last executing test programs: 3.007686943s ago: executing program 0 (id=7485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000300000000000000000000007d00000027000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009f00000095e7858162e1000000000000405848556a28b09935ac9199acec2a45c4a2d88477a7d6da050ddee6b4bcc8bb16a506000000bd396418623f5ec031d0ad98fd7e72eeabc174f2ae60ecad98a13fe95b4e1caaad8901bb7193c817bae2eda79d0773ea212757dbf6441ee3adffa874ff559628f44e3879964065c51c7c99156e0b997de800513f0a9bb15f1f4f30e0023c1e06631f0a796a8ce5f5d2e86cdc7d24c60fd1ebde8182bbb72973497e0ce054059382c4a79cc5dc7abbb175f9be10e04761a3440d8a715ef4615d10c03468f19b7ac8d67a80ebc970af15f1a8bd19e7a6fce86aa2c1c518266ca36efc278277ea377a53764f82d3d856f521e47d3845f54228dd44d372ea97ce9b9877e75fb543800d0c37c21d1dc0d15efc044894f1f09d7a96e5f2ce30a49c2913c5cd943128ddf09a418ad31bf6e22612686555154590a52b8b96bf63f0914a0b528f0113812d47e8857d9b35068203661b5f03cb7cfce7f349ab3fcd2b1c472f941094691094ad433e504501969c8834661b53063ab695d04b962860693950f71435c27b0ac107fc91d3d6b990fa9304ff2b1b86bae8a536a2ee7c8a78730f9297c433719769c20929f603ca774dfd4e07645aed81809584f30d959f090f164bb7fb39eef6d2c0448474ae896da36f3636876d01cff40c7e01b6c22573f1a4d5a3e863085d1ad3c8f99cc09fd8a8b417f20f3169147c70125e300cc261146c9995447cd8e8e3c1a0180adbe740181ed118199b0e30e2924a436596"], &(0x7f0000000080)='syzkaller\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010001000000000000000000850000006c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500"/96], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private2, 0x0}, &(0x7f0000000140)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x5, 0x7, 0xfff, 0xa8e9, 0x5, 0x10001}, [@TCA_NETEM_DELAY_DIST={0x9, 0x2, "2868fb8289"}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fff, 0x3d4c6121, 0x3, 0xff, 0x4}}]}]}}}]}, 0x74}}, 0x20040084) r7 = getuid() sendmsg$nl_xfrm(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@migrate={0x134, 0x21, 0x1, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast2, @in6=@empty, 0x4e23, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x0, 0x3c, r6, r7}, 0x6e6bb1, 0x2}, [@srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @coaddr={0x14, 0xe, @in6=@loopback}, @proto={0x5, 0x19, 0x6c}, @policy_type={0xa, 0x10, {0x1}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd25, 0x16}}, @sec_ctx={0x96, 0x8, {0x92, 0x8, 0x1, 0x2, 0x8a, "a2262cbd0b2a859af02c652553548a6e6d09f3b9b127b87d16988284bb4d64a9858b49e5497c9fd8a3163b0b945bafeca6aaab5736cc9dcdb7c48b5a72b975ef1714ca2219f2fc7a475e7b039a2f654b740fb5e96772d224a5ae46dcc662fd8a25183897a6b618e8c655772380f0cdcc79a7d8321214cf295ec14c226de376425bdd72c70ed35cd67038"}}]}, 0x134}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in=@multicast2, 0x4e20, 0x90f, 0x4e23, 0x8, 0xa, 0x80, 0x0, 0x0, r3, r7}, {0x9, 0x4, 0x8, 0x2, 0x8, 0xbffc, 0xe}, {0xc, 0x9, 0x2b42, 0x2}, 0x1, 0x6e6bb4, 0x2, 0x1, 0x1, 0x3}, {{@in6=@private1, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010101, 0x3506, 0x2, 0x3, 0x1d, 0x8, 0x2, 0x3}}, 0xe8) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.581454383s ago: executing program 2 (id=7490): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$l2tp(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01000400000000000000400000004000000008000000000000000500000d000000000d0000feff000000010000000100000008000000020000000b000000030000000800000002000000080000002100008a00000000005fad00615f2e00"], &(0x7f0000000980)=""/4096, 0x60, 0x1000, 0x1, 0x40}, 0x28) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@delchain={0x3c, 0x64, 0xb33, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 2.471964332s ago: executing program 0 (id=7491): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b080001400000001908000300000000891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.672803555s ago: executing program 2 (id=7493): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000000c0)="8ec28554cbfce81340d9ccf65f10e355df8432a35988f46613c4204accf0f3e3d9d22c537486a680726df59a81b5f31c778d4f7ef7a3b39a4803b4", 0x3b) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) listen(r1, 0x48c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="05000000010001", 0x7) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendto$l2tp6(r7, &(0x7f0000000300)="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", 0xfd, 0x40000, &(0x7f0000000400)={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x2}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000240)) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10) setsockopt$inet6_buf(r7, 0x29, 0x29ea9320669e07b1, &(0x7f0000000440)="aa2ecdf8353f4971a68949a44f81ae2dd2d86e24a00091b830fb5f", 0x1b) socket$nl_generic(0x10, 0x3, 0x10) 1.596610722s ago: executing program 4 (id=7496): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="9a225258a865f7c1e8c78dc1c7117020c5f81e5dde23e6179bee27412d9381673b8c17c7c1dde1ad2817a1e245613b1a07bf63b2bcbaa8c3fc6401a20eaaad0c202ab19eb5e6c55e0cdac2afecc8d049327ff44785624979384f817496457e45ae1b19521c1a9997164e5983780f30e350789221c3cc472d6e7caabb037552d90a2da9121f7a47392113ddc780f66e608eed219500ce7fb985e6969b69455a1d6ad681f64ce1505dbbe35fec565ac2f4085a0b98b61ed97c557b7aa4affba6bd054f2f03fb471f75ff3a9f8962e9ceba817ce4ed46f1618b70da246130758a1863", 0xe1}, {&(0x7f0000000800)="a0446c56b75963f0d07d5cbe0fdc4ac3121f9306", 0x14}, {&(0x7f0000000880)="6d75f3697a74809fb88c0128f7ef64a6339a1e66f4b5ac7a29cca1a18290ac73d0583a2e5aad68d438a13c86bd9c265f78c4c87c7119073aa5e5bee0def7ca2022d91dfb04d71e1279248794e7946923e300c3dfb5e00a19b6f82e1b26bb04abfe3fe2450cbce4ede1aeba71993ff6bfa71bcf57c54cbae4a5ad785657291ac67f2710259aa7cfb0cc35d1222fe1cee8e8424f65649359fa8699f4818361", 0x9e}, {&(0x7f0000000940)="895372b34bc14e58f9fecdf4e90fbdd39a4bbb61945dda96f9c867be8c8d6a2ae99ab216c3ced14e1ecf6eb2ec9b5e04308e7f9e630745c1e9504a09", 0x3c}], 0x4}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000f00)="ef304aec66454b55298fa0ea795b7f1f6037f3052d60ec7d70f36b17e1ce8c7357577d304a49556c34cbec274b6039641e34f14e3c5a033143a509d6ec9585595596e0459a1e8b0d3053acaa04fa5b2ac11d0f118a0d657740dc760012ac4c120e72f9ff7dcc502a2cd92841afe0928160efbc3854e79fe39dfa9141bb232b84c718752be6745698d5d4f3501526fbc4a3472fc9529d22f20e11c9e35947853b22a466f0a496b84bc851330bc5cbf7847acd9c17f395e0a88fd677ad010f04ef1c257d08ed21d60654d2cbc4830a00000000000000", 0xd5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003c80)="d4aedebbf27d3610e315f4d767661f1b73e890f1e444fb825bf98df8a77cff85dc41d6541b896136ec04f0066f3f4edb855bc78b5f1233fd74224642a15d392f", 0x40}, {&(0x7f0000003cc0)="9158e201dc173bcead8be46318c9b7ca547906ddb1c703c11cd0e4ce84ec2e69614aa05609aa6cd8c9f189ec372b54a33ef1fe1f13b9782f08c9d3df9d8f0a28dc5ff7995af2e6a31c6146454d9983cee0447b0108b122fb14641659b597aab873999cfc788acfd2ecf4cb8143364c774b1f71bf3e0033e4e5dbe43140a14ea66e055ec8fed17a4e35d64cfc7fa915b16197c89b3f839f7b7b24e1d977fede3d444ef6e6abf059adcffe8de5c877eb3f5919cff782cd18bc4f73a933e4cd080b00b85eab72bbfd7059ae9cc44fe0ac37a246b133fb1d73c4f985c0726553", 0xde}, {&(0x7f0000003dc0)="9e9e6037e02bf63c265a43ce139030ff55911ff3ff01c1314f75654363aeec07267f380f9c6d9d927cf2158678d69505e1b522c0377fd12009b1b0ae6b6e9002a3fe908f2c2abc897f3117d2c1225c50c37b780b8c199b04276594ac9da6a22a755590b1dd55fb471f", 0x69}, {&(0x7f0000003e40)="aa17daa2d8b6be2fdf73865d19a62c730716", 0x12}, {&(0x7f0000003e80)="0240fc3b163dd3f2d345048d0242623114bd13525db252582f5bda7fc468db0ad8015ce05dea96be1485d5d044d037c1277c32bd5c48822b9cacb5dd8d", 0x3d}, {&(0x7f0000003ec0)="45f4025ea84c73189bcb8fb0569f8c46dbdcdd1a7d0f2750590289f89743d7881d3ad040c81bf1b1b4d4a53a7a02d1c1b263c1404a82c9b889c1e92cae3c720048fe145a154e95be1d0e705e98bc8aa67dc03e4fae6c994fc30b5a15ed971616c070bfedfe5bd61455ff4db1aa7c16b88cad7d102d36b3517132e9355691888218c606d62b57398728cd2397fc5f75479e80eb89ba2264057eb7f414987678da25b2650f7d200b4375401a076532013da9", 0xb1}], 0x6}}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005240)="044573e03469e7f1e56743886d4fd434b8e70364e5d727ba2b33b11159f9b18053e33474e3378cc97a73ec7e19208fb1807153ef27d656540363feb30fd392d67311ee3c7e87201e3d7e69a83d8b8e8b31e66090088bcdd82ebf8d388895ad619893c89d946f23c0b78c8852f65f2d698b8f49f2c55a7c406e07f0f4b81399fb8122c138dfb8f3ffe52c40a9e4b28995dd93c9c95d1ca5bdb575aaf0f1f62beeeaa1a1b5942f03bacaee3d2a9668a79d8f2960b88bfa8f8a35da6a3b648c67f7531acaf6d5169faa3a934ea88ff5e2eb6b862c7a9551fb3368107c2830be3049fdb4f78f50b5420e95ccea423e64277cf105e6634e27ebb2b2b222df1c0a2019551d3105e9af5ed3bc89e3276e0faba360affb4ed083b35a364694b72e31c6f110882372df92e3c04377115cfffe35331b227278cd15466672efcca42d88db02a057f2ae647838e6b7f3851eae1de415972c6fcd9ea4b7cb83b090f825822ee8f5332a4f10be2195168e33f7e7f803f8a6b1114bfa49dde704b9f77680dd6f28f1cc988074ddd362f30b7c64a42bb7e8fd1644e959c04b08bd7cf023dace21809e46e3debc6927721c55a28b56ae157c6587fbee69471e583a6550430e8fb0bf316d6a270fdd866e4f43fc06f2cc3bac8c1aeada73376cc40e1aac009748a8cb859091a061e5186b8aaa40a1279d40dc2125a5f31fb53dce2f94bddb2251b862cafa9a628bd088e1ce72e50b9e6a24c1665b542eaa23c45706d8b8dd44a0c044c40ebb52878121d8f26a1c6b9d76f52154513c31eaefafb4897efddfbe60988f6955f5af0555f017d3439d5399a680921f5e69b9373b53c1a6467a2faaf3dbe95b0a0da33686959c33c739fd47f9b7e6d0f9980f2638794cc8c7a08df1987956dcdb25f5828612575bf13810960f8eef9945bcc056cb31d7c6f2bf8b3737012af9ec53c27179df898626252eae685a5267fed6ec6a8a415632a98d2b200410ad0f2e25905d8c08d5e4c3b746a33cf83c4f7a5f2f818c1ef4754038b51a8bc8bccf4d52c993663752f04ec390b221dd865f4e5aefbd06a3cee0349a3198538c2b7dc2da3a22236f08bc6cbf5443c9ef488b2bb3255c1b5abdbc38ad4998066178db31522a4549cefeea548147d2278c2bcbf18951a482b589e96e934d29cec0f3d54ce08de62cfe458174c03c43e5dd899550b943d6f107a3c9f623ba5ebabfd6b051635269960f0f4a8a6de93f56973c985659dd27eae0cce3c77e672f0debc86ff36c78a209f8bcc4d9249f8b26cc94794e53f20bc8ed84472895659971112e478cf321388fb2e9ca4c106da81c4d995768baf16628456339161e4ab0dc514f85914de7aa8b1f57e565a1742423fdb65f217920d93b740c8fdc3937241264ea09e8fad30c55ee1100f2a4dce0d173c6d31337ac8ade6ff4cee1719e5ed3a17bcc422d1658e479c02382c0f1e0add0f1b278b14381417baa6d0db0cee3f48920b5f652c203e389aa01b93fa016d3b2ee92c50cc561b10ddc189655188f7bf312bb5d91ea36bced3f342a10baeb69aae1187b3f004224fb2dd93e4fe38efb48a88430b245135fd2d615af01c124827b2632047f0d762eed15e80367b289ff9a5b4a54a9e15f48c2d23700321cdd242f3f19ac25566752bd823ac2b8e30023b635ea6efe5948fbe0c1c8e57b2f0c1a04318cb0462b5d8c50582f457bbb618405a8a4640cf077fcc5782a7314664468c321481da1731f23d8e71f85f2930d9d7ad9928416fca7ec93d0fec7edd047b201fe2fc5a8519f3e2db503bf7ddb13e2fc6db326d5a8266a68f61bf40f2006b8250979a32f97a09a3bac6ab0aee0f6f05adf1fd8080ed08a17606e2554530adc30d99b1525d44e22d8ffea396e5a2cde8f823ce58f9f2c9904fe2bdc2708396d015260154c4ef1d98bce74cf5ba80e779528a3f2b56224b22db79a989292ad7d44d4d337550e606e1d8f0fc3f99ac786fb5757842ec457442cd76a694b3ad9162b664cd4a54d6314d2ac41ca4d5cea9d17058bfa390c8365973ef6fbfefcc8dead4c85a3b2d44b509fa9b7ec9fd9e9ccf0b482f003afc16c9c9be39c2eba11f8c09efefd4234db57c9a93fa8da44742f303315b496437c17df9cc144257ebada32f328e57721c59571daf8942d864159e1498a23e7e1e05127f701142d26f8607b53d66d173cd16bcda20d3a3ec0fd5708ab9ac68ad923c0f220110b25d203f3a7b90199f8e24a4496a63ca85d78656ec639c196e8322a3d34d8f18e164f2b9fa563957492197e9b8dd3df9c7a85dbdbe8cd958e2ca5336a99ae5034c13b56de6948a0553537a49f5d9ac54a667687369ef9ca25fa59f2ea181e484f630f6d7a758e1c634990766420456ec082dbb5cc28e6c4ddbedb0a515407d6518538c6957f3080cbfb7c317e93707d45df8cf81086327c38e9c6341d26b459b9aec35c64f222b902fe79deae82849e4b4eb8baac530bf2a8dea17c9e2a01a972c5b869a36f4adf3b0bfd963a991a5e7a2725a171101d62273fc01da5563abf74c339a1468b6ef9d04f446d30a9573c7dd08eabfd091fb8e35e8f3997e3f81521a08328c07951c93b3aa9fdfba812a5049f33707ecd393e18959fcedd14956e2978a42b676cf6ff69e7877057f337986f6a2a31280d58896b1db884e791a8c7efbd803e01e46270c425cd3f6e16035eff14b72cb1be8920a96405c1bb00cbc0199d7052b7103a0eeffa497ccae90258b6a98feefdfdb173ac0375297a634c2195c8bb48b71f89fc102cb0b5951fc8d632fa94b05bbd2322362e1f2f5e362d0910d88c0a3ce5596ad247493451ac35775253754957bb49a6e7c655bd0a86edeee98528cee513a0df97f542b64f4a6bcbf7ceaf5681a9fb4518478e632d7990165d76f0044fbd96c114fc8a10bc4f0e265e4ead0591fa0e5ffc8010b109cc8df46a38e2876c9b071dfa1739e6024023a1f06614b359f38f065f7fb6c1dc986957ca825a0da271f61fb6395b343fb70d2a9bb0b9fe0cb0f71ae74ac8d9984ef44cc696628bac7ce3c5a0a8ef2451899ee206afbad847ad7f29fb9e498d328e280f83d118aad36bbf22198cae4a58613c731d9102df18f1d1d0f7212487b0a3db916f06d52f9360932606c68110b74d42e99b1ba4973184b41729b65f1b4f4370fd976e507319a35e78586dd2bf8cf9fb776f865fc3a836af7f642b39344d70f584db62c0f0bfe6d8adef783dbade4ff5ad70c53bf5f7ccd77e9e7300940b5621bc51309545d5b12ac64095790df69ef7d5f5ea6f018a8139ceaada30a83671a8c7d422aa11f7b3b3105d765ebe338e6bd84222f28fdb788eaffc9c94d71003ea9666a9cfb822a3d3cb115d15f15bf7f7e47ef024cb1ebfd41d5e7657008b797781edd451ff897aaac8692bb7f883f08b711c54416094cc34c62330e18608499fc08389d87b529876ba63a59b453644342dafb74296780caad7b8b85a8b5fedd066ebc1bc6a4b0ff13ab87f927b7ae73c4afb9a37fd3cebe9fe44be4a68a2601532a61c5aa67b93f5793df6f5ce3253a26f124f9a0231a2c308dc5e2e8dbf57b91414e0d817d3e3459e79aea7041e50c9ac2e6a51beed705985b065a2b71e2b718a762c0df21481c8e8aa4e2995b4d42d53b7e6e0f002f9d360f560c4d74323a707ae82f4abe6e3eb0b15f40f82556ce9fa1b4a6c02cd415a9bd6b3346945217c555e6bf1d8a27b5726a53e53e4227ccfe16516ff50611de8ec13a0c0436aec0e545a6ff47488b480e819e986144f99a0d5cf9bdae3fa97d9a74879dcc1c510e4f6aafedcaefc9ce92ede5d16e3c72bea8f26973c316fe29ed63a196778dd9f9bffb009c4e4086e2c601113ed9a436c186c17a5c0c91b4329d98580582bca6e3302e05e25e47920b18aa633e29bf2", 0xad6}, {0x0}], 0x2}}], 0x4, 0x24044802) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="10000000530402bb54bc3000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) 1.54498478s ago: executing program 4 (id=7497): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4095, 0xfff}, {&(0x7f0000000340)=""/245, 0xf5}], 0x2}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=""/8, 0x8}, {&(0x7f00000014c0)=""/204, 0xcc}, {&(0x7f00000015c0)=""/178, 0xb2}, {&(0x7f0000001680)=""/189, 0xbd}, {&(0x7f0000001740)=""/188, 0xbc}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/220, 0xdc}, {&(0x7f0000001940)=""/75, 0x4b}, {&(0x7f00000019c0)=""/53, 0x35}, {&(0x7f0000001a00)=""/136, 0x88}], 0xa, &(0x7f0000001b80)=""/20, 0x14}, 0x4}], 0x2, 0x2000, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000140)=0xffffffbe, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001cc0)={'sit0\x00', &(0x7f0000001c40)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x10000, 0xdb7, {{0xf, 0x4, 0x3, 0x9, 0x3c, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @local, {[@ssrr={0x89, 0x1b, 0x71, [@multicast1, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @local, @rand_addr=0x64010101, @private=0xa010101]}, @timestamp={0x44, 0xc, 0x7e, 0x0, 0x9, [0x0, 0xbf]}]}}}}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000001d40)={0x0, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, @xdp={0x2c, 0xe, r2, 0x38}, 0x75, 0x0, 0x0, 0x0, 0x300, &(0x7f0000001d00)='veth1_to_bond\x00', 0x5, 0x22b9, 0x2}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r7) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 1.496821965s ago: executing program 0 (id=7498): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000240)="4419ff0b72bcd62be30a5cf0f1574c9b140c136d30707bd9d32ec2133fc2868089696fb24c3b8a2eb86e61e2f882bdd008dce538862c72ae4bfbf9c359a1053ff0b0f590e3b5b722574c386c21333e437429d36be0285bdb14330ac5d0013327f1dd80643898587e43428b6e33bda6dca4c8e29e4df5f1a950", 0x79}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed", 0xf3}], 0x4}], 0x1, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x34}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) (rerun: 32) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4048045}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) 1.349578329s ago: executing program 2 (id=7500): syz_emit_ethernet(0x6e, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @loopback, @local, [@routing={0x2c, 0x0, 0x0, 0x5}]}}}}}}}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000200)="1643554b93027352bdd23f695b7df26fdc01c510f3271e3beebd11deb6d3cdd7eec6da1b35f54ef695094937e2b054b94c8daa7622775164c1002705eba6fdb947e2c006d2995214ae80a5a388", 0x4d}], 0x1, &(0x7f0000000440)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x3c, 0x8, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x81, 0x8, [0x5, 0xc, 0x2]}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x3}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}}}], 0x58}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000580)="a97b4c8c46b6c619b28430803ce5002aa571404e5bbd20ea0d3428275ecff7ecfce32b0350b75058d2085128e6ac7f1baed7a69a56b2a4016633588819f211eaa9bbde88e1361faa9537ef1234b0adbe4aa80335fb4129b8a987812b4208d217099950cfbb364d1d245f7effcad18a09b873d1986266bbd26ca8dc16bc25e5e4b95a2014a1a458b6d0cdfb1d8d6ee403e983a3e29f63721d69ea4b84bafa1585547b4132577af5aa48b37604a23bccd37c0edf79e14a63236609503a3859f44e15b7768b165fcf0676253cb8ecb575f9a59b3f35d4e43c06e8bf325be1", 0xdd}, {&(0x7f0000000780)="7e5c15194243e745c3937cd56605cf6c5482887c34dbfe6e822b8dff110adb9c5c1b9a429c646f28d355eef6981f645ec10e97e9617e483c", 0x38}], 0x2}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x9, @private0, 0x10000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000840)="a723c36e0465a0", 0x7}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="19b35d3ba5401ba78c2e8212458bcffc7580bf0063ef16e30c75dbf79209e80b340af6dc823ee251f4", 0x29}, {&(0x7f0000000900)="eb73ffc1a96d5d8c3a9af437d98fbcde67a5c89ad3cee8a649c2bf1afd8cfbeb25125bebff2256218f2dba0cff7dacfc77eb57924a92683762c70f46a888c7cdff0596e351273a235206674bc0fb9b49ce36f2281af634e13f011375294363ae0c946096b1b6cbde8946962b9770f7ff0036fcea28ade5787a3da1afe9d2d070c399e7e670fb6d6adba18e446ff758577fb28ad1932dc9cbca7d228c76d1a034204b956b6f6a98ee8bba59595fcabda144e471c9ec38f98f50d82ff0a02d73f83b37474839438b2a8ab9fb209f23f16b276fd9a519682a8b75093e308c58d9a34f4e70cfd88327671e3a26f950077b0f58fc52e9aef9b03f3c49ef4089", 0xfd}, {&(0x7f0000000a00)="525029d31969331d3b5235ce4dd7a5bb4ea3c35894b1be8672e6190fe5b13657341a49ca01062771c0", 0x29}, {&(0x7f0000000b80)="c3b96b84cd5c3206803711695540db7856a780e2f8b814103bd113947a6a9a265042d996893552b408b1a63aee2390710434cc34ac35f2c494c3d34b9d64e7f72e8363784fb0ed16677eb1e96cf82a99151b14da9f64a8195312f86a3275522703651302c73d8f912e2371710d166e62c17ed7d139c916ae389c7d0403237170a22d472b4b7f1a9be294a651da403053fefb09f375292178b1ab6a5570f8ef686efc438c3a7e1e8c0c", 0xa9}, {&(0x7f0000000c40)="908f88677522ac6da0026d472745f52a9c7fe5da8ca7f21b3fb3be98a32d711dff3e9f84ba5f9f6471d6458e5c03a530a0a3472f6cc456930aa60b84ca3ace71bbb380d62940baaa130d6434859b59e149e0eb7fb0cf55a7c33b44627d5f41cdb1", 0x61}], 0x2a0, &(0x7f0000009d00)=ANY=[@ANYBLOB="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"], 0x230}}], 0x5, 0x0) 1.348472525s ago: executing program 0 (id=7501): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x4, 0x4, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x65, 0x0, 0x8b, 0x2f, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x3, 0x33}]}}}}}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x800001, 0x40, 0x2}}]}, @TCA_NETEM_DELAY_DIST={0x1a, 0x2, "8ea9321caba7dc5214613789b5528dff929457de17c2"}]}}}]}, 0x80}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x1, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) (async) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x1, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) 1.31927767s ago: executing program 3 (id=7502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x4c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000014c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1.256377847s ago: executing program 1 (id=7503): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x10, 0x7, 0x9, 0x40, {{0x1a, 0x4, 0x2, 0x1, 0x68, 0x67, 0x0, 0x8, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0xb, 0x2d, [@private=0xa010102, @local]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x22, 0x0, [{0x6, 0xf, "5ff4d6014feeb2fef4aa53859f"}, {0x2, 0xd, "82c7f9dbeab15a4b60d1f5"}]}, @timestamp={0x44, 0x8, 0xd2, 0x0, 0x7, [0xf71]}, @ssrr={0x89, 0x17, 0x11, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}]}}}}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x8, r1, 0xee01}, {0x6, 0x4, 0x5e54, 0x9, 0xfffffffffffffffb, 0xeb, 0x3b, 0x8a}, {0x232, 0x9, 0x7fff, 0xffffffff}, 0xf, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@local, 0x4d4}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x34ff, 0x4, 0x0, 0x7f, 0x970, 0x8, 0x3c2f}}, 0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.199458934s ago: executing program 1 (id=7504): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) (async) recvfrom$unix(r3, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) 1.192941801s ago: executing program 2 (id=7505): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffb, 0x5, 0xffffffffce5d4ba4}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000300)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0xf8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd30, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000387ae772c45726006cf8000000000000000000000000a8000000000000ae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0xffffffffffffff4a) r8 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r8, @ANYRES16=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x2f, 0x0, 0x2, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x10012, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) r10 = socket(0x2737f2413702fe74, 0x80000, 0x95) ioctl$BTRFS_IOC_QUOTA_RESCAN(r10, 0x4040942c, &(0x7f0000000200)={0x0, 0x3, [0x2, 0x8, 0x4, 0x10000, 0x9, 0x54a]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) 1.056283678s ago: executing program 0 (id=7506): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) listen(r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x25, 0x4, 0x2) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) listen(r5, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r12, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x54, 0x3ed, 0xc7c6870c588d97e9, 0x70bd26, 0x25dfdbfe, "9fec88b0f2dd772b2450bad85c0686893258aea92dd88b7837c23ae4069e1b5d10c41fbf6a949b301e668b4813841b932f32cc0bca147eb437856d4fe0801ba07e", ["", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x1) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.054167876s ago: executing program 3 (id=7507): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0xc) close(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x4a, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x4b}, 0x1, 0x0, 0x0, 0x20040084}, 0x10) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/77, 0x37}, {&(0x7f00000007c0)=""/232, 0xf2}, {&(0x7f0000000540)=""/32, 0x20}], 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 1.008704832s ago: executing program 2 (id=7508): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffee9}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a000000000000e1118c0000000000180000000000009500000000cdd200"], &(0x7f0000000000)='GPL\x00'}, 0x80) 945.650675ms ago: executing program 2 (id=7509): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d0a000000081000000200000009000000050000000d000000caaec0058931993b32eaed8b0f1d"], &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1, 0x4000}, 0x28) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x81, 0x101, 0x46, @local, @empty, 0x1, 0x7, 0x151, 0x3}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100}, @in6=@private2, {@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {0xffff}, {0x80000000}, 0x8, 0x0, 0x2}, 0x9}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x4d5, 0xff}, 0xa, @in6=@mcast2, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0xc}]}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}]}, 0x178}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd61, 0x720, 0x0, 0xfffffffffffffd25) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}]}, &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x0, 0xfffffffffffffffc, 0x1f00, 0x40, '\x00', 0x0, 0x38, r0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 778.31904ms ago: executing program 1 (id=7510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9001000010000100feffffbffddbdf65fe8800006cc97660ab97730e958d130f3d35000000000000000000000101ac1414aa0000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000002004d46c000000ffffffff000000000000000000000000080000000000000092010000000000000600000000000000fdff0000000000001c25080000000000ffffffffffffff7ff8ffffffffffffff0000000000000000ddb500000000000000000000000000001f00000000000040bff600000000000002000000fcffffff000000002abd700004350000020001000800000000000000480003006c7a730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000570014"], 0x190}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 712.055348ms ago: executing program 0 (id=7511): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') unshare(0x20000400) poll(0x0, 0x0, 0x9) (async) poll(0x0, 0x0, 0x9) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES8=r0, @ANYBLOB="6cf5a14a7038c78247ad16be2fc88c30e579404c02b2ed7fb9b7d3941b8ee67d21a034930f78cdd5c5070bd48c78f6ffb92900794621554bc0bae3d43e334cfb4a27ecf75ce3827a755a52ca1553d6d561f82f97e8fccf7c5977216215bafe4c818107fa80325bede95d75f2dc65610b30c893a28cab1fa37c5f811ef1e12b13b9b36c4b0c52d76c19e833bfc7a5ff382ffe25260dd88e59e31e120f40e46eab3db6567b6691e704087db684b89b01bdaaf21b6c793064e85b870d72b8bafbeb9f44a0133dc09306aa3d689bdf8b0acfdc9c686ca033e997e690952eeef9b292678b3899191a56946be3e254340a85f858400584a83749e1b9ecdecafd30d6eb292624e2e4af4ab574bd71c7a1daa0430e3cf94d1be3929c632e58071b2ac15fd81bb94e0b145b9ab5699d2c26fa675f7aeabb9a4d18f2258c03d71e4ee57fed747831f5b028f2a68f7d858b1fbc84f647ad3a07c182681bca7b1e946e5f673368d387f5bf123107867e899bd46936601fe9a0d9c423e410d43ba1605a72027ffe9165d305b9d0545e63f05049fbc6bf305df7e9f2638d577ebcbdb72c1f2af76808afb04f0cccd3a4880f88fb09d253bcd17188097400bb3aa9dd36938274fc3d9eecf26561114c37646ac607b80dfb5610119605196f207d7f208379ea5b584eb5c6b1880823504dbfe0f12ad10f7f7df17dcc246a18d274eadbc7e96b55fc9ddd50e6ebccded363dbe29636913a41a6facb9a86aca2a542c355de7849bd97c47512f718d754b98d57f764634a8d821d3e7946b13c8cd09b1a8bcc003e91efe593d460cfd41d51585d35793723a23f7cd3ae7b21f50e7522197aa89394a4f0ece9f7aa408905afc8e0394e5cfb904caca8208aa7ad92ebbe5912a42abae65800537cb05192f9aa17e00f2ed85071bba9fe0bacf45a05910e42372e8396f711e71c5453cc75dd03b1d186d20b02f48cf0979f98ac1e88254ac6eb2443fa5553d4c4ccf2ba6462e919b09cba9bf58ea5c5d140799e84058dacb9835ba832cbc7afc35c1de9dc868909b13fe82879228b5774dcd3891762076e5fcf21d6987c4d36d36de45e0c6e214f2a6f9363ea28ffefb84ac9164fb43a5a704e9b50317dd986460e095a1ab34de3ab5e3569831999332de1b32b016f3b4a2386e65d15dcf50e56d8936008d1f8b37e6fbfd78637e92feb177d9818b5d63e362832aa0d0ecb65a0b6932b6caa833394e01b8234d8b22de637138ed22668de21e855781e5a696866f72b9f024747555c86399f92196042bcedc9c844b785aeeefe5d14573de533daf4bbd4e701940e94ce57eb078d3fbe212416d63490a87ed065f53272365d5f788d5eaade250ea4d462bf8e7a5b753c759e90169f753624ba10f62c9d748c372ba445326ed964f19d09cd576ff2fc24a6ac4f8076330545c6686b0853708b9307242be056ea078f7ee8cb2aa8eb391fa75b76585ec7a9ca2d600316d8e7659edbabaf2b279ceb9ec43755535d2dd3ea97dd1323ca3a30cc032fd81fc5db674ffade6abb4e51bcfb2b14b0b76c9559e68b23fcfe78da45e38f46582a2d82d4c780d1034977ec18b220cd5ec4e44fb5c6313b3c40cd11ed46897259643fcb9d283fdd4febe38cb3c0d6854b9f06a078a8e2ada8682bd3e362e02987783181fff4171cbd9ee59610e3e3673681b696b9b9e25615b1e25c23ad883c62ec8ff87929b6cc649fdbe45989b81ec2f0c3bfe3067f02340b3dc9e468b7798c7974d25bc8b925ef220f498c1734e9e8479e591e8b42d798a037ffe8a728cc8d634f80da1878fa78c55e79e4d6cc99746efce06023329fd14a687c35cd7aa22bc680fbc0fdeb9a15dbbb47e15967e7fcf8a47dad36de54493431b549a42120e0881f24dc9647b5c7efaa5344e20cec5751425033dc2bce68811e56bf1cca4cea4934bacb2d536f81096c992a705222aa43532d718d1149e853fdb1468900bb1d9041bdd6fcd43b9556f31bf498a5bedcdc7dd9ffca0af308505a1ed6d646bce2617cfbaece80750db139238762d1a0000daf1bb1ea0c94b5d653bcd4470b1611438f82fc5a6f7681825b658fb78ea4bf96c442265f60c95b37c544c27a710d97e04a2c2749fdaba13753841e40eef1181f93d51418b683ee34da94f77a1592fd3f85838df880feab80a1cb0e7d7580b795f08e3efb3d8fd0ad5506f7b53cc1cbe6a45a3fd8b0914ab07077210a2f3930a521f538369b7cb0b450f26c9c695e14996d31b5d8db2487b70e96a6e6adef774f7a1b49824396363d22af990a4b77f5abc2cee43a0056aebe6c25e53e04967693356dd97388cac8dfd1156458d05538822bb8cb4d38c17510f0e84f0bc1560f7bbd14a86ed9e75f609124e8f8c77ddea1b8e528f9a874ae57a2171a01ebf7744ff6d6e13af17d73868c7f0716a829cb2e9084e231bc10de2cc26c6ef5146adaf59344492e95abb64f9348ac182ae709fe62626a663dafb43ec3790498ffbdad9d81c3d409f7a613cd0a36e6ff6976694aa092c92c357321d4caea78dbe24b13b4d63f3c6f4f96af8edcc57997b9d76c478d6ab7f4c8a12eac91af90b0d4feb28ea58860bfdbe59c877a54dfd983bcb3a5777dbef15b8b9fbffedc09a08552a5b2f28bbdf7af74c4beb7f73dcfb33a52c7cf5434c27dbb5c95b7078665a3bfe6f28c23f216dad2a0163ba2f260e02f5cf78ef56ac50d9ea58326b26fcc3fcd4ddc00d8efa9a281f6a7c6398d712ba1de2ea09aabef23a0d70ab4d606f4e51fcf20f2ebc154c810f6ccad6233e54ed640a809c10335aa7386e020b6ef5938526d1e5b0211f37ba463dbdd09f66fb131fa1cb36a411e6a2b02a96b88e051d606c487d7622c745946000f5d9a504a55e21e29993092557e04574df19199b8a06a831965527dd6c1ea4a74919f3283f1f48fa337d29aace5d1180af46b7c083b786e3189b4ca18be23d9f4f0532901bd6bdffdbbcdd25d6a7c1cf00c9994ceca9bdb467a8c9574754abf7954f6571e3283912b367f843df65bf4658ac574b2506acf43550e5071514d68b19cafbdc2276fa68b4ccbfba2a72583108e5dac219911d47decc72c0641be53f576934ed92a5366ba0eb5b0cbce2939043d6d203b60a3f0594ae91cee865adef9b94de0526cdacb91efd626c2aa76cf63f293a0377bc5697515e3358cff725258f6850ec0ae71d598d7264f4ab5f1b453c42c14b7c5c1adb8315bd81a06c98c94cd5380a8cfb4a77c6c005cd4e9089da226779b3c41c93114007a6a84d2f28be3ccf8a841e16c98139d488439e69f160ce1ff9446edccea23e8810130579c21ab53a084a7f04577d093f41a07c873629c6ef4ec29be6a0960c090d6c9037d492627f398fe4534e67cd944b8cbe8961e8a64ccd13a6a4638686a72efd3d3a5e9d02a045c2e89bcb15dad0d0319137ff9fa612c5f91c1d9fd4c13ac8bd78744acfd656e362fde4db64cfbabb88891e07d51d27f33d32bd0065946cbad603f92e7f1fb7a3cd375b36ac0ae7eac9aaae2ef950140b3841253cc57b4e1ed01954b8d0b05e4f38067d7bcf86b80a8422ba4f6790a65514e8dfc4dd570c7d0f1ccab987b8d519e4058a3ef4d52dc4bfbbbddd3406ad44865c79ed59a682e5424e5e0d44b04595ce91382713ad604af14f759d3ac9abc51e0944f8af316af3c00de497af315d76f4678e8e89d8d299f6b5b5a458c3433f25badb4cc4f32bf68734dc883bf36be3f410bdd94a29152e555ce5bca3bb8c0ab3968c84e4ccf561a7ab5320baf29964fc32ef9e9703a041fd5a5ebb0dd3ca70c98a7f7ed3b117726c23dec74e94e8b2e1cfda0d6b919e50af553a435b996f93d01cbb99331d8911f2ed2515ad248299e6657bcfb3cd9ca08a3bb33f872b6702d8d3e45f6c0cffef0fde713948b44be03dbf3b8de1922b0839526185c1b68b2068d923b55a9bf9786ea017f9a6c0c593f7ca2f4b75c8b21929f1a06afd6e8ae8cffe449fc39376fcbd15699d68d8e4b27b540922fc4708ff0ff9bb443c7dea491d7ae7df7871e0c91ae8749b2ca31a97c00516ae7621a65faf1f1939d3f20298e350725a01af96543a534e8ef13e0b4dbc110543138508e94527beb6ba936d2fb810a3df2941dfcd6b848593e973360028da500dcec94538f0019cc3fecafbedd3d90181cd1f13c347672c697037dc14efcdd1ec8812f2c7fee359f89e2de3ab4ed8706019749efaf0e739dca5cac2ff88236b1356c75915c08c4f0dbbe9e196308ac8f2466afc99edc48a4042277139eb649f0a3a3ced218037de10df5b7a34fc4b5f105f2c5ad870bdad215c18a9ee1e4da49885154781f18cb7ed16ceb3f2d6a4da84dfd273881d13102f7ab51258202b24f0aabb8e30976b4452fd8ce42d039080de9e4a55e90864a28bf49abd225f8af6b756308c64fbc537ec2bc3083f70afd9f3f5829eb57c69c8a0e2a91bf6ae7d8f773f3f74461ff8208285ae8291aa360e5ef9967a4b379325036700392bc0e037c78c998cd11cd121b06d953844196dc30f4f29bd0536e4994bf54c41f04552679b6a9fa90a790d1b753cb37701cfbb1a96efb40989fcdb7b95fc0a11d7bc0ca1ba993e92e457d693ed9831c5868604b84fd04c28f0b113bcfa00455eedd920196ff5f6bce9f43c8f98241ca83ab45ae372bb51bf49455f0f1cb5b80e5c04c658caa1ed7d0a3dbaf0f8cacbbc7a0ad9e6e7a61e273a6f1692550199689a6842649e527c830db3d052975ad1c7eb2c048a80fd9a9a8e1f18948d07396d11ec3f1e6260c9429f4b69ea74428fbb25fb834051435fa8eb0503bedeace156f009afeb4fbcb79bc8a72cc4c61f6d81ebe4e31d531aa63c216b7995995b7a50fde5b3590aa602857a44e2e76171515946a6b8bfb0496d5297c9917c4e53782d0859300c4920f5895c14501e7d3e07e53540b7bc793af0e3e35dc78c1cb338013312c50e2e2be8ad5ea1bb8226295939c9e85fdbcb0c78fc0e68dd7a7d50ce31ee50e6127709258528f25de7abc4fc2322b6daa1e68f19ca045110a5ffc00031980896477b85be19be2caf57ad4a99535d347536723f30e87de16797a6b38dbb349d75fd4daeff23e7c6be244e4ef32fa9253144baf94f1660c24e20a4cecc1ba35fcb1ec4cddacc2ac5ed2973d8816e596d3b5f7d8ebba1c35ce88b468cec7dd963a01bc5668ae1aa77cce0c5ad60e43d94d434cb22303fb8ebc75c3f7b21b5a21719d3c80e98e6c38cafcc83163fa7548e6681f7450beb8deef77eebfc3e83b8c19d6015e0c5c24e6cf17d98115bb7adb8233401dbcfbb05c5ed00f11659fe93b2c02eeba8af46f3eb8e4a11bb45c9bb69112407c49633d4f1c6cef9365284faba20176854994a18ef8a8dd80299125b5c23e561a0c62acc0d9b99ecf806fc78852e660c76381433017c95d2b34701f153233d272f9f381689a83543b75c710f59d63fdfb0c225304475552fd88914414945b5dd89d7ffe50b73b83483add108c93e914ab1b6290a9d41d644c16706d00e433dda168d241189d509ef3be6ed632fc5f6015b0bc5ef7e5dd15602396678b35a87b1d38dc550c10a11f26f060b4c7009628747a53df3893e6eb711430cd1b691aad162a926f5ec212cd3bc73518393acd8e2c097ab26e7c96bc16ba7548f3c11eea37599b0d7422bd01a89684bb14d9372f0b9778862229aa3205ea835e376d0234991d4d0a27d7117a59c0c33bf6eb21bca0a5a1078c7d928404a8fa92bb379d050c5a72113aa5bd8e1503fa16b8b686d16673a224f2", @ANYRES8, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES8=r2, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRESDEC], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES8=r0, @ANYBLOB="6cf5a14a7038c78247ad16be2fc88c30e579404c02b2ed7fb9b7d3941b8ee67d21a034930f78cdd5c5070bd48c78f6ffb92900794621554bc0bae3d43e334cfb4a27ecf75ce3827a755a52ca1553d6d561f82f97e8fccf7c5977216215bafe4c818107fa80325bede95d75f2dc65610b30c893a28cab1fa37c5f811ef1e12b13b9b36c4b0c52d76c19e833bfc7a5ff382ffe25260dd88e59e31e120f40e46eab3db6567b6691e704087db684b89b01bdaaf21b6c793064e85b870d72b8bafbeb9f44a0133dc09306aa3d689bdf8b0acfdc9c686ca033e997e690952eeef9b292678b3899191a56946be3e254340a85f858400584a83749e1b9ecdecafd30d6eb292624e2e4af4ab574bd71c7a1daa0430e3cf94d1be3929c632e58071b2ac15fd81bb94e0b145b9ab5699d2c26fa675f7aeabb9a4d18f2258c03d71e4ee57fed747831f5b028f2a68f7d858b1fbc84f647ad3a07c182681bca7b1e946e5f673368d387f5bf123107867e899bd46936601fe9a0d9c423e410d43ba1605a72027ffe9165d305b9d0545e63f05049fbc6bf305df7e9f2638d577ebcbdb72c1f2af76808afb04f0cccd3a4880f88fb09d253bcd17188097400bb3aa9dd36938274fc3d9eecf26561114c37646ac607b80dfb5610119605196f207d7f208379ea5b584eb5c6b1880823504dbfe0f12ad10f7f7df17dcc246a18d274eadbc7e96b55fc9ddd50e6ebccded363dbe29636913a41a6facb9a86aca2a542c355de7849bd97c47512f718d754b98d57f764634a8d821d3e7946b13c8cd09b1a8bcc003e91efe593d460cfd41d51585d35793723a23f7cd3ae7b21f50e7522197aa89394a4f0ece9f7aa408905afc8e0394e5cfb904caca8208aa7ad92ebbe5912a42abae65800537cb05192f9aa17e00f2ed85071bba9fe0bacf45a05910e42372e8396f711e71c5453cc75dd03b1d186d20b02f48cf0979f98ac1e88254ac6eb2443fa5553d4c4ccf2ba6462e919b09cba9bf58ea5c5d140799e84058dacb9835ba832cbc7afc35c1de9dc868909b13fe82879228b5774dcd3891762076e5fcf21d6987c4d36d36de45e0c6e214f2a6f9363ea28ffefb84ac9164fb43a5a704e9b50317dd986460e095a1ab34de3ab5e3569831999332de1b32b016f3b4a2386e65d15dcf50e56d8936008d1f8b37e6fbfd78637e92feb177d9818b5d63e362832aa0d0ecb65a0b6932b6caa833394e01b8234d8b22de637138ed22668de21e855781e5a696866f72b9f024747555c86399f92196042bcedc9c844b785aeeefe5d14573de533daf4bbd4e701940e94ce57eb078d3fbe212416d63490a87ed065f53272365d5f788d5eaade250ea4d462bf8e7a5b753c759e90169f753624ba10f62c9d748c372ba445326ed964f19d09cd576ff2fc24a6ac4f8076330545c6686b0853708b9307242be056ea078f7ee8cb2aa8eb391fa75b76585ec7a9ca2d600316d8e7659edbabaf2b279ceb9ec43755535d2dd3ea97dd1323ca3a30cc032fd81fc5db674ffade6abb4e51bcfb2b14b0b76c9559e68b23fcfe78da45e38f46582a2d82d4c780d1034977ec18b220cd5ec4e44fb5c6313b3c40cd11ed46897259643fcb9d283fdd4febe38cb3c0d6854b9f06a078a8e2ada8682bd3e362e02987783181fff4171cbd9ee59610e3e3673681b696b9b9e25615b1e25c23ad883c62ec8ff87929b6cc649fdbe45989b81ec2f0c3bfe3067f02340b3dc9e468b7798c7974d25bc8b925ef220f498c1734e9e8479e591e8b42d798a037ffe8a728cc8d634f80da1878fa78c55e79e4d6cc99746efce06023329fd14a687c35cd7aa22bc680fbc0fdeb9a15dbbb47e15967e7fcf8a47dad36de54493431b549a42120e0881f24dc9647b5c7efaa5344e20cec5751425033dc2bce68811e56bf1cca4cea4934bacb2d536f81096c992a705222aa43532d718d1149e853fdb1468900bb1d9041bdd6fcd43b9556f31bf498a5bedcdc7dd9ffca0af308505a1ed6d646bce2617cfbaece80750db139238762d1a0000daf1bb1ea0c94b5d653bcd4470b1611438f82fc5a6f7681825b658fb78ea4bf96c442265f60c95b37c544c27a710d97e04a2c2749fdaba13753841e40eef1181f93d51418b683ee34da94f77a1592fd3f85838df880feab80a1cb0e7d7580b795f08e3efb3d8fd0ad5506f7b53cc1cbe6a45a3fd8b0914ab07077210a2f3930a521f538369b7cb0b450f26c9c695e14996d31b5d8db2487b70e96a6e6adef774f7a1b49824396363d22af990a4b77f5abc2cee43a0056aebe6c25e53e04967693356dd97388cac8dfd1156458d05538822bb8cb4d38c17510f0e84f0bc1560f7bbd14a86ed9e75f609124e8f8c77ddea1b8e528f9a874ae57a2171a01ebf7744ff6d6e13af17d73868c7f0716a829cb2e9084e231bc10de2cc26c6ef5146adaf59344492e95abb64f9348ac182ae709fe62626a663dafb43ec3790498ffbdad9d81c3d409f7a613cd0a36e6ff6976694aa092c92c357321d4caea78dbe24b13b4d63f3c6f4f96af8edcc57997b9d76c478d6ab7f4c8a12eac91af90b0d4feb28ea58860bfdbe59c877a54dfd983bcb3a5777dbef15b8b9fbffedc09a08552a5b2f28bbdf7af74c4beb7f73dcfb33a52c7cf5434c27dbb5c95b7078665a3bfe6f28c23f216dad2a0163ba2f260e02f5cf78ef56ac50d9ea58326b26fcc3fcd4ddc00d8efa9a281f6a7c6398d712ba1de2ea09aabef23a0d70ab4d606f4e51fcf20f2ebc154c810f6ccad6233e54ed640a809c10335aa7386e020b6ef5938526d1e5b0211f37ba463dbdd09f66fb131fa1cb36a411e6a2b02a96b88e051d606c487d7622c745946000f5d9a504a55e21e29993092557e04574df19199b8a06a831965527dd6c1ea4a74919f3283f1f48fa337d29aace5d1180af46b7c083b786e3189b4ca18be23d9f4f0532901bd6bdffdbbcdd25d6a7c1cf00c9994ceca9bdb467a8c9574754abf7954f6571e3283912b367f843df65bf4658ac574b2506acf43550e5071514d68b19cafbdc2276fa68b4ccbfba2a72583108e5dac219911d47decc72c0641be53f576934ed92a5366ba0eb5b0cbce2939043d6d203b60a3f0594ae91cee865adef9b94de0526cdacb91efd626c2aa76cf63f293a0377bc5697515e3358cff725258f6850ec0ae71d598d7264f4ab5f1b453c42c14b7c5c1adb8315bd81a06c98c94cd5380a8cfb4a77c6c005cd4e9089da226779b3c41c93114007a6a84d2f28be3ccf8a841e16c98139d488439e69f160ce1ff9446edccea23e8810130579c21ab53a084a7f04577d093f41a07c873629c6ef4ec29be6a0960c090d6c9037d492627f398fe4534e67cd944b8cbe8961e8a64ccd13a6a4638686a72efd3d3a5e9d02a045c2e89bcb15dad0d0319137ff9fa612c5f91c1d9fd4c13ac8bd78744acfd656e362fde4db64cfbabb88891e07d51d27f33d32bd0065946cbad603f92e7f1fb7a3cd375b36ac0ae7eac9aaae2ef950140b3841253cc57b4e1ed01954b8d0b05e4f38067d7bcf86b80a8422ba4f6790a65514e8dfc4dd570c7d0f1ccab987b8d519e4058a3ef4d52dc4bfbbbddd3406ad44865c79ed59a682e5424e5e0d44b04595ce91382713ad604af14f759d3ac9abc51e0944f8af316af3c00de497af315d76f4678e8e89d8d299f6b5b5a458c3433f25badb4cc4f32bf68734dc883bf36be3f410bdd94a29152e555ce5bca3bb8c0ab3968c84e4ccf561a7ab5320baf29964fc32ef9e9703a041fd5a5ebb0dd3ca70c98a7f7ed3b117726c23dec74e94e8b2e1cfda0d6b919e50af553a435b996f93d01cbb99331d8911f2ed2515ad248299e6657bcfb3cd9ca08a3bb33f872b6702d8d3e45f6c0cffef0fde713948b44be03dbf3b8de1922b0839526185c1b68b2068d923b55a9bf9786ea017f9a6c0c593f7ca2f4b75c8b21929f1a06afd6e8ae8cffe449fc39376fcbd15699d68d8e4b27b540922fc4708ff0ff9bb443c7dea491d7ae7df7871e0c91ae8749b2ca31a97c00516ae7621a65faf1f1939d3f20298e350725a01af96543a534e8ef13e0b4dbc110543138508e94527beb6ba936d2fb810a3df2941dfcd6b848593e973360028da500dcec94538f0019cc3fecafbedd3d90181cd1f13c347672c697037dc14efcdd1ec8812f2c7fee359f89e2de3ab4ed8706019749efaf0e739dca5cac2ff88236b1356c75915c08c4f0dbbe9e196308ac8f2466afc99edc48a4042277139eb649f0a3a3ced218037de10df5b7a34fc4b5f105f2c5ad870bdad215c18a9ee1e4da49885154781f18cb7ed16ceb3f2d6a4da84dfd273881d13102f7ab51258202b24f0aabb8e30976b4452fd8ce42d039080de9e4a55e90864a28bf49abd225f8af6b756308c64fbc537ec2bc3083f70afd9f3f5829eb57c69c8a0e2a91bf6ae7d8f773f3f74461ff8208285ae8291aa360e5ef9967a4b379325036700392bc0e037c78c998cd11cd121b06d953844196dc30f4f29bd0536e4994bf54c41f04552679b6a9fa90a790d1b753cb37701cfbb1a96efb40989fcdb7b95fc0a11d7bc0ca1ba993e92e457d693ed9831c5868604b84fd04c28f0b113bcfa00455eedd920196ff5f6bce9f43c8f98241ca83ab45ae372bb51bf49455f0f1cb5b80e5c04c658caa1ed7d0a3dbaf0f8cacbbc7a0ad9e6e7a61e273a6f1692550199689a6842649e527c830db3d052975ad1c7eb2c048a80fd9a9a8e1f18948d07396d11ec3f1e6260c9429f4b69ea74428fbb25fb834051435fa8eb0503bedeace156f009afeb4fbcb79bc8a72cc4c61f6d81ebe4e31d531aa63c216b7995995b7a50fde5b3590aa602857a44e2e76171515946a6b8bfb0496d5297c9917c4e53782d0859300c4920f5895c14501e7d3e07e53540b7bc793af0e3e35dc78c1cb338013312c50e2e2be8ad5ea1bb8226295939c9e85fdbcb0c78fc0e68dd7a7d50ce31ee50e6127709258528f25de7abc4fc2322b6daa1e68f19ca045110a5ffc00031980896477b85be19be2caf57ad4a99535d347536723f30e87de16797a6b38dbb349d75fd4daeff23e7c6be244e4ef32fa9253144baf94f1660c24e20a4cecc1ba35fcb1ec4cddacc2ac5ed2973d8816e596d3b5f7d8ebba1c35ce88b468cec7dd963a01bc5668ae1aa77cce0c5ad60e43d94d434cb22303fb8ebc75c3f7b21b5a21719d3c80e98e6c38cafcc83163fa7548e6681f7450beb8deef77eebfc3e83b8c19d6015e0c5c24e6cf17d98115bb7adb8233401dbcfbb05c5ed00f11659fe93b2c02eeba8af46f3eb8e4a11bb45c9bb69112407c49633d4f1c6cef9365284faba20176854994a18ef8a8dd80299125b5c23e561a0c62acc0d9b99ecf806fc78852e660c76381433017c95d2b34701f153233d272f9f381689a83543b75c710f59d63fdfb0c225304475552fd88914414945b5dd89d7ffe50b73b83483add108c93e914ab1b6290a9d41d644c16706d00e433dda168d241189d509ef3be6ed632fc5f6015b0bc5ef7e5dd15602396678b35a87b1d38dc550c10a11f26f060b4c7009628747a53df3893e6eb711430cd1b691aad162a926f5ec212cd3bc73518393acd8e2c097ab26e7c96bc16ba7548f3c11eea37599b0d7422bd01a89684bb14d9372f0b9778862229aa3205ea835e376d0234991d4d0a27d7117a59c0c33bf6eb21bca0a5a1078c7d928404a8fa92bb379d050c5a72113aa5bd8e1503fa16b8b686d16673a224f2", @ANYRES8, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES8=r2, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xfffd}, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$inet_buf(r10, 0x0, 0x5e, &(0x7f0000000500)="fe7cdf7ef7e595374b77a5850fe06723a7898121f5b76c93096bbbd1a575a3c8f35a8d4e976cb0a8e3f68167d5fecabc7126f0f4c90b5c2e62c0be665e8c633177750165222ed41897888619eaa43586", 0x50) (async) setsockopt$inet_buf(r10, 0x0, 0x5e, &(0x7f0000000500)="fe7cdf7ef7e595374b77a5850fe06723a7898121f5b76c93096bbbd1a575a3c8f35a8d4e976cb0a8e3f68167d5fecabc7126f0f4c90b5c2e62c0be665e8c633177750165222ed41897888619eaa43586", 0x50) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@gettfilter={0x6c, 0x2e, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xe, 0x8}, {0x0, 0x9}, {0xfff2}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xffffffb5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x2}, {0x8}, {0x8, 0xb, 0xffff}]}, 0x6c}}, 0x4000800) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xfff2, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) 671.217223ms ago: executing program 1 (id=7512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000000)={0x38, r6, 0x219, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200000000000000}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe041"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 636.762787ms ago: executing program 4 (id=7513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=@newtaction={0x274, 0x30, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{0x260, 0x1, [@m_simple={0x1a8, 0x3, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x16, 0x3, './cgroup.cpu/syz1\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\'^a,\xbb\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x2, 0x1, 0x1, 0x5}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller1\x00'}, @TCA_DEF_DATA={0x16, 0x3, './cgroup.cpu/syz1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff8bc6, 0x7, 0x4, 0x3, 0x8}}, @TCA_DEF_DATA={0x16, 0x3, './cgroup.cpu/syz1\x00'}, @TCA_DEF_DATA={0x16, 0x3, './cgroup.cpu/syz1\x00'}]}, {0xba, 0x6, "6549ba0b346a4f79f0510a79fef15dcc7c820ba8fcd80dd297d2c4564518d661c31f33d8fcd743c02a83a8770f51ad3097613bf67d3df9bb164e08381b4cd6b2696372a101cded74f3822ba0eb7004458558e538ac998de8c9648e9029bfe7eba67fed19ba985b44c189fff5f3e8cf6e3ae1063bda08de0562ab4ef2a81f3e4fbc95241cc5d92d9521f70719a0e7c86577a0a86d578dc3a2b94266b738808b54243e96609c48b9fc06dcbd781c90c0ed39c06b1767fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0xb4, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6825, 0x1, 0x7d7e17f3195e1c5b, 0x0, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xe56, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x3, 0x20000000, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x20000000, 0x4, 0x2}}]}, {0x31, 0x6, "2a8f636974694e2863def87711c9bf5abf360fc78cbd0f70e5dc1a6e80f456827192e5d368c93b218fa4bebf76"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x811}, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="456f0020006500000b110778ac1414bbac1414124e204e20000c90040020000135c0809da41c62a3e785fa336c37448ffb0fb24c"], 0x20) (async, rerun: 32) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) 544.028683ms ago: executing program 3 (id=7514): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000001400180008ac0f0006ac0f0009ac0f0006ac0f00", @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$packet(0x11, 0x2, 0x300) 386.040758ms ago: executing program 3 (id=7515): r0 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) (async) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="bc007a"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r10, 0x5000943a, &(0x7f00000007c0)={{r9}, r11, 0x14, @inherit={0x58, &(0x7f0000000740)={0x0, 0x2, 0x9, 0x6, {0x3faaaf5c3ae3cd60, 0x4, 0xfff, 0x8, 0xffffffffffffff0a}, [0x7, 0x68e7f35b]}}, @subvolid=0x100000001}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000700)={{r2}, r11, 0x8, @inherit={0x48, &(0x7f0000000140)={0x1, 0x0, 0x7, 0x5, {0x2, 0x6, 0xf, 0x3, 0x6}}}, @subvolid=0x7}) 372.29827ms ago: executing program 1 (id=7516): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x5fc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0x9}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1ff, 0x1, 0xd8f, 0x1, 0x3}}]}]}}}]}, 0x90}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r9, &(0x7f0000001700)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_LABELS_MASK={0xc, 0x17, [0xa04c, 0x3a]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048800}, 0x41) 323.649194ms ago: executing program 4 (id=7517): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="560601"], 0x4) 131.982181ms ago: executing program 4 (id=7518): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r5, 0x21, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40890) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdb5}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x512}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4eb}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xebb}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000083) getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f00000001c0)=""/73, &(0x7f0000000240)=0x49) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xa, 0xe8, 0x5, 0x14, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, @sadb_lifetime={0x4, 0x3, 0x2, 0xf, 0x7, 0x6}, @sadb_x_sec_ctx={0x5, 0x18, 0x1, 0x8, 0x1f, "e349ae01e860865309be0ffd3aa79bcb05fe0488ac8a84c7453cf5b597d31c"}]}, 0xa0}}, 0x810) 130.240946ms ago: executing program 3 (id=7519): socket(0x10, 0x803, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 105.929333ms ago: executing program 3 (id=7520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x3, 0x300) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400121a0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x2, 0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x8, 0x700, 0x8, 0x4}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private2, @in=@broadcast, 0x4e24, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x0, r6, r7}, {0x13, 0x8, 0x8, 0x3, 0x8, 0x7, 0x800, 0x344}, {0xfffffffffffffbdf, 0x3, 0x100, 0x7f}, 0x38d1, 0x6e6bbc, 0x1, 0x1, 0x2, 0x2}, {{@in=@multicast2, 0x4d2, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x3502, 0x0, 0x0, 0x7, 0x8a, 0x1, 0x8}}, 0xe8) r8 = socket(0x9, 0x6, 0x3af) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400084c}, 0x30) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) 97.996236ms ago: executing program 4 (id=7521): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x8c) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x800, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 0s ago: executing program 1 (id=7522): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9001000010000100feffffbffddbdf65fe8800006cc97660ab97730e958d130f3d35000000000000000000000101ac1414aa0000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000002004d46c000000ffffffff000000000000000000000000080000000000000092010000000000000600000000000000fdff0000000000001c25080000000000ffffffffffffff7ff8ffffffffffffff0000000000000000ddb500000000000000000000000000001f00000000000040bff600000000000002000000fcffffff000000002abd700004350000020001000800000000000000480003006c7a730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000570014"], 0x190}, 0x1, 0x0, 0x0, 0x8801}, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.1.6286'. [ 732.571601][T31392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6286'. [ 732.575187][ T6746] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 732.649194][T31392] veth1: entered promiscuous mode [ 732.664781][T31392] macsec2: entered promiscuous mode [ 732.670492][T31392] macsec2: entered allmulticast mode [ 732.676192][T31392] veth1: entered allmulticast mode [ 732.687155][T31392] veth1: left allmulticast mode [ 732.692364][T31392] veth1: left promiscuous mode [ 732.833036][T31406] netlink: 'syz.2.6288': attribute type 11 has an invalid length. [ 732.841833][T27398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.876401][T31411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6291'. [ 732.923600][T18312] Bluetooth: hci4: command tx timeout [ 732.983825][T27398] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.078712][T31237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.112934][T31237] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.133901][ T6740] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.161819][ T6746] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.169012][ T6746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.237841][ T6746] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.245088][ T6746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.294261][T27397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.414799][ T6746] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 734.025054][T31464] bond1: entered promiscuous mode [ 734.058138][T31464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.071180][T31473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6301'. [ 734.359658][T31237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.370617][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 734.437101][T31490] sctp: [Deprecated]: syz.1.6306 (pid 31490) Use of int in max_burst socket option. [ 734.437101][T31490] Use struct sctp_assoc_value instead [ 734.900645][T31237] veth0_vlan: entered promiscuous mode [ 734.917946][T31237] veth1_vlan: entered promiscuous mode [ 735.003678][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 735.038147][T31237] veth0_macvtap: entered promiscuous mode [ 735.072001][T31237] veth1_macvtap: entered promiscuous mode [ 735.119880][T31510] ip6tnl1: entered allmulticast mode [ 735.136901][T27400] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 735.152294][T27400] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 735.166729][T14531] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 735.206312][T31237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.229717][T31237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.250268][T27400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.279087][T27400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.303937][T27400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.348950][T27400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.366576][T31519] veth0: entered promiscuous mode [ 735.385546][T31517] netlink: 'syz.2.6314': attribute type 1 has an invalid length. [ 735.398775][T31520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 735.531175][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 735.646922][ C1] net_ratelimit: 16 callbacks suppressed [ 735.646946][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 735.664657][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 735.689872][T27398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.697964][T27397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 735.720266][T27398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.782654][T27398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.796153][T27398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.814567][T31539] netlink: 'syz.0.6320': attribute type 10 has an invalid length. [ 735.843583][T27400] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 735.856601][T31539] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6320'. [ 736.041015][T31545] syzkaller0: entered promiscuous mode [ 736.055739][T31545] syzkaller0: entered allmulticast mode [ 736.073713][T27399] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 736.126524][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 736.185133][T27400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.269930][T31565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6326'. [ 736.294664][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 736.302700][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 2 [ 736.341986][T31565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6326'. [ 737.405661][T27399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.532313][ T9714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.555372][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.093714][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 739.683854][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.075053][T31576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6328'. [ 740.202686][T31580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6330'. [ 740.327531][T31588] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6332'. [ 740.465360][T31594] sctp: [Deprecated]: syz.4.6335 (pid 31594) Use of int in max_burst socket option. [ 740.465360][T31594] Use struct sctp_assoc_value instead [ 740.550738][T31599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6337'. [ 740.597766][T31601] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6338'. [ 740.631201][T31601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6338'. [ 740.723965][T15807] net_ratelimit: 5 callbacks suppressed [ 740.723983][T15807] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 740.749059][T31609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6339'. [ 740.767669][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.788475][T31610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6339'. [ 740.815238][T27398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.925413][ T6740] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 741.064304][ T6740] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 741.095364][T31621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6344'. [ 741.193737][T10392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 741.313727][ T6740] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 741.434132][ T6740] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 741.464382][T31643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6351'. [ 741.475319][T31643] tipc: Invalid UDP bearer configuration [ 741.475368][T31643] tipc: Enabling of bearer rejected, failed to enable media [ 741.502985][T31648] vlan2: entered promiscuous mode [ 741.509826][T31648] bridge0: entered promiscuous mode [ 741.547342][ T6740] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 741.565541][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.671359][T31662] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 742.110944][T31685] syzkaller1: entered promiscuous mode [ 742.117789][T31685] syzkaller1: entered allmulticast mode [ 742.381471][T31700] ip6gre1: entered promiscuous mode [ 742.387326][T31700] ip6gre1: entered allmulticast mode [ 742.439249][T31700] netlink: 'syz.1.6364': attribute type 6 has an invalid length. [ 742.477535][T31704] xt_hashlimit: size too large, truncated to 1048576 [ 743.565134][T31755] tipc: Started in network mode [ 743.577557][T31755] tipc: Node identity 5, cluster identity 4711 [ 743.598460][T31755] tipc: Node number set to 5 [ 743.714220][T27398] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.989276][T31768] netlink: 'syz.3.6383': attribute type 1 has an invalid length. [ 744.330528][T31782] netlink: 'syz.3.6387': attribute type 1 has an invalid length. [ 744.395708][T31782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.510831][T31788] bond2: (slave veth1): Enslaving as an active interface with a down link [ 744.544256][T31782] bond2: (slave dummy0): making interface the new active one [ 744.573158][T31782] dummy0: entered promiscuous mode [ 744.601658][T31782] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 744.954530][T31816] team0: No ports can be present during mode change [ 745.036843][T31817] bridge1: entered promiscuous mode [ 745.044317][T31817] bridge1: entered allmulticast mode [ 745.389435][T31842] xt_hashlimit: size too large, truncated to 1048576 [ 745.391600][T31844] xt_hashlimit: size too large, truncated to 1048576 [ 745.398469][T31842] xt_hashlimit: max too large, truncated to 1048576 [ 745.407361][T31844] xt_hashlimit: max too large, truncated to 1048576 [ 745.446847][T31846] __nla_validate_parse: 15 callbacks suppressed [ 745.446867][T31846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6402'. [ 745.595270][T31851] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6406'. [ 745.671061][T31857] veth0: entered promiscuous mode [ 745.690387][T31857] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 745.744132][T15807] net_ratelimit: 40 callbacks suppressed [ 745.744153][T15807] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 745.771183][T31856] veth0: left promiscuous mode [ 745.836292][T31860] team0: No ports can be present during mode change [ 745.857470][T31862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6411'. [ 745.870315][T31864] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 745.885187][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.894815][T10392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 745.946869][T31866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6411'. [ 745.957011][T31866] nbd: device at index 64 is going down [ 746.022563][T27399] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 746.247285][T31671] udevd[31671]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 746.308515][T31781] udevd[31781]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 746.344768][T27400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.385762][T31888] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6417'. [ 746.412010][T31888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6417'. [ 746.434631][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6416'. [ 746.444950][T31887] netlink: 'syz.1.6416': attribute type 30 has an invalid length. [ 746.767493][T31871] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.775063][T31871] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.126902][T31871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.152210][T31871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.486913][T27398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.582926][T31871] bond1: left promiscuous mode [ 747.597347][T31871] ip6tnl1: left allmulticast mode [ 747.611422][T31871] bridge1: left promiscuous mode [ 747.627626][T31871] bridge1: left allmulticast mode [ 747.640265][T31893] geneve0: mtu less than device minimum [ 747.682245][T31898] syzkaller1: entered promiscuous mode [ 747.695097][T31898] syzkaller1: entered allmulticast mode [ 747.710737][T15807] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.813904][T15807] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.837763][T15807] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.875565][T15807] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 748.125481][ T9711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.214787][ T3383] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 748.566168][T31959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6432'. [ 748.889141][T31982] netlink: 'syz.1.6439': attribute type 1 has an invalid length. [ 748.935922][T31982] bond1: entered promiscuous mode [ 748.941529][T31982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 749.007789][T31982] bond1: (slave bridge1): making interface the new active one [ 749.066282][T31982] bridge1: entered promiscuous mode [ 749.100840][T31982] bridge1: left promiscuous mode [ 749.274663][T31991] bond2 (unregistering): Released all slaves [ 749.657357][T32023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6449'. [ 749.723840][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 750.656078][T32046] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6453'. [ 750.836792][ T6740] net_ratelimit: 14 callbacks suppressed [ 750.836820][ T6740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.859170][T32052] syzkaller0: entered promiscuous mode [ 750.882524][T32052] syzkaller0: entered allmulticast mode [ 750.914198][ T6745] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 750.935921][T32052] tipc: Enabled bearer , priority 0 [ 750.953142][T32057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6458'. [ 750.962739][T32050] tipc: Resetting bearer [ 751.072513][T32050] tipc: Disabling bearer [ 751.249240][ T6740] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.314334][T32067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6459'. [ 751.393784][ T6740] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.564411][ T6740] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.644462][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 751.647142][ T6740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.684282][ T1055] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.813966][ T1055] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.933750][ T1055] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.963783][T27399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.135727][T32109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6471'. [ 752.145322][T32109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6471'. [ 752.190882][T32110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6470'. [ 752.210198][T32109] erspan0: entered promiscuous mode [ 752.240274][T32109] gretap0: entered promiscuous mode [ 752.267848][T32109] debugfs: 'hsr1' already exists in 'hsr' [ 752.293551][T32109] Cannot create hsr debugfs directory [ 752.294494][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 752.548263][T32119] bond2: Unable to set up delay as MII monitoring is disabled [ 752.564410][T32119] bond2 (unregistering): Released all slaves [ 752.855695][T32132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6477'. [ 753.372307][T32155] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6479'. [ 753.418425][ T30] audit: type=1804 audit(1781415903.195:33): pid=32158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6481" name="/newroot/108/cgroup.controllers" dev="tmpfs" ino=568 res=1 errno=0 [ 753.538388][ T30] audit: type=1800 audit(1781415903.195:34): pid=32158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6481" name="cgroup.controllers" dev="tmpfs" ino=568 res=0 errno=0 [ 753.622259][ T30] audit: type=1804 audit(1781415903.405:35): pid=32158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6481" name="/newroot/108/cgroup.controllers" dev="tmpfs" ino=568 res=1 errno=0 [ 754.168358][T32189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6484'. [ 754.770666][T32212] vlan2: entered promiscuous mode [ 754.829328][T32212] batadv0: entered promiscuous mode [ 755.314719][T32249] netlink: 'syz.2.6498': attribute type 21 has an invalid length. [ 755.568157][T32251] dvmrp0: entered allmulticast mode [ 755.583848][T32249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6498'. [ 755.652146][T27399] dummy0: left promiscuous mode [ 755.933652][T27399] net_ratelimit: 30 callbacks suppressed [ 755.933675][T27399] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 756.066847][ T6745] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 756.127737][T11169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.160723][T32270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6501'. [ 756.184516][T10391] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 756.211431][T32270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6501'. [ 756.231639][T32270] netlink: 47 bytes leftover after parsing attributes in process `syz.4.6501'. [ 756.259247][T32270] netlink: 'syz.4.6501': attribute type 6 has an invalid length. [ 756.273915][T32272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6503'. [ 756.284809][T32270] netlink: 'syz.4.6501': attribute type 6 has an invalid length. [ 756.303908][T10391] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 756.325707][T32275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6501'. [ 756.373750][T32275] gretap0: entered promiscuous mode [ 756.433667][ T1055] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 756.464952][T27399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.553627][ T1055] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 756.589762][T32281] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 756.740437][T32293] batadv0: entered promiscuous mode [ 756.765922][T32293] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 756.899674][T32311] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 756.903626][ T1055] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 757.102691][T32317] syzkaller0: entered promiscuous mode [ 757.114740][T32317] syzkaller0: entered allmulticast mode [ 757.150268][T32319] tap0: tun_chr_ioctl cmd 1074025681 [ 757.297740][T32324] syzkaller0: entered promiscuous mode [ 757.312695][T32324] syzkaller0: entered allmulticast mode [ 760.954889][ T6745] net_ratelimit: 7 callbacks suppressed [ 760.954908][ T6745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.553842][T27399] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 761.566802][T32347] mac80211_hwsim hwsim94 syzkaller0: entered promiscuous mode [ 761.585440][T32347] mac80211_hwsim hwsim94 syzkaller0: entered allmulticast mode [ 761.682730][T32348] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.686851][T32360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6526'. [ 761.690418][T32348] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.744696][T32348] batadv0: left promiscuous mode [ 761.771485][T32365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6527'. [ 761.819826][T32348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.834666][T32348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.944493][ T6736] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.973291][ T6736] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.010367][ T6736] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.041914][ T6736] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.093918][ T6736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.106075][T32380] bridge0: port 3(vlan2) entered blocking state [ 762.108676][T32377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6531'. [ 762.112623][T32380] bridge0: port 3(vlan2) entered disabled state [ 762.129928][T32380] vlan2: entered allmulticast mode [ 762.135999][T32380] geneve0: entered allmulticast mode [ 762.145802][T32380] vlan2: entered promiscuous mode [ 762.150933][T32380] geneve0: entered promiscuous mode [ 762.163624][ T6736] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 762.204425][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.335935][T32388] syzkaller0: entered promiscuous mode [ 762.360145][T32388] syzkaller0: entered allmulticast mode [ 762.402463][ T6736] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 762.407484][T32396] pim6reg: entered allmulticast mode [ 762.446243][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.466541][T32398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6537'. [ 762.559712][T32396] pim6reg: left allmulticast mode [ 762.575741][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.618994][T32400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6538'. [ 762.642679][T32407] tipc: Resetting bearer [ 762.908742][T32407] tipc: Disabling bearer [ 762.915321][T32431] netlink: 'syz.2.6543': attribute type 1 has an invalid length. [ 763.049963][T32434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6543'. [ 763.068071][T32407] team0 (unregistering): Port device team_slave_0 removed [ 763.082354][T32407] team0 (unregistering): Port device team_slave_1 removed [ 763.113835][T10391] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 763.130126][T32421] tipc: Started in network mode [ 763.135757][T32421] tipc: Node identity ac14140f, cluster identity 4711 [ 763.161814][T32421] tipc: New replicast peer: 255.255.255.255 [ 763.170789][T32421] tipc: Enabled bearer , priority 5 [ 763.200625][T32420] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6542'. [ 763.214442][T10391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.286462][T32431] bond2: entered promiscuous mode [ 763.303713][T32431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 763.322386][T32434] bond2: entered allmulticast mode [ 763.392398][T32449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 763.406509][T32439] bond2: (slave bridge2): making interface the new active one [ 763.420637][T32439] bridge2: entered promiscuous mode [ 763.426507][ T6745] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 763.468082][T32439] bridge2: entered allmulticast mode [ 763.509473][T32439] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 763.528528][T32441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6546'. [ 763.542664][T32425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6543'. [ 763.558429][T32441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6546'. [ 763.588792][T32453] xt_hashlimit: size too large, truncated to 1048576 [ 763.647381][T10391] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 763.689702][T32446] xt_hashlimit: size too large, truncated to 1048576 [ 763.700937][T32446] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 763.848325][T32462] geneve3: entered promiscuous mode [ 763.867253][T32462] geneve3: entered allmulticast mode [ 763.889435][ T6745] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 763.921808][ T6745] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 763.959710][T32469] nbd: nbd1 already in use [ 763.962882][ T6745] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 763.982660][T32469] block nbd1: NBD_DISCONNECT [ 763.991813][T32469] block nbd1: Send disconnect failed -32 [ 764.008525][ T6745] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 764.013208][T32469] block nbd1: shutting down sockets [ 764.521108][ T6745] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 764.529664][ T6745] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - b2:43:15:c5:7c:79 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 764.677921][ T6745] bond9 (unregistering): (slave erspan2): Releasing active interface [ 764.714466][ T6745] gretap0 (unregistering): left allmulticast mode [ 764.776349][ T6745] bond3 (unregistering): (slave gretap1): Releasing active interface [ 764.998393][ T6745] bond7 (unregistering): (slave geneve0): Releasing active interface [ 765.087604][ T6745] bond5 (unregistering): (slave bridge4): Releasing active interface [ 765.269558][T32498] netlink: 'syz.2.6562': attribute type 9 has an invalid length. [ 765.291424][ T6745] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.302870][ T6736] smc: removing ib device syz1 [ 765.319581][ T6745] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.329846][ T6745] .` (unregistering): Released all slaves [ 765.341039][ T6745] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 765.350167][ T6745] veth0_to_bond: left allmulticast mode [ 765.358950][ T6745] bond1 (unregistering): Released all slaves [ 765.380270][ T6745] bond2 (unregistering): (slave veth3): Releasing backup interface [ 765.390379][ T6745] bond2 (unregistering): Released all slaves [ 765.410871][ T6745] bond3 (unregistering): Released all slaves [ 765.425173][ T6745] bond4 (unregistering): Released all slaves [ 765.441024][ T6745] bond5 (unregistering): Released all slaves [ 765.456591][ T6745] bond6 (unregistering): Released all slaves [ 765.471606][ T6745] bond7 (unregistering): Released all slaves [ 765.497911][ T6745] bond8 (unregistering): Released all slaves [ 765.512035][ T6745] bond0 (unregistering): Released all slaves [ 765.526319][ T6745] bond9 (unregistering): Released all slaves [ 765.540920][ T6745] bond10 (unregistering): Released all slaves [ 765.559282][ T6745] bond11 (unregistering): Released all slaves [ 765.580055][ T6745] bond12 (unregistering): Released all slaves [ 765.594146][ T6745] bond13 (unregistering): Released all slaves [ 765.614627][ T6745] bond14 (unregistering): (slave veth9): Releasing active interface [ 765.622660][ T6745] batadv1: entered promiscuous mode [ 765.630607][ T6745] bond14 (unregistering): (slave batadv1): Releasing active interface [ 765.641285][ T6745] bond14 (unregistering): Released all slaves [ 765.659527][ T6745] bond15 (unregistering): Released all slaves [ 765.672566][T11168] tipc: Node number set to 2886997007 [ 765.687229][T32485] 8021q: VLANs not supported on ip_vti0 [ 765.702086][T32488] erspan0: entered promiscuous mode [ 765.710735][T32488] erspan0: left promiscuous mode [ 765.958689][ T6736] smbdirect: ib_dev[syz1] removed [ 766.039678][T32506] smc: net device hsr0 applied user defined pnetid SYZ2 [ 766.365427][T32521] nbd: must specify a size in bytes for the device [ 766.660204][T32535] netlink: 'syz.0.6572': attribute type 11 has an invalid length. [ 766.828483][T32541] __nla_validate_parse: 10 callbacks suppressed [ 766.828503][T32541] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6574'. [ 766.876824][T32541] net_ratelimit: 2 callbacks suppressed [ 766.876842][T32541] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 767.076851][T32546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6576'. [ 767.584258][T32562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 767.667720][T32569] netlink: 1228 bytes leftover after parsing attributes in process `syz.3.6580'. [ 768.473958][T32599] bridge0: port 3(dummy0) entered blocking state [ 768.492499][T32599] bridge0: port 3(dummy0) entered disabled state [ 768.522018][T32599] dummy0: entered allmulticast mode [ 768.535180][T32603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6585'. [ 768.572687][T32599] dummy0: entered promiscuous mode [ 768.714385][T32603] bond2: entered promiscuous mode [ 768.727400][T32603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 768.749329][T32601] dummy0: left allmulticast mode [ 768.757462][T32601] dummy0: left promiscuous mode [ 768.771820][T32601] bridge0: port 3(dummy0) entered disabled state [ 768.972993][T32623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6590'. [ 769.230983][T32644] openvswitch: netlink: IP tunnel dst address not specified [ 769.270586][T32644] tipc: Enabling of bearer rejected, already enabled [ 769.359313][T32648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6597'. [ 769.542784][T32650] hma(’àÆÂkX: entered promiscuous mode [ 769.910963][T32673] netlink: 'syz.3.6601': attribute type 2 has an invalid length. [ 769.962475][T32675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6601'. [ 769.983922][T32673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6601'. [ 770.138014][T32675] tipc: Enabled bearer , priority 0 [ 770.232961][T32681] IPv6: addrconf: prefix option has invalid lifetime [ 771.225677][T32707] veth5: entered allmulticast mode [ 771.269740][T32716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6612'. [ 771.302653][T32716] openvswitch: netlink: Invalid VLAN frame [ 771.422120][T32715] batadv_slave_1: entered promiscuous mode [ 771.798511][T32730] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6616'. [ 771.950163][ T6745] m1Ie5nè‹Ò: left promiscuous mode [ 772.082208][T32754] __nla_validate_parse: 3 callbacks suppressed [ 772.082228][T32754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6622'. [ 772.215432][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6621'. [ 772.232752][T32752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6621'. [ 772.260640][T32757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6624'. [ 772.286947][ T300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6625'. [ 772.338440][T32754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.359690][ T6745] hmac(sha224): left promiscuous mode [ 772.521864][ T6745] tipc: Left network mode [ 772.621528][T32765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6624'. [ 772.881397][ T315] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6628'. [ 772.883397][ T6745] IPVS: stopping master sync thread 5877 ... [ 772.907382][ T315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6628'. [ 772.941943][ T6745] IPVS: stopping backup sync thread 14982 ... [ 772.963617][ T315] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6628'. [ 773.033133][ T315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6628'. [ 773.585975][ T350] sctp: [Deprecated]: syz.2.6638 (pid 350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 773.585975][ T350] Use struct sctp_sack_info instead [ 774.551323][ T6745] veth1_macvtap: left promiscuous mode [ 774.562282][ T378] netlink: 'syz.2.6644': attribute type 2 has an invalid length. [ 774.571500][ T6745] veth0_macvtap: left promiscuous mode [ 775.110365][ T377] syzkaller1: entered promiscuous mode [ 775.115970][ T377] syzkaller1: entered allmulticast mode [ 775.161257][ T386] veth1_to_team: entered promiscuous mode [ 775.173328][ T386] veth1_to_team: left promiscuous mode [ 775.748338][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.755850][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.773221][ T414] tipc: Resetting bearer [ 775.836217][ T414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.851682][ T414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.870524][ T414] tipc: Resetting bearer [ 775.877034][ T414] tipc: Resetting bearer [ 776.095542][ T414] mac80211_hwsim hwsim94 syzkaller0: left promiscuous mode [ 776.102831][ T414] mac80211_hwsim hwsim94 syzkaller0: left allmulticast mode [ 776.210897][ T417] macsec1: entered promiscuous mode [ 776.321512][ T1055] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.370812][ T1055] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.401330][ T1055] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.520634][ T1055] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.920637][ T6745] IPVS: stop unused estimator thread 0... [ 777.701018][ T502] __nla_validate_parse: 15 callbacks suppressed [ 777.701039][ T502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6673'. [ 777.795575][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.867866][ T503] bridge_slave_0 (unregistering): left allmulticast mode [ 777.892230][ T503] bridge_slave_0 (unregistering): left promiscuous mode [ 777.938923][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.285429][ T521] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6680'. [ 778.385488][ T518] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.436992][ T1055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 779.054498][ T531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.101232][ T531] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.168092][ T531] tipc: Resetting bearer [ 779.220696][ T531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.269366][ T563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6683'. [ 779.300997][ T527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6683'. [ 779.523044][ T531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.609358][ T531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.695251][ T531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 779.723657][ T531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 779.754785][ T531] tipc: Resetting bearer [ 779.760841][ T531] tipc: Resetting bearer [ 779.781969][ T531] veth1_vlan: left promiscuous mode [ 779.798340][ T531] veth0_vlan: left promiscuous mode [ 779.803819][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 779.817509][ T531] veth0_vlan: entered promiscuous mode [ 779.838212][ T531] veth1_vlan: entered promiscuous mode [ 779.852988][ T531] veth1_macvtap: left promiscuous mode [ 779.860691][ T531] veth0_macvtap: left promiscuous mode [ 779.868461][ T531] veth0_macvtap: entered promiscuous mode [ 779.876654][ T531] veth1_macvtap: entered promiscuous mode [ 779.892656][ T531] 8021q: adding VLAN 0 to HW filter on device €Â [ 779.901755][ T531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 779.911287][ T531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 779.922118][ T531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 779.944810][ T531] mac80211_hwsim hwsim94 wlan0: entered promiscuous mode [ 779.958636][ T531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.963944][ T4945] Bluetooth: hci1: command 0x0406 tx timeout [ 780.009807][T27399] bond1: (slave bridge2): link status up again after 0 ms [ 780.046938][ T531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 780.053732][T10391] bond1: (slave bridge2): link status up again after 0 ms [ 780.064162][T27399] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 780.079246][ T531] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 780.089817][T27399] bond1: (slave bridge2): link status up again after 0 ms [ 780.145614][T27399] bond1: (slave bridge2): link status up again after 0 ms [ 780.193739][T10391] bond1: (slave bridge2): link status up again after 0 ms [ 780.237053][T27397] bond1: (slave bridge2): link status up again after 0 ms [ 780.252915][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.260129][ T6745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.263588][T27398] bond1: (slave bridge2): link status up again after 0 ms [ 780.312812][ T10] IPVS: starting estimator thread 0... [ 780.318900][T27398] bond1: (slave bridge2): link status up again after 0 ms [ 780.322259][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.333288][ T6745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.424293][ T591] IPVS: using max 36 ests per chain, 86400 per kthread [ 780.521117][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 780.561515][ T12] netdevsim netdevsim3 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.582657][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.622384][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.668707][ T606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6689'. [ 780.743809][ T6736] bond2: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 780.774986][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.998060][ T615] netlink: 'syz.0.6691': attribute type 8 has an invalid length. [ 781.032983][ T615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6691'. [ 781.316812][ T626] xt_hashlimit: size too large, truncated to 1048576 [ 781.618679][ T644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6701'. [ 782.222930][ T667] : entered promiscuous mode [ 782.255774][ T670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6709'. [ 782.404034][ T670] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 782.839524][ T670] bond1 (unregistering): Released all slaves [ 783.005406][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 783.015313][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 783.036257][ T694] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6712'. [ 783.265266][ T692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 783.307135][ T692] bridge0: port 4(bond3) entered blocking state [ 783.314461][ T692] bridge0: port 4(bond3) entered disabled state [ 783.321423][ T692] bond3: entered allmulticast mode [ 783.332457][ T692] bond3: entered promiscuous mode [ 783.346472][ T692] bridge0: port 4(bond3) entered blocking state [ 783.352897][ T692] bridge0: port 4(bond3) entered forwarding state [ 783.398127][T27398] bridge0: port 4(bond3) entered disabled state [ 783.697893][ T735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6722'. [ 784.117344][ T762] netlink: 'syz.1.6729': attribute type 1 has an invalid length. [ 784.497130][ T787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6731'. [ 784.610721][ T794] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6735'. [ 784.628163][ T795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6734'. [ 784.662036][ T794] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6735'. [ 784.924682][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.044851][T27398] net_ratelimit: 49 callbacks suppressed [ 785.044872][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 785.224363][T27400] bond1: (slave bridge2): failed to get link speed/duplex [ 785.242513][ T832] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 785.363675][T27397] bond1: (slave bridge2): failed to get link speed/duplex [ 785.504233][T27399] bond1: (slave bridge2): failed to get link speed/duplex [ 785.642271][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 785.709638][ T855] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6747'. [ 785.730837][ T860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6749'. [ 785.774236][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 785.905179][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 786.204166][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 786.235462][ T873] team0: Port device vxlan0 added [ 786.255971][T27399] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.293060][T27399] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.343085][T27399] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.400248][ T881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6757'. [ 786.428370][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6759'. [ 786.595406][T27399] bond1: (slave bridge2): failed to get link speed/duplex [ 786.768104][ T897] netlink: 'syz.3.6761': attribute type 1 has an invalid length. [ 786.949532][ T897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 787.448067][ T932] ip6erspan1: entered allmulticast mode [ 787.492161][ T943] mac80211_hwsim hwsim94 syzkaller0: entered promiscuous mode [ 787.502174][ T943] mac80211_hwsim hwsim94 syzkaller0: entered allmulticast mode [ 788.071803][ T961] netlink: 'syz.1.6777': attribute type 13 has an invalid length. [ 788.141684][ T969] netlink: 'syz.4.6781': attribute type 4 has an invalid length. [ 788.416609][ T986] bridge_slave_0: left allmulticast mode [ 788.442718][ T986] bridge_slave_0: left promiscuous mode [ 788.461793][ T986] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.495145][ T986] bridge_slave_1: left allmulticast mode [ 788.510520][ T991] __nla_validate_parse: 7 callbacks suppressed [ 788.510542][ T991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6785'. [ 788.551178][ T986] bridge_slave_1: left promiscuous mode [ 788.567745][ T986] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.599697][ T986] bond0: (slave bond_slave_0): Releasing backup interface [ 788.642642][ T986] bond0: (slave bond_slave_1): Releasing backup interface [ 788.677444][ T986] team0: Port device team_slave_0 removed [ 788.687786][ T986] team0: Port device team_slave_1 removed [ 788.695749][ T986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.705641][ T986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.716235][ T991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6785'. [ 788.735350][ T1004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6788'. [ 788.853740][ T1004] hsr_slave_1 (unregistering): left promiscuous mode [ 790.053762][T27398] net_ratelimit: 21 callbacks suppressed [ 790.053782][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 790.217808][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 790.330903][ T1086] xt_hashlimit: size too large, truncated to 1048576 [ 790.344546][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 790.360186][ T1091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6804'. [ 790.394475][ T1085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6802'. [ 790.464296][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 790.614370][T27399] bond1: (slave bridge2): failed to get link speed/duplex [ 790.755270][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 790.832892][ T1105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6808'. [ 790.848189][ T1110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6809'. [ 790.894584][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 790.902542][ T1110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6809'. [ 791.023656][ T6736] bond1: (slave bridge2): failed to get link speed/duplex [ 791.095453][T18312] block nbd1: Receive control failed (result -32) [ 791.128472][ T1121] netlink: 'syz.3.6812': attribute type 13 has an invalid length. [ 791.152159][ T1120] tipc: Started in network mode [ 791.171499][ T1120] tipc: Node identity , cluster identity 4711 [ 791.201841][ T1120] tipc: Failed to obtain node identity [ 791.225737][ T1120] tipc: Enabling of bearer rejected, failed to enable media [ 791.322528][ T1129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6815'. [ 791.418020][ T1121] gretap0: refused to change device tx_queue_len [ 791.448688][ T1121] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 791.554537][ T1125] syzkaller0: entered promiscuous mode [ 791.560290][ T1125] syzkaller0: entered allmulticast mode [ 791.632824][ T1138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.728059][ T1145] sctp: [Deprecated]: syz.3.6817 (pid 1145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 791.728059][ T1145] Use struct sctp_sack_info instead [ 792.720026][ T1159] netlink: 'syz.3.6822': attribute type 17 has an invalid length. [ 793.429462][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 794.467562][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 795.675005][ T1140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6818'. [ 795.801612][ T1166] netlink: 'syz.2.6824': attribute type 13 has an invalid length. [ 795.857137][ T9711] IPVS: starting estimator thread 0... [ 795.901257][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.908780][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.939456][ T1158] tipc: Resetting bearer [ 795.973787][ T1168] IPVS: using max 35 ests per chain, 84000 per kthread [ 796.123241][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.154733][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.221953][ T1158] tipc: Resetting bearer [ 796.234311][ T1158] tipc: Resetting bearer [ 796.720946][ T1159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.729277][ T1159] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.736987][ T1159] tipc: Resetting bearer [ 796.742590][ T1159] tipc: Resetting bearer [ 796.751483][ T1159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.766495][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.773681][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.785520][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.792612][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.811954][ T1159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.821388][ T1159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.838965][ T1159] veth1_vlan: left promiscuous mode [ 796.845763][ T1159] veth0_vlan: left promiscuous mode [ 796.852071][ T1159] veth0_vlan: entered promiscuous mode [ 796.861573][ T1159] veth1_vlan: entered promiscuous mode [ 796.871221][ T1159] veth1_macvtap: left promiscuous mode [ 796.877795][ T1159] veth0_macvtap: left promiscuous mode [ 796.884985][ T1159] veth0_macvtap: entered promiscuous mode [ 796.892238][ T1159] veth1_macvtap: entered promiscuous mode [ 796.903530][ T1159] 8021q: adding VLAN 0 to HW filter on device €Â [ 796.911715][ T1159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 796.921345][ T1159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 796.930059][ T1159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.938125][ T1159] mac80211_hwsim hwsim94 wlan0: left promiscuous mode [ 796.952535][ T1159] mac80211_hwsim hwsim94 wlan0: entered promiscuous mode [ 796.961310][ T1159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 796.987641][ T1159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 796.997033][ T1159] mac80211_hwsim hwsim94 syzkaller0: left promiscuous mode [ 797.004690][ T1159] mac80211_hwsim hwsim94 syzkaller0: left allmulticast mode [ 797.012025][ T1159] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 797.063704][T27400] bond1: (slave bridge2): link status up again after 0 ms [ 797.093952][T10391] bond1: (slave bridge2): link status up again after 0 ms [ 797.113864][T27400] bond1: (slave bridge2): link status up again after 0 ms [ 797.143626][ T6745] bond1: (slave bridge2): link status up again after 0 ms [ 797.163836][T27400] bond1: (slave bridge2): link status up again after 0 ms [ 797.193974][T27400] bond1: (slave bridge2): link status up again after 0 ms [ 797.223947][T27397] bond1: (slave bridge2): link status up again after 0 ms [ 797.266859][ T6745] bond1: (slave bridge2): link status up again after 0 ms [ 797.297447][ T6745] bond1: (slave bridge2): link status up again after 0 ms [ 797.326016][ T1186] FAULT_INJECTION: forcing a failure. [ 797.326016][ T1186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.391297][ T1186] CPU: 0 UID: 0 PID: 1186 Comm: syz.4.6829 Not tainted syzkaller #0 PREEMPT(full) [ 797.391322][ T1186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.391335][ T1186] Call Trace: [ 797.391343][ T1186] [ 797.391351][ T1186] dump_stack_lvl+0xe8/0x150 [ 797.391381][ T1186] should_fail_ex+0x40c/0x560 [ 797.391415][ T1186] _copy_from_user+0x2d/0xb0 [ 797.391435][ T1186] ___sys_sendmsg+0x1c6/0x360 [ 797.391457][ T1186] ? __lock_acquire+0x683/0x2cd0 [ 797.391481][ T1186] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.391505][ T1186] ? kstrtouint+0x6e/0xe0 [ 797.391555][ T1186] ? __fget_files+0x2a/0x420 [ 797.391578][ T1186] ? __fget_files+0x3a2/0x420 [ 797.391610][ T1186] __sys_sendmmsg+0x27c/0x4e0 [ 797.391633][ T1186] ? __pfx___sys_sendmmsg+0x10/0x10 [ 797.391650][ T1186] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 797.391698][ T1186] ? ksys_write+0x242/0x270 [ 797.391725][ T1186] ? __pfx_ksys_write+0x10/0x10 [ 797.391765][ T1186] __x64_sys_sendmmsg+0xa0/0xc0 [ 797.391784][ T1186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.391804][ T1186] do_syscall_64+0x174/0x580 [ 797.391821][ T1186] ? trace_irq_disable+0x3b/0x140 [ 797.391847][ T1186] ? clear_bhb_loop+0x40/0x90 [ 797.391868][ T1186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.391884][ T1186] RIP: 0033:0x7f027d99ce59 [ 797.391901][ T1186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.391915][ T1186] RSP: 002b:00007f027e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 797.391934][ T1186] RAX: ffffffffffffffda RBX: 00007f027dc15fa0 RCX: 00007f027d99ce59 [ 797.391948][ T1186] RDX: 00000000000002c8 RSI: 00002000000000c0 RDI: 0000000000000003 [ 797.391960][ T1186] RBP: 00007f027e8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 797.391970][ T1186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.391980][ T1186] R13: 00007f027dc16038 R14: 00007f027dc15fa0 R15: 00007ffced07e578 [ 797.392010][ T1186] [ 798.282986][ T1219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6836'. [ 798.306586][ T1219] netlink: 'syz.0.6836': attribute type 1 has an invalid length. [ 798.382736][ T1223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6836'. [ 798.419704][ T1221] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 798.642210][ T1237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6839'. [ 798.845902][ T1242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6840'. [ 798.951007][ T1252] netlink: 'syz.3.6842': attribute type 13 has an invalid length. [ 799.110438][ T1263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6842'. [ 799.171335][ T1268] netlink: 'syz.4.6846': attribute type 1 has an invalid length. [ 799.212261][ T1267] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 799.232242][ T1268] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 799.233096][ T1273] : renamed from veth0_to_bond (while UP) [ 799.287962][ T1252] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 799.570183][ T1294] macsec1: entered promiscuous mode [ 799.696775][ T1301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6855'. [ 799.846448][ T1312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6857'. [ 800.255323][ T1323] FAULT_INJECTION: forcing a failure. [ 800.255323][ T1323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.281419][ T1312] hsr_slave_0: left promiscuous mode [ 800.288207][ T1323] CPU: 0 UID: 0 PID: 1323 Comm: syz.0.6859 Not tainted syzkaller #0 PREEMPT(full) [ 800.288232][ T1323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 800.288243][ T1323] Call Trace: [ 800.288250][ T1323] [ 800.288258][ T1323] dump_stack_lvl+0xe8/0x150 [ 800.288284][ T1323] should_fail_ex+0x40c/0x560 [ 800.288317][ T1323] _copy_from_iter+0x1d3/0x1660 [ 800.288340][ T1323] ? rcu_is_watching+0x15/0xb0 [ 800.288367][ T1323] ? __pfx__copy_from_iter+0x10/0x10 [ 800.288383][ T1323] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 800.288416][ T1323] ? __alloc_skb+0x4cc/0x7a0 [ 800.288441][ T1323] ? skb_put+0x112/0x210 [ 800.288462][ T1323] pfkey_sendmsg+0x25f/0x11d0 [ 800.288643][ T1323] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 800.288671][ T1323] ? aa_sk_perm+0x6d5/0x900 [ 800.288744][ T1323] ? __pfx_aa_sk_perm+0x10/0x10 [ 800.288764][ T1323] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 800.288845][ T1323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 800.288872][ T1323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 800.288895][ T1323] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 800.288921][ T1323] ____sys_sendmsg+0x9b9/0xa20 [ 800.288941][ T1323] ? __might_fault+0xaf/0x130 [ 800.288970][ T1323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 800.288999][ T1323] ? import_iovec+0x73/0xa0 [ 800.289023][ T1323] ___sys_sendmsg+0x2a5/0x360 [ 800.289041][ T1323] ? __lock_acquire+0x683/0x2cd0 [ 800.289065][ T1323] ? __pfx____sys_sendmsg+0x10/0x10 [ 800.289090][ T1323] ? kstrtouint+0x6e/0xe0 [ 800.289141][ T1323] ? __fget_files+0x2a/0x420 [ 800.289163][ T1323] ? __fget_files+0x3a2/0x420 [ 800.289194][ T1323] __sys_sendmmsg+0x27c/0x4e0 [ 800.289218][ T1323] ? __pfx___sys_sendmmsg+0x10/0x10 [ 800.289235][ T1323] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 800.289280][ T1323] ? ksys_write+0x242/0x270 [ 800.289307][ T1323] ? __pfx_ksys_write+0x10/0x10 [ 800.289339][ T1323] __x64_sys_sendmmsg+0xa0/0xc0 [ 800.289357][ T1323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.289377][ T1323] do_syscall_64+0x174/0x580 [ 800.289395][ T1323] ? trace_irq_disable+0x3b/0x140 [ 800.289420][ T1323] ? clear_bhb_loop+0x40/0x90 [ 800.289445][ T1323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.289463][ T1323] RIP: 0033:0x7fd013f9ce59 [ 800.289480][ T1323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.289496][ T1323] RSP: 002b:00007fd014daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 800.289515][ T1323] RAX: ffffffffffffffda RBX: 00007fd014215fa0 RCX: 00007fd013f9ce59 [ 800.289528][ T1323] RDX: 00000000000002c8 RSI: 00002000000000c0 RDI: 0000000000000003 [ 800.289540][ T1323] RBP: 00007fd014daa090 R08: 0000000000000000 R09: 0000000000000000 [ 800.289552][ T1323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.289562][ T1323] R13: 00007fd014216038 R14: 00007fd014215fa0 R15: 00007ffff7bc71f8 [ 800.289593][ T1323] [ 800.449675][ T4945] Bluetooth: hci5: command 0x0406 tx timeout [ 800.618638][ T1312] hsr_slave_1: left promiscuous mode [ 800.918535][ T1330] gtp0: entered allmulticast mode [ 800.942163][ T1343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6860'. [ 801.102154][ T1366] xt_hashlimit: size too large, truncated to 1048576 [ 801.194833][ T1369] @0Ù: renamed from bond_slave_1 [ 801.440476][ T1380] FAULT_INJECTION: forcing a failure. [ 801.440476][ T1380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.490588][ T1380] CPU: 0 UID: 0 PID: 1380 Comm: syz.3.6872 Not tainted syzkaller #0 PREEMPT(full) [ 801.490615][ T1380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.490625][ T1380] Call Trace: [ 801.490632][ T1380] [ 801.490639][ T1380] dump_stack_lvl+0xe8/0x150 [ 801.490666][ T1380] should_fail_ex+0x40c/0x560 [ 801.490699][ T1380] _copy_to_user+0x31/0xb0 [ 801.490720][ T1380] simple_read_from_buffer+0xe1/0x170 [ 801.490746][ T1380] proc_fail_nth_read+0x1bb/0x230 [ 801.490773][ T1380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.490799][ T1380] ? rw_verify_area+0x24a/0x4c0 [ 801.490824][ T1380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.490844][ T1380] vfs_read+0x213/0xa80 [ 801.490873][ T1380] ? __pfx___mutex_lock+0x10/0x10 [ 801.490896][ T1380] ? __pfx_vfs_read+0x10/0x10 [ 801.490922][ T1380] ? __fget_files+0x2a/0x420 [ 801.490948][ T1380] ? __fget_files+0x3a2/0x420 [ 801.490968][ T1380] ? __fget_files+0x2a/0x420 [ 801.490996][ T1380] ksys_read+0x150/0x270 [ 801.491022][ T1380] ? __pfx_ksys_read+0x10/0x10 [ 801.491062][ T1380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.491082][ T1380] do_syscall_64+0x174/0x580 [ 801.491102][ T1380] ? clear_bhb_loop+0x40/0x90 [ 801.491124][ T1380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.491140][ T1380] RIP: 0033:0x7f195395d68e [ 801.491157][ T1380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.491171][ T1380] RSP: 002b:00007f1954879fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.491189][ T1380] RAX: ffffffffffffffda RBX: 00007f195487a6c0 RCX: 00007f195395d68e [ 801.491201][ T1380] RDX: 000000000000000f RSI: 00007f195487a0a0 RDI: 0000000000000004 [ 801.491212][ T1380] RBP: 00007f195487a090 R08: 0000000000000000 R09: 0000000000000000 [ 801.491222][ T1380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.491232][ T1380] R13: 00007f1953c16038 R14: 00007f1953c15fa0 R15: 00007ffcda309928 [ 801.491263][ T1380] [ 801.875366][ T1390] tipc: Enabled bearer , priority 27 [ 801.905555][ T1392] netlink: 'syz.4.6875': attribute type 1 has an invalid length. [ 801.916760][ T1392] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6875'. [ 801.926056][ T1392] NCSI netlink: No device for ifindex 0 [ 802.032661][ T1400] netlink: 'syz.1.6877': attribute type 1 has an invalid length. [ 802.056622][ T1400] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6877'. [ 802.068566][ T1400] netlink: 'syz.1.6877': attribute type 1 has an invalid length. [ 802.077337][ T1400] netlink: 'syz.1.6877': attribute type 8 has an invalid length. [ 802.087752][ T1400] netlink: 582 bytes leftover after parsing attributes in process `syz.1.6877'. [ 802.097929][ T1400] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6877'. [ 802.178575][ T6740] net_ratelimit: 36 callbacks suppressed [ 802.178595][ T6740] bond1: (slave bridge2): failed to get link speed/duplex [ 802.295669][ T1411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6880'. [ 802.311194][ T1409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 802.328774][ T6740] bond1: (slave bridge2): failed to get link speed/duplex [ 802.458615][T10392] bond1: (slave bridge2): failed to get link speed/duplex [ 802.574010][ T6740] bond1: (slave bridge2): failed to get link speed/duplex [ 802.627343][ T1432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6886'. [ 802.647061][ T1429] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6885'. [ 802.715754][T10392] bond1: (slave bridge2): failed to get link speed/duplex [ 802.809980][ T1439] netlink: 'syz.3.6888': attribute type 1 has an invalid length. [ 802.838784][ T1445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6890'. [ 802.850665][T10394] bond1: (slave bridge2): failed to get link speed/duplex [ 803.053603][T10392] bond1: (slave bridge2): failed to get link speed/duplex [ 803.101528][ T1457] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 803.263872][ T1457] team0: No ports can be present during mode change [ 803.285245][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 803.414090][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 803.469160][ T1464] tipc: Enabled bearer , priority 0 [ 803.485570][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 803.584933][ T1464] syzkaller0: entered promiscuous mode [ 803.599029][ T1464] syzkaller0: entered allmulticast mode [ 803.719021][ T1464] tipc: Resetting bearer [ 803.795038][ T1468] tipc: Resetting bearer [ 803.823780][T27398] batman_adv: batadv1: MLD Querier appeared [ 803.861184][ T1468] tipc: Disabling bearer [ 803.886254][ T1474] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 804.190764][ T1497] netlink: 'syz.1.6902': attribute type 1 has an invalid length. [ 804.370269][ T1497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.448042][ T1502] bond3: (slave veth5): Enslaving as an active interface with a down link [ 804.487531][ T1488] bond3: (slave veth7): Enslaving as an active interface with a down link [ 804.537901][ T1511] netlink: 'syz.4.6907': attribute type 14 has an invalid length. [ 804.547906][ T1511] netlink: 'syz.4.6907': attribute type 11 has an invalid length. [ 804.556255][ T1506] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 804.759696][ T1522] netlink: 'syz.1.6910': attribute type 8 has an invalid length. [ 804.792559][ T1525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 805.581223][ T1563] ip6tnl0: Caught tx_queue_len zero misconfig [ 805.955621][ T1583] x_tables: duplicate underflow at hook 1 [ 805.987106][ T1586] netlink: 'syz.0.6925': attribute type 8 has an invalid length. [ 806.005790][ T1586] __nla_validate_parse: 7 callbacks suppressed [ 806.005807][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6925'. [ 806.049643][ T1586] veth1_to_team: entered promiscuous mode [ 806.076192][ T1586] veth1_to_team: left promiscuous mode [ 806.308237][ T1604] tap0: tun_chr_ioctl cmd 1074025677 [ 806.318845][ T1604] tap0: linktype set to 774 [ 806.584160][ T1621] tc_dump_action: action bad kind [ 806.601035][ T1624] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6939'. [ 806.709567][ T1628] ip6tnl0: Caught tx_queue_len zero misconfig [ 806.772478][ T1638] netlink: 'syz.3.6945': attribute type 8 has an invalid length. [ 806.780598][ T1638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6945'. [ 806.815805][ T1640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6941'. [ 807.414487][ T1638] veth1_to_team: entered promiscuous mode [ 807.438499][ T1638] gretap0: entered promiscuous mode [ 807.457275][ T1638] veth1_to_team: left promiscuous mode [ 807.487321][ T1638] gretap0: left promiscuous mode [ 807.522203][ T1647] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 807.569769][ T1643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6946'. [ 807.701026][ T1657] netlink: 'syz.2.6951': attribute type 25 has an invalid length. [ 807.709966][ T1657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6951'. [ 807.763686][T15803] net_ratelimit: 23 callbacks suppressed [ 807.763705][T15803] bond1: (slave bridge2): failed to get link speed/duplex [ 807.782023][ T1661] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6952'. [ 807.792266][ T1661] netlink: 'syz.4.6952': attribute type 1 has an invalid length. [ 807.792628][ T1657] netlink: 'syz.2.6951': attribute type 25 has an invalid length. [ 807.801102][ T1661] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6952'. [ 807.823574][ T1657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6951'. [ 807.866996][ T1663] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 807.878982][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6953'. [ 807.892169][ T1665] xt_TCPMSS: Only works on TCP SYN packets [ 807.941833][ T1663] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 807.963946][T27398] bond1: (slave bridge2): link status up again after 0 ms [ 807.977501][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 808.039315][ T1670] netlink: 'syz.1.6957': attribute type 7 has an invalid length. [ 808.103936][ T170] bond1: (slave bridge2): failed to get link speed/duplex [ 808.202261][ T1679] syz_tun: entered allmulticast mode [ 808.254364][ T6740] bond1: (slave bridge2): failed to get link speed/duplex [ 808.477389][ T1700] IPv6: NLM_F_CREATE should be specified when creating new route [ 808.645331][ T170] bond1: (slave bridge2): failed to get link speed/duplex [ 808.774894][ T1710] syz.4.6970: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 808.811322][ T1710] CPU: 1 UID: 0 PID: 1710 Comm: syz.4.6970 Not tainted syzkaller #0 PREEMPT(full) [ 808.811354][ T1710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 808.811367][ T1710] Call Trace: [ 808.811375][ T1710] [ 808.811385][ T1710] dump_stack_lvl+0xe8/0x150 [ 808.811416][ T1710] warn_alloc+0x249/0x340 [ 808.811447][ T1710] ? __pfx_stack_trace_save+0x10/0x10 [ 808.811483][ T1710] ? __pfx_warn_alloc+0x10/0x10 [ 808.811518][ T1710] ? __kasan_kmalloc+0x93/0xb0 [ 808.811547][ T1710] ? __kmalloc_cache_noprof+0x318/0x660 [ 808.811575][ T1710] ? xskq_create+0x56/0x170 [ 808.811710][ T1710] ? xsk_init_queue+0x8a/0xe0 [ 808.811738][ T1710] ? xsk_setsockopt+0x52a/0x960 [ 808.811765][ T1710] ? do_sock_setsockopt+0x17c/0x1b0 [ 808.811786][ T1710] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 808.811806][ T1710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.811834][ T1710] __vmalloc_node_range_noprof+0x12c/0x1730 [ 808.811893][ T1710] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 808.811929][ T1710] ? __kasan_kmalloc+0x93/0xb0 [ 808.811962][ T1710] vmalloc_user_noprof+0xad/0xe0 [ 808.811988][ T1710] ? xskq_create+0xbf/0x170 [ 808.812019][ T1710] xskq_create+0xbf/0x170 [ 808.812050][ T1710] xsk_init_queue+0x8a/0xe0 [ 808.812088][ T1710] xsk_setsockopt+0x52a/0x960 [ 808.812114][ T1710] ? __fget_files+0x2a/0x420 [ 808.812138][ T1710] ? __pfx_xsk_setsockopt+0x10/0x10 [ 808.812166][ T1710] ? __pfx_aa_sk_perm+0x10/0x10 [ 808.812198][ T1710] ? aa_sock_opt_perm+0xff/0x1a0 [ 808.812230][ T1710] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 808.812256][ T1710] ? __pfx_xsk_setsockopt+0x10/0x10 [ 808.812285][ T1710] do_sock_setsockopt+0x17c/0x1b0 [ 808.812309][ T1710] __x64_sys_setsockopt+0x13d/0x1b0 [ 808.812332][ T1710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.812353][ T1710] do_syscall_64+0x174/0x580 [ 808.812373][ T1710] ? trace_irq_disable+0x3b/0x140 [ 808.812400][ T1710] ? clear_bhb_loop+0x40/0x90 [ 808.812423][ T1710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.812442][ T1710] RIP: 0033:0x7f027d99ce59 [ 808.812461][ T1710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.812478][ T1710] RSP: 002b:00007f027e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 808.812500][ T1710] RAX: ffffffffffffffda RBX: 00007f027dc15fa0 RCX: 00007f027d99ce59 [ 808.812514][ T1710] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 808.812527][ T1710] RBP: 00007f027da32d6f R08: 0000000000000004 R09: 0000000000000000 [ 808.812540][ T1710] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.812553][ T1710] R13: 00007f027dc16038 R14: 00007f027dc15fa0 R15: 00007ffced07e578 [ 808.812586][ T1710] [ 808.903845][ T1710] Mem-Info: [ 809.091430][ T1710] active_anon:6282 inactive_anon:0 isolated_anon:0 [ 809.091430][ T1710] active_file:3473 inactive_file:40258 isolated_file:0 [ 809.091430][ T1710] unevictable:768 dirty:240 writeback:0 [ 809.091430][ T1710] slab_reclaimable:14210 slab_unreclaimable:281509 [ 809.091430][ T1710] mapped:30628 shmem:1311 pagetables:3650 [ 809.091430][ T1710] sec_pagetables:0 bounce:0 [ 809.091430][ T1710] kernel_misc_reclaimable:0 [ 809.091430][ T1710] free:1113435 free_pcp:26017 free_cma:0 [ 809.094354][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 809.193800][ T1710] Node 0 active_anon:25328kB inactive_anon:0kB active_file:13892kB inactive_file:160844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20208kB dirty:960kB writeback:0kB shmem:3708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17512kB pagetables:14472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 809.268687][ T1710] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 809.338405][ T1710] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 809.373404][ T1729] openvswitch: netlink: IP tunnel dst address not specified [ 809.391781][ T1710] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 809.406571][ T1710] Node 0 DMA32 free:923476kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25528kB inactive_anon:0kB active_file:13892kB inactive_file:160844kB unevictable:1536kB writepending:960kB zspages:0kB present:3129332kB managed:2552928kB mlocked:0kB bounce:0kB free_pcp:46516kB local_pcp:25776kB free_cma:0kB [ 809.441727][ T1710] lowmem_reserve[]: 0 0 0 0 0 [ 809.446236][T15803] bond1: (slave bridge2): failed to get link speed/duplex [ 809.462851][ T1710] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 809.497301][ T1710] lowmem_reserve[]: 0 0 0 0 0 [ 809.502297][ T1710] Node 1 Normal free:3516864kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59060kB local_pcp:31212kB free_cma:0kB [ 809.543775][ T1710] lowmem_reserve[]: 0 0 0 0 0 [ 809.549617][ T1710] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 809.566557][ T1710] Node 0 DMA32: 8440*4kB (UME) 8116*8kB (UME) 4118*16kB (UME) 1582*32kB (UM) 638*64kB (UME) 611*128kB (UME) 752*256kB (UM) 297*512kB (UME) 134*1024kB (UM) 51*2048kB (UM) 0*4096kB = 920480kB [ 809.595540][ T1710] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 809.621255][ T1710] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 10*16kB (UM) 13*32kB (UM) 11*64kB (UM) 13*128kB (UM) 8*256kB (UM) 9*512kB (UM) 7*1024kB (UM) 9*2048kB (U) 850*4096kB (UM) = 3516864kB [ 809.649221][ T1710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 809.662949][ T1710] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 809.675615][ T1710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 809.685621][ T1710] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 809.695414][ T1710] 47513 total pagecache pages [ 809.700345][ T1710] 0 pages in swap cache [ 809.705892][ T1710] Free swap = 124996kB [ 809.710099][ T1710] Total swap = 124996kB [ 809.722537][ T1710] 2097051 pages RAM [ 809.727334][ T1710] 0 pages HighMem/MovableOnly [ 809.732072][ T1710] 427034 pages reserved [ 809.784444][ T1710] 0 pages cma reserved [ 809.831292][ T1737] mac80211_hwsim hwsim94 syzkaller0: entered promiscuous mode [ 809.851131][ T1737] mac80211_hwsim hwsim94 syzkaller0: entered allmulticast mode [ 809.891552][ T1735] mac80211_hwsim hwsim94 syzkaller0: Caught tx_queue_len zero misconfig [ 810.043286][ T1745] syzkaller1: entered promiscuous mode [ 810.049432][ T1745] syzkaller1: entered allmulticast mode [ 810.081106][ T1749] bond1 (unregistering): Released all slaves [ 810.184060][ T1753] gre0: Caught tx_queue_len zero misconfig [ 810.321683][ T1759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 810.327331][ T1757] IPVS: Scheduler module ip_vs_ not found [ 810.370275][ T1760] bond4: (slave veth7): Enslaving as an active interface with an up link [ 810.707760][ T1792] validate_nla: 2 callbacks suppressed [ 810.707779][ T1792] netlink: 'syz.4.6994': attribute type 83 has an invalid length. [ 810.742990][ T1795] netlink: 'syz.0.6995': attribute type 1 has an invalid length. [ 811.178051][ T1824] netlink: 'syz.1.7001': attribute type 1 has an invalid length. [ 811.205196][ T1820] __nla_validate_parse: 23 callbacks suppressed [ 811.205209][ T1820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7001'. [ 811.675964][ T1859] syzkaller0: entered promiscuous mode [ 811.690790][ T1859] syzkaller0: entered allmulticast mode [ 811.850585][ T4945] block nbd4: Receive control failed (result -32) [ 811.851316][T18312] block nbd3: Receive control failed (result -32) [ 811.920112][ T1869] tipc: Enabling of bearer rejected, failed to enable media [ 812.118956][T15808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.129392][T15808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.132823][ T1883] netlink: 'syz.0.7019': attribute type 1 has an invalid length. [ 812.184860][ T1836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 812.203550][ T1836] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 812.501815][ T1836] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 812.524121][ T1836] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 812.561874][ T1836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 812.572232][ T1836] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 812.601058][ T1899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7023'. [ 812.615789][ T1906] sctp: [Deprecated]: syz.0.7024 (pid 1906) Use of int in max_burst socket option. [ 812.615789][ T1906] Use struct sctp_assoc_value instead [ 812.669402][ T1836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 812.678242][ T1836] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 812.690108][ T1901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7023'. [ 812.757124][ T1836] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 812.771975][ T1836] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 812.783944][T27398] net_ratelimit: 24 callbacks suppressed [ 812.783964][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 812.903672][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 812.993189][ T1917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7027'. [ 813.073771][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 813.203784][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 813.336496][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 813.358995][ T1940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7032'. [ 813.453668][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 813.488779][ T1944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7034'. [ 813.595656][ T1951] netlink: 'syz.1.7036': attribute type 8 has an invalid length. [ 813.614892][ T1951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7036'. [ 813.629077][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 813.752482][ T1954] batadv1: entered promiscuous mode [ 813.773290][ T1954] batadv1: entered allmulticast mode [ 813.803856][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 814.103116][ T1971] bond5: (slave bond_slave_1): Device is not bonding slave [ 814.134144][ T1971] bond5: option active_slave: invalid value (bond_slave_1) [ 814.148574][ T1971] bond5 (unregistering): Released all slaves [ 814.228874][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 814.345895][ T1947] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 814.355302][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 814.476363][ T1998] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 814.490993][ T2000] netlink: 'syz.4.7048': attribute type 8 has an invalid length. [ 814.511722][ T2000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7048'. [ 814.654807][ T2000] veth1_to_team: entered promiscuous mode [ 814.677535][ T2000] veth1_to_team: left promiscuous mode [ 814.889314][ T2015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7052'. [ 815.310787][ T2043] mac80211_hwsim hwsim105 wlan0: Caught tx_queue_len zero misconfig [ 815.498551][ T2061] xt_hashlimit: size too large, truncated to 1048576 [ 815.864353][ T2075] ipvlan2: entered promiscuous mode [ 816.927457][ T2104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7073'. [ 817.152155][ T2113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7076'. [ 817.538985][ T2132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7081'. [ 817.609086][ T2132] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7081'. [ 817.627503][ T2132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7081'. [ 817.641692][ T2132] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7081'. [ 817.653013][ T2132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7081'. [ 817.662817][ T2132] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7081'. [ 817.801686][ T2141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7085'. [ 817.903337][ T2145] batadv_slave_1: left promiscuous mode [ 817.943707][ T2145] bond2: left promiscuous mode [ 817.958894][ T2145] bridge2: left promiscuous mode [ 817.967203][ T2145] bond2: left allmulticast mode [ 817.972200][ T2145] bridge2: left allmulticast mode [ 818.118150][ T2152] sctp: [Deprecated]: syz.0.7088 (pid 2152) Use of int in max_burst socket option deprecated. [ 818.118150][ T2152] Use struct sctp_assoc_value instead [ 818.178762][ T2152] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7088'. [ 818.277021][ T138] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.289339][ T138] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.291357][ T2154] xt_hashlimit: size too large, truncated to 1048576 [ 818.305848][ T138] net_ratelimit: 28 callbacks suppressed [ 818.305867][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 818.306859][ T138] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.414437][T15806] bond1: (slave bridge2): failed to get link speed/duplex [ 818.544960][ T6745] bond1: (slave bridge2): failed to get link speed/duplex [ 818.663816][T15806] bond1: (slave bridge2): failed to get link speed/duplex [ 818.792579][T15806] bond1: (slave bridge2): failed to get link speed/duplex [ 818.924175][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 818.966925][ T2185] netlink: 'syz.2.7096': attribute type 1 has an invalid length. [ 819.005206][ T2185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.044054][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 819.153879][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 819.273658][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 819.366833][ T6745] vlan3: left promiscuous mode [ 819.379185][ T6745] bridge_slave_0: left promiscuous mode [ 819.395500][ T2201] sctp: [Deprecated]: syz.1.7102 (pid 2201) Use of int in max_burst socket option deprecated. [ 819.395500][ T2201] Use struct sctp_assoc_value instead [ 819.407453][ T6745] bridge0: port 1(vlan3) entered disabled state [ 819.466914][ T6745] dvmrp0: left allmulticast mode [ 819.477225][ T6745] batman_adv: batadv0: Interface deactivated: gretap3 [ 819.950311][ T6745] batman_adv: batadv0: Removing interface: gretap3 [ 820.014709][ T2218] xt_hashlimit: size too large, truncated to 1048576 [ 820.119531][ T6745] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 820.136836][ T6745] bridge2 (unregistering): left promiscuous mode [ 820.157484][ T6745] bridge2 (unregistering): left allmulticast mode [ 820.163890][ T2222] netlink: 'syz.3.7106': attribute type 8 has an invalid length. [ 820.223041][ T6745] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 820.232796][ T6745] bond3 (unregistering): (slave bridge5): the permanent HWaddr of slave - 96:95:03:e6:4e:f0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 820.256583][ T6745] bridge5 (unregistering): left promiscuous mode [ 820.263023][ T6745] bridge5 (unregistering): left allmulticast mode [ 820.277495][ T6745] bond3 (unregistering): (slave bridge6): Releasing backup interface [ 820.286776][ T6745] bridge6 (unregistering): left promiscuous mode [ 820.293118][ T6745] bridge6 (unregistering): left allmulticast mode [ 820.396842][ T6745] bond0 (unregistering): Released all slaves [ 820.411407][ T6745] bond1 (unregistering): Released all slaves [ 820.425884][ T6745] bond2 (unregistering): Released all slaves [ 820.441989][ T6745] bond3 (unregistering): Released all slaves [ 820.461446][ T6745] bond4 (unregistering): Released all slaves [ 820.475652][ T6745] bond5 (unregistering): Released all slaves [ 820.490115][ T6745] bond6 (unregistering): Released all slaves [ 820.511099][ T6745] bond7 (unregistering): Released all slaves [ 820.524953][ T6745] bond8 (unregistering): Released all slaves [ 820.539226][ T6745] bond9 (unregistering): Released all slaves [ 820.560190][ T6745] bond10 (unregistering): Released all slaves [ 820.579962][ T2206] tipc: Started in network mode [ 820.585139][ T2206] tipc: Node identity ac14140f, cluster identity 4711 [ 820.592374][ T2206] tipc: New replicast peer: 172.30.0.1 [ 820.600253][ T2206] tipc: Enabled bearer , priority 5 [ 820.611302][ T2209] tipc: Disabling bearer [ 820.911287][ T2225] bond1: invalid ARP target 0.0.0.0 specified for addition [ 820.957252][ T2225] bond1: option arp_ip_target: invalid value (0) [ 820.969549][ T2242] netlink: 'syz.2.7112': attribute type 9 has an invalid length. [ 820.988458][ T2225] bond1 (unregistering): Released all slaves [ 821.000776][ T2242] netlink: 'syz.2.7112': attribute type 6 has an invalid length. [ 821.024822][ T2240] netlink: 'syz.0.7109': attribute type 18 has an invalid length. [ 821.037894][ T2240] SET target dimension over the limit! [ 821.099536][ T6745] hmac(sha224: left promiscuous mode [ 821.510714][ T2273] x_tables: duplicate underflow at hook 2 [ 821.878870][ T2285] ip6gre1: entered promiscuous mode [ 821.904491][ T2285] ip6gre1: entered allmulticast mode [ 822.150397][ T2307] ip6t_rpfilter: unknown options [ 822.344587][ T2319] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20004 [ 822.440184][ T2327] syzkaller0: entered promiscuous mode [ 822.448994][ T2327] syzkaller0: entered allmulticast mode [ 822.457926][ T2325] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 822.931343][ T2322] netlink: 'syz.1.7136': attribute type 21 has an invalid length. [ 822.995376][ T2322] __nla_validate_parse: 6 callbacks suppressed [ 822.995396][ T2322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7136'. [ 823.034602][ T2322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7136'. [ 823.334711][T15808] net_ratelimit: 18 callbacks suppressed [ 823.334733][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 823.696637][ T6745] veth1_macvtap: left promiscuous mode [ 823.713692][ T6745] veth0_macvtap: left promiscuous mode [ 823.719503][ T6745] veth1_vlan: left promiscuous mode [ 823.729188][ T6745] veth0_vlan: left promiscuous mode [ 823.892616][ T2396] nbd: must specify a size in bytes for the device [ 823.924596][ T2396] block nbd0: NBD_DISCONNECT [ 823.931602][ T2396] block nbd0: Send disconnect failed -32 [ 823.938143][ T2396] block nbd0: shutting down sockets [ 823.987552][ T2397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7153'. [ 824.699682][ T2381] syzkaller0: entered promiscuous mode [ 824.705760][ T2381] syzkaller0: entered allmulticast mode [ 824.716020][ T170] bond1: (slave bridge2): failed to get link speed/duplex [ 824.869286][ T2407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7155'. [ 824.923300][ T2412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7155'. [ 825.607256][ T2448] netlink: 'syz.3.7162': attribute type 1 has an invalid length. [ 828.712538][ T2409] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 828.723753][ T2409] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 828.733854][T14532] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 828.734137][ T2409] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 828.846991][ T2438] bond0: option arp_validate: invalid value (55553) [ 828.853932][ T57] bond0: (slave bond_slave_0): interface is now down [ 828.854136][ T57] bond0: (slave bond_slave_1): interface is now down [ 828.893090][ T2448] IPVS: Unknown mcast interface: vcan0 [ 828.901523][ T2458] netlink: 'syz.0.7163': attribute type 1 has an invalid length. [ 828.915029][ T138] bond0: (slave bond_slave_0): interface is now down [ 828.941915][ T2458] 8021q: adding VLAN 0 to HW filter on device bond4 [ 828.954411][T15803] bond1: (slave bridge2): failed to get link speed/duplex [ 828.993164][ T138] bond0: (slave bond_slave_1): interface is now down [ 829.058531][ T138] bond0: now running without any active interface! [ 829.074257][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 829.184788][ T2470] tunl0: Caught tx_queue_len zero misconfig [ 829.283637][T15806] bond1: (slave bridge2): failed to get link speed/duplex [ 829.304069][ T5762] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 829.348541][ T6745] IPVS: stop unused estimator thread 0... [ 829.394237][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 830.175713][T15807] bond0 (unregistering): Released all slaves [ 830.197648][T15807] bond1 (unregistering): Released all slaves [ 830.213263][T15807] bond2 (unregistering): Released all slaves [ 830.228076][T15807] bond3 (unregistering): Released all slaves [ 830.243096][T15807] bond4 (unregistering): (slave veth13): Releasing active interface [ 830.264771][T15807] bond4 (unregistering): (slave veth15): Releasing active interface [ 830.275348][T15807] bond4 (unregistering): Released all slaves [ 830.325303][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 830.369375][ T2502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7174'. [ 830.493129][ T2504] netlink: 'syz.2.7175': attribute type 1 has an invalid length. [ 830.518540][ T2504] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7175'. [ 830.545015][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 830.552308][ T2504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7175'. [ 830.561482][T15807] tipc: Disabling bearer [ 830.584080][T15807] tipc: Left network mode [ 830.824210][ T6745] bond1: (slave bridge2): failed to get link speed/duplex [ 830.872690][ T2525] netlink: 280 bytes leftover after parsing attributes in process `syz.1.7180'. [ 830.976688][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 831.098158][T15806] bond1: (slave bridge2): failed to get link speed/duplex [ 831.214840][T15806] bond1: (slave bridge2): failed to get link speed/duplex [ 831.372486][ T2549] netlink: 'syz.2.7186': attribute type 1 has an invalid length. [ 831.438984][ T2551] x_tables: duplicate underflow at hook 2 [ 831.470310][ T2549] bond5: entered promiscuous mode [ 831.476614][ T2549] 8021q: adding VLAN 0 to HW filter on device bond5 [ 831.511157][ T2553] bond5: (slave bridge6): making interface the new active one [ 831.536157][ T2553] bridge6: entered promiscuous mode [ 831.545976][ T2553] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 831.573773][ T2554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7188'. [ 831.819790][ T2560] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7190'. [ 832.179133][ T2585] netlink: 'syz.4.7194': attribute type 1 has an invalid length. [ 832.849126][ T2605] IPv6: NLM_F_REPLACE set, but no existing node found! [ 832.919138][ T2607] netlink: 'syz.3.7200': attribute type 8 has an invalid length. [ 832.929857][ T2607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7200'. [ 833.417679][T15807] IPVS: stop unused estimator thread 0... [ 833.487556][ T2648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7209'. [ 833.598512][ T2654] netlink: 'syz.0.7211': attribute type 24 has an invalid length. [ 833.619404][ T2654] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 833.644074][ T5762] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 833.716644][ T2656] geneve4: entered promiscuous mode [ 834.004542][T15807] net_ratelimit: 15 callbacks suppressed [ 834.004564][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 834.130596][ T6745] bond1: (slave bridge2): failed to get link speed/duplex [ 834.225261][ T2676] netlink: 'syz.3.7215': attribute type 8 has an invalid length. [ 834.247093][ T2676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7215'. [ 834.256493][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 834.359224][ T2680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7217'. [ 834.373800][ T6745] bond1: (slave bridge2): failed to get link speed/duplex [ 834.390310][ T2685] netlink: 'syz.1.7219': attribute type 1 has an invalid length. [ 834.495224][ T2692] bond4: (slave geneve2): making interface the new active one [ 834.528469][ T2692] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 834.558680][ T6745] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 834.589704][ T6745] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 834.607592][ T5762] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 834.629459][ T2685] bond4 (unregistering): (slave geneve2): Releasing active interface [ 834.652410][ T2685] bond4 (unregistering): Released all slaves [ 834.699944][ T2695] batman_adv: batadv0: Adding interface: macsec1 [ 834.708166][ T2695] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.735185][ T2695] batman_adv: batadv0: Interface activated: macsec1 [ 834.774312][ T6745] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 834.790041][ T138] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 834.837771][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 834.913258][ T2725] netlink: 'syz.1.7228': attribute type 8 has an invalid length. [ 834.941115][ T2726] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 834.951910][ T2726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 835.004772][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 835.174368][ T2751] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 835.182541][ T2744] lo: Caught tx_queue_len zero misconfig [ 835.189843][ T2744] netlink: 'syz.3.7235': attribute type 2 has an invalid length. [ 835.206785][ T2744] netlink: 'syz.3.7235': attribute type 2 has an invalid length. [ 835.214760][ T2744] netlink: 'syz.3.7235': attribute type 1 has an invalid length. [ 835.224429][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 835.329841][ T2758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.340557][ T2758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.352902][ T2758] batman_adv: batadv0: Interface deactivated: macsec1 [ 835.371287][T20370] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 835.380079][ T2758] batman_adv: batadv0: Removing interface: macsec1 [ 835.411724][ T2764] __nla_validate_parse: 10 callbacks suppressed [ 835.411745][ T2764] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7241'. [ 835.428994][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 835.449542][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7241'. [ 835.543620][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 835.622541][ T2778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7242'. [ 835.767247][ T2784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7240'. [ 835.788320][ T2778] veth1_to_team: entered promiscuous mode [ 835.810656][ T2778] gretap0: entered promiscuous mode [ 835.824841][ T2778] debugfs: 'hsr1' already exists in 'hsr' [ 835.843528][ T2778] Cannot create hsr debugfs directory [ 835.849118][ T2778] hsr1: entered promiscuous mode [ 835.953748][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 836.110437][ T2803] bridge0: port 3(ip6gretap0) entered blocking state [ 836.154248][ T2803] bridge0: port 3(ip6gretap0) entered disabled state [ 836.192864][ T2803] ip6gretap0: entered allmulticast mode [ 836.210031][T20370] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 836.261255][ T2803] ip6gretap0: entered promiscuous mode [ 836.298516][ T2803] bridge0: port 3(ip6gretap0) entered blocking state [ 836.305381][ T2803] bridge0: port 3(ip6gretap0) entered forwarding state [ 836.361616][ T2814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7245'. [ 836.589798][ T2809] syzkaller0: entered promiscuous mode [ 836.608712][ T2809] syzkaller0: entered allmulticast mode [ 836.637046][ T2820] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7244'. [ 836.665033][ T2820] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7244'. [ 836.716457][ T2844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7249'. [ 836.740360][ T2844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7249'. [ 836.781412][ T2844] validate_nla: 1 callbacks suppressed [ 836.781432][ T2844] netlink: 'syz.3.7249': attribute type 12 has an invalid length. [ 839.323777][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 840.412624][ T2844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7249'. [ 840.421649][T15803] net_ratelimit: 2 callbacks suppressed [ 840.421668][T15803] bond1: (slave bridge2): failed to get link speed/duplex [ 840.434154][ T2855] syz_tun: entered allmulticast mode [ 840.435338][ T2844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7249'. [ 840.449188][ T2844] netlink: 'syz.3.7249': attribute type 12 has an invalid length. [ 840.542508][T15807] netdevsim netdevsim3 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.561102][T15807] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.586507][T15807] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.604618][T15807] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.618357][ T2889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7257'. [ 840.656052][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 840.756895][ T2903] netlink: 'syz.4.7263': attribute type 8 has an invalid length. [ 840.774276][T15803] bond1: (slave bridge2): failed to get link speed/duplex [ 840.795260][ T2898] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7259'. [ 840.858298][ T2910] netlink: 'syz.1.7264': attribute type 1 has an invalid length. [ 840.874548][ T2910] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7264'. [ 840.884650][ T6745] bond1: (slave bridge2): failed to get link speed/duplex [ 841.005740][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 841.111413][ T2928] netlink: 212232 bytes leftover after parsing attributes in process `syz.1.7268'. [ 841.113670][ T2930] netlink: 'syz.4.7267': attribute type 1 has an invalid length. [ 841.128671][ T6745] bond1: (slave bridge2): failed to get link speed/duplex [ 841.135450][ T2931] netlink: 'syz.0.7269': attribute type 11 has an invalid length. [ 841.178871][ T2935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7270'. [ 841.218990][ T2935] Bluetooth: MGMT ver 1.23 [ 841.253710][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 841.328722][ T2930] bond1: (slave bridge2): making interface the new active one [ 841.337339][ T2930] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 841.356949][ T2942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7273'. [ 841.387808][ T2943] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7273'. [ 841.394403][ T138] bond1: (slave bridge2): failed to get link speed/duplex [ 841.405692][ T2942] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7273'. [ 841.426207][ T2946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7273'. [ 841.564536][T15803] bond1: (slave bridge2): failed to get link speed/duplex [ 841.703836][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 842.798343][ T3015] syzkaller1: entered promiscuous mode [ 842.815555][ T3015] syzkaller1: entered allmulticast mode [ 842.824498][ T3017] netlink: 'syz.3.7293': attribute type 1 has an invalid length. [ 842.875425][ T3015] syzkaller0: entered promiscuous mode [ 842.888024][ T3015] syzkaller0: entered allmulticast mode [ 843.054325][ T3022] netlink: 'syz.2.7295': attribute type 1 has an invalid length. [ 843.412710][ T3036] syzkaller1: entered promiscuous mode [ 843.429250][ T3036] syzkaller1: entered allmulticast mode [ 843.446916][ T3039] netlink: 'syz.0.7302': attribute type 1 has an invalid length. [ 843.836863][ T3055] ipvlan2: entered allmulticast mode [ 843.860444][ T3055] batadv0: entered allmulticast mode [ 843.883956][ T3055] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 844.227982][ T3066] veth4: entered allmulticast mode [ 845.212926][ T3107] bridge0: port 1(batadv1) entered blocking state [ 845.238490][ T3107] bridge0: port 1(batadv1) entered disabled state [ 845.257685][ T3107] batadv1: entered allmulticast mode [ 845.271956][ T3107] batadv1: entered promiscuous mode [ 845.462721][ T3122] net_ratelimit: 27 callbacks suppressed [ 845.462743][ T3122] openvswitch: netlink: IP tunnel dst address not specified [ 845.476814][ T3122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.524129][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 845.663755][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 845.696950][T15806] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 845.706302][T15806] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 845.834053][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 845.989600][ T3144] netlink: 'syz.2.7329': attribute type 30 has an invalid length. [ 846.003951][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 846.111432][ T3164] netlink: 'syz.4.7333': attribute type 1 has an invalid length. [ 846.156098][ T3168] __nla_validate_parse: 18 callbacks suppressed [ 846.156120][ T3168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7332'. [ 846.219287][ T3164] bond2: entered promiscuous mode [ 846.231861][ T3168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7332'. [ 846.241997][ T3164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.349075][ T3170] bond2: (slave bridge3): making interface the new active one [ 846.373923][ T3170] bridge3: entered promiscuous mode [ 846.403313][ T3170] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 846.494428][ T6745] bond1: (slave bridge2): failed to get link speed/duplex [ 846.608491][ T3184] bridge_slave_1: left promiscuous mode [ 846.635841][ T3192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7338'. [ 846.645948][ T3184] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.676952][ T3203] netlink: 'syz.2.7340': attribute type 58 has an invalid length. [ 846.688324][ T3203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7340'. [ 846.706093][ T3184] bond0: (slave bond_slave_0): Releasing backup interface [ 846.727320][ T3184] bond0: (slave bond_slave_1): Releasing backup interface [ 846.749612][ T3184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.758658][ T3184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.769788][ T3184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.778214][ T3184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.788241][ T3184] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 846.848520][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 846.957120][ T3222] bridge0: port 1(vlan2) entered blocking state [ 846.959367][ T3224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7343'. [ 846.973297][ T3222] bridge0: port 1(vlan2) entered disabled state [ 846.974309][ T3222] vlan2: entered allmulticast mode [ 846.974329][ T3222] veth0_vlan: entered allmulticast mode [ 846.995205][ T3222] vlan2: entered promiscuous mode [ 847.015514][ T3224] xt_l2tp: invalid flags combination: 8 [ 847.021935][ T6745] bond1: (slave bridge2): failed to get link speed/duplex [ 847.108157][ T3225] vlan0: entered promiscuous mode [ 847.141021][ T3236] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 847.461590][ T3248] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7350'. [ 847.493622][ T3248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7350'. [ 847.952393][ T3276] xt_hashlimit: size too large, truncated to 1048576 [ 848.264348][ T3292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7362'. [ 848.538331][ T3305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7365'. [ 848.692764][ T3305] veth1_to_team: entered promiscuous mode [ 848.730899][ T3305] gretap0: entered promiscuous mode [ 848.748801][ T3305] debugfs: 'hsr1' already exists in 'hsr' [ 848.768242][ T3305] Cannot create hsr debugfs directory [ 848.786478][ T3305] hsr1: entered promiscuous mode [ 848.896340][ T3314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7369'. [ 848.929416][ T3321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 849.201501][ T3318] syzkaller0: entered promiscuous mode [ 849.219481][ T3318] syzkaller0: entered allmulticast mode [ 849.576941][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 852.472485][ T3344] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 852.481306][ T3352] __nla_validate_parse: 1 callbacks suppressed [ 852.481322][ T3352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7376'. [ 852.648805][ T3356] : entered promiscuous mode [ 852.668905][ T3361] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 852.874234][ T170] net_ratelimit: 12 callbacks suppressed [ 852.874253][ T170] bond1: (slave bridge2): failed to get link speed/duplex [ 853.045919][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 853.193801][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 853.323999][ T3395] netlink: 'syz.2.7389': attribute type 12 has an invalid length. [ 853.352044][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 853.449390][ T3399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7387'. [ 853.473930][ T170] bond1: (slave bridge2): failed to get link speed/duplex [ 853.581946][ T3415] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7391'. [ 853.624339][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 853.661959][ T3419] batadv_slave_1: entered promiscuous mode [ 853.765880][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 853.895031][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 854.024632][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 854.153567][T27398] bond1: (slave bridge2): failed to get link speed/duplex [ 854.320080][ T3459] netlink: 'syz.3.7403': attribute type 3 has an invalid length. [ 854.334830][ T3461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7402'. [ 854.354473][ T3462] netlink: 'syz.3.7403': attribute type 3 has an invalid length. [ 854.680844][ T3477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7409'. [ 854.694795][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 854.736860][ T3477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7409'. [ 854.891138][ T3493] block nbd4: NBD_DISCONNECT [ 854.914485][ T3493] block nbd4: Send disconnect failed -32 [ 854.949754][ T3493] block nbd4: shutting down sockets [ 855.006297][ T3501] netlink: 'syz.0.7415': attribute type 1 has an invalid length. [ 855.022244][ T3503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7417'. [ 855.051794][ T3503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7417'. [ 855.122873][ T3495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.132738][ T3495] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.146412][ T3495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.188847][ T3495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.198799][ T3495] batadv_slave_1: left promiscuous mode [ 855.199064][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7420'. [ 855.205525][ T3495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.256955][ T3505] bridge5: entered allmulticast mode [ 855.278940][T15806] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.286133][T15806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.296577][T15806] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.303781][T15806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.345180][ T3514] team0: entered promiscuous mode [ 855.350566][ T3514] vxlan0: entered promiscuous mode [ 855.356578][ T3514] team0: entered allmulticast mode [ 855.361977][ T3514] vxlan0: entered allmulticast mode [ 855.552891][ T3528] block nbd4: not configured, cannot reconfigure [ 855.871930][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7427'. [ 856.066767][ T3558] tipc: Enabled bearer , priority 0 [ 857.355663][ T3614] netlink: 'syz.4.7450': attribute type 10 has an invalid length. [ 857.371875][ T3614] geneve1: entered promiscuous mode [ 857.396617][ T3614] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 857.411528][T15806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.432631][T15806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.494741][T15806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.506949][T15806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.537510][ T3623] __nla_validate_parse: 4 callbacks suppressed [ 857.537528][ T3623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7454'. [ 857.558076][ T3623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7454'. [ 857.580075][ T3625] erspan0: entered promiscuous mode [ 857.629190][ T3632] xt_hashlimit: size too large, truncated to 1048576 [ 857.690126][ T3636] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7457'. [ 857.860734][ T3641] syzkaller0: entered promiscuous mode [ 857.878229][ T3641] syzkaller0: entered allmulticast mode [ 857.908306][ T3643] netlink: 'syz.3.7460': attribute type 6 has an invalid length. [ 857.931038][ T3643] netlink: 'syz.3.7460': attribute type 7 has an invalid length. [ 857.943832][ T3643] netlink: 'syz.3.7460': attribute type 8 has an invalid length. [ 857.993787][T15807] net_ratelimit: 29 callbacks suppressed [ 857.993806][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 858.021568][ T3643] sctp: [Deprecated]: syz.3.7460 (pid 3643) Use of int in max_burst socket option. [ 858.021568][ T3643] Use struct sctp_assoc_value instead [ 858.116573][ T3654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7463'. [ 858.194336][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 858.281609][ T3666] SET target dimension over the limit! [ 858.304262][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 858.407378][ T3671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7469'. [ 858.423637][T15806] bond1: (slave bridge2): failed to get link speed/duplex [ 858.528802][ T3671] bond4: entered promiscuous mode [ 858.554683][ T3682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7473'. [ 858.555385][ T3671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 858.574814][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 858.626410][ T3675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 858.642335][ T3675] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 858.685311][ T3675] bond4: (slave ip6gre2): Error -95 calling set_mac_address [ 858.792201][ T3682] veth1_to_team: entered promiscuous mode [ 858.820747][ T3682] debugfs: 'hsr0' already exists in 'hsr' [ 858.835285][ T3682] Cannot create hsr debugfs directory [ 858.846834][ T3682] hsr0: entered promiscuous mode [ 858.852054][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7477'. [ 858.874066][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 858.971942][ T3696] syzkaller1: entered promiscuous mode [ 858.989345][ T3696] syzkaller1: entered allmulticast mode [ 859.075235][ T3700] netlink: 'syz.4.7480': attribute type 33 has an invalid length. [ 859.094814][ T3700] IPv6: Can't replace route, no match found [ 859.200430][T15808] bond1: (slave bridge2): failed to get link speed/duplex [ 859.290045][ T3710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7484'. [ 859.300852][ T3710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7484'. [ 859.344335][T15807] bond1: (slave bridge2): failed to get link speed/duplex [ 859.378805][ T3710] geneve2: entered promiscuous mode [ 859.388814][ T3714] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7484'. [ 859.406556][ T3714] netlink: 'syz.4.7484': attribute type 9 has an invalid length. [ 859.453123][ T3725] FAULT_INJECTION: forcing a failure. [ 859.453123][ T3725] name failslab, interval 1, probability 0, space 0, times 0 [ 859.470612][ T3725] CPU: 1 UID: 0 PID: 3725 Comm: syz.1.7488 Not tainted syzkaller #0 PREEMPT(full) [ 859.470638][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 859.470649][ T3725] Call Trace: [ 859.470657][ T3725] [ 859.470665][ T3725] dump_stack_lvl+0xe8/0x150 [ 859.470693][ T3725] should_fail_ex+0x40c/0x560 [ 859.470729][ T3725] should_failslab+0xa8/0x100 [ 859.470758][ T3725] __kmalloc_cache_node_noprof+0x8c/0x690 [ 859.470783][ T3725] ? unwind_next_frame+0x8f/0x2550 [ 859.470805][ T3725] ? __get_vm_area_node+0x136/0x300 [ 859.470831][ T3725] __get_vm_area_node+0x136/0x300 [ 859.470859][ T3725] __vmalloc_node_range_noprof+0x358/0x1730 [ 859.470883][ T3725] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 859.470937][ T3725] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 859.470961][ T3725] ? __lock_acquire+0x683/0x2cd0 [ 859.470991][ T3725] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 859.471015][ T3725] __vmalloc_noprof+0xd2/0x120 [ 859.471038][ T3725] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 859.471070][ T3725] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 859.471095][ T3725] ? bpf_prog_alloc+0x2a/0x1a0 [ 859.471121][ T3725] bpf_prog_alloc+0x3c/0x1a0 [ 859.471150][ T3725] bpf_prog_load+0x788/0x1a10 [ 859.471183][ T3725] ? get_pid_task+0x20/0x1f0 [ 859.471211][ T3725] ? __pfx_bpf_prog_load+0x10/0x10 [ 859.471237][ T3725] ? __might_fault+0xaf/0x130 [ 859.471275][ T3725] ? bpf_lsm_bpf+0x9/0x20 [ 859.471290][ T3725] ? security_bpf+0x7e/0x2d0 [ 859.471317][ T3725] __sys_bpf+0x618/0x950 [ 859.471344][ T3725] ? __pfx___sys_bpf+0x10/0x10 [ 859.471383][ T3725] ? ksys_write+0x242/0x270 [ 859.471410][ T3725] ? __pfx_ksys_write+0x10/0x10 [ 859.471439][ T3725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.471459][ T3725] __x64_sys_bpf+0x7c/0x90 [ 859.471484][ T3725] do_syscall_64+0x174/0x580 [ 859.471505][ T3725] ? trace_irq_disable+0x3b/0x140 [ 859.471536][ T3725] ? clear_bhb_loop+0x40/0x90 [ 859.471559][ T3725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.471577][ T3725] RIP: 0033:0x7f05ecf9ce59 [ 859.471595][ T3725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.471610][ T3725] RSP: 002b:00007f05edd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 859.471630][ T3725] RAX: ffffffffffffffda RBX: 00007f05ed215fa0 RCX: 00007f05ecf9ce59 [ 859.471643][ T3725] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 859.471655][ T3725] RBP: 00007f05edd87090 R08: 0000000000000000 R09: 0000000000000000 [ 859.471667][ T3725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.471677][ T3725] R13: 00007f05ed216038 R14: 00007f05ed215fa0 R15: 00007ffec4cacfd8 [ 859.471709][ T3725] [ 859.471728][ T3725] syz.1.7488: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 859.845698][ T3725] CPU: 1 UID: 0 PID: 3725 Comm: syz.1.7488 Not tainted syzkaller #0 PREEMPT(full) [ 859.845724][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 859.845735][ T3725] Call Trace: [ 859.845742][ T3725] [ 859.845750][ T3725] dump_stack_lvl+0xe8/0x150 [ 859.845776][ T3725] warn_alloc+0x249/0x340 [ 859.845805][ T3725] ? __pfx_warn_alloc+0x10/0x10 [ 859.845831][ T3725] ? __get_vm_area_node+0x136/0x300 [ 859.845858][ T3725] ? __get_vm_area_node+0x2af/0x300 [ 859.845887][ T3725] __vmalloc_node_range_noprof+0x37d/0x1730 [ 859.845939][ T3725] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 859.845963][ T3725] ? __lock_acquire+0x683/0x2cd0 [ 859.845992][ T3725] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 859.846017][ T3725] __vmalloc_noprof+0xd2/0x120 [ 859.846041][ T3725] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 859.846069][ T3725] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 859.846093][ T3725] ? bpf_prog_alloc+0x2a/0x1a0 [ 859.846121][ T3725] bpf_prog_alloc+0x3c/0x1a0 [ 859.846150][ T3725] bpf_prog_load+0x788/0x1a10 [ 859.846183][ T3725] ? get_pid_task+0x20/0x1f0 [ 859.846210][ T3725] ? __pfx_bpf_prog_load+0x10/0x10 [ 859.846237][ T3725] ? __might_fault+0xaf/0x130 [ 859.846275][ T3725] ? bpf_lsm_bpf+0x9/0x20 [ 859.846290][ T3725] ? security_bpf+0x7e/0x2d0 [ 859.846320][ T3725] __sys_bpf+0x618/0x950 [ 859.846348][ T3725] ? __pfx___sys_bpf+0x10/0x10 [ 859.846387][ T3725] ? ksys_write+0x242/0x270 [ 859.846415][ T3725] ? __pfx_ksys_write+0x10/0x10 [ 859.846444][ T3725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.846464][ T3725] __x64_sys_bpf+0x7c/0x90 [ 859.846489][ T3725] do_syscall_64+0x174/0x580 [ 859.846509][ T3725] ? trace_irq_disable+0x3b/0x140 [ 859.846541][ T3725] ? clear_bhb_loop+0x40/0x90 [ 859.846563][ T3725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.846581][ T3725] RIP: 0033:0x7f05ecf9ce59 [ 859.846599][ T3725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.846614][ T3725] RSP: 002b:00007f05edd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 859.846634][ T3725] RAX: ffffffffffffffda RBX: 00007f05ed215fa0 RCX: 00007f05ecf9ce59 [ 859.846647][ T3725] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 859.846659][ T3725] RBP: 00007f05edd87090 R08: 0000000000000000 R09: 0000000000000000 [ 859.846670][ T3725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.846681][ T3725] R13: 00007f05ed216038 R14: 00007f05ed215fa0 R15: 00007ffec4cacfd8 [ 859.846710][ T3725] [ 859.846780][ T3725] Mem-Info: [ 860.113606][ T3725] active_anon:6365 inactive_anon:0 isolated_anon:0 [ 860.113606][ T3725] active_file:3538 inactive_file:40277 isolated_file:0 [ 860.113606][ T3725] unevictable:768 dirty:295 writeback:0 [ 860.113606][ T3725] slab_reclaimable:14158 slab_unreclaimable:263674 [ 860.113606][ T3725] mapped:32161 shmem:1314 pagetables:3639 [ 860.113606][ T3725] sec_pagetables:0 bounce:0 [ 860.113606][ T3725] kernel_misc_reclaimable:0 [ 860.113606][ T3725] free:1125860 free_pcp:26602 free_cma:0 [ 860.162911][ T3725] Node 0 active_anon:25460kB inactive_anon:0kB active_file:14152kB inactive_file:160920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:21244kB dirty:1180kB writeback:0kB shmem:3720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16956kB pagetables:14328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 860.205612][ T3725] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118600kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 860.240459][ T3725] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 860.265443][ T3752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.278021][ T3725] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 860.288343][ T3725] Node 0 DMA32 free:977572kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25460kB inactive_anon:0kB active_file:14152kB inactive_file:160920kB unevictable:1536kB writepending:1180kB zspages:0kB present:3129332kB managed:2552928kB mlocked:0kB bounce:0kB free_pcp:44288kB local_pcp:30440kB free_cma:0kB [ 860.323067][ T3725] lowmem_reserve[]: 0 0 0 0 0 [ 860.335111][ T3725] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 860.366667][ T3725] lowmem_reserve[]: 0 0 0 0 0 [ 860.371506][ T3725] Node 1 Normal free:3514724kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61200kB local_pcp:31628kB free_cma:0kB [ 860.410780][ T3725] lowmem_reserve[]: 0 0 0 0 0 [ 860.415943][ T3725] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 860.431973][ T3725] Node 0 DMA32: 8717*4kB (UM) 7524*8kB (UME) 4797*16kB (UME) 1427*32kB (UME) 775*64kB (UME) 671*128kB (UM) 778*256kB (UM) 326*512kB (UME) 148*1024kB (UM) 52*2048kB (UM) 0*4096kB = 977092kB [ 860.463290][ T3725] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 860.476946][ T3725] Node 1 Normal: 5*4kB (UM) 8*8kB (UM) 13*16kB (UM) 14*32kB (UM) 12*64kB (UM) 13*128kB (UM) 11*256kB (UM) 11*512kB (UM) 9*1024kB (UM) 10*2048kB (U) 848*4096kB (UM) = 3514724kB [ 860.496580][ T3725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 860.515813][ T6745] bond1: (slave bridge2): failed to get link speed/duplex [ 860.520710][ T3725] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 860.537709][ T3725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 860.549575][ T3725] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 860.561957][ T3725] 45125 total pagecache pages [ 860.571404][ T3725] 0 pages in swap cache [ 860.577674][ T3725] Free swap = 124996kB [ 860.581936][ T3725] Total swap = 124996kB [ 860.595741][ T3725] 2097051 pages RAM [ 860.600616][ T3725] 0 pages HighMem/MovableOnly [ 860.608787][ T3725] 427034 pages reserved [ 860.614560][ T3725] 0 pages cma reserved [ 860.722062][ T3762] bond4 (unregistering): Released all slaves [ 860.802218][ T3766] veth0: entered promiscuous mode [ 860.831506][ T3764] veth0: left promiscuous mode [ 860.892447][ T3775] netlink: 'syz.1.7499': attribute type 10 has an invalid length. [ 861.182181][ T3795] netlink: 'syz.1.7504': attribute type 19 has an invalid length. [ 861.182903][ T3790] netlink: 'syz.1.7504': attribute type 19 has an invalid length. [ 861.270570][ T3803] netlink: 'syz.0.7506': attribute type 16 has an invalid length. [ 861.279256][ T3803] netlink: 'syz.0.7506': attribute type 17 has an invalid length. [ 861.294138][T20370] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 861.302350][ T3790] netlink: 'syz.1.7504': attribute type 19 has an invalid length. [ 861.320629][ T3795] netlink: 'syz.1.7504': attribute type 19 has an invalid length. [ 861.330561][ T6745] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.340637][ T6745] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.351396][ T6745] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.378832][ T3803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.387896][ T3803] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.413714][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 861.441159][ T3803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 861.452227][ T3803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 861.536841][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.544133][ T6745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.558264][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.565563][ T6745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.674477][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 861.680015][ T3816] netlink: 'syz.1.7512': attribute type 1 has an invalid length. [ 861.754788][ T3816] 8021q: adding VLAN 0 to HW filter on device bond5 [ 862.007207][ T3828] mac80211_hwsim hwsim94 syzkaller0: left promiscuous mode [ 862.026094][ T3828] mac80211_hwsim hwsim94 syzkaller0: left allmulticast mode [ 862.249318][ C0] ================================================================== [ 862.257431][ C0] BUG: KASAN: slab-out-of-bounds in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 862.265788][ C0] Read of size 2 at addr ffff88815277f474 by task syz.3.7520/3845 [ 862.273613][ C0] [ 862.275939][ C0] CPU: 0 UID: 0 PID: 3845 Comm: syz.3.7520 Not tainted syzkaller #0 PREEMPT(full) [ 862.275958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 862.275969][ C0] Call Trace: [ 862.275976][ C0] [ 862.275984][ C0] dump_stack_lvl+0xe8/0x150 [ 862.276008][ C0] print_address_description+0x55/0x1e0 [ 862.276062][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 862.276081][ C0] print_report+0x58/0x70 [ 862.276095][ C0] kasan_report+0x117/0x150 [ 862.276118][ C0] ? __lock_acquire+0x683/0x2cd0 [ 862.276136][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 862.276157][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 862.276181][ C0] __dev_queue_xmit+0x27f/0x37f0 [ 862.276202][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 862.276218][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 862.276236][ C0] ? ebt_do_table+0x2605/0x27d0 [ 862.276314][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 862.276329][ C0] ? ebt_do_table+0x2605/0x27d0 [ 862.276347][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 862.276370][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 862.276389][ C0] ? br_nf_post_routing+0x1d0/0xee0 [ 862.276438][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 862.276482][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 862.276502][ C0] NF_HOOK+0x360/0x3f0 [ 862.276521][ C0] ? net_generic+0x1e/0x240 [ 862.276543][ C0] ? NF_HOOK+0xa2/0x3f0 [ 862.276561][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 862.276581][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 862.276606][ C0] br_forward_finish+0xd3/0x130 [ 862.276625][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 862.276646][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 862.276666][ C0] NF_HOOK+0x360/0x3f0 [ 862.276687][ C0] ? NF_HOOK+0xa2/0x3f0 [ 862.276705][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 862.276726][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 862.276747][ C0] ? br_handle_vlan+0x5e/0x530 [ 862.276788][ C0] __br_forward+0x397/0x540 [ 862.276813][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 862.276835][ C0] br_flood+0x3e6/0x8d0 [ 862.276860][ C0] br_handle_frame_finish+0x1175/0x1990 [ 862.276888][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 862.276912][ C0] ? net_generic+0x1e/0x240 [ 862.276932][ C0] ? net_generic+0x1e/0x240 [ 862.276952][ C0] ? net_generic+0x1e/0x240 [ 862.276973][ C0] ? br_mrp_ring_role_parse+0x160/0x390 [ 862.276994][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 862.277019][ C0] br_handle_frame+0x81b/0x1510 [ 862.277046][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 862.277067][ C0] ? sock_def_readable+0x2ff/0x550 [ 862.277088][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 862.277110][ C0] ? packet_rcv+0x11a2/0x16f0 [ 862.277134][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 862.277156][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 862.277229][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 862.277250][ C0] ? kernel_text_address+0xa5/0xe0 [ 862.277272][ C0] ? __kernel_text_address+0xd/0x30 [ 862.277292][ C0] ? unwind_get_return_address+0x4d/0x90 [ 862.277318][ C0] ? stack_trace_save+0xa9/0x100 [ 862.277343][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 862.277370][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 862.277395][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 862.277418][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 862.277438][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 862.277459][ C0] ? dev_gro_receive+0x1097/0x2380 [ 862.277532][ C0] napi_complete_done+0x299/0x730 [ 862.277554][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 862.277576][ C0] ? gro_cell_poll+0x175/0x5d0 [ 862.277644][ C0] gro_cell_poll+0x5ab/0x5d0 [ 862.277669][ C0] ? gro_cell_poll+0x175/0x5d0 [ 862.277692][ C0] __napi_poll+0xaa/0x330 [ 862.277713][ C0] net_rx_action+0x61d/0xf50 [ 862.277739][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 862.277760][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 862.277779][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 862.277806][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 862.277820][ C0] ? sched_clock+0x3f/0x60 [ 862.277855][ C0] handle_softirqs+0x225/0x840 [ 862.277871][ C0] ? do_softirq+0x76/0xd0 [ 862.277887][ C0] ? tun_rx_batched+0x185/0x790 [ 862.277949][ C0] do_softirq+0x76/0xd0 [ 862.277964][ C0] [ 862.277969][ C0] [ 862.277975][ C0] __local_bh_enable_ip+0xf8/0x130 [ 862.277989][ C0] ? tun_rx_batched+0x185/0x790 [ 862.278003][ C0] tun_rx_batched+0x616/0x790 [ 862.278020][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 862.278034][ C0] ? tun_get_user+0x26ca/0x4350 [ 862.278049][ C0] ? tun_get_user+0x26ca/0x4350 [ 862.278063][ C0] ? tun_get_user+0x2373/0x4350 [ 862.278076][ C0] ? tun_get_user+0x2373/0x4350 [ 862.278090][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 862.278106][ C0] tun_get_user+0x2b04/0x4350 [ 862.278126][ C0] ? tun_get_user+0x26ca/0x4350 [ 862.278139][ C0] ? aa_file_perm+0x18b/0x15f0 [ 862.278155][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 862.278169][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 862.278183][ C0] ? __lock_acquire+0x683/0x2cd0 [ 862.278200][ C0] ? __pfx___futex_wait+0x10/0x10 [ 862.278234][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 862.278282][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 862.278299][ C0] ? tun_get+0x1c/0x2f0 [ 862.278313][ C0] ? tun_get+0x1c/0x2f0 [ 862.278327][ C0] ? tun_get+0x1c/0x2f0 [ 862.278340][ C0] ? tun_get+0x1c/0x2f0 [ 862.278355][ C0] tun_chr_write_iter+0x113/0x200 [ 862.278401][ C0] vfs_write+0x612/0xba0 [ 862.278427][ C0] ? __pfx_vfs_write+0x10/0x10 [ 862.278452][ C0] ? __fget_files+0x2a/0x420 [ 862.278474][ C0] ksys_write+0x150/0x270 [ 862.278496][ C0] ? __pfx_ksys_write+0x10/0x10 [ 862.278520][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.278537][ C0] do_syscall_64+0x174/0x580 [ 862.278552][ C0] ? trace_irq_disable+0x3b/0x140 [ 862.278575][ C0] ? clear_bhb_loop+0x40/0x90 [ 862.278593][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.278609][ C0] RIP: 0033:0x7f195399ce59 [ 862.278624][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.278638][ C0] RSP: 002b:00007f195487a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 862.278656][ C0] RAX: ffffffffffffffda RBX: 00007f1953c15fa0 RCX: 00007f195399ce59 [ 862.278669][ C0] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000004 [ 862.278679][ C0] RBP: 00007f1953a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 862.278689][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.278699][ C0] R13: 00007f1953c16038 R14: 00007f1953c15fa0 R15: 00007ffcda309928 [ 862.278718][ C0] [ 862.278724][ C0] [ 862.931929][ C0] The buggy address belongs to the physical page: [ 862.938330][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x152400 [ 862.947181][ C0] head: order:10 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 862.955752][ C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 862.963373][ C0] page_type: f8(unknown) [ 862.967603][ C0] raw: 057ff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 862.976174][ C0] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 862.984746][ C0] head: 057ff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 862.993402][ C0] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 863.002062][ C0] head: 057ff0000000000a ffffffffffff0001 00000000ffffffff 00000000ffffffff [ 863.010731][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000400 [ 863.019389][ C0] page dumped because: kasan: bad access detected [ 863.025799][ C0] page_owner tracks the page as allocated [ 863.031513][ C0] page last allocated via order 10, migratetype Unmovable, gfp_mask 0x429c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_ZERO|__GFP_COMP), pid 31145, tgid 31143 (syz.4.6234), ts 721649803525, free_ts 721306707095 [ 863.051218][ C0] post_alloc_hook+0x22d/0x280 [ 863.055985][ C0] get_page_from_freelist+0x24ae/0x2530 [ 863.061533][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 863.067334][ C0] alloc_pages_mpol+0x212/0x380 [ 863.072189][ C0] ___kmalloc_large_node+0x4c/0x120 [ 863.077382][ C0] __kmalloc_large_node_noprof+0x18/0x90 [ 863.083005][ C0] __kvmalloc_node_noprof+0x77/0x890 [ 863.088717][ C0] pfifo_fast_change_tx_queue_len+0x123/0xa50 [ 863.098117][ C0] dev_qdisc_change_tx_queue_len+0x3b8/0x530 [ 863.105499][ C0] netif_change_tx_queue_len+0x184/0x290 [ 863.111756][ C0] do_setlink+0xf9c/0x4670 [ 863.116374][ C0] rtnl_newlink+0x148e/0x1bd0 [ 863.121111][ C0] rtnetlink_rcv_msg+0x802/0xc00 [ 863.126056][ C0] netlink_rcv_skb+0x226/0x4a0 [ 863.130809][ C0] netlink_unicast+0x7bb/0x940 [ 863.135566][ C0] netlink_sendmsg+0x813/0xb40 [ 863.140327][ C0] page last free pid 31109 tgid 31109 stack trace: [ 863.146825][ C0] __free_frozen_pages+0xc0d/0xd20 [ 863.151951][ C0] vfree+0x1fd/0x330 [ 863.155838][ C0] xskq_destroy+0x40/0x60 [ 863.160256][ C0] xsk_release+0x6ff/0x980 [ 863.164664][ C0] sock_close+0xad/0x220 [ 863.168902][ C0] __fput+0x418/0xa50 [ 863.172876][ C0] task_work_run+0x1d9/0x270 [ 863.177477][ C0] exit_to_user_mode_loop+0x193/0x6b0 [ 863.182856][ C0] do_syscall_64+0x353/0x580 [ 863.187440][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.193318][ C0] [ 863.195625][ C0] Memory state around the buggy address: [ 863.201241][ C0] ffff88815277f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 863.209292][ C0] ffff88815277f380: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 863.217348][ C0] >ffff88815277f400: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 863.225392][ C0] ^ [ 863.233105][ C0] ffff88815277f480: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 863.241153][ C0] ffff88815277f500: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 863.249217][ C0] ================================================================== [ 863.257580][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 863.264795][ C0] CPU: 0 UID: 0 PID: 3845 Comm: syz.3.7520 Not tainted syzkaller #0 PREEMPT(full) [ 863.274074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 863.284121][ C0] Call Trace: [ 863.287390][ C0] [ 863.290222][ C0] vpanic+0x56c/0xa60 [ 863.294209][ C0] ? __pfx_vpanic+0x10/0x10 [ 863.298718][ C0] panic+0xc5/0xd0 [ 863.302433][ C0] ? __pfx_panic+0x10/0x10 [ 863.306838][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 863.312469][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 863.318092][ C0] check_panic_on_warn+0x89/0xb0 [ 863.323028][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 863.328650][ C0] end_report+0x73/0x170 [ 863.332889][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 863.338510][ C0] kasan_report+0x128/0x150 [ 863.343036][ C0] ? __lock_acquire+0x683/0x2cd0 [ 863.347966][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 863.353597][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 863.359170][ C0] __dev_queue_xmit+0x27f/0x37f0 [ 863.364124][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 863.369413][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 863.374611][ C0] ? ebt_do_table+0x2605/0x27d0 [ 863.379459][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 863.384737][ C0] ? ebt_do_table+0x2605/0x27d0 [ 863.389587][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 863.394976][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 863.400266][ C0] ? br_nf_post_routing+0x1d0/0xee0 [ 863.405476][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 863.410854][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 863.416744][ C0] NF_HOOK+0x360/0x3f0 [ 863.420806][ C0] ? net_generic+0x1e/0x240 [ 863.425304][ C0] ? NF_HOOK+0xa2/0x3f0 [ 863.429462][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 863.434043][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 863.439946][ C0] br_forward_finish+0xd3/0x130 [ 863.444788][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 863.450673][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 863.456133][ C0] NF_HOOK+0x360/0x3f0 [ 863.460203][ C0] ? NF_HOOK+0xa2/0x3f0 [ 863.464367][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 863.468970][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 863.474436][ C0] ? br_handle_vlan+0x5e/0x530 [ 863.479198][ C0] __br_forward+0x397/0x540 [ 863.483698][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 863.489151][ C0] br_flood+0x3e6/0x8d0 [ 863.493303][ C0] br_handle_frame_finish+0x1175/0x1990 [ 863.498855][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 863.504751][ C0] ? net_generic+0x1e/0x240 [ 863.509249][ C0] ? net_generic+0x1e/0x240 [ 863.513754][ C0] ? net_generic+0x1e/0x240 [ 863.518348][ C0] ? br_mrp_ring_role_parse+0x160/0x390 [ 863.523892][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 863.529089][ C0] br_handle_frame+0x81b/0x1510 [ 863.533940][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 863.539306][ C0] ? sock_def_readable+0x2ff/0x550 [ 863.544414][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 863.550304][ C0] ? packet_rcv+0x11a2/0x16f0 [ 863.554978][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 863.560263][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 863.565903][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 863.571967][ C0] ? kernel_text_address+0xa5/0xe0 [ 863.577088][ C0] ? __kernel_text_address+0xd/0x30 [ 863.582304][ C0] ? unwind_get_return_address+0x4d/0x90 [ 863.587950][ C0] ? stack_trace_save+0xa9/0x100 [ 863.592920][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 863.598904][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 863.605410][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 863.611570][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 863.617898][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 863.624571][ C0] ? dev_gro_receive+0x1097/0x2380 [ 863.629695][ C0] napi_complete_done+0x299/0x730 [ 863.634720][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 863.640264][ C0] ? gro_cell_poll+0x175/0x5d0 [ 863.645025][ C0] gro_cell_poll+0x5ab/0x5d0 [ 863.649613][ C0] ? gro_cell_poll+0x175/0x5d0 [ 863.654369][ C0] __napi_poll+0xaa/0x330 [ 863.658694][ C0] net_rx_action+0x61d/0xf50 [ 863.663285][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 863.668388][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 863.673579][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 863.678852][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 863.684037][ C0] ? sched_clock+0x3f/0x60 [ 863.688455][ C0] handle_softirqs+0x225/0x840 [ 863.693208][ C0] ? do_softirq+0x76/0xd0 [ 863.697528][ C0] ? tun_rx_batched+0x185/0x790 [ 863.702370][ C0] do_softirq+0x76/0xd0 [ 863.706513][ C0] [ 863.709433][ C0] [ 863.712353][ C0] __local_bh_enable_ip+0xf8/0x130 [ 863.717455][ C0] ? tun_rx_batched+0x185/0x790 [ 863.722295][ C0] tun_rx_batched+0x616/0x790 [ 863.726959][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 863.732149][ C0] ? tun_get_user+0x26ca/0x4350 [ 863.736987][ C0] ? tun_get_user+0x26ca/0x4350 [ 863.741824][ C0] ? tun_get_user+0x2373/0x4350 [ 863.746660][ C0] ? tun_get_user+0x2373/0x4350 [ 863.751499][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 863.756782][ C0] tun_get_user+0x2b04/0x4350 [ 863.761457][ C0] ? tun_get_user+0x26ca/0x4350 [ 863.766295][ C0] ? aa_file_perm+0x18b/0x15f0 [ 863.771051][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 863.775801][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 863.780811][ C0] ? __lock_acquire+0x683/0x2cd0 [ 863.785746][ C0] ? __pfx___futex_wait+0x10/0x10 [ 863.790770][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 863.795874][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 863.801323][ C0] ? tun_get+0x1c/0x2f0 [ 863.805467][ C0] ? tun_get+0x1c/0x2f0 [ 863.809616][ C0] ? tun_get+0x1c/0x2f0 [ 863.813766][ C0] ? tun_get+0x1c/0x2f0 [ 863.817908][ C0] tun_chr_write_iter+0x113/0x200 [ 863.822929][ C0] vfs_write+0x612/0xba0 [ 863.827178][ C0] ? __pfx_vfs_write+0x10/0x10 [ 863.831939][ C0] ? __fget_files+0x2a/0x420 [ 863.836523][ C0] ksys_write+0x150/0x270 [ 863.840848][ C0] ? __pfx_ksys_write+0x10/0x10 [ 863.845693][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.851750][ C0] do_syscall_64+0x174/0x580 [ 863.856336][ C0] ? trace_irq_disable+0x3b/0x140 [ 863.861380][ C0] ? clear_bhb_loop+0x40/0x90 [ 863.866098][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.871992][ C0] RIP: 0033:0x7f195399ce59 [ 863.876406][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.896005][ C0] RSP: 002b:00007f195487a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 863.904421][ C0] RAX: ffffffffffffffda RBX: 00007f1953c15fa0 RCX: 00007f195399ce59 [ 863.912388][ C0] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000004 [ 863.920349][ C0] RBP: 00007f1953a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 863.928314][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.936273][ C0] R13: 00007f1953c16038 R14: 00007f1953c15fa0 R15: 00007ffcda309928 [ 863.944242][ C0] [ 863.947543][ C0] Kernel Offset: disabled [ 863.951857][ C0] Rebooting in 86400 seconds..