] kthread+0x388/0x470 [ 536.064858][T18707] ret_from_fork+0x514/0xb70 [ 536.069448][T18707] ret_from_fork_asm+0x1a/0x30 [ 536.074208][T18707] [ 536.076522][T18707] Memory state around the buggy address: [ 536.082141][T18707] ffff888027746980: 05 fc fc fc 06 fc fc fc 05 fc fc fc 05 fc fc fc [ 536.090284][T18707] ffff888027746a00: 05 fc fc fc 05 fc fc fc 05 fc fc fc 00 fc fc fc [ 536.098343][T18707] >ffff888027746a80: 06 fc fc fc 00 fc fc fc 00 fc fc fc 05 fc fc fc [ 536.106398][T18707] ^ [ 536.112982][T18707] ffff888027746b00: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 536.121043][T18707] ffff888027746b80: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 536.129096][T18707] ================================================================== [ 536.168181][T18707] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 536.175508][T18707] CPU: 0 UID: 0 PID: 18707 Comm: syz.2.3343 Not tainted syzkaller #0 PREEMPT(full) [ 536.184898][T18707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.194965][T18707] Call Trace: [ 536.198253][T18707] [ 536.201194][T18707] vpanic+0x56c/0xa60 [ 536.205196][T18707] ? __pfx_vpanic+0x10/0x10 [ 536.209717][T18707] panic+0xc5/0xd0 [ 536.213453][T18707] ? __pfx_panic+0x10/0x10 [ 536.217891][T18707] ? preempt_schedule_thunk+0x16/0x30 [ 536.223288][T18707] ? preempt_schedule_thunk+0x16/0x30 [ 536.228687][T18707] ? blk_mq_free_rqs+0xea/0x680 [ 536.233564][T18707] check_panic_on_warn+0x89/0xb0 [ 536.238527][T18707] ? blk_mq_free_rqs+0xea/0x680 [ 536.243418][T18707] end_report+0x73/0x170 [ 536.247687][T18707] ? blk_mq_free_rqs+0xea/0x680 [ 536.252564][T18707] kasan_report+0x128/0x150 [ 536.257098][T18707] ? blk_mq_free_rqs+0xea/0x680 [ 536.261979][T18707] blk_mq_free_rqs+0xea/0x680 [ 536.266684][T18707] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 536.272518][T18707] blk_mq_free_map_and_rqs+0x40/0xf0 [ 536.277827][T18707] blk_mq_free_sched_res+0xeb/0x280 [ 536.283044][T18707] elevator_change_done+0x1d2/0x5f0 [ 536.288273][T18707] ? __pfx_elevator_change_done+0x10/0x10 [ 536.294017][T18707] ? elevator_change+0x2e0/0x450 [ 536.298988][T18707] elevator_change+0x321/0x450 [ 536.303788][T18707] elevator_set_none+0xb5/0x140 [ 536.308673][T18707] ? __pfx_elevator_set_none+0x10/0x10 [ 536.314163][T18707] ? xa_load+0x1db/0x210 [ 536.318429][T18707] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 536.324266][T18707] ? kernfs_add_one+0x477/0x5c0 [ 536.329152][T18707] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 536.335432][T18707] ? sysfs_add_file_mode_ns+0x259/0x300 [ 536.341006][T18707] nbd_start_device+0x17f/0xb10 [ 536.346019][T18707] ? device_create_file+0xf4/0x1b0 [ 536.351179][T18707] nbd_genl_connect+0x165b/0x1cf0 [ 536.356226][T18707] ? __pfx___nla_validate_parse+0x10/0x10 [ 536.361992][T18707] ? __pfx_nbd_genl_connect+0x10/0x10 [ 536.367398][T18707] ? rcu_is_watching+0x15/0xb0 [ 536.372187][T18707] ? trace_kmalloc+0x2a/0xf0 [ 536.376816][T18707] ? __nla_parse+0x40/0x60 [ 536.381261][T18707] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 536.387614][T18707] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 536.393978][T18707] genl_family_rcv_msg_doit+0x22a/0x330 [ 536.399556][T18707] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 536.405646][T18707] ? __lock_acquire+0x6b5/0x2cf0 [ 536.410612][T18707] genl_rcv_msg+0x61c/0x7a0 [ 536.415164][T18707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.420212][T18707] ? __pfx_nbd_genl_connect+0x10/0x10 [ 536.425614][T18707] netlink_rcv_skb+0x232/0x4b0 [ 536.430409][T18707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.435467][T18707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.440791][T18707] ? down_read+0x270/0x2e0 [ 536.445240][T18707] ? genl_rcv+0xd/0x40 [ 536.449332][T18707] genl_rcv+0x28/0x40 [ 536.453335][T18707] netlink_unicast+0x75c/0x8e0 [ 536.458132][T18707] netlink_sendmsg+0x813/0xb40 [ 536.462934][T18707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.468258][T18707] ? aa_sock_msg_perm+0xf1/0x1b0 [ 536.473312][T18707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.478631][T18707] ____sys_sendmsg+0x972/0x9f0 [ 536.483429][T18707] ? __might_fault+0xaf/0x130 [ 536.488134][T18707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.493454][T18707] ? import_iovec+0x73/0xa0 [ 536.497986][T18707] ___sys_sendmsg+0x2a5/0x360 [ 536.502690][T18707] ? __lock_acquire+0x6b5/0x2cf0 [ 536.507656][T18707] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.512889][T18707] ? futex_wait+0x2a2/0x390 [ 536.517424][T18707] ? __fget_files+0x2a/0x420 [ 536.522038][T18707] ? __fget_files+0x3a0/0x420 [ 536.526736][T18707] __x64_sys_sendmsg+0x1bd/0x2a0 [ 536.531710][T18707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.537199][T18707] ? rcu_is_watching+0x15/0xb0 [ 536.541990][T18707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.548070][T18707] do_syscall_64+0x15f/0xf80 [ 536.552675][T18707] ? trace_irq_disable+0x3b/0x140 [ 536.557731][T18707] ? clear_bhb_loop+0x40/0x90 [ 536.562438][T18707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.568359][T18707] RIP: 0033:0x7fd41519ce59 [ 536.572794][T18707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.592417][T18707] RSP: 002b:00007fd4160c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.600863][T18707] RAX: ffffffffffffffda RBX: 00007fd415416090 RCX: 00007fd41519ce59 [ 536.608851][T18707] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 536.616836][T18707] RBP: 00007fd415232d6f R08: 0000000000000000 R09: 0000000000000000 [ 536.624826][T18707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.632811][T18707] R13: 00007fd415416128 R14: 00007fd415416090 R15: 00007ffeb40fca18 [ 536.640815][T18707] [ 536.644206][T18707] Kernel Offset: disabled [ 536.648518][T18707] Rebooting in 86400 seconds..