last executing test programs: 4.664806158s ago: executing program 0 (id=8940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xf, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xf, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) (async) 4.599407453s ago: executing program 3 (id=8942): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x20004, @loopback, 0xfffffffe}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="ab407bc2", @ANYRES16=r6, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730000000000"], 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000400), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x40, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x40}}, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x2, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) connect$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x2}, 0xa) 4.356950251s ago: executing program 0 (id=8945): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0xfd4badcd6aaa7a73) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x96) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x1000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x941, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r5 = socket(0xa, 0x3, 0xff) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86c96c00000000102c0100000000000000000000ffffe0000002ff0200e9b5c27c000000000000000001ff000000000000000800000000000000"], 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r5, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10102, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x58, &(0x7f0000001080)}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.565463233s ago: executing program 4 (id=8954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.461330541s ago: executing program 2 (id=8956): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x81800) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000000c0), 0x2) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) accept4$phonet_pipe(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) r4 = socket(0x1f, 0x4, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000300)={r5, 0x92, "5653314fcfbbf3d4ec5b131f7d3a78120e6829bc6d1e0e60c592a3fb8ab030c3d0dc63e394b8786b27fee9803375f2e5dc795001074fe4c5f2360b49b535079f4ec9641bedea628901b1fb576ddc7dd71dfb653c987bc507a65efec21c54df33e7ac19a3dd2ced46c7c3f7125d18e468276c1ff165eed87e4b02782187f5b1f05f45a3163e929ff27555072df5f549dc423d"}, &(0x7f00000003c0)=0x9a) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000440)={r5, 0x1, 0x20, 0x745, 0x7fffffffffffffff}, &(0x7f0000000480)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000004c0)={r5, 0x400}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000500)={r6, 0x4}, &(0x7f0000000540)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000500)={r6, 0x4}, &(0x7f0000000540)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={r7, 0x2}, 0x8) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f00000005c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) (async) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f00000005c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) ioctl$int_out(r0, 0x5460, &(0x7f0000000600)) (async) ioctl$int_out(r0, 0x5460, &(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000640)=0xfffffffd, 0x4) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) (async) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) socket$xdp(0x2c, 0x3, 0x0) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000680)=0x400, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000680)=0x400, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e20, 0x80, @local, 0x3}}}, 0x32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000700)={r5, 0x1}, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000740)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000740)) 2.453406352s ago: executing program 4 (id=8957): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc800000190001002dbd7000fedbdf2500000000000000000000000900000001fe800000200000000000a592000000bb00000000000000000a0000e2ff000000d32c0c1da3fa1ffd281805e8245cc0d430930e8d7828bdee2ea552b81a8195c9e37daa5f8304484dbbc96413bc3b7e3837fd9f53455091f1e119ad2f4573891399dec12077e0f81ff6e419afdf9f557ca4c9bdae4f8dd306061d124e8c47fda9ce4c7dd79e233c135ce9c472db7fc0c26bcbe7ec47a110c1a23a705add09fc1fa0cbf5823fa25b28b3183a7d10f7ba82a90e1cf887fe864bee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdffffffffffff7ffeffffffff7f400002000000000000080000000000000000010000010000000044000500ac1414bb000000000000000000000000000000002b00000002000000fc020000000000000000000000000000033500000400000000000000000000003b110000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000ac0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000080)={r3, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x2, 0x88}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x2f, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x400}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x98, &(0x7f00000005c0)=""/152, 0x41000, 0x77, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000200)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x7, 0xab}, 0x10, 0x2a799, r6, 0x0, &(0x7f0000000540)=[r6, r2, r6, r7, r9, r7], 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0x111, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x4000010) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYRESDEC=r4], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) r12 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r12, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x48, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x1}, 0x80, 0x0}, 0x4) 2.314490115s ago: executing program 2 (id=8959): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f00000001c0)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008034) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x20, r3, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x8000) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) close(0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000000c0)=0xc, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000800, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.262114185s ago: executing program 3 (id=8960): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe, 0xa9, @random="b29f840a54c4de211166"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x25, 0xa8, @random="e2f252a95f916c16cc55b0fa26496773760c8869ab4f2b5b19bda176708b932722"}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2.092841538s ago: executing program 1 (id=8961): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x40, 0x5a1, 0x0, 0x7}, 0x9c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x20003, 0x1}, {0x2, 0x7, 0x1}, {0x5, 0x9, 0x3}, {0x5, 0x2, 0x3}, {0x4, 0x78}, {0xc, 0xa, 0xd302}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1e00010c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c000200050001000000000008000740000000001c0018"], 0x90}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@loopback, @in6=@mcast1}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r4, 0x431, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004e910}, 0x40) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0xfffffff7, @local, 0x9}, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, @in={0x2, 0x4e24, @loopback}], 0xfffffe82) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000200), 0x4) (async) listen(r5, 0xfff) (async) accept4(r5, &(0x7f0000000240)=@x25, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, 0x0, 0x2) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) 2.07309279s ago: executing program 0 (id=8962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x6a, 0x7, 0x1, 0x0, "f95b65db0fa75ebb7ed06b0c4c4997bbc9980625b5a6a1c2b81a3f189758de0ca34af770b5e335464314d3cda17bac9667a0e18c853558611c92a5ac6fa760d4f1181d11f3afdd6d6b0739a009ecc6a0a17dab5528087071aee3d48e7d9546aaa486bd2e09b1"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x128, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xce, 0x6, "5b219691a4211bdbb0c08d4bbe6b28b1a0de96d69d840dc7161e2e37faa9e87d9fb98fc8dd6a26e86ed7a5f279a29c1906275ae63b11d8ec9e2b19f170f0b1f40da5b0a3e3e7cfe58d27fba3398ad6b6b6bb0ee754f7f490b3cc25766c367be51e794bc49b7db6025779c7275459de8fcd55ca1fe0b0b1916d815a2501b8022062ad639adeedbf49c19f91831ae565f2794d36b94c81e2b0bd473551df8733015358a610ac8bde14a340cecd4cac60fa92efc6738a2d67fdd84b9a9962df4b1103f05e1572b4fb24e6c8"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x280}, 0x1, 0x0, 0x0, 0x8010}, 0x6c025) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b7030000ffffff90850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.982458688s ago: executing program 3 (id=8963): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000000), 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0xb2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) close(r0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) splice(r7, 0x0, r8, 0x0, 0x6, 0x0) write$tun(r7, &(0x7f0000001b80)=ANY=[@ANYBLOB="03040400ff006100950c000000000004af6d8bbb396aa34035fbd2fd07b83b07fc422026ece4ea7135cc5ed24eef770863d974be90feea39c79abc5fa8563945c20a155dd13a14e18a80b22ff8759b6807f4cc4d23ca6ff42c57e422ae7d661949785679af04b5c0c49ba1a505ad40aa091e344697f035982f62015248340d54b4234f3259d11793beb1581429299fa8cb6b7cf7bb27a6af1f1d73dd198fce0c71a2a53624f43bc9802ec75adf7a8a6c67760f699a9d78552b2b8e7d6752d73e436e014298c928fde0ef0964f84c9a60b78ab5b99a931e7a6aebbd84aab83c7526eba14d100909e8b917fd1ab1471af20cdc093103b3748a518769a10aa3f7bf2e8097de5e1df19fe033192fe8281c5c133ea0efe12bc70f233006eec0ca8e1af5e02978cce3b085f600ffbb553a723dddd2ff71022fc1bded0543a3461dde8e4d160e2456e213a250c693077d7576a849eec5d73b966960313b19265326c8c1c3f1b8d0a7227d58062eb8c4f1a621db29952e1093053d2508a241ce17233d6a342bf08d542398d246b5e3e403a09312f99c3d55e3755a3395409a58cddfff84abd04b08dd6f82c6adceab535e238f01171351be7e0b413043bafc88c2a37ee0e17de345bcdd505c7fb638ea6be755e5665c8a9e724defed10506c85e415ca3db67e2ef585f0cf6dc0682716989fdf19b396a3be2972a345297824210fded2ba0286cedb40839623dbf913b264c32de84dbec677e5992ce401825f00143ec5dfc6a53fd514f7075204b12d946996f74eefcf4256806eefd46a5a477aa189693f05ed3975aea18b4400f4defa09c6c7b24cf6925d0465b10941e0872a92bcbfbe679b66774a84cce1f07005525702940bdc4facf13a4b63b253d82bbf7d2dae1e1e49bc1bf47e7772f166758fbe8f2ca143a8e9818b3f5c606c03148b3a3ce6551c0efa0f8ff757e5b3487092ce69480679781e6ed34c63ae1d91f159d1c53dd9796d8d00c234cb05cbe5600235024e88ff16c47a35f2767fbf8109811e783b0908b68ee36f89e0ae9f696496af84be96a83376e91c2ca0ee8b344641a566ab50bc58ccc8b3653c2473f1d3049c994b3a3011f06878b8d8c14f69767a053b0171574f015e410d970cd40be6574cae9f7d697b5eda683372723dc235d74ca60b1e3a901d52608a56a8ec6775f8c2bc7b761c0f1e3c29232cddcc6995e89d0085f632e4d4f07bf605923c5b0f6f53ae18d3fc088b48a21293f012f75fc51de51c89eb05c778d4ead059b2539380faf06b8bf11dbbbe4ab53b6477350abcad9d1d7ab752cc40639fe1ac26000a9101b0e52f43e1e535a5f9588820cd6ec3b9972a0cf83148c59150a56addd556e300f2a0676fa87d20060059d3a80db47826726d82b3f0a3199dcec4bd34a2650c21b28a35a6460c7158cabc76ee3ac23175ae096966f33c53599ef24dbd3687a4643568c2640d174bd4f49580df6f7996a81a7a2cb81357ac46c81557788853e2615a2068cde1ed73ab30fba85c4091cb6d17eb56fc9870e4ca37a032da65d9cd772cbfbfb4dd4f46c504cf8021118984d795767efceaea5fbfc04607d6df1cf9accbe9d3b4f85bb98aa7db07149c5c23ae198edf783cdda03faa6498a13f8bc85b15340b592d5c47e7c3bf3bb4f9ce350a643071792a936a60d6fa3c5856301382754f6a7049afd1a615a8238cae2b9d4ec16e4dcbaa592fba72db49f92520c5c54da2065ba4228311f402f9420895d310af11beb02bc4729e7d724b3a1d9d72075213b12b9c712f58f92f31c0492e9f490807a743a0559c69afaf70be5fcc909abeb582e2856210a0bd4d0fdfae90596aa20fe230f10ed97fa0fa61653f71ae98f7a27a437c8e8d9fbd48d4d88209725b9d64291f5cc45dfd8cde9b11c0d640502bad938972818d106b262c6621a67e34227c7c1780a602ac02284371f516251e22cfa78fec536317978195714d592135ad3c4023b6579cc722b3af12fbf3a9d24d97f75ad71646d3b11ca15ad717d86e66336f9c7680bdd23e6caba329f290f186da4c819766bd8d8db3c6a5ee3ecd13086b814e453a2ac7aba7e57e9c1e7f4c67946b5556f3fb424e62ed4058ea3dabe2d68d0c221df76de24db54cd68990c47c3a02dc6cea0f27dae2e98144d94a1025ccca03f8ddd5ce3aa65532cbdb304f2e374b8929d6fb95c238cf3d2d228527c5caadb42b4bf46046272ae53691914c0a097e8aad1215dad973a36e1ab89720057a556ae6962c5b637b7d773d8f2b24e6d20b6f2bce1c27b903cdd6d3f24cee59951487c6c6da2c02b9e462eec50bb49ce5e18a2fcb7af6418207b2ea8bbe3f984f87bbe799992c2ceffa1dc530ba7c56160a21102903cdc3ca10f0a3c660c0bda39390cbbbe07d74e4f70733a48e042e25e74debbd45c1a1be8dbd2caeca266804d7366cf6257dd39589a6c2e8ea99fddc207aa9ffc5d2a3b2bc81dac0cc98da460ca733f633a5a6e6042ccc204652e0ed30ba696a04bb2c1d01ae1b0b93f4f4eeb42c6fd64be522163a3fb1575cbf5f8f3d14b3c983ea775e32045d6929f1be7b02f6e259916d700b31f55df3e8d3cacc2651d6ae5ce8623f69327a0aa2405dc8baaa4e1fb0934c25aec00c8cbfea34b7a5f2dc15ee268a943bc6a6dcd8332c8d15acc4c737ccd729c12ca2648d0ba4dc789aead6679779129892f34830adc37f15d298094b1af1a3e847249923b5e2129204497438567501c77d26378b57e17f3566e66e268fab5fdbd1c7e4168c6e512d051158cb4ca4a04b18adb2d9b181aa3d68f3ed6948eae42f82d351ccecf60f94c489cf0ebdff6906d7ffe31d98d63dffd6d146c6e78652c4b7758392192fd2a1e3bd79c9e4c24841db44a48fad864f8aa63a263c4227d8c02ba1acfd1acf406f4c932c63d898e9bc297e7f6a652ae1de824edd912e925ddccf22dcb5918529d159e9dd9bdfd05e4b89df9b9ecaa957d8496fce1c3e36178c40bc0bce1f7b5fa426945d478a7536a6f29a569ce5b7ffba9dd0b1e429cce0c607a1d62c076a78163e82bf5df905a667ef4f288c53d65190a3e5de37adbea3f8ce2484943ab64209c3e4ade3248e94120200bcba2930377d789a75cf9cd1f278050c525c7129ecee6034030300927935afc314d3702182d9f3ccec84ce0588033adeb867769662356c336ee4abcaf1971a0d9191653c7ecb7b5e23fc3aacf986cc07ba6074aee05f10ffd5138ab19643687dd64450bdc3626c9f9ef73ec9b94f7580d3a9bdd26d9d756480e8de00b495edd96bd2651fa677db43b9aa376e218f7e11691967414a5c888113b034e04edfb78fef7590d892d1044f1c8341c6d48b17a925ed7fb8d91242b47389495c38c6a74b50ffc20d2f8c14fddf426aa1b0765849f716fc75f4136d67539c5c87ffe42470cbc8ea836d6ef897132dce05369bc5e237fb561ffca3675242c799ec28d673d8c7c4f10371ec58e395412f493c551e8fbfa7efe0d52a598e899b5a310db91fe2e58588fe3f98b3286cd06d0a54a6d814511f774c991cc4ca3383fee19d1bf6820e662bf5ac34cd757e89d64fb339bbb431477378ce8214ef977a713c7477ad03921142f3e347467e2664bfea8c670a4c9462b2a2eac974c56aea9bde15d1fd2859842a6810d69063cec8d2c33037683ea658c875b36a01aa5176a9a075f98e622e01efa540212ece48fb3687a506543b2209a56379768e7d1901458907b0cfbc39d274cf42804c68f1b5b0211c636853486ace037c7b1f4161b8db535dd9f4d8b45c40de5377624bf9822eb964ce0701265d4e1454c658d633f3fd2c50bf7b608101a5aef84612356e81fdb17969937ea7e64051a89880b62a20b665f02ff0752ca55eee9b73fa0a73b3683bf8155bf60eedef00147e1b738566d5147144f501a0a4f6c9dc3d02a301e142a2d96c407b16481d6dff6f197b58a3176a61b639786f5b77abf5471d8abf334c64b57983ff5f033b2ee2447c491507f7381f3c2b1e1f0484357cde95604a39ef24e24fafb68fd01b8d9d7d09fe487993c35a4b45fad00b9446402fc825a78c22a327410049c2a2b0d005512003e2d2acccca0d832a7f72c668c6e5152d7557cbffd97d30a265f6a5e16cb8e5cd50cfb665b6093dd326ae89757a57bed8eb9826fde2dbea5df11c9d8b3adbf876fb2e637d981b5df676b735e1e55916755a74b9d2b76869a14e01b97fc03afa86beb7dd357820b4e37e69f36fddbc9560f994c166db4878e78b291a530108db4ea7cf3a67201c8527bef8705d6f0d162fa0536b0baf37262cfcf7c4f26c438f456a9bce6b794d450740074c8e595852aebc88ec54c07f45f91f5e3c4dd54fd6a7261a645a1dd45b6885e8027bc7956ce91982114cdff8517d3e96501d5140a8c9e3481a8d3fd9d1be1cbbc6c7c16bf388881ec847fd16007742448363c9551f5f9f18c8971ad545935b049694174bd04768a1bc3934d45a188d3115b0313aab80171036e0d0d6a58a26905fb6b7fd1bb3962292e79d1f48e32cee233ce07c02104e95389bf6713d195fe0c2deac68aa407131b50883ed5680ff1c1aae5774d62f779ffec0828624a274c2d0fc000da3eb3c6fd9fa99e074fd4d4d6d6febfcfef619d4e81e3fd0202d44cc076eca6454d4d0d5899f36271dac840d0cc523c8e349229e80bccb2b97a82ea2a5bc397f78fec6674d47d40ccbeced8058f426da0e7dce73eddd84b0f4729f7e4cd7c1d05a495a8e555c6f78ca6a5575e917f9e209f24fee968391d4f9f22134602d5b54e3aaaa26ebf4f98054e8073a28c536dbe64c2c9f892afd378e6fd2baef79abe6dfdf93ec7c7d109ed5a597963378d89494e54e60dadc765ff3791c1166918ec69af5b906351830808c355a411dfc34c1fc642d2ae6ed32e21919efc035646ca8a1a99c713860ddf6ba00bc0fb1c72fcd6b8c131dfe7f160718d5f2c684e0946da14c87429fd73eb3298a991aa43db4e5daf3bbf2d49004d6b49aabd6c2e8c7aad4e98e40d1cafa2a2d1249e257424ac3da4f02335221ba931e9463b9eef21e393d3dbedb71372535cce6a9e82265f7330537b5a49dc56889ef4956e1f036b0bc3b071290d9c925fd98809bb9d14ee09c1e011995f67579f49f8962c6d258241012aa46bbf946bab701f6e9e627cc71ea994e46789264423e8794f053c9821d898aa3d518f44aa94331aecd0f07c5c8818d06f9f7469a516c075a8d9912fb0e447dae6760adb9d5c7dd31106d2fb8d2378f7e3ed49375f1013fa9f02009df68284a8482f571e403325a5b5d7324feb98b0841c264085335228a150552a3c9120015d42ed0573254701fa5070876b51b3fedb85dbe236faee33d501af9d15c3ad09871164ed972af4cbae089cf13a264c9ba237fc7dbc73b37438df30cc004aaf4034c81b73cd60f11141eb07d684666f569b4ddbc9cf4be0ad841a87ae422729a1f41a68f9f36a6dd863c97c351dc32afb254dcfaae1999462add4ca3279cb23570eed6a2342c9d97a124976f8cf52008593548c678c57152602f998fa2604ceae860b593bf66700e2a75154947f05d2c075916c2f678fa9eb5d02c19e7c99522cbe8954f54b5131cd65dcf76b00cdd1837cd9cfee33e8eceb9fe66709b8a0cb6e23aa52ac98df546e946e319e640ba4f7576230c206f1b92a12c154deccfe5996a9b2d3fe219f10ac721ac39cb7c5da7e5633408adcd9248ea3cb76e99057cb535a7bf92d6f59a9452219e055353f03b19989137f6051d3634c69bfc3b0b54c965a9a1be337f4b06735795b727b8bef638ff9da4d3f0d21681174cb799084d8edb347b1fa30d5a77321359ab188607994194adc4a843c75974bfa3e5725f8d85722129c4eec0bc2c04de8662aa2f5e461811ba"], 0x1012) (async, rerun: 64) r9 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="20000000051401002abd7000fcdbdf250800010002000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x24050010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b80)=ANY=[], 0x674c}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a00001001500000d2000128008f600006774700014000280080003000200000008000100", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 1.840573154s ago: executing program 0 (id=8964): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18040000feffffff00000000000000001801000020696c250000000000202020db1af8ff41000000bda100000000000007010000f80000ffb702000008000000b703000000000000850000004600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000180)={0x0, @loopback, 0x4e23, 0x0, 'ovf\x00', 0x20, 0x2, 0x7f}, 0x2c) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x4c, 0x0, &(0x7f0000cab000)) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000003272000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x52a12, 0x823}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x13, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="a573425576ea0000000000000000", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x10, 0x7, 0xbc, 0x7fffffff, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty, @loopback, {[@generic={0x89, 0x9, "5dc16f810c21f9"}, @noop, @generic={0x1bf8d22ae27efb27, 0xb, "011742d4af2c99248f"}]}}}}}) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000140)=0x1, 0x2) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast2, 0xc3, 0x8c, 0xf800, 0x100, 0x9, 0xc7c10180, r7}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0xba, 0x4) 1.838601835s ago: executing program 1 (id=8965): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$netlink(0x10, 0x3, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x8) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c536e36faed7a8003e1090f000060000000a2bc5603ca00000f7f8999177858000000000000000000000000000003000000000000000000", 0x48}], 0x1) 1.691510834s ago: executing program 1 (id=8966): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x602010}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000480)={0x0, 0xa3, 0x1, [0x100000001, 0xd, 0xffff, 0x1e9f, 0xe], [0x2, 0xffffffffffffffff, 0x3, 0x401, 0x7, 0x100020000000000, 0x5, 0x10, 0xfffffffffffff5f1, 0x7, 0x4, 0xfffffffffffffffe, 0xffff, 0x7, 0xd1, 0x3ff, 0x8, 0x7, 0x7, 0x100, 0x7, 0x0, 0x7, 0x7, 0x1, 0x80000000, 0x9, 0x0, 0x1, 0x9, 0xf8, 0x80000000, 0x6, 0x3, 0x8e8, 0x32ff, 0x80, 0x5, 0x8a2d, 0x80, 0x0, 0x5, 0x8000000000000000, 0xfffffffffffffffe, 0x7, 0x3ff, 0x10000, 0xa25, 0x2, 0x100000001, 0x4000000, 0x2, 0x5, 0x3, 0xf7, 0x8001, 0x1, 0x100, 0x448d3a72, 0x4, 0x6, 0xed, 0x278d, 0x34a, 0x5, 0x7, 0x9, 0x2, 0x8, 0x328, 0x9, 0xed19, 0x41df, 0x0, 0x35, 0x8, 0x3, 0x4, 0x9, 0x8, 0x9, 0x6, 0x0, 0x7, 0x5, 0x7f, 0x5, 0x3, 0x101, 0x3, 0x4, 0x3, 0x800, 0x0, 0x1, 0x1, 0x7, 0x7, 0x8, 0x2, 0x0, 0x6, 0x5, 0x9, 0x0, 0xffffffffffff0001, 0x8000000000000001, 0xcd, 0x6, 0x3, 0xda5, 0x1, 0x9, 0x9, 0x1, 0xd, 0x0, 0x5895cb6c, 0x11, 0x6, 0x2]}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f00000008c0)={r6, 0xffffffffffffffff, 0x400}) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.378123074s ago: executing program 4 (id=8967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000280)=0x4, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000240)='\xd0$\x00', 0x200, &(0x7f0000000380)={@align=0x8, {0x6, 0x6, 0x7fff, 0x7f}}, 0x3, &(0x7f0000000440), &(0x7f00000004c0)=0x3}) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x131}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0xfffffd0e}, 0x1, 0x0, 0x0, 0x48890}, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0xfffc, 0x0, @remote, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000880)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000000000000fffffff300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18}, 0x800) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r9, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x40, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="ef", 0x1}], 0x1}}], 0x1, 0x4004041) 1.305497739s ago: executing program 3 (id=8968): unshare(0x28000600) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x90, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x5, @private0, 0x9}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0xe}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0x6}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}}}, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x8, 0x0, 0xc}, 0x10) 1.015197761s ago: executing program 3 (id=8969): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa782d404bbbaa0008004500005800000000002f907800000000e0000001248081000000000010000800000086dd080088be81000004100000000100000000000000080022eb0000000020000000020100000000000400000000080065"], 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x52, &(0x7f00000017c0)=""/4090, &(0x7f0000000100)=0xffa) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002080)={0x0, 0x10, &(0x7f0000002040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000020c0)=0x10) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x800}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x4, {0xa, 0x4e21, 0x229, @private1={0xfc, 0x1, '\x00', 0x8}, 0x7}}}, 0x47) 984.445712ms ago: executing program 2 (id=8970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='X', 0x1}], 0x1}, 0x40c4) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r3}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa2}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) unshare(0x400) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000005f80)={0x30000002}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x2, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78511e88509de050000000000f21700000200000000001900", 0x3c}, 0x60) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r3, 0x1ff, 0x8, 0xb}, 0x10) (async) close(0x4) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, 0x0) 912.314867ms ago: executing program 1 (id=8971): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1c3400, &(0x7f0000000040)={@_ha_fsid={[0x8000, 0x63a3]}, {0xa46, 0x5, 0x40, 0x4}}, 0x8802, &(0x7f0000000080), &(0x7f00000000c0)=0x7fffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x320, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x49c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9cc}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4a, 0x3, "4921cacb98f1df1a07b2045d69b7b0288c37bd95b1123bcf8ee8da0612dd24d0bdfeb7ca716bca82b00ba89f6c76604ef358464ae0fbbe350cbb579f07a89b109beead84c522"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc09}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5270}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdfd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000740)={&(0x7f0000000580), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000007c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e23, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x86, &(0x7f0000000780)='bond0\x00', 0x7, 0x4, 0x5}) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000840), r0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000880)=0xfffffff9, 0x4) (async) r3 = socket(0x9, 0x80000, 0x0) (async) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) close(r4) (async) r5 = socket(0x6, 0x80000, 0x80000001) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x3c}}, 0x4008000) (async, rerun: 64) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000d40)={&(0x7f0000000a00), 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)={0x294, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3b5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0001}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9, 0x3, "6a875838c6"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ID={0x54, 0x3, "4b5e0e923fbe420d380a97d2d1f00d92f8231811f04a78fd1a61e376e0fdd57bdeabdcae62a48ebe2a78dcad08b69ce7bfd75566b562b0609dcbc0cd5ecbd00bcf3e7e6478483ca2fcd2eb0f75b69741"}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async, rerun: 64) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000d80)=""/89, &(0x7f0000000e00)=0x59) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000e40)={0x0}, &(0x7f0000000e80)=0xc) write$cgroup_pid(r0, &(0x7f0000000ec0)=r6, 0x12) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f00)={'ipvlan1\x00', 0x0}) (async) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000f40)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r5) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x120, r9, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x4004) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000001200)=0x1000) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240)={r8}, 0x4) (rerun: 32) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r8) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x4c, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r11, &(0x7f0000001640)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x128, r12, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x14, {0x1, 0x101, @void, @void, @val="04651e5a5dcbd70770cd2075a9ee8d28"}}, @random={0x1, 0xdf, "5466f91b43e45158ac3fc760fef90053789091a3de0bef209a24d4668a80b1fac7b644e79c354440b90cbff11f66071cc74492be5f10d9892c189b1784fb1aecef4c4801d8e63d5d78264e0fb45d16f1a8aec16da2e42394bbaf69265e07bebbe9fa2f30b89d00c2cf385743ddf4bbefb8e274c28a22677d3f23d6f598e4bff9c4c29cd6885bd05234dfa9ea2403c3db47cf4b0eb74800f009013b4c99842813788301ee6352458d6c230264147f6893b061f41946c492bfcafa0f7218f9141b3e50c7e6c40c7233daf3417b2a684c52117db6f5d4bef79d2d0f683fad6e58"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x80}]}, 0x128}}, 0x40) 874.0635ms ago: executing program 0 (id=8972): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x8, 0x6f6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @remote}, 0x80, 0x7800, 0x9, 0x6}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x14, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000f}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2004c814) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034008000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace801fcbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a830a1620ba", 0xd8}], 0x1}, 0x0) 854.35639ms ago: executing program 3 (id=8973): socket(0x2, 0x80805, 0x0) close(0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmmsg(r4, &(0x7f0000001340)=[{{&(0x7f0000000080)=@can={0x1d, r5}, 0x80, &(0x7f0000001180)=[{&(0x7f00000029c0)="3c1826f8993cc476520609dd34c3ad6290f6e4f423b3aeddf90a580a6ed1a4e3df9701c3a94d32e6bb4338b7a1ad3d2e6b7ee41a164f8989c2374a8db9526daa30b200789b565e8708b6191a5d5fda539ada6038d89a580b073bbc068b1f6d2dc4df59aeed5c771153b8f8b944f01ec3e895efd0f893f889243efef9daa293cc6db636feb377c3dfed4b4dfbc447f28ddbca894caa47e81c1a03c5e5df036fc1f3bc8c7006836e30f55d0dc12eece04ad4d62659cf06fefeeb4955d6839ed442db16aaa427f1e4e3dda56a658bcd1758f5cba8a2cca082131cda4f42ee2d187c8a689df68c145f9a051420d92bf82574b76b740b779841a92e5192725787789ebdfde0375abc547fffa46b0b43e0104a9b8de99101d51ce09c29d5e709dca779af940073a7953800e9e2802e64a2107d9d60c72b19046c0da657ce5c544962100630cb116dc0a22e72961e860b3b452cd8e156ec9b19a08b38352d32b531cc8a202346a12eff6d45bc74f15491d00bab6e944af44c66f82401d7b9a9fe8dca85cd07c4991f7943789cc87849998a975c5c1afbc5a25cdf1fb74b7eb1b33ffe84c74aa95ffd7025848b72f2d90feb05bbae581360cddf5429fac75c5d94d531c140147510f018cda3c413281c4e143c81a9ee7088be6b4b7fefd05358de9dd7c35078fbac0a4c071b1b5f820ef3cffa9ee728e536ca08d609f654ab74f65ea2bba931023fc05d59909bc45ebde53a63504e09dcd8a0ebf958f953f6fd57de5c8e463917791fc7ddd6895d85148b7574c06a41b36d71d09b898f6913f02a2eeb567470c4a1a3ccbd93aee971fb0c81bcbe9694f9e2ac785ea53f9aee405ef7858245fed9f0286090f392411262f562935d8005186954dcdc6650147e602536b4eb436f57f3417e4db467398f5b573cbb3504b121dae8a90305b0e655319c0635c80fcf92971c00e4e8d6d165db108d92985f278281f9567c2dbf48787df87d19ca9a080601bd45f0a8e1f281a04eb29819562fe46da4e9a2f1e2c20d03bee1e1a937dfed24ff814a38ca3ccc189fd12bb38ed9c4a6f3f369221ee04461126391ee5b7499ebb93939cc660416da61d7a97791cf8bd246bf5b44d9f09ae25cb97c3f66f8ae03c984ced6fd64b881ca6f365259eedbe31aa2daf9b0d8a07442a3f1ff2908384081d06ba09daf423ee850a3a2c2e97b3b39e475ece4405bc982841f7abc76cc539e00f85d4aaba631206e4221102f90dac544402d1c67291c3e9cdb43f18078bfff8dddc549d043e30235b4524b0b9b71f7ae8bf30b3596e3a4b94cc265cfc38f9a8ad7769ccf6d616de1330daa66bb2eb1bc8c1c1d04031a0cdd18b2bca6c9b181679c38a2b19c0a4e0428875ee5fd5267b569f17f9a9c802e183865211ac904e7e7623fb95a0ca68e563e3ec433a48f80dea1028348ed7f579d55f2fd3738c2161877f59410b9544d181e3f466ed467cb0e623393c362aaaf9298e98b07e07beb13622058020ce8f7993b262ed7806c6e1504bea751bc961fa23286ca559ae63021bdf65832e793433c42d9280e3e024858d962f44924389c8b0c4cd3c5283b98927410b043fe4103e6d56d83984e6d3f9759f1b140a8fe107cfd885b27a8b0a2a21bca8ba27cb491b35d4684a5ede9909a176c2f5cc06e11ed8c28c210ac3e3db54239dd7c31a3646178e3575eb26f08f93016118b0fcb58f363780c8456e48e42b01e5e3066f97da03a98b7d40f1d8d5ecdec4c2111c14002ef6cf6b6d93fd0b56ad12b0ef5f3bce94d3c1742f5b1adebed12260f8ca9acc41f4d0d57cbc08f64c777d3e924fe0ce936b51a80b932189346373e0d8eb2d166e2b9484d6f92acbbb643261464b05c48acee186f7584658d0545e36506cbcad84272051bfb7feeb94dcefa73695c674a55c0608ffc8dda9944dcd79c94faf7d42a9d4dc1faf83b822440670a23851045029d1c5f976ffaf4d74e014b265bfa7f263b66329c18f20e6e565569c1736d46ce5676370bc3527c9ccba32b16be5882b3864fbce56ebafc3bb51c719ba8beb4904f113d4be523b3a2267a3945b32884db345923b2507000577bc2b7bc303a9b1473a79c5f1c28cf6fcd86874ca59558e32c1830940fab6b2417bc900413f7f4543a779127d1ed5ca87507c2f29aad09acb30bdad18f3c84628ae29370fa8adfd1c9b3c9857c7d1b81e47bd70431db249bf25be3313a99b5cbe8e8da17ddb6f9ed409e459fd74816ad36ddc39592c994aecd09e2745d6cc7ccbea0ef0b9521081707a6aaab7c5e8fbbd116e8f2c0f9bd3d53f8985113a6518ed8ed91f1e2121514710b2128c5069db6b703c9b5d317a82f8da5fdda82825d142f500d341df435a65412e69f0b2df6cc15a81200e015a0cd99ac111d3be41072f5fe8bbf5afa9a5bdb958dbe2ec6945f2ffe40aa3834cb0164143a78e47898c4536a787a499afdf25fcda791f1e8c9f208bb6ab6cdac3724709b504c01be4499fa6f023bde58f39e68d1061a24a9c2d853747cfe1601841d174b23d065872f9686f2386557fb25ec0311bd4ad9886d9b7315f15fc9eeee58de4e09ad14be2e3ae015e2d181d216bd53c76b00bf9866a11809fa9c57dfa665e4f67784708cb2e8d945d3b6517b17d1c50ffe9321485adaf3ce2d98b8594156245e716b3be125078fba3be7ffa92f7257d3b1ca6aa6ec89cce57c43c249f5ce5cbe7bb4d581bce0dccc677a111bc39748fd1a82401087a2f79457d8fff636a8ab700d668dc47bc4c688116e682b6a612d29a89ff7d428ed4a919285b62f2537a99c9085fab1ead4c63a22c6ba7e36691ec3aba972d84fe6c59e90d375c9c038589169c083ff562048727dde24147b8e9aa7a6139f7d5b0f3d2585c093610b7aee24b775d420e477f4c41025bdcb91d32f549609f319295610bf37ec8ddbd75a4527c40ebadadfe85d2bd22199640362ff7aad26d6e32efbc067628766d9b542d6835b7aab2abc7e5ea80e0d944b34e1dc761e4972cd3528ef9b376d645b28cadda0e18ed0a6abe4bc863f2823972b0b09eee4eee956620a8267be6cc2244522ce3a05ec631f71d571a7fc59fabc36356da25e52fdec2ef3be9f61fa43a6c991a02a7177ef08dc4643e7a0ecfa080d3e4f561c89c41d804cdbaf7ad1682568bd5ac67bbb45496301dadb837498cb449743cbc5568c9767a2d890f0f5dd62adc40e1b9e2e2ccfed7f37d3d3adc8ab6f154a3f3074ed79cb6bc85a725ef3c4e1153bacc5e1f8b0f0500dc8e4e0bb2ebde6107be2e63b687f1475356e485a88cdf6e869cc7b818bdd7dc0893981878bce3627edb8b5f783cce8a4c8e19fced18973fd4fc7aee51a7d296ac3a340df5a781d13dc9d7f246e020ff3dba7250f18694c2c004784d0a263bb1a27008e6989482cdc9beabb163d421efaaee5081611ef0959139cf9ad1791422065383f3ed8e198e9393bc584cac189df6c445439a0221b2ce526cedeafd407389156b3765a788fa09fbe93c049e2d015718058463b5e329dc1c2576bea2410061696797b9898bf910b91e66132d230e6571e45bd8d9aa155be7f9bd74878446f400a0211a1f9f5c2299ede3eb472e5148eabd2a4fe541b8658a5be39693e92f4d9c9da895d260f3ee44bbcb6219e3ae29f4e9b0fe1666683a001dd97263d464f97fb28c691f1ebb994133f53d172a21c505daf4a48c327c890ae3bb44ea4145a21a605b34a5f241aa363672c402aba4ef08437a1ebd46642ca5171a009e5f7d4030164f0a1ec98a0c2093b9dfaf8747b52148e6a40e48e53a0a9a596f626a049cccf7f6d1974ef84063973dcdc1352aa82ec9f18f41bb71b45b4e7ef41491f31ee79d9a06e81ff924a2e999c14d7c3a36fffba0f9e255530822d8e396b2e9f565499a4f07146682181b0acaecdf5a777c483599dc0ba67fa97f7f405d30844d8e3b01802f4c30743b3107c88063b37e3d13a4ea8db329a1f33a08de61bfbb6ccb47ba6dab13da371a2e26adcb9b519426fab3100f21b80d5ba9f9106192279156514e6665378a93149f68e75fec916d63f8dd98b7455000757c2400f4050aa75effe255ab95d0e66f9049cb580ba6c6fcc809aca955f9ad0df855b181c90378233d03f655ed1e4e225b18dda201e5a2d424b5bedbd97d4026d3d8ac77a77b9feb5d39b1938770b7c0c55a12962deca682b6c9d50f68c713f4cb41f8e59057d154dc2cbf991122e94b8c5d855f2513cfad81389f109baadffd9cfff3bffcff28dce6ac14457ca01f01b3e44cc7b8a284d3c5dafb6e07aa07cbd7a5dc43f10160cb004c1317f58a4a0355c7cbfc75ce8b01d38e9b92510efed6a82ef2c5c0e74c93a85b0a9216bd339dec661d6c9eb10274d0dc1e239e4da6434fa4d5500c9bb30d8e926c999b1ad8c66a001c4d94a09d034abd27301f4ce68b1e4ced6ed423856e1419f7b84691829a53600f48226643921c2a324aed4e4670cb73d05f313ae4638a709f8f0a49e7e1b9c3b7cb65773d7d0cedf21cbc55585e40248b417666df2286b12ecdfa9516816ad915c391d930a5b641de3dd603f9c2a470aefcd7739eb0f3020e7af1aa615a2b4e05fb814536e998464b6cef754f9e62a65e23ae9253ffb3d032adea15a7009156cf934744b44003267a929e61ea19ac0d43bf21bd3f51cbccac82acfffa6b6305739d791ba98f84f1db64d3673ea551d4bbe09e68ed62af6d8573a24a23a1b031e040420b1e3c8f5944fce769b56676c00cd05684164c1f1fe3329a1055c14e0a81b4ba84180b33287e68400ac45845ba6d5cc1e22ed804dadc637093782792d6dd51225260a9130ea7aae1f894bca321d1cf039f219b4c89c5461524687497694f7ba0d551df16aa7fc14717a581eada3549f2f6dd8ecb735339975f69e7c7277477d2e3cad8002f68642dfb0a92b56bcd2ade393820981bed741ebc739a0c6fd8ba93ae7056baafab5474aeb869afeccfdf0f096873ed9eac388b2da79aa730585009516688b562ac1c2b2a4c8ae94dce770ed7200189c4ba02034622af73be9371abc84fe62ba0cc1559b0f4b5bd5beb13f54a6085bc449aec87bcb2caf2e733d1045e167e9b4e8e211e8247c091b3f1ed4f60c55e0313aec19d066b694ab397c572eb57ec170a7deaec91dc2d772a4e72b61b5f1857463063f29a1e2a1011b6d31b5cf3f256a06d2d626f6a204685ac9e386ee618f42da0be5825867122c09e6070060402776aad6383cb67a8197cc94c1763d2e07183340aec1fde1f820717c9ea800a184be2b372767dda7834a49648ab6841eef1f7e7bf05a0956df2c4b3ff8121cb544aca56dab2652d3f0decbf09e588020ac75a2eb5ae5c90722d67a835563c767561efab688de38be7bf3271dec6e883fd39d430a6a131bba7540f0150403f8cd65357f280160d08d71022bb7ae53a8942f83a2bcdcfbb0b1ff3c3477c592c3408cbf7b17a61d75b1571510ad273685dca4eddec6846c592d91761473921f3b0c8748da63d23772007669e62b972b24d23a8c39d1aead6fd3f32eac7b78e6f9ae41a22bb13db313f6ffedbf2453c08bfa36fec141f7796112a5236d5fea956ab7562491a98280d8bfd413f90e4f4965223225a9d3773d98cb5a29b2173d02f7f0606bffb8405a07823d9ef53e9bc19580ef318562405fe956d5f01f5c8ab0c1164eda992c9a7aa6d488fc483b78eb2bd17de10107bff1ad9c4a85d685fdf476728a5471b65dd53ee7b4c52a1ab3c23cb41e8b51932b7f7db430f23aa54b291c0841c92485ea1bbc462893a9e7c5ee1062bd65af5f", 0x100c}, {0x0}, {&(0x7f0000001140)="3e2a39e907c7824bb0cc3925675c1a01197782", 0x13}], 0x3}}, {{&(0x7f00000011c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43}}}, 0x80, 0x0, 0x0, &(0x7f00000016c0)=[{0x1010, 0x115, 0x2, "c07249c379fb092600ff7a57c45cd0470c27bf4414e0f3719b725b710baf164dcaadf491b8e8669c8a501e5f2c2d71b50689e11693cfd0cea4212a4f8f892fc4701f132d0be2023f12144c7a877fcc7c72af76d918b493e2aa47b283628859d2848928fbea5b68c2d36c67174e5490b159092f042a8a1e6ff907de29a67e935f7b14eea2f710a2ba37d734205205ef11cb628de56440834987e14158d46091047193c3f4e3e2ebe8add65239277d60d702b3ccabb2050c69f39eea7989c472a0351f9075d2f2f4d73c96427d5fe77f6437b9ad37fcd5ea49a7122c8ea4984d306974ead168ff87b3b6ccfaa03299a1fb5d78f1fb2e77dc41c659e52e5799f32b830c8a76d57a7fddf3d5fd65dd8b573453f2f8ac03d8e560fcf11ed6e2751de695e6c1ecdf8e87c7f998ba97e9f7dbe8cbacaffc50aa9602e70f26a45d21a4e4405afb9773680db8826a4c440251c5e3e3fc71a7598a5fb670044ef2c5b09cd4be3bd3fcc33370daf3dc5a507dfa0e5b21a896ea0fb2f5da1542fa3c08e4ada3f08442190bf10c691fc541039003999578f297f26c78a7c3df9473466490a400459b102e5d8d758a0bf53ec6b9d980e4ad447cbf8c184455250e76532144a7e7654a015b1870fed712a67ed64aa9b2c713c07084a2dad2b7fcaec112e7940ef413569a806118cc55778c536ee49b839818fa85954b5136f51ec45c4bdd3761c88e377c4897c4784b80c56ac3a74a8e709048a0c957b7b627604ce12459488c131f49f754343adad41f2cab22b95a876e3fbecd409bd27040c78b7b0ad3c3222e2ff363e840c716c536fe29bda19844226ffeef1a10ce1f44c0a8ac1607b5b585562dbfeaa362b160b5ea5c134f96f7a8fc7e80e7ddb7a40c4c4e4e65009348d909163a4ed2754f7f2a34a2266a7a9ab32dd19ad6e8dcbfb18b4a14d08cc0c709b58c20a2d56fb7b9d72c0ffac5300d16afbb7429e2f16f20d2be79a04e13ab056ed53f671bf5db17c28c26c5a7b1f501f0944e2be536e0f7dff0cf2555dd092ddc0162679545950a8f31cf1418d6a5da56a03bffc1e4625436b9e528ce769ff42bdcee6877363ae4cc70fd83c83e0f637c5ae22f4ea42d6ce96b3ef3871aebc48f21be72bb4c8ff2bea2c9410cd8adc4cccc81f32a1f8482e64cbb50bb068bf0e2298f35402385270dc22cada374be80a721ee92601c09dc1e1b2d815794c3c82efa74c4948fab131abd0e8aa25fe909774fd9c3c389c2ad51d4c03e886c7c8d8ebd6b6076647e9ea507e6385cdb7b1385b8128bf86878368f51d9ff480f5eda0d28690d3ff694421bd88f172152a3ab062633792c342627be261ed5ab6105cb5283b8385c53cc62fd2c0ff69b5d6ecdad04c04e1910cff05abcc92faa5455e58533ae5a1df2a0ffbd20f36028ee72822073f3cfe03c08749f027734a4bcd7ea7666ce998c376f6e49747f9f014e5a4d39a89b7b81bc8c5ff342c31fc7702574ae7eb5fba04c7c3f126841899d3ae2fe85ffa5604d8e038ba17fb5b0d51bccc01a664de20cf674fb0f3abaa0ec3e9ea3eb68bedb877618a4eb6a0d09e5043c4cb8246a8656d86789a188dfd5cbe6045411cfc3cc7c4bb70c5ffce267d22e7209526fa30efd9e5de2d9fcf77a9910dbbc4c5cfe0632e6a5462a2112b9fb7f0aab06e8a152520f2dae35b80e7a978d31cdd8fd4379dc5e3b54ebc7ee96cdd7d7fad8c611d6dcdd95dc121a396d6ba30a024ad36a96ef016019b14b920f8ae43677e3e85292c46990fa25fce333a9440883b61f0a9736dca32c49d2f08020f0f8270e4116c83f97f5dfa0aefd3d64b2d387a6ea8fb18bfb58412cc215ceb2ad54c9227810b6705cd34feb19086bd1bd711609fcaa9b3280445b2fe18d9666a667beffe7673aa6e29892bd7193cd877bf6226155650ec76e4aaab4f46289168c33ca80d9d03612c15be414e9edd647f468b9a79b54b82a844451f4e07c66efb6aa9376cf427f180b3e75ae283eef3f7ff23fd5d362ce2d8220442f944db2802401bde5dc923e2ab80eb20856ceb52db900b2ccf57b016e5beb4cc96239660f5b5560c84cc2d80888725612f95190f6b7e04f49b189d45f9e8be6b1d359c2dae83099bfb533e1fa6ea005209783eeeb06f8bb2ff6734bfa3c9f1f4bfffb2b43081e16ab1f2d498dcb1fbe04d9e912d2c49bfe4e41ba43fd65bfb305be83a89f6a7e250a5f23ec05575e556e3cb9b12c217a02cde2c729c7404d2e0bb448b2c026a2f74ab757c78dd37f017b2342b685d9288832f3b74777ae56379434a5388a5f666c8930eef14637dd941f349364d771d96c731c5551f29e204e27d809b5476d6816375d97f404a7c357ba356919a0d2b42f931c308f0d1b96dff564d9140a0b400da522b66fc5a17d2f7ee93439f01fc8ec26a4b719b5425cf91c1660b3ba6a06b9d6367bd2dad6e48dd5a837054c14b0672f8b193e23c094d153f56024bf68c033beedbf8772bd8164e3a84df3d2b5a47cf5bebc65c89fb4ca2632507f6ef6b2fea4d149c55a28ead5d85a7a93b874d6f713ee9909a8c91f0a86f370b6e9aabf73c55f1896219241d1ce3f2cee4ba96cc8f975f512ee657010a1004b439562985eea20758b93573b732aeee8f2f6c8a95917544e8da431ffc9d46ca463a67d0136c948bcf6df6c8ef7e692710aea5ee70d5718e17aed9e790a57350346112b3afbe583d2c5aec6ee0c682f44da72b9847113e1f8c9754902f33948ccd0c00890b417fa57d672a6ae535188326190002ea1620b317ede104b3224e1724bc523ea49c6f6dac9da102771e30aeda8a82323ad542aefa6561f28d96e520f27bbf7a72636710b3149613543fa91e49fa4b2a7950621bbec099301b0f9305ace18d4738a5887fce61dd652bd21f5e87e386fa87ff41fd2b8214675b43712c189ef0ed59e44d5c6a1921a1f3203d884666dcaf909244e347835ac79f2a4280107d67c422c7e2c57f0808e6a91a724ef36498d1ec8555d6b70c732778672261a2cfa15de5579449ddc58c3ef04a3bd7e7628427c4f78848cb95c9e2093b56a3a11746883f26d7a05e7d14cf3e74610e72f678c2d07deacad9a06fbf4f9c0b0e2040015b0ce296aa8869df44b7e177bfe51aae891c2a7cf42ce85c9de4388f6c1bcc0f76db7d151fd77b5bba46b67b8454abc9e8f5d651b48cd68fa5f4f4aecc03416103a5b0aec1ff34d1976e20fd86cb0f970263b426701194ce0412aa7d4a5efabe4bf4db8bd91808d87c37f992e694bede0c0992e10a0b1297ad06fd382a9a3e83f287eb66ff1ad8f06d44a5d6f170d9da076042a5d14ea6126ec722764fc43cf2efdb8f6e3d6a735b6115d9bf11bd4bd7bf938ea3a921f8f355991c3f8a45e2cfb8cc2999e23c699b2074fe1edbad3a0d00cf143124e46a578ce76f713746720e7b541af911bad4c9d6fefd3e25886bae0317c67638df34c415c95e891537c9200ea1827543740f1416e1fe8a9a2d8ccaa6ec72277f84db79dbe1feabbdfa5cfac1f5a0b63c5213a13c0c4d5fa00ac1aa704c4d0b2cbeb162fc5fba06bfe5776f69a74e137e1f7935606c77f8ec633ed9a824e3c03b6943d500daf2adba92cb88a243e35993e73bffb3492b3d93536efda852259e93b6f90d9bae8610c792f6ed729869009d97bc251ebb37ac12b51c70cec7da9a51548cdb7df429c6d97d30445c6ad75358e5e4c9769e7040c04a0f577c304dab1d0df3a37670b8df6c034a8310552bfe621b0f6e2f27a86ac77dccdd57a80e26c57450d0e673f61a276aae1766e51c70ab3e060c5abd24e7b7ae2311af0da8fe30a505ac6901417d4ea2f03fd0cafa9bf530e81b7d204bad7c89d0ab0c9407593c4ff7368c8e14502d59deeaaffe80cc0545110a7a162dd683107e84bfb98df971d21bf5ba7762e100b74149e99723ed6999c370a160b0b879b66e3a4fd79218ed2e7f2884fc7786192c7489e68abb9e589538988cf242b292d5315494dcc0d7768c33d9d3ebd897496f62d5d9256735761f12a354521a0a65735cdfe358fa1d9d6417521a035a03af641620167f769c89963624399ef1a081d90432b800914764edb3f8dc111bbaafbb085b4c47cc16b325d67feb70039f741ad1569cb346260984a2ac651c6fd3050601cf65330f0d41ae64be159c4af79b0144a577a98aedcf515074d38d3364bbf49102ed2e7be668a40076b232b0633a8a7abfd35f6ea3bdee343db4896fd5e36f599977363df99595db27bb8a9ce00d5766dfb9c43fa5b06facadf1d997552d052ef9e8cab2afa456abf2f4a7a598796c654461b01d5ccc9e6de949fff9d5f042e66cebc25cd59cfc32861a737711b3a5f72b7668b23b13240f148a8b9df0acefcff35a45930d398a2d6fe6213b78921b19d322163093f427820f030e58d9ffecd2c677316c782d069977ce91fc4676ee3dce450a4fa1f5cd6b46ff3c4cac435d61b686ab6a352ea0ed6742075eaf1e0eb8a0ad71e66fddac33721e6180db326b0853eef5b3d3bdb5a9b157acc882881176d0974fcd6061ce79e2b24f631464cb55a1005efce3d3a41ac70343cdf3becb4c0d433ad988e45c5776e76b122c66851d8b04ff5dd0becd4c53655cf43743b04ca141856cf36de666c19bb1a4c45aab7ecdc4c644eae3b67bf75b16c15f034016cdf781c8e344a9f305044624f43b79ac361f6c5c029da4b9db19959d766fc0fde2f0e32b89259422cf043ed3a46b8290a729f724b770243e893aa85221112b648fbcd83f14df558fe7e759023c3fe364f37a46039a3dc7a8237fc3c6d2905e1722ae195a5996ac3f2e6436281572fb682448f098a8473e65e83941eedf8184a206834772e0b1627ab1431aae981e70d481d614a75c8ef05f87c4387bf64e8f3aebace9135147c517c3b4b1b077e6ae319d500ddc56f6a7e2b371a3fff4fd790e0da1a19661d187acf6e81f0e7dbeb71698550f418cbecacc42e6fb0a863747dbaa3e4b2557555169b17fd530093d557fa1e45082aea1d2a48c5de6a93fc59f40f6675fa4043c442b4f848e8b8d43945303fc637821974520b547b4a96f8eb6297f957e0009f0c1d26e64896b70d5b95a75292eecc11f00bbee49a12ed10bd2624a7b59acd5172cd22062c20d7f2640154d4a6f87d36b8b48848f8ce18ba8a537c6b397a2c0389ba0e2136999b72576cb02f4faeee745c9324991eb57ebbb6a16ee8cfb2babcc5642e073d7429bbf5177fc4c1654bc7aeec260d28e9330b32854069806a89b84010f52962d026bd32155b22d19514057d14cd665b0f82756246c86979fbfd22451eed1efbe5033425f2f84a91be6c502befeef0e36ce1c8c6767c40a4b7f2f28f23ceab477d63cf13f9bbaaff22ee30cff12c15e4857c81ab42606e1b1b0f46d1bc556cbc10b0e0b1b405145643387b8570b3e9352823a589fa1963ec5fc5c8deecc082059e11fe49c412e7ee34ebed74d2547cb68b0bf21126a9bfa86225aa785d2579ffe65798c8aa02700b044909b83242d37342100cf4d1e1cdf0352cc8d6e904ccaa4712cf544eb47230faa3064f276ca87b0e009782369bbf62074147b78984688659fc36e4c1130e5b1b2abd00adf7d88c60863b723d134d48b2b2401fac6b9b9e4bad324182bde4caba0d6632c248f165d0f92b9fa53f3cb7762e7ec86ffb11c8dc66b22ce48b5772037f7108a4a2823de8de1b7f455a2dc2bfc98278d604209acdeec9d50e93dd8b197fe2f887a0113206e24cc3c2b4893b34366b814c2c7831eb03e665c417614ce0"}, {0x10, 0x10e, 0x8}, {0x50, 0x107, 0xc, "0c44eec8d24d43d5c12304e393e2b18cd811776b4c480d4c6d2a8bbc2b1649512510a704734ea11ae23d8017413ffd31ec470c52319ab024760eb53e331b"}, {0x80, 0x113, 0x10000, "9c8a23b324f86453ea3cc711ba45c6e96bf5a7f56369b6053785bdedf65ef6be972141e47f8b0042519750d48eeba6ea8b11ed091ac646981d539acd5b0a2dc045d536abdff666a4d333ff0a1c920d86786f9ee42c09ced8214e1578144815d2bff2edb103e258c41461"}, {0x70, 0x0, 0xfdd, "8d8b98c587330f37952deea11495569073c27d7dde67a9287634ebc0f2cd0e383f7ca11711474c52ce454ea624da3a8377b70019a30bfa42cf557b04823adf16d3dc8463baa05c9dfc4dce03247a607b64ee658c49b985a094dcbb0b743935"}, {0x98, 0x109, 0x7, "624403df909084bad81971c03da12df0427654806990e340d833c1e99c50f3f6c65fa857bada339e8f3a0bc8409450de1bf29ada9a741be525f4b21b241cf4bc235d342f7cb6eee894c3d6e002337cafd0a90c97f120aeba8c293c6e7aeb80221e6dcac37b602a7039c6c5b104de16ae53b27dd201e783990a75d7e5c016007e93f958b3527d"}], 0x11f8}}], 0x2, 0x800) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c00140660"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, 0x0, 0x4008014) socket$igmp(0x2, 0x3, 0x2) 777.431864ms ago: executing program 4 (id=8974): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c53", 0x1d}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067", 0x33}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r6) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000001400)={0xe0c, 0x0, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [{{0x254, 0x1, {{0x1, 0x4}, 0xc6, 0xff, 0x9, 0xff, 0x24, 'syz1\x00', "d982dd1c77934c3aea6dadde0d34f9ee2a47f193672dafd30ef081d3fea323c7", "d06629245b417c930fa0f7977a4f868b3216b1e36a7ec4dc9a8a2545908a812e", [{0xaa40, 0x5, {0x0, 0x6}}, {0xff, 0x0, {0x2, 0x9}}, {0x40, 0x6, {0x3, 0xfffffff8}}, {0xf338, 0x2, {0x3, 0x1}}, {0xba, 0x8, {0x3, 0x1ff}}, {0x6, 0x8000, {0x1, 0x9}}, {0x9, 0x4, {0x1, 0x8c}}, {0x5, 0x4, {0xf20993c30451841, 0x8}}, {0x8001, 0x8, {0x1, 0x4}}, {0x0, 0x612a, {0x2, 0x40}}, {0x21e, 0x5, {0x2, 0x8}}, {0x3, 0x1, {0x2, 0x1}}, {0x2, 0x1e07, {0x3, 0x1}}, {0x89d0, 0xfffe, {0x0, 0xdee}}, {0x7, 0x6f, {0x2}}, {0x6, 0xa7f, {0x3, 0xd6}}, {0x3, 0x7f, {0x3, 0x2}}, {0x321, 0x8b8, {0x1, 0x20000000}}, {0x1, 0x0, {0x3}}, {0x0, 0x823e, {0x5, 0x83}}, {0x4, 0x2, {0x0, 0x3}}, {0x8, 0xffff, {0x0, 0x3}}, {0x9, 0xbe8, {0x0, 0x5}}, {0x8, 0xc000, {0x2, 0x9}}, {0xa, 0x4}, {0x101, 0x8, {0x451fe1916d6f76ab, 0xab1d}}, {0x7, 0x6, {0x0, 0x2}}, {0x7f, 0x0, {0x1, 0x33}}, {0x2, 0xfffc, {0x0, 0xdfa}}, {0x3, 0x0, {0x1, 0x5}}, {0xc46, 0x4, {0x3}}, {0x8001, 0xe7, {0x3, 0x6}}, {0x3, 0x8, {0x1, 0x3}}, {0x6, 0x5, {0x3, 0x10}}, {0x1, 0xd55, {0x3, 0x8}}, {0x5, 0xa33, {0x0, 0x401}}, {0x7ff, 0x800, {0x1, 0x8001}}, {0x1, 0x0, {0x3, 0x1}}, {0x1000, 0xaa2f, {0x0, 0x9}}, {0xa373, 0xf000, {0x2, 0x10}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x4, 0x3, 0x6, 0xe1, 0x19, 'syz1\x00', "61e378883a8c525d0ac956b6f35668302123ee38333b489fbd749e5cc3ec28bd", "f390fbd0ec1f615c34d9e018ee2199cdd06c7eaf86343b3d3f471c3da28f95e1", [{0xa8e, 0x8, {0x3, 0x4}}, {0x8, 0xb, {0x2, 0x4}}, {0x2, 0x4, {0x0, 0xfffffffb}}, {0x9, 0x3ea, {0x3, 0x200}}, {0x6, 0x0, {0x1, 0x7}}, {0x2, 0x855, {0x1, 0x5}}, {0x180, 0x9, {0x1, 0xc}}, {0x7, 0x0, {0x2, 0x6}}, {0x1c, 0x8, {0x2, 0xde0}}, {0x7, 0x800, {0x3, 0x80}}, {0x8c, 0x5, {0x3, 0x8}}, {0xb900, 0x7, {0x3, 0x81}}, {0x7, 0xfff8, {0x2, 0x5}}, {0x3ff, 0x2, {0x2, 0xd0e5}}, {0x3c, 0x3, {0x3, 0x2}}, {0x100, 0x0, {0x1, 0x5f78cab3}}, {0xffff, 0xfff, {0x1, 0xfffffffc}}, {0xfff, 0x11, {0x1, 0x8}}, {0x1, 0x5, {0x3, 0x6}}, {0x4, 0x2, {0x2, 0x6}}, {0x8, 0x3d7, {0x3, 0x8}}, {0x2, 0x3, {0x0, 0x1}}, {0x400, 0x5, {0x2, 0x46}}, {0x8, 0xe00, {0x2, 0x50000}}, {0xfff9, 0x4, {0x3, 0x3}}, {0x0, 0x1, {0x2, 0x6}}, {0xfb, 0x3, {0x2, 0x2}}, {0x7, 0x101, {0x1, 0x101}}, {0x10, 0x9, {0x2, 0x81}}, {0x3, 0x9, {0x0, 0xd4f}}, {0x6, 0x4, {0x1, 0x7fffffff}}, {0xa8, 0x3, {0x1, 0xdeb4}}, {0x6, 0xa889, {0x2, 0x9}}, {0x3, 0xa, {0x0, 0x8a}}, {0x6, 0x6, {0x0, 0x4}}, {0x4c9, 0x0, {0x0, 0x8}}, {0x4, 0x5, {0x2, 0xff}}, {0xfffc, 0xf, {0x3, 0x1}}, {0x7, 0x3, {0x2, 0xc}}, {0xfffe, 0x40, {0x0, 0xf2c}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x3, 0x10, 0x5b2, 0x3, 0x1b, 'syz0\x00', "02bd0fdf7632d629d954f2b6ec1567eb85b25f4eb04c753ef61fef3310d110ce", "217f665920525a5827446d07ba2a4f0a21a9040ac67e4668d0fc71f490d2b618", [{0x6, 0x2, {0x0, 0x8}}, {0x8, 0x8000, {0x0, 0x5}}, {0x2, 0xffff, {0x2, 0x8000}}, {0x6, 0x3ff, {0x0, 0x6}}, {0x7, 0x0, {0x3, 0x7}}, {0xa4, 0xfffb, {0x3, 0xdd0}}, {0xb614, 0x0, {0x0, 0x1}}, {0x8000, 0xae, {0x1, 0x1}}, {0xddb7, 0x9, {0x1, 0x1}}, {0xde, 0x2, {0x3, 0x1b}}, {0x3, 0x3, {0x0, 0x4}}, {0x401, 0xd, {0x2, 0x506}}, {0x401, 0x7, {0x3, 0x800}}, {0x60e7, 0xfcdc, {0x1, 0x6}}, {0x7, 0xfd, {0x1, 0x2}}, {0x2, 0xe57, {0x3, 0x1}}, {0x1, 0x5, {0x1, 0x8}}, {0x5, 0xb4d, {0x0, 0x4}}, {0x6, 0x9, {0x1, 0x3}}, {0x3, 0x7, {0x0, 0x800}}, {0x800, 0x6, {0x0, 0x7}}, {0x9, 0x8, {0x0, 0x7}}, {0x3, 0x0, {0x3}}, {0xd, 0x8136, {0x1, 0x3}}, {0x5, 0x5, {0x1}}, {0x5, 0x1b4, {0x2, 0xfffffff9}}, {0xffff, 0x3, {0x3, 0x8}}, {0x6, 0x40, {0x2, 0xfffffffe}}, {0x7, 0x5, {0x0, 0x7}}, {0xd, 0x6, {0x2, 0x1}}, {0x6, 0x5, {0x0, 0x9}}, {0xc75, 0xc2, {0x2, 0x3}}, {0x14, 0x5, {0x0, 0x6}}, {0x2, 0x1f, {0x0, 0x4}}, {0x81, 0x1000, {0x3, 0x7}}, {0x2, 0x0, {0x1, 0x7fff}}, {0x1000, 0xa22, {0x0, 0x1}}, {0x0, 0x7f, {0x3, 0x81}}, {0x1, 0x9, {0x1, 0x8}}, {0x8, 0x5, {0x1, 0x30d}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x1, 0x25, 0x1, 0x5, 0x1d, 'syz1\x00', "19b05045924d2e68a20c7330e67687baaceb45dbf249d81aae29751162f1e703", "cd15313c74e50f09a4a6080f0a1c16f746191905ae1c4e173fc7ea39e9dbc319", [{0x8b, 0xfff9, {0x0, 0x800}}, {0x5, 0xae06, {0x0, 0x3}}, {0x0, 0xb54, {0x3, 0xffff518d}}, {0x8000, 0x3, {0x0, 0x3}}, {0x9, 0x0, {0x0, 0x7ff}}, {0x10, 0x1, {0x1, 0xbd}}, {0x3, 0x2, {0x3, 0x1}}, {0x4, 0x6, {0x3, 0xf}}, {0x1, 0x1c, {0x0, 0x4}}, {0x8000, 0x2, {0x2, 0x7}}, {0x5, 0x7, {0x3, 0x1000}}, {0x8b1e, 0x8, {0x3}}, {0x6, 0x2, {0x0, 0x4}}, {0x7, 0xb, {0x2, 0x80000001}}, {0x3, 0x4, {0x2, 0x40}}, {0xf, 0x7f, {0x1, 0x3}}, {0xf, 0x9, {0x1, 0x8}}, {0x4a1, 0xd, {0x1, 0x4}}, {0x6, 0x5, {0x2, 0x2}}, {0x8, 0x2, {0x1, 0x6}}, {0x0, 0x4, {0x1, 0x7}}, {0xfff, 0x6, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0x8}}, {0x5, 0x7, {0x0, 0x9}}, {0x7, 0x701, {0x0, 0x8}}, {0x0, 0x1, {0x2, 0x3}}, {0x104, 0x0, {0x1, 0x9}}, {0x0, 0x0, {0x2, 0x2}}, {0x550, 0x4, {0x1, 0x1ff}}, {0x5, 0xed, {0x3, 0x6}}, {0x9, 0x5, {0xa8022b567a6b6700, 0x7f}}, {0x9, 0x3, {0x3, 0x2}}, {0xa51e, 0xfff7, {0x2, 0x10}}, {0x6, 0x7, {0x3}}, {0x9, 0xe4, {0x3, 0x5}}, {0x9, 0x3, {0x2, 0x4}}, {0x5, 0x1, {0x1, 0x1ff}}, {0x8, 0x0, {0x3}}, {0x400, 0x0, {0xaa07dabf6999ec23, 0x75}}, {0x1ff, 0xd, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x7fffffff}, 0x3, 0xb, 0x5, 0x8f, 0x3, 'syz1\x00', "8567db8132bb900e2f855faffc2894a3217a16a288683679441f1cdddb0a0380", "b819fbd9d319fbb3b0ad2f79d4743d37bfbd2e4a77ff6b66d1c7e491921693d2", [{0x10, 0x0, {0x2, 0x6}}, {0xe8d, 0x9, {0x3, 0x400}}, {0x14, 0xfff7, {0x2, 0x3}}, {0x4, 0x123, {0x0, 0x6}}, {0x7, 0x8, {0x3, 0xb5}}, {0x2, 0x35, {0x0, 0x2}}, {0x5c7, 0x1}, {0x1ff, 0x800, {0x2}}, {0x6000, 0x8, {0x3}}, {0x10, 0x1b9, {0x1, 0x9}}, {0x6, 0x8, {0x1, 0x4c}}, {0x100}, {0x3, 0x8000, {0x1, 0x7}}, {0x15d, 0xe, {0x0, 0x1}}, {0x9, 0xa, {0x0, 0x4}}, {0xa303, 0x4, {0x3}}, {0x4, 0xfe2, {0x1, 0x834}}, {0x7fff, 0xc, {0x3, 0x8}}, {0x0, 0x4, {0x1, 0x8}}, {0x4, 0x8, {0x1, 0x101}}, {0xfff, 0x6, {0x1, 0x1400}}, {0x1, 0xb3, {0x0, 0x2}}, {0x1, 0x8, {0x1, 0x8}}, {0x6, 0x4, {0x3, 0x2}}, {0x7, 0x0, {0x3, 0x7}}, {0x6, 0x7, {0x1, 0xffffffff}}, {0xef18, 0x5, {0x3, 0x7}}, {0x7, 0x5, {0x2, 0xd602}}, {0x265, 0x6, {0x2, 0x4}}, {0x7fff, 0x861, {0x0, 0x5}}, {0x1ff, 0x3, {0x1, 0x2}}, {0x1, 0x4, {0x2, 0x80000001}}, {0x0, 0x2, {0x1}}, {0x80, 0x0, {0x1, 0xffff}}, {0x8001, 0x356, {0x3, 0x8000}}, {0x1, 0x3, {0x2, 0x3}}, {0x1, 0x40, {0x1}}, {0x8000, 0xf, {0x3}}, {0xcca, 0xfff, {0x0, 0x7}}, {0x7, 0x8, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x5, 0x1, 0x0, 0x7, 0x1c, 'syz0\x00', "71cc640bc42bf05132bc48cfc34deb11f868ae02928bb11473b5c1716591b1fb", "084c01229abf3846f9e9ac97a01b33af2e808c1b11faa0710cd77f11b6b21f5d", [{0xdde8, 0x401, {0x3, 0x83c}}, {0x9, 0x2, {0x1, 0x3}}, {0x3, 0x0, {0x2, 0x7}}, {0x3, 0xfff, {0x2, 0x6}}, {0xfc00, 0x1, {0x1, 0x7}}, {0x4, 0x4, {0x1, 0x6}}, {0xfff7, 0x71, {0x2, 0x550c}}, {0x9, 0x1ff, {0x3, 0x1}}, {0x400, 0xe}, {0xffff, 0x1, {0x2, 0x1}}, {0x1, 0x7, {0x0, 0x6}}, {0x82, 0x0, {0x0, 0x5}}, {0x6, 0x5}, {0xfff9, 0x0, {0x2, 0x3}}, {0x2, 0x6, {0x1, 0x5}}, {0x5, 0x0, {0x2}}, {0x31, 0x9, {0x0, 0x7}}, {0x4, 0x2000, {0x3, 0xfffffff9}}, {0x2, 0x9, {0x0, 0x9}}, {0xd, 0x1, {0x0, 0x7fff}}, {0xc67d, 0x1, {0x3, 0xcfcc}}, {0x4c9, 0xfdb, {0x1, 0x1}}, {0x1000, 0x4, {0x0, 0x5eaaa707}}, {0x9, 0x1, {0x0, 0x1f8}}, {0x4, 0x1ff, {0x1, 0x8}}, {0x101, 0x80, {0x2, 0xffffffff}}, {0x8, 0x2, {0x1, 0xf}}, {0x1000, 0x2, {0x3, 0x10}}, {0x1, 0x7f, {0x1}}, {0x0, 0x101, {0x2, 0xc}}, {0x67d, 0xc, {0x0, 0x8}}, {0x82, 0xf, {0x2, 0x4}}, {0x8, 0x5, {0x3, 0x3}}, {0x3, 0x6, {0x3, 0x401}}, {0x40, 0x400, {0x0, 0x5}}, {0xf81, 0x7, {0x3, 0x6}}, {0xd, 0x401, {0x0, 0x40}}, {0xff81, 0xff, {0x1}}, {0x1, 0x6, {0x3, 0x10001}}, {0x0, 0xf, {0x1, 0x2}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 776.719916ms ago: executing program 1 (id=8975): r0 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0xfffffffffffffffd, &(0x7f0000000480)) (async, rerun: 64) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000140), &(0x7f00000002c0)=0x4) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100003050000000000000000000000002921cd455a194d331708469f06119dd63c21cdeb060209e8f90d157b4b17539e274d689c45dc951f88ab858d5e27cbf04b84c530a718e1ee7db8a9e8343211b08ba8ee3eea3d84793520cd7faf9092be04c767babe9d8523d31c814f98f79136ea8097dbe5cac87a79ab69e55028991c43b3ab9c71595810194dc372805032e464be78fff7", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c00028005000e000a000000"], 0x3c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x202c, r1, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd7}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "786f4e6996919b26d707cbe2dd296bbd7cdce5e53dd2943d002508ddcfdb6ecaa4816c611782404d03efd2cb57e6f7d2779fe1d12352bf5219954949a994ee6332736f7843d8aad2ab5ce8c12e8c6d77c97530f80f4e708214711020607e4076231be76490f433bdf368160df2fd94c6fdbfb8eece6bf616f7232f8811068bef5a1629d4584a38fb27c20047fe9b29baf0e5465051fa6bc0fdb642a1389e4c87a8b96a5f400c55efbdf5156396d60f172fbfd10920aa79ebb296a88a944b3ea77d4fb4de5d72dd130db3420e5d110b071edc83b912aee2a7209ec7501c28873ee74c1edf882c944e38a95740fd9de7b4470475711fd44e7ef8ef8ba85b928b593c0de8a96681d90de2358f0b87676a4b1986f25a249f9a2e43a8471a8c7f25fd1876db6246012881cac0bdfbfca44994a485c5152d7e6bd1491503e7044c52c5dae8c95b8d8e06ee9eed27fa70aab6e59fe072773a8c1244f9ee983520cc134b3bbb480a8d97f635ede6608570de898e103b9850e5fd4d0ba164f76de32c359c76c2fda16958fac40ce2ed945734d7e4b58e6e63dccbb2dd3e548e25336053186fadd004ae309686ad652d6eec1cf70e57881fef65eb7537746f6cf695beb64b999ae7e62ab619f0028bd02efbf974d52e401d14b90ec08663a57c412887f594150aa504afff0f6bca738b7c66862fd765328f7e08f3701c0aa01a155ac806278dbae15135fd25b15b90b7fd4a32ba99f72b38a83862167af0423e2fa528718fe64181e6f8112be3d2e98412ad784f76d832c263408819060dd9c0f2d6e098ba4b7855a093248ff6cb003a573b15860b07e33c212db2a1cf4a3b08bc4e0d1d2f55ed4a0808d5b3e94cc4d0755f8b8a902720a186dd22d4f65bf5c42f60dfa82d107c9db0d3254b51fa742f4e53daffac3c589321f329ab1359562c9629469709572506b13c879d5e3a2615bcb1a1d71d8ea0a6df521fb2abf7bd858eec2d921b2a3fecafe499a9689f8b7c5ff42984b30a5189b65120cd11143114e23487e9ceec5815755ef10ae74863ed7adc5142e5795c5bf6ff1ac00c220d15c31ab30ed891d092d08b5ee32e121f04b1eb69e035e75fc401fcaee9d747031b4c4888da37e8ab09961a1676232d33509c40b12f8f6b69fb9494dbb94b81993aa13b35b737c3f7114b8fd5d651b06419bd90be95e0bfc1e97575e1a388e656a896e9c76fc218f08da3a307c08305d9468f24b85937b647486fa8a304f69193df5cf58488a2060382e88806a39fb719f0c1d4a9734db3d592ca2f3ef79466fe5b339ba5a0d99405b420aff917490080509c41df2b36eac99c413e4ecb964cd25c3589c5ec12d9d6aa347748559f925842f66d75bba357c38fd2ad31a44acd97f8608c29c6fb7508f2f20f4ce5daf301c66b160b6b9e5d5abcf24110cf483bd78820da306ab1934a60092695a16d714f7b01e012c26560b0c0f8bb0095589e7f16996fa2b479cfcf45eeb8169feb6318311646bd5e087806bfc2a4da9cd9c8aa74792336454599106eaa93a44783bf0c15a0286a0c1d6952751a3f00f2e1f1cb79738696e5239aa0131f739a92fe199e53f3c9a46066ee5198c506b982b0c64308ebb895484079372d4180d386d6e016a58dd544fb61d4c966c370a10db079770bc6a16d64bec6097525eebf35c294a055974922b1a7bcd027e1d350c96184093d9eaa5f0f802434d2a417f138185b1d48bbc0135514337a5c88564c3fb0955688a2d516a3cc1ff47463f7f8829ebefde64c3a8bd502530929e61bba603e302098efb1ad14c3c3630cf879de6f0a6f51943ac2b24df8523a2ab229d940982af7de682e732deca54d60a491656935e31ade0ac3f456bfcb5885970f8527b41d77fa669d308b4a618d7b1eb3afc2e53db52451cb651bbfa1f5066dc553b06990d4d0305336439eedfc230078232f0401f57c65dd66cbcc825fa20fce5c71da0234eb9c7ca3db4912f7e8b2db7cdcb0e317df499ce725b3a974cbc21c391e08701ab7e0c28d7bbe58e615f69847f2bd1493349b85374d237fb07eea0792471c183d373f5fb9e5c9984a74cae993d4ce3bcb9861570396c5c86da37a481be8caab3a7a3d4049b55c17b663e48ef9ebf6c985175c4c486357a1b2bea4a2ee8de89d1a3082f2db656a080829d8df320361bf80bcd9cfdde4ff8d5fa54a474575bbddcb871dffaec527cffd6ea1fb7e78d2f16ced4bddea1684b0341f0dd536b037ccdc7b6b3489efccc8bd4a94e3f4601bb5e3e3117109cfe8a51d80bd2f82f7febcc6d6ff813617ae0901fe2d0366c122b80cd5b042159ca34eadf4df010e7bcd83178fec0792e09a9bc74d5a256e47d5f3344b3259dbac534fd2b98c8d7756a45a5890037fe22dbfc4181f5f6663bddd1485bbdf4bcfaae511cd0055f78a28e4898e07ba316a5ae8c492cff2859a9061ba6c3100e3c01fd31b300f7a836c439a1144b650f79f4410fcf5ae244dcef2c8e050c74f813baa89257d79d3869ca9656ed44cb9c9b1072a6017d8ad63d7b12189f2b17aa4a382223b2fe9fc29a894886afc1f6738de5d09345f04bc3c7f5dd1d82586473154c2f8a22c85c4ed3a2f0d29790fc26181b636792598170658d56f34b229b6f60a8c43d5f1a4654e4333903b4dd394bf86cc934cb116f99b9e8d6750500198b1cf2e6ae933b4280644ffeb1996740423700241f0af5286446b435fe8622252e05e52acf2215e5cdf4d22654cee9ae862e5260de1cbf06d3b505d945a7fa95c699ba1cfb4cb85e4b317cc4eb2e4b60f168e6d98e234ce7978268f29da05f3e421fc37dc4766a29e4ef7749395a508aea4bf0931ca03e3eaf65f1c27b1f18e53381c53ed85c8b8cb5d6cd662e398318addfdfa02703b74121a785abef8a370d1f017d487dade02df40abf4c95fc03110338a6d1b6caffad38ffd77cf54035e776bcea32676d8da4cd82449090b5262c791e6b0d9ae051114bed931f89341d65c0bc5d857e838c93a069341728964351b915c74944bfeca839852a4f211f826a372a38659f2f2fb5d3f115a6a32d76d004776f6fd6757d4afa77e17f05807e252ee3af4b37610bd27bcf4a2103c63cd57dcd02a1a6a3db541514068d8482fff0cf131cecb2b618820f0334e195a317e2b92814aabd0b3f8884b7439855a8895f825b332bc46d613d088f4f3134169f1fb770297d3a495c0c70c96cc68c7e0d7628950135904849071624c04778042f50d3566db1705a4271e2e1b4aebe79e777d5987e30cd070906b9d435de34cff5da13c4aff9919aad08779d10cae3691c115d0535d894c7c297d3fd39888130a535617afdea01c25fc281bcaed2a5ad3a2e4033b70d65727d897b0683e9fcddffa9f0d13ef386fc1e62c12b7b5ca643bdfdabf137eafc435fbf32c2cdb0eee315f5f81d0adbab9f7ae38dd9de3338fb91e9e55096e9929ed1cc2ead68c406a68ca43d4a4706ed80f27c3809164d6c26619c3616813ff0c0ea3038584d0a4261cc4be93bec41b7d415b24be7d9b9e695cc92ffac1eb33de85dbfecc4a60531ccf8cb86828f4226b985d583bcb54db7564bcd25acaae89f402f2a0142efb185662c93a47af5ef424f4f1ccc1bfe05ff62a9e5ea9d73590e28b89da36fb69fdd09eae8e0bc720c5419eea09922c6d37e840e47f9e732747ffbc481f7eee64a2543e3f66d4da85288c2f6620dd5bfa497aa15e8c726a9d6468d4f05a95f22cd0c28b5d7fe2fd3de012cc3af3100a2636423db1ebb7e29aca1771a026d80681158b964b12642d2feb5fbe088bf1a3fb2f114da8ca2d25f623929444875c27a6ee85f281b08506e31d9e3a02da9b1cce208240c4d508adfc59a6a2492d56c103ed3bf881aa20d5fd5ffed6923b562a76e29d4dbf36621917b70d789e9b3618e7cd75d75c10a6f1be538ab335827de43bb95afe217bf25ddb6b3228c0194ddedb913f42bb98a284e518c7a94443e07d064448566fba6c157a8a56ac14e20010d93b90745531e0f3820643db14d54e7080c4856696d3413d83669c556f72fe853faea0da3c5c813546cbdcc08354b54a562c822ca0c9b7e73389ad1da0c96de2d27b8c6faf94f24e82a3088ff31e75dfde146f3a09b707c50a0e51a337d7376ded7336a0dfed36b77bb474e8f91af7e4b5b7a64dac1c65c2b67b67893c485e892c0f3a65a3bf790cc512498ebd6051495100c228d784ebf6dc3b4577d2b242d9bc9b007de0d2e9f8e56b1a8ccf5ce40c8c68281ad241be9e85c195f9c9be6831396513fcac41060fd3d1afbcb07c39194b77879476b21a158ae840a7751f580924a6212442f52063cbb47a5aec40abb1b49ef758061c01b683f1266badcac7b1222c600c1502783030f7cbb1d1d35f9bae43975aa450f2cb26618b1ed9e120afc39d93121efffb3660effef9adaa3e5261b5125cad962630bf3acecf619883b163ad8f4c66e87816dc577d9fe962894d41c9a52bce586b27de652e9269291adfdcaeb21dc8147f288b4bac3cacca03a4a5d6b41a1f7d615efe7b70bc0777085c8709f5e6b380f7ebeb42aacea919a359d3a7b198f2162a17702ee739e852527d1a148c1fa8ba8129d7ee077f6ae2bd6910ffd9b16897b483c2fdddbbb3a762662117ff742d376eed8ae4809e85bb6263614bb2bbc7d966fc336565f3430da3df07d16a0844fcb8fe3229234281113c272aa7e7e6fa4ba21cbc7256c4874302ae9ff096790226f2fe1681c7b8a604f43e93bf792043771c90e83e706a4d07ec4768241bf46b4b42b11fb114c1a156c55c681e9cb58d115cd7a29318be13fb8819e3a0f8cef54f1b0b4887e41212411689f6ac03fe07d2fef3a032049281e9726289d13dfa5cae4ced2e22404267b8999ba3621449f10a52028e27a01baeab4f435345b1f177a1b2a729db3bf411bdc25f880a3596af6b682a74985f4b9717fb76d45f17612ce465adba79bdda585e323092894e95d7af7f8c3728913f56a250abdd469fb89f9f4e2f3836e5d6d5aa8c181dc865ac9193f92468f16ebce6e3448f739bb0567b41e62c0f7cf423539457f4e0cafa428c30f2953978a0f6f5c4eaf8c32a24c7b8e3438888d7fe25206c4f8e17c80a69bac1c577c0ab7b91770f362da3a7bc25614986ef6297fa21e6862038bff0b992a68660cd9a60588ae1fa60ea028a43deaaae74288c1ded04ffbead3db8dbf8ffeaf6069efc6ff291dcd9f338b656b8180080032feb6ce3d566e18421a6212ce24b4e7a724eb9401a2487685d3836753348ed40b3f28d204ec6edfdb1f966a25f889dd172e2f7aa9c8d946f260c17569c7f28814482f23749ae21643c3f798ae5b9980c4413e80b2703723d0fdf44a717aa56d70ad7e4653e095a46f5829261bf3500fd4daaa8f3ed4ede07132113ae192c887ee46713bf18d58a3d18362434a36ca658575af6b6dd75a61271086deaa2fc0e59c98440f70bd8b22efbf79cdc8d5f6c6705866692b1cd83d270a6173c37a029ae4f5c4049004cd9729778566284ffc846ba55c88b3d2f8a65280a29f8fe8e5f8493f6bda3da9b1d218a91e9703e294dca319be2e17547016d4c2d4f54fb26dcf41c1fc4279896d11887f83077fc901d10eb6d5cd731dc5228ed46c115972d8eff9923637ae170e9e3d07bd4eb0345a5c4e3460a4c344a4f06e151f13497afa3a91af9c60abddea31e65d210165d6e7e1c22778785b8322083ee0e7d74e79405853a66542b73e09d0de071f48e9822fd596632780013e9599d9a3b3383d861e8a82629e6"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x202c}, 0x1, 0x0, 0x0, 0x40d0}, 0x10) 660.2568ms ago: executing program 1 (id=8976): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'gretap0\x00', 0x8000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 634.353086ms ago: executing program 2 (id=8977): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) (rerun: 64) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) write$rfkill(r4, &(0x7f0000000100)={0x2, 0x1, 0x2}, 0x8) 504.568394ms ago: executing program 0 (id=8978): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @private=0xa010100}, {0x306, @broadcast}, 0x2e, {0x2, 0x4e21, @empty}, 'ip6gretap0\x00'}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x9}], 0x1, 0x45833af92e4b38ff, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendto$ax25(r4, &(0x7f0000000240)="e80c2b5ca43c4e6f799cb991f800243904dbbce4ab598f13729af74ee76d0fa03a6acd0e31884d5fb24079032de4eb75c37db0b0495a920461cc3f6c154732601d949b1b8811d05652fb0a4519eb222f4dde2bdb8cd8f5aa57c3", 0x5a, 0xc1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettaction={0x44, 0x32, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2da3c0}}]}]}, 0x44}}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb8}}, 0x24040084) 504.031245ms ago: executing program 4 (id=8979): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce5f715f2d28290a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000180)={r1, &(0x7f0000000040)='&\\$+\'$.\x00', 0x30000, &(0x7f00000000c0)={@_ha_fsid={[0x40, 0x400]}, {0x7, 0x3, 0x8001, 0x5}}, 0x1, &(0x7f0000000100), &(0x7f0000000140)}) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) 313.055156ms ago: executing program 2 (id=8980): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000f14010025bd7000fcdbdf25080001000200000008000300040000000c00450069625f7372707400"], 0x48}, 0x1, 0x0, 0x0, 0x20008005}, 0xc0) close(0x3) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x110, 0xd}}], 0x18}, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)="3700000013", 0x5}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000004000000040000000000010008080000", @ANYRES32, @ANYBLOB="0000006f78fa2700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000003ffffffff00"/28], 0x50) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r8, 0x1, 0x0, 0x0, {0x3}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f00000003c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 138.214319ms ago: executing program 4 (id=8981): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071108e00000000001d400500020100004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd250}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x20000084) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000e00160a01080000000000000000020000020900020073797a30000000000900010073797a300000000014000380080002400000000008000140000000001400000011000100000000000000000043bf000a"], 0x68}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) close(0x4) close(r0) 0s ago: executing program 2 (id=8982): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xc}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x66}, 0x28) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) kernel console output (not intermixed with test programs): mode [ 852.070243][T25936] bond_slave_0: left promiscuous mode [ 852.075895][T25936] dummy0: left promiscuous mode [ 852.156676][T25936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.168896][T25936] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 852.194416][T25936] bond0 (unregistering): Released all slaves [ 852.214190][T25936] bond1 (unregistering): Released all slaves [ 852.229936][T25936] bond2 (unregistering): Released all slaves [ 852.246219][T25936] bond3 (unregistering): (slave veth3): Releasing active interface [ 852.263564][T25936] bond3 (unregistering): Released all slaves [ 852.278975][T25936] bond4 (unregistering): Released all slaves [ 852.295664][T25936] bond5 (unregistering): Released all slaves [ 852.311879][T25936] bond6 (unregistering): (slave veth7): Releasing active interface [ 852.322107][T25936] bond6 (unregistering): Released all slaves [ 852.337842][T25936] bond7 (unregistering): (slave batadv1): Releasing backup interface [ 852.348177][T25936] bond7 (unregistering): Released all slaves [ 852.364461][T25936] bond8 (unregistering): Released all slaves [ 852.379448][T25936] bond9 (unregistering): Released all slaves [ 852.394133][T25936] bond10 (unregistering): Released all slaves [ 852.411036][T25936] bond11 (unregistering): Released all slaves [ 852.427916][T25936] bond12 (unregistering): Released all slaves [ 852.446615][T25936] bond13 (unregistering): Released all slaves [ 852.470671][T25936] bond14 (unregistering): Released all slaves [ 852.485897][T25936] bond15 (unregistering): Released all slaves [ 852.502626][T25936] bond16 (unregistering): Released all slaves [ 852.516795][T25936] bond17 (unregistering): Released all slaves [ 852.536977][T25936] bond18 (unregistering): Released all slaves [ 852.554345][T25936] bond19 (unregistering): Released all slaves [ 853.069590][ T1829] lo speed is unknown, defaulting to 1000 [ 853.076395][ T1919] macsec2: entered promiscuous mode [ 853.088689][ T1919] geneve1: entered promiscuous mode [ 853.103679][ T1919] macsec2: entered allmulticast mode [ 853.114663][ T1919] geneve1: entered allmulticast mode [ 853.159267][T25936] hmac(sha224: left promiscuous mode [ 853.202219][ T6462] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.222971][ T6462] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.255656][ T1941] tipc: Enabling of bearer rejected, failed to enable media [ 853.310937][T25936] : left promiscuous mode [ 853.361243][ T6462] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.388010][ T6462] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.474633][T25936] tipc: Disabling bearer [ 853.505332][T25936] tipc: Left network mode [ 853.510104][ T1946] veth0_to_hsr: entered promiscuous mode [ 853.516356][ T1946] veth0_to_hsr: entered allmulticast mode [ 853.536309][ T1952] tipc: Started in network mode [ 853.575281][ T1952] tipc: Node identity , cluster identity 4711 [ 853.591174][ T1952] tipc: Failed to obtain node identity [ 853.599513][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 853.635144][ T5488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.802351][ T1958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7412'. [ 853.825354][ T1958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7412'. [ 853.953123][ T1958] bridge0: entered promiscuous mode [ 853.977413][ T1958] erspan0: entered promiscuous mode [ 854.001078][ T1958] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 854.017722][ T1974] rdma_rxe: rxe_newlink: failed to add wg1 [ 854.175373][ T1978] netlink: 'syz.3.7418': attribute type 2 has an invalid length. [ 854.693948][ T1997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7423'. [ 854.751533][ T2002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.758837][ T2002] IPv6: NLM_F_CREATE should be set when creating new route [ 854.766412][ T2002] IPv6: NLM_F_CREATE should be set when creating new route [ 854.823538][ T2002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.965578][ T29] audit: type=1804 audit(1773479189.768:20): pid=2019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7429" name="/newroot/353/memory.events" dev="tmpfs" ino=1818 res=1 errno=0 [ 855.001694][ T2018] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 855.056637][ T2022] netlink: 'syz.3.7430': attribute type 6 has an invalid length. [ 855.077555][ T2022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7430'. [ 855.146567][ T2022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7430'. [ 855.188007][ T2033] syzkaller0: entered promiscuous mode [ 855.194938][ T2033] syzkaller0: entered allmulticast mode [ 855.682799][T25936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.721333][T25936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.195212][T25936] team0 (unregistering): Port device team_slave_1 removed [ 856.216368][ T2085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7440'. [ 856.225775][T25936] team0 (unregistering): Port device team_slave_0 removed [ 856.631454][ T2090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7442'. [ 856.660381][ T2090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7442'. [ 856.734664][ T2098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7445'. [ 857.147221][ T2135] IPVS: Error connecting to the multicast addr [ 857.159114][ T2139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7456'. [ 857.265235][ T2143] openvswitch: netlink: EtherType 50a is less than min 600 [ 857.302840][ T2135] netlink: set zone limit has 4 unknown bytes [ 857.414629][ T2150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7460'. [ 857.447478][ T2150] bond0: entered promiscuous mode [ 857.481198][ T2150] batadv_slave_0: entered promiscuous mode [ 857.487500][ T2153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7461'. [ 857.513895][ T2150] debugfs: 'hsr1' already exists in 'hsr' [ 857.522748][ T2150] Cannot create hsr debugfs directory [ 857.540642][T25936] IPVS: stop unused estimator thread 0... [ 857.666574][ T2167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.683644][ T2169] netlink: 'syz.3.7466': attribute type 1 has an invalid length. [ 857.758654][ T2176] netlink: 'syz.0.7464': attribute type 10 has an invalid length. [ 857.786861][ T2176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.816403][ T2176] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 857.941146][ T2185] lo speed is unknown, defaulting to 1000 [ 858.119651][ T6462] bond0: (slave batadv0): interface is now down [ 858.126610][ T6462] bond0: now running without any active interface! [ 858.157808][ T2197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7475'. [ 858.222143][ T2185] lo speed is unknown, defaulting to 1000 [ 858.379222][ T2207] A link change request failed with some changes committed already. Interface ªªªªª» may have been left with an inconsistent configuration, please check. [ 858.736110][ T2217] erspan1: entered promiscuous mode [ 858.786166][ T2217] erspan1: entered allmulticast mode [ 858.986134][ T2230] netlink: 'syz.2.7484': attribute type 6 has an invalid length. [ 859.023565][ T2230] netlink: 'syz.2.7484': attribute type 6 has an invalid length. [ 859.302764][ T2245] netlink: 'syz.2.7488': attribute type 1 has an invalid length. [ 859.490451][ T2260] netlink: 'syz.0.7491': attribute type 2 has an invalid length. [ 859.561427][ T2260] netlink: 'syz.0.7491': attribute type 9 has an invalid length. [ 859.570030][ T2260] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7491'. [ 859.587888][ T2260] netlink: 'syz.0.7491': attribute type 1 has an invalid length. [ 859.655551][ T2260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 859.711078][ T2260] vlan0: entered promiscuous mode [ 859.746879][ T2260] bond5: entered promiscuous mode [ 859.768108][ T2269] siw: device registration error -23 [ 859.774343][ T2260] vlan0: entered allmulticast mode [ 859.780114][ T2260] bond5: entered allmulticast mode [ 859.833560][ T2269] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 859.869190][ T2269] bond5: (slave batadv2): making interface the new active one [ 859.887062][ T2269] batadv2: entered promiscuous mode [ 859.895325][ T2269] batadv2: entered allmulticast mode [ 859.903157][ T2269] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 859.920550][ T2276] IPVS: length: 35 != 24 [ 859.997480][ T2276] lo speed is unknown, defaulting to 1000 [ 860.178338][ T2291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.192029][ T2291] __nla_validate_parse: 5 callbacks suppressed [ 860.192055][ T2291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7499'. [ 860.249096][ T2291] netlink: 'syz.0.7499': attribute type 1 has an invalid length. [ 860.260980][ T2291] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7499'. [ 860.380065][ T2276] lo speed is unknown, defaulting to 1000 [ 860.645752][ T2312] netlink: 'syz.2.7507': attribute type 27 has an invalid length. [ 860.988195][ T2315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.011551][ T2315] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.046902][ T29] audit: type=1107 audit(1773479195.848:21): pid=2329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ë‚?¶ÿ€þ±û̧å0NDR9i†táÞ¿ÓÌâÕrG€M#‘xF ' [ 861.066820][ T2315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 861.536558][ T2312] bond2: left promiscuous mode [ 861.542193][ T2312] sit1: left allmulticast mode [ 861.547316][ T2312] bond4: left promiscuous mode [ 861.552721][ T2312] vti0: left promiscuous mode [ 861.557864][ T2312] macvtap1: left promiscuous mode [ 861.563154][ T2312] macvtap1: left allmulticast mode [ 861.568797][ T2312] bond6: left promiscuous mode [ 861.573839][ T2312] bridge3: left promiscuous mode [ 861.579167][ T2312] bridge3: left allmulticast mode [ 861.584431][ T2312] bond7: left promiscuous mode [ 861.589600][ T2312] bond8: left promiscuous mode [ 861.595009][ T2312] bond9: left promiscuous mode [ 861.600258][ T2312] macsec1: left allmulticast mode [ 861.605684][ T2312] ip6tnl1: left promiscuous mode [ 861.610832][ T2312] ip6tnl1: left allmulticast mode [ 861.626178][ T2312] bond10: left promiscuous mode [ 861.636224][ T2312] wireguard0: left promiscuous mode [ 861.660168][ T2312] geneve2: left promiscuous mode [ 861.679222][ T2312] bond11: left promiscuous mode [ 861.708605][ T2312] bridge0: left allmulticast mode [ 861.718719][ T2312] macvtap2: left promiscuous mode [ 861.723841][ T2312] macvtap2: left allmulticast mode [ 861.759668][ T2312] erspan1: left promiscuous mode [ 861.764673][ T2312] erspan1: left allmulticast mode [ 861.799547][ T2327] syzkaller0: entered promiscuous mode [ 861.805120][ T2327] syzkaller0: entered allmulticast mode [ 861.815609][T25925] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.000717][T25925] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.009236][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 862.041951][T25925] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.058942][T25925] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.279865][ T2365] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7521'. [ 862.390603][ T2374] netlink: 'syz.4.7523': attribute type 2 has an invalid length. [ 862.415574][ T2381] netlink: 'syz.0.7525': attribute type 1 has an invalid length. [ 862.455147][ T2374] !: entered promiscuous mode [ 862.459289][ T2381] netlink: 'syz.0.7525': attribute type 1 has an invalid length. [ 862.561044][ T2383] lo speed is unknown, defaulting to 1000 [ 862.656780][ T2395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7527'. [ 862.695588][ T2403] netlink: 'syz.2.7526': attribute type 3 has an invalid length. [ 862.701299][ T2395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7527'. [ 862.872105][ T2407] tipc: Enabled bearer , priority 0 [ 862.923542][ T2405] tipc: Disabling bearer [ 862.948267][ T2383] lo speed is unknown, defaulting to 1000 [ 863.860504][ T2447] bond0: (slave bridge_slave_1): Releasing backup interface [ 863.978676][ T2455] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7542'. [ 864.025836][ T2447] bond0: (slave wlan1): Releasing backup interface [ 864.051561][ T2447] bond1: (slave vti1): Releasing backup interface [ 864.059076][ T2447] vti1: left promiscuous mode [ 864.129564][ T2467] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 864.178521][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 864.194631][ T2469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7545'. [ 864.233107][ T2447] bond7: (slave veth9): Releasing backup interface [ 864.244267][ T2468] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7542'. [ 864.264110][ T2468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7542'. [ 864.340261][ T2465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7543'. [ 864.369352][ T2459] lo speed is unknown, defaulting to 1000 [ 864.819841][ T2459] lo speed is unknown, defaulting to 1000 [ 865.588657][ T2513] validate_nla: 1 callbacks suppressed [ 865.588679][ T2513] netlink: 'syz.0.7556': attribute type 10 has an invalid length. [ 865.620447][ T2518] __nla_validate_parse: 3 callbacks suppressed [ 865.620475][ T2518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7558'. [ 865.736429][ T2513] syz_tun: entered promiscuous mode [ 865.775069][ T2513] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 865.981194][T25950] bond0: (slave syz_tun): interface is now down [ 865.995995][T25950] bond0: now running without any active interface! [ 866.099723][ T2545] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7563'. [ 866.133461][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7562'. [ 866.285893][ T2554] netlink: 'syz.1.7566': attribute type 1 has an invalid length. [ 866.405088][ T2565] netlink: 'syz.1.7569': attribute type 1 has an invalid length. [ 866.460850][ T2563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7568'. [ 866.494102][ T2563] netlink: 'syz.0.7568': attribute type 10 has an invalid length. [ 866.506779][ T2568] sctp: [Deprecated]: syz.2.7570 (pid 2568) Use of int in maxseg socket option. [ 866.506779][ T2568] Use struct sctp_assoc_value instead [ 866.526683][ T2563] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 866.604557][ T2582] netlink: 'syz.1.7571': attribute type 2 has an invalid length. [ 866.615739][ T2581] pimreg: entered allmulticast mode [ 866.625827][ T2581] pimreg: left allmulticast mode [ 866.631274][ T2582] netlink: 'syz.1.7571': attribute type 2 has an invalid length. [ 866.634000][ T2583] netlink: 'syz.0.7573': attribute type 11 has an invalid length. [ 866.839141][T25936] bond0: (slave wlan1): interface is now down [ 866.847898][T25936] bond0: now running without any active interface! [ 866.926647][ T2593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7574'. [ 866.945570][ T2601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7576'. [ 867.501413][ T2640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7581'. [ 867.517530][ T2641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7584'. [ 867.640261][ T2640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7581'. [ 867.792734][ T2647] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 867.850316][ T2647] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 867.913941][ T2650] macvlan3: entered promiscuous mode [ 867.920373][ T2650] macvlan3: entered allmulticast mode [ 867.928343][ T2650] bond6: (slave macvlan3): Error -98 calling set_mac_address [ 867.950832][ T2664] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7588'. [ 868.900687][ T2722] syzkaller0: entered promiscuous mode [ 868.916579][ T2722] syzkaller0: entered allmulticast mode [ 868.928130][ T2729] netlink: 'syz.0.7601': attribute type 1 has an invalid length. [ 869.123237][ T8936] lec:lec_start_xmit: lec0:No lecd attached [ 869.240874][ T2746] tipc: Enabling of bearer rejected, failed to enable media [ 870.031629][ T2794] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 870.044194][ T2794] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.054892][ T2794] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 870.173721][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 870.190495][ T2804] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 870.200250][ T2804] openvswitch: netlink: Message has 8 unknown bytes. [ 870.256087][ T2806] bond6: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 870.267748][ T2806] bond6 (unregistering): Released all slaves [ 870.302850][ T2794] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 870.334146][ T2794] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.378720][ T2794] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 870.480680][ T2794] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 870.507501][ T2794] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.540850][ T2794] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 870.574978][ T2826] openvswitch: netlink: IP tunnel dst address not specified [ 870.588904][ T2826] openvswitch: netlink: IP tunnel dst address not specified [ 870.598146][ T2824] netlink: 'syz.0.7626': attribute type 1 has an invalid length. [ 870.671423][ T2824] bond6: entered promiscuous mode [ 870.677203][ T2824] 8021q: adding VLAN 0 to HW filter on device bond6 [ 870.707502][ T2794] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 870.730679][ T2794] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.741968][ T2827] __nla_validate_parse: 7 callbacks suppressed [ 870.741987][ T2827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7629'. [ 870.757827][ T2794] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 870.769977][ T2827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7629'. [ 870.787330][ T2827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7629'. [ 870.824482][ T2824] 8021q: adding VLAN 0 to HW filter on device bond6 [ 870.839320][ T2824] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 870.862042][ T2824] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 870.876416][ T2824] bond6: (slave vti0): making interface the new active one [ 870.884218][ T2824] vti0: entered promiscuous mode [ 870.892333][ T2824] bond6: (slave vti0): Enslaving as an active interface with an up link [ 870.908678][ T2832] lo speed is unknown, defaulting to 1000 [ 870.996084][ T6462] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 871.015535][ T6462] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 871.038608][ T6462] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 871.062847][ T2853] tls_set_device_offload_rx: netdev not found [ 871.089374][ T6462] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 871.099153][ T6462] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 871.126052][ T6462] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 871.185383][T25921] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 871.199549][T25921] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 871.238749][T25921] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 871.268635][T25921] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 871.276918][T25921] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 871.318660][T25921] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 871.341804][ T2874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7636'. [ 871.366614][ T2874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7636'. [ 871.434182][ T2832] lo speed is unknown, defaulting to 1000 [ 871.453814][ T2860] siw: device registration error -23 [ 871.751714][ T2901] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7642'. [ 871.763477][ T2902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7643'. [ 871.892381][ T2904] netlink: 'syz.4.7644': attribute type 1 has an invalid length. [ 872.023475][ T2904] bond8: entered promiscuous mode [ 872.053062][ T2904] 8021q: adding VLAN 0 to HW filter on device bond8 [ 872.306201][ T2910] lo speed is unknown, defaulting to 1000 [ 872.384608][ T2915] syzkaller0: entered promiscuous mode [ 872.396523][ T2915] syzkaller0: entered allmulticast mode [ 872.498801][ T2932] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 872.698122][ T2948] netlink: 'syz.0.7654': attribute type 49 has an invalid length. [ 872.844402][ T2951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7655'. [ 872.937889][ T2914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7646'. [ 873.062939][ T2910] lo speed is unknown, defaulting to 1000 [ 873.272988][ T2954] lo speed is unknown, defaulting to 1000 [ 873.684847][ T2995] netlink: zone id is out of range [ 873.702171][ T2995] netlink: zone id is out of range [ 873.707635][ T2995] netlink: zone id is out of range [ 873.721015][ T2995] netlink: zone id is out of range [ 873.726366][ T2995] netlink: zone id is out of range [ 873.731715][ T2954] lo speed is unknown, defaulting to 1000 [ 874.007795][ T3006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7665'. [ 874.138516][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 874.146606][ C0] lec:lec_tx_timeout: lec0 [ 874.151512][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 874.682587][ T3036] netlink: 'syz.2.7674': attribute type 4 has an invalid length. [ 874.898138][ T3044] pim6reg: entered allmulticast mode [ 874.919873][ T3044] pim6reg: left allmulticast mode [ 874.927722][ T3046] sctp: [Deprecated]: syz.1.7675 (pid 3046) Use of int in max_burst socket option. [ 874.927722][ T3046] Use struct sctp_assoc_value instead [ 875.051730][ T3058] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 875.361208][ T3071] netlink: 'syz.1.7684': attribute type 1 has an invalid length. [ 875.434720][ T3071] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 875.446125][ T3071] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 875.527445][ T3076] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 875.610830][ T3071] macvlan3: entered promiscuous mode [ 875.623315][ T3071] macvlan3: entered allmulticast mode [ 875.778860][ T3081] __nla_validate_parse: 5 callbacks suppressed [ 875.778882][ T3081] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7688'. [ 875.819148][ T3083] xt_hashlimit: size too large, truncated to 1048576 [ 875.832902][ T3086] netlink: 'syz.3.7690': attribute type 29 has an invalid length. [ 876.010894][ T3097] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7691'. [ 876.053915][ T3094] netlink: 'syz.3.7692': attribute type 10 has an invalid length. [ 876.201338][ T3100] syzkaller0: entered promiscuous mode [ 876.215899][ T3100] syzkaller0: entered allmulticast mode [ 876.456338][ T3112] net_ratelimit: 14 callbacks suppressed [ 876.456358][ T3112] openvswitch: netlink: Message has 8 unknown bytes. [ 876.480021][ T3111] syzkaller0: entered promiscuous mode [ 876.489621][ T3111] syzkaller0: entered allmulticast mode [ 876.775025][ T3124] netlink: 'syz.3.7702': attribute type 1 has an invalid length. [ 876.850790][ T3127] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 876.892486][ T3127] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7703'. [ 876.950891][ T3124] bond7: entered promiscuous mode [ 876.971143][ T3124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 877.087913][ T3138] netlink: 173348 bytes leftover after parsing attributes in process `syz.4.7706'. [ 877.174669][ T3145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7708'. [ 877.449130][ T3157] netlink: 'syz.0.7711': attribute type 2 has an invalid length. [ 877.467284][ T3157] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7711'. [ 877.554460][ T3159] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7713'. [ 877.574074][ T3161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7714'. [ 877.645173][ T3159] lo speed is unknown, defaulting to 1000 [ 877.846254][ T3174] netlink: 'syz.0.7718': attribute type 1 has an invalid length. [ 877.979139][ T3142] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 877.979618][ T3174] bond7: entered promiscuous mode [ 877.991131][ T3174] 8021q: adding VLAN 0 to HW filter on device bond7 [ 878.000114][ T3159] lo speed is unknown, defaulting to 1000 [ 878.091922][ T3180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7719'. [ 878.152974][ T3187] netlink: 'syz.1.7720': attribute type 21 has an invalid length. [ 878.178918][ T3187] IPv6: NLM_F_CREATE should be specified when creating new route [ 878.191990][ T3180] bond9: option broadcast_neighbor: invalid value (30) [ 878.202239][ T3180] bond9 (unregistering): Released all slaves [ 878.209122][ T3187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 878.216408][ T3187] IPv6: NLM_F_CREATE should be set when creating new route [ 878.223760][ T3187] IPv6: NLM_F_CREATE should be set when creating new route [ 878.231142][ T3187] IPv6: NLM_F_CREATE should be set when creating new route [ 878.486597][ T3191] netlink: 'syz.0.7722': attribute type 1 has an invalid length. [ 878.559312][ T3193] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 878.679311][ T3193] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 878.727901][ T3193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.766682][ T3198] 8021q: adding VLAN 0 to HW filter on device bond9 [ 878.776188][ T3198] bond8: (slave bond9): making interface the new active one [ 878.786896][ T3198] bond8: (slave bond9): Enslaving as an active interface with an up link [ 878.873248][ T3201] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 879.574272][ T3243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7737'. [ 879.671440][ T3250] netlink: 'syz.1.7737': attribute type 4 has an invalid length. [ 879.728016][ T3253] netlink: 'syz.1.7737': attribute type 4 has an invalid length. [ 880.408588][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6260 ms [ 880.416712][ C0] lec:lec_tx_timeout: lec0 [ 880.762094][ T3288] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 881.232008][ T3316] __nla_validate_parse: 3 callbacks suppressed [ 881.232031][ T3316] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7747'. [ 881.688846][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 881.751814][ T3339] netlink: 'syz.4.7755': attribute type 1 has an invalid length. [ 881.766998][ T3339] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7755'. [ 882.085377][ T3358] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 882.347273][ T3367] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7761'. [ 882.609357][ T3375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7765'. [ 882.619098][ T3380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7766'. [ 882.628649][ T3375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7765'. [ 882.655173][ T3375] netlink: 'syz.4.7765': attribute type 13 has an invalid length. [ 882.689265][ T3375] netlink: 'syz.4.7765': attribute type 11 has an invalid length. [ 882.786778][ T3384] bond0: entered promiscuous mode [ 882.824477][ T3384] batadv0: entered promiscuous mode [ 882.850017][ T3384] debugfs: 'hsr1' already exists in 'hsr' [ 882.855937][ T3384] Cannot create hsr debugfs directory [ 883.112279][ T3412] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 883.125444][ T3412] bond8 (unregistering): Released all slaves [ 883.253751][ T3419] bond8: Removing last arp target with arp_interval on [ 883.447303][ T3424] lo speed is unknown, defaulting to 1000 [ 883.455394][ T29] audit: type=1800 audit(1773479218.258:22): pid=3430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7776" name="memory.events" dev="tmpfs" ino=2267 res=0 errno=0 [ 883.630737][ T3438] netlink: 'syz.4.7778': attribute type 1 has an invalid length. [ 883.732454][ T3438] bond9: entered promiscuous mode [ 883.751736][ T3438] 8021q: adding VLAN 0 to HW filter on device bond9 [ 883.890827][ T3447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7780'. [ 883.902886][ T3424] lo speed is unknown, defaulting to 1000 [ 883.902918][ T3426] lo speed is unknown, defaulting to 1000 [ 884.329016][ T3454] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7782'. [ 884.487347][ T3440] lo speed is unknown, defaulting to 1000 [ 884.787100][ T3440] lo speed is unknown, defaulting to 1000 [ 884.799620][ T3426] lo speed is unknown, defaulting to 1000 [ 885.540511][ T3465] syz_tun: left promiscuous mode [ 885.561355][ T3465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 885.666262][ T3465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7786'. [ 885.833805][ T3470] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7788'. [ 886.083913][ T3414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.283896][ T3484] __nla_validate_parse: 1 callbacks suppressed [ 886.283918][ T3484] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7791'. [ 886.301411][ T3484] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7791'. [ 886.325461][ T3484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7791'. [ 886.342476][ T3484] netlink: 580 bytes leftover after parsing attributes in process `syz.0.7791'. [ 886.621448][ T3505] syzkaller0: entered promiscuous mode [ 886.640430][ T3505] syzkaller0: entered allmulticast mode [ 886.866232][ T3516] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7800'. [ 886.897764][ T3516] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7800'. [ 887.014643][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 887.350467][ T3546] sctp: [Deprecated]: syz.4.7809 (pid 3546) Use of int in max_burst socket option. [ 887.350467][ T3546] Use struct sctp_assoc_value instead [ 887.393328][ T3546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7809'. [ 887.404536][ T3549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7809'. [ 887.431456][ T3549] vlan1: entered promiscuous mode [ 887.436576][ T3549] bridge0: entered promiscuous mode [ 887.605795][ T3556] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7813'. [ 887.934722][ T3574] netlink: 'syz.0.7822': attribute type 1 has an invalid length. [ 887.974136][ T3574] bond_slave_0: entered allmulticast mode [ 888.755249][ T3617] xt_bpf: check failed: parse error [ 888.766671][ T3618] xt_bpf: check failed: parse error [ 889.427546][ T3647] macvtap0: entered promiscuous mode [ 889.478812][ T3647] macvtap0 (unregistering): left promiscuous mode [ 890.333258][ T3677] syzkaller1: entered promiscuous mode [ 890.343078][ T3677] syzkaller1: entered allmulticast mode [ 890.687927][ T3706] lo speed is unknown, defaulting to 1000 [ 891.320568][ T3713] lo speed is unknown, defaulting to 1000 [ 891.367642][ T3706] lo speed is unknown, defaulting to 1000 [ 891.806359][ T3744] lo speed is unknown, defaulting to 1000 [ 891.816641][ T3713] lo speed is unknown, defaulting to 1000 [ 892.066961][ T3744] lo speed is unknown, defaulting to 1000 [ 892.947302][ T3773] __nla_validate_parse: 9 callbacks suppressed [ 892.947324][ T3773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7879'. [ 892.995904][ T3777] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7879'. [ 893.212500][ T3784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7882'. [ 893.252753][ T3784] vlan2: entered promiscuous mode [ 893.264040][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7884'. [ 893.430596][ T3798] netlink: 'syz.1.7885': attribute type 3 has an invalid length. [ 893.454092][ T3798] netlink: 'syz.1.7885': attribute type 1 has an invalid length. [ 893.480489][ T3798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7885'. [ 893.502900][ T3798] NCSI netlink: No device for ifindex 808464432 [ 893.705117][ T3816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7890'. [ 893.834721][ T3821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7887'. [ 894.090304][ T3813] geneve1: left allmulticast mode [ 894.095978][ T3813] geneve1: left promiscuous mode [ 894.129982][ T5938] lo speed is unknown, defaulting to 1000 [ 894.147467][ T5938] syz2: Port: 1 Link DOWN [ 894.257456][ T3824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7887'. [ 894.271702][ T3815] lo speed is unknown, defaulting to 1000 [ 894.780327][ T3843] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7896'. [ 894.826896][ T3814] lo speed is unknown, defaulting to 1000 [ 894.839185][ T3815] lo speed is unknown, defaulting to 1000 [ 895.030071][ T3860] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7901'. [ 895.198721][ T3862] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 895.363724][ T3814] lo speed is unknown, defaulting to 1000 [ 895.609470][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 895.675198][ T3897] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 895.731881][ T3888] syzkaller0: entered promiscuous mode [ 895.737493][ T3888] syzkaller0: entered allmulticast mode [ 897.732484][ T3915] tipc: Enabled bearer , priority 0 [ 897.770865][ T3916] syzkaller0: entered promiscuous mode [ 897.796071][ T3916] syzkaller0: entered allmulticast mode [ 897.899704][ T3916] tipc: Resetting bearer [ 897.925572][ T3916] tipc: Disabling bearer [ 898.151414][ T3935] netlink: 'syz.2.7917': attribute type 1 has an invalid length. [ 898.160325][ T3935] netlink: 'syz.2.7917': attribute type 2 has an invalid length. [ 898.180855][ T3935] netlink: 'syz.2.7917': attribute type 1 has an invalid length. [ 898.194378][ T3935] netlink: 'syz.2.7917': attribute type 1 has an invalid length. [ 898.262122][ T3941] __nla_validate_parse: 4 callbacks suppressed [ 898.262144][ T3941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7920'. [ 898.754098][ T3987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7932'. [ 898.770552][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7932'. [ 898.799179][ T3988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7932'. [ 898.834603][ T3989] lo speed is unknown, defaulting to 1000 [ 898.852773][ T3987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7932'. [ 898.883525][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7931'. [ 898.911068][ T3993] nftables ruleset with unbound chain [ 898.963162][ T3998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7935'. [ 899.299567][ T3989] lo speed is unknown, defaulting to 1000 [ 900.386449][ T4072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7959'. [ 901.027247][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7971'. [ 901.944522][ T4132] lo speed is unknown, defaulting to 1000 [ 902.368872][ T4132] lo speed is unknown, defaulting to 1000 [ 902.634065][ T4147] lo speed is unknown, defaulting to 1000 [ 902.694041][ T4150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7981'. [ 903.082404][ T4158] sctp: [Deprecated]: syz.0.7985 (pid 4158) Use of int in maxseg socket option. [ 903.082404][ T4158] Use struct sctp_assoc_value instead [ 903.180507][ T4147] lo speed is unknown, defaulting to 1000 [ 903.695089][ T4188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7993'. [ 903.699350][ T4186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.945838][ T4204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7997'. [ 903.984734][ T4204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7997'. [ 904.114592][ T4210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7999'. [ 904.140038][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7999'. [ 904.151155][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7999'. [ 904.726106][ T4250] xt_TCPMSS: Only works on TCP SYN packets [ 904.820406][ T4253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8011'. [ 905.157340][ T4269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8016'. [ 905.372589][ T4278] lo speed is unknown, defaulting to 1000 [ 905.754824][ T4278] lo speed is unknown, defaulting to 1000 [ 906.285041][ T4291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.428266][ T4295] tun0: tun_chr_ioctl cmd 1074025675 [ 906.433817][ T4295] tun0: persist enabled [ 906.473793][ T4300] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8027'. [ 906.477082][ T4295] tun0: tun_chr_ioctl cmd 1074025675 [ 906.499570][ T4295] tun0: persist enabled [ 906.514757][ T4304] tun0: tun_chr_ioctl cmd 1074025673 [ 906.529394][ T4300] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8027'. [ 907.010872][ T4330] netlink: 'syz.1.8036': attribute type 1 has an invalid length. [ 907.058076][ T4330] bond8: entered promiscuous mode [ 907.063957][ T4330] 8021q: adding VLAN 0 to HW filter on device bond8 [ 907.173106][ T4344] FAULT_INJECTION: forcing a failure. [ 907.173106][ T4344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.210955][ T4344] CPU: 1 UID: 0 PID: 4344 Comm: syz.3.8038 Not tainted syzkaller #0 PREEMPT(full) [ 907.210986][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 907.211001][ T4344] Call Trace: [ 907.211010][ T4344] [ 907.211019][ T4344] dump_stack_lvl+0xe8/0x150 [ 907.211055][ T4344] should_fail_ex+0x412/0x560 [ 907.211088][ T4344] _copy_from_user+0x2d/0xb0 [ 907.211122][ T4344] __sys_bind+0x1c6/0x410 [ 907.211163][ T4344] ? __pfx___sys_bind+0x10/0x10 [ 907.211206][ T4344] ? __pfx_ksys_write+0x10/0x10 [ 907.211240][ T4344] __x64_sys_bind+0x7a/0x90 [ 907.211293][ T4344] do_syscall_64+0x14d/0xf80 [ 907.211324][ T4344] ? trace_irq_disable+0x3b/0x150 [ 907.211356][ T4344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.211379][ T4344] ? clear_bhb_loop+0x40/0x90 [ 907.211406][ T4344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.211429][ T4344] RIP: 0033:0x7fbf6cd9c799 [ 907.211450][ T4344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.211470][ T4344] RSP: 002b:00007fbf6dcfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 907.211495][ T4344] RAX: ffffffffffffffda RBX: 00007fbf6d016090 RCX: 00007fbf6cd9c799 [ 907.211512][ T4344] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000004 [ 907.211527][ T4344] RBP: 00007fbf6dcfb090 R08: 0000000000000000 R09: 0000000000000000 [ 907.211542][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.211555][ T4344] R13: 00007fbf6d016128 R14: 00007fbf6d016090 R15: 00007ffe735ba808 [ 907.211591][ T4344] [ 907.620231][ T4351] syzkaller0: create flow: hash 498072294 index 1 [ 907.672137][T25948] syzkaller0: tun_net_xmit 76 [ 907.677925][T25948] syzkaller0: tun_net_xmit 48 [ 907.707765][ T4360] ip6tnl4: entered allmulticast mode [ 907.761270][ T3829] syzkaller0: tun_net_xmit 76 [ 907.777322][ T4363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.799166][ T4363] netlink: 'syz.4.8044': attribute type 11 has an invalid length. [ 907.957293][ T4366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 908.001585][ T4371] lo speed is unknown, defaulting to 1000 [ 908.120895][ T3829] syzkaller0: tun_net_xmit 76 [ 908.305142][ T4371] lo speed is unknown, defaulting to 1000 [ 908.318319][ T4345] syzkaller0: delete flow: hash 498072294 index 1 [ 908.355675][ T4383] netlink: 'syz.3.8050': attribute type 1 has an invalid length. [ 910.050244][ T4379] vlan1: entered allmulticast mode [ 910.055487][ T4379] dummy0: entered allmulticast mode [ 910.084707][ T4383] bond9: entered promiscuous mode [ 910.091252][ T4383] 8021q: adding VLAN 0 to HW filter on device bond9 [ 910.198170][ T4395] sit0: entered promiscuous mode [ 910.227266][ T4395] netlink: 'syz.1.8053': attribute type 1 has an invalid length. [ 910.252959][ T4395] __nla_validate_parse: 3 callbacks suppressed [ 910.252980][ T4395] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8053'. [ 910.385032][ T4404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8056'. [ 910.398304][ T4404] netlink: 'syz.4.8056': attribute type 1 has an invalid length. [ 910.526043][ T4404] bond10: (slave bridge3): making interface the new active one [ 910.537697][ T4404] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 910.722322][ T4417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8059'. [ 910.753695][ T4417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8059'. [ 910.766675][ T4417] tipc: Enabling of bearer rejected, failed to enable media [ 910.779142][ T4417] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8059'. [ 910.792894][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8059'. [ 910.883924][ T4423] lo speed is unknown, defaulting to 1000 [ 911.162414][ T4419] lo speed is unknown, defaulting to 1000 [ 911.179635][ T4423] lo speed is unknown, defaulting to 1000 [ 911.242529][ T4441] x_tables: ip_tables: osf match: only valid for protocol 6 [ 911.282655][ T4441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8063'. [ 911.520786][ T4453] FAULT_INJECTION: forcing a failure. [ 911.520786][ T4453] name failslab, interval 1, probability 0, space 0, times 0 [ 911.586388][ T4453] CPU: 1 UID: 0 PID: 4453 Comm: syz.3.8069 Not tainted syzkaller #0 PREEMPT(full) [ 911.586419][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 911.586435][ T4453] Call Trace: [ 911.586444][ T4453] [ 911.586454][ T4453] dump_stack_lvl+0xe8/0x150 [ 911.586490][ T4453] should_fail_ex+0x412/0x560 [ 911.586524][ T4453] should_failslab+0xa8/0x100 [ 911.586553][ T4453] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 911.586580][ T4453] ? __get_vm_area_node+0x13f/0x300 [ 911.586606][ T4453] __get_vm_area_node+0x13f/0x300 [ 911.586625][ T4453] ? unwind_next_frame+0xa5/0x23c0 [ 911.586661][ T4453] __vmalloc_node_range_noprof+0x372/0x1730 [ 911.586686][ T4453] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 911.586722][ T4453] ? __lock_acquire+0x6b5/0x2cf0 [ 911.586772][ T4453] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 911.586796][ T4453] ? aa_file_perm+0x192/0x15e0 [ 911.586838][ T4453] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 911.586857][ T4453] __vmalloc_noprof+0xd2/0x120 [ 911.586880][ T4453] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 911.586904][ T4453] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 911.586930][ T4453] bpf_prog_alloc+0x3c/0x1a0 [ 911.586955][ T4453] bpf_prog_load+0x7ba/0x1ae0 [ 911.587004][ T4453] ? __pfx_bpf_prog_load+0x10/0x10 [ 911.587062][ T4453] ? bpf_lsm_bpf+0x9/0x20 [ 911.587088][ T4453] ? security_bpf+0x7e/0x2d0 [ 911.587117][ T4453] __sys_bpf+0x618/0x950 [ 911.587152][ T4453] ? __pfx___sys_bpf+0x10/0x10 [ 911.587201][ T4453] ? ksys_write+0x242/0x270 [ 911.587228][ T4453] ? __pfx_ksys_write+0x10/0x10 [ 911.587257][ T4453] __x64_sys_bpf+0x7c/0x90 [ 911.587289][ T4453] do_syscall_64+0x14d/0xf80 [ 911.587320][ T4453] ? trace_irq_disable+0x3b/0x150 [ 911.587352][ T4453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.587374][ T4453] ? clear_bhb_loop+0x40/0x90 [ 911.587401][ T4453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.587423][ T4453] RIP: 0033:0x7fbf6cd9c799 [ 911.587445][ T4453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.587464][ T4453] RSP: 002b:00007fbf6dd1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 911.587487][ T4453] RAX: ffffffffffffffda RBX: 00007fbf6d015fa0 RCX: 00007fbf6cd9c799 [ 911.587504][ T4453] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 911.587519][ T4453] RBP: 00007fbf6dd1c090 R08: 0000000000000000 R09: 0000000000000000 [ 911.587533][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.587546][ T4453] R13: 00007fbf6d016038 R14: 00007fbf6d015fa0 R15: 00007ffe735ba808 [ 911.587582][ T4453] [ 911.587593][ T4453] syz.3.8069: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 912.232013][ T4453] CPU: 1 UID: 0 PID: 4453 Comm: syz.3.8069 Not tainted syzkaller #0 PREEMPT(full) [ 912.232044][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 912.232058][ T4453] Call Trace: [ 912.232067][ T4453] [ 912.232076][ T4453] dump_stack_lvl+0xe8/0x150 [ 912.232112][ T4453] warn_alloc+0x249/0x340 [ 912.232143][ T4453] ? __pfx_warn_alloc+0x10/0x10 [ 912.232170][ T4453] ? __get_vm_area_node+0x13f/0x300 [ 912.232197][ T4453] ? __get_vm_area_node+0x2b5/0x300 [ 912.232215][ T4453] ? unwind_next_frame+0xa5/0x23c0 [ 912.232253][ T4453] __vmalloc_node_range_noprof+0x397/0x1730 [ 912.232289][ T4453] ? __lock_acquire+0x6b5/0x2cf0 [ 912.232330][ T4453] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 912.232353][ T4453] ? aa_file_perm+0x192/0x15e0 [ 912.232396][ T4453] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 912.232415][ T4453] __vmalloc_noprof+0xd2/0x120 [ 912.232437][ T4453] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 912.232461][ T4453] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 912.232487][ T4453] bpf_prog_alloc+0x3c/0x1a0 [ 912.232510][ T4453] bpf_prog_load+0x7ba/0x1ae0 [ 912.232559][ T4453] ? __pfx_bpf_prog_load+0x10/0x10 [ 912.232615][ T4453] ? bpf_lsm_bpf+0x9/0x20 [ 912.232641][ T4453] ? security_bpf+0x7e/0x2d0 [ 912.232669][ T4453] __sys_bpf+0x618/0x950 [ 912.232711][ T4453] ? __pfx___sys_bpf+0x10/0x10 [ 912.232759][ T4453] ? ksys_write+0x242/0x270 [ 912.232785][ T4453] ? __pfx_ksys_write+0x10/0x10 [ 912.232815][ T4453] __x64_sys_bpf+0x7c/0x90 [ 912.232846][ T4453] do_syscall_64+0x14d/0xf80 [ 912.232876][ T4453] ? trace_irq_disable+0x3b/0x150 [ 912.232906][ T4453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.232928][ T4453] ? clear_bhb_loop+0x40/0x90 [ 912.232954][ T4453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.232975][ T4453] RIP: 0033:0x7fbf6cd9c799 [ 912.232996][ T4453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.233015][ T4453] RSP: 002b:00007fbf6dd1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 912.233038][ T4453] RAX: ffffffffffffffda RBX: 00007fbf6d015fa0 RCX: 00007fbf6cd9c799 [ 912.233053][ T4453] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 912.233068][ T4453] RBP: 00007fbf6dd1c090 R08: 0000000000000000 R09: 0000000000000000 [ 912.233081][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.233093][ T4453] R13: 00007fbf6d016038 R14: 00007fbf6d015fa0 R15: 00007ffe735ba808 [ 912.233127][ T4453] [ 912.233143][ T4453] Mem-Info: [ 912.497756][ T4453] active_anon:9320 inactive_anon:0 isolated_anon:0 [ 912.497756][ T4453] active_file:2516 inactive_file:41030 isolated_file:0 [ 912.497756][ T4453] unevictable:768 dirty:238 writeback:0 [ 912.497756][ T4453] slab_reclaimable:14231 slab_unreclaimable:144276 [ 912.497756][ T4453] mapped:33797 shmem:4426 pagetables:1424 [ 912.497756][ T4453] sec_pagetables:0 bounce:0 [ 912.497756][ T4453] kernel_misc_reclaimable:0 [ 912.497756][ T4453] free:1258953 free_pcp:23797 free_cma:0 [ 912.593807][ T4419] lo speed is unknown, defaulting to 1000 [ 912.648871][ T4453] Node 0 active_anon:36480kB inactive_anon:0kB active_file:10064kB inactive_file:163928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:49172kB dirty:952kB writeback:0kB shmem:15068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16100kB pagetables:5464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 912.705570][ T4453] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:82016kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 912.819779][ T4453] Node 0 DMA free:11220kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:36kB free_cma:0kB [ 912.917436][ T4453] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 912.928552][ T4453] Node 0 DMA32 free:1387396kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26096kB inactive_anon:0kB active_file:10064kB inactive_file:163928kB unevictable:1536kB writepending:952kB zspages:0kB present:3129332kB managed:2552740kB mlocked:0kB bounce:0kB free_pcp:33320kB local_pcp:21032kB free_cma:0kB [ 913.016045][ T4453] lowmem_reserve[]: 0 0 0 0 0 [ 913.027134][ T4453] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 913.070922][ T4453] lowmem_reserve[]: 0 0 0 0 0 [ 913.075831][ T4453] Node 1 Normal free:3644940kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:66140kB local_pcp:32508kB free_cma:0kB [ 913.115295][ T4453] lowmem_reserve[]: 0 0 0 0 0 [ 913.120340][ T4453] Node 0 DMA: 1*4kB (U) 2*8kB (U) 2*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11220kB [ 913.176001][ T4453] Node 0 DMA32: 7796*4kB (UM) 7184*8kB (UM) 4460*16kB (UME) 1178*32kB (UME) 690*64kB (UME) 302*128kB (UME) 551*256kB (UME) 509*512kB (UM) 353*1024kB (UM) 168*2048kB (UM) 0*4096kB = 1387728kB [ 913.225733][ T4453] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 913.242184][ T4453] Node 1 Normal: 5*4kB (UM) 5*8kB (UM) 15*16kB (UM) 13*32kB (UM) 15*64kB (UM) 11*128kB (UM) 8*256kB (UM) 9*512kB (UM) 6*1024kB (UM) 6*2048kB (U) 883*4096kB (UM) = 3644940kB [ 913.260309][ T4453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.270055][ T4453] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 913.280299][ T4453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.297862][ T4453] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 913.307548][ T4453] 44918 total pagecache pages [ 913.312502][ T4453] 2 pages in swap cache [ 913.316697][ T4453] Free swap = 124988kB [ 913.336927][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8074'. [ 913.346212][ T4453] Total swap = 124996kB [ 913.350975][ T4453] 2097051 pages RAM [ 913.354824][ T4453] 0 pages HighMem/MovableOnly [ 913.368885][ T4453] 427030 pages reserved [ 913.373353][ T4453] 0 pages cma reserved [ 913.523990][ T4477] 8021q: adding VLAN 0 to HW filter on device bond13 [ 913.730229][ T4493] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8079'. [ 913.852643][ T4503] netlink: 'syz.0.8079': attribute type 1 has an invalid length. [ 913.918685][ T4503] bond10: entered promiscuous mode [ 913.923887][ T4503] bond10: entered allmulticast mode [ 913.930037][ T4503] 8021q: adding VLAN 0 to HW filter on device bond10 [ 914.027272][ T4512] lo speed is unknown, defaulting to 1000 [ 914.275833][ T4528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8087'. [ 914.285665][ T4529] bridge_slave_1: default FDB implementation only supports local addresses [ 914.372450][ T4528] 8021q: adding VLAN 0 to HW filter on device bond14 [ 914.407094][ T4531] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 914.659807][ T4512] lo speed is unknown, defaulting to 1000 [ 914.799679][ T4551] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 914.826841][ T4512] lo speed is unknown, defaulting to 1000 [ 915.222168][ T4512] lo speed is unknown, defaulting to 1000 [ 915.395174][ T4584] __nla_validate_parse: 7 callbacks suppressed [ 915.395195][ T4584] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8103'. [ 915.415676][ T4584] openvswitch: netlink: Port 33554656 exceeds max allowable 65535 [ 915.834070][ T4598] syzkaller0: entered promiscuous mode [ 915.841706][ T4598] syzkaller0: entered allmulticast mode [ 915.861182][ T4597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8108'. [ 915.872306][ T4597] netlink: 'syz.1.8108': attribute type 1 has an invalid length. [ 916.107925][ T29] audit: type=1800 audit(1773479250.908:23): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8111" name="memory.events" dev="tmpfs" ino=1975 res=0 errno=0 [ 916.363295][ T4617] pim6reg1: entered promiscuous mode [ 916.371841][ T4617] pim6reg1: entered allmulticast mode [ 916.667030][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8118'. [ 916.679662][ T4636] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8118'. [ 916.696444][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8118'. [ 918.432612][ T4637] 8021q: adding VLAN 0 to HW filter on device bond10 [ 918.646920][ T4662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8123'. [ 918.709185][ T4665] pimreg3: entered allmulticast mode [ 918.764920][ T4656] lo speed is unknown, defaulting to 1000 [ 918.790466][ T4665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8125'. [ 918.815761][ T4665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8125'. [ 918.841166][ T4665] netlink: 'syz.4.8125': attribute type 4 has an invalid length. [ 919.036633][ T4656] lo speed is unknown, defaulting to 1000 [ 919.153798][ T4687] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8129'. [ 919.186977][ T4688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8132'. [ 919.690552][ T4702] pim6reg: entered allmulticast mode [ 919.865587][ T4712] pim6reg: left allmulticast mode [ 919.895059][ T4720] netlink: 'syz.2.8142': attribute type 1 has an invalid length. [ 921.810068][ T4732] netlink: 'syz.2.8144': attribute type 1 has an invalid length. [ 921.828800][ T4732] __nla_validate_parse: 2 callbacks suppressed [ 921.828820][ T4732] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8144'. [ 921.845860][ T4732] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 922.000283][ T4743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8145'. [ 922.021967][ T4746] netlink: 'syz.3.8148': attribute type 4 has an invalid length. [ 922.082810][ T4746] netlink: 'syz.3.8148': attribute type 8 has an invalid length. [ 922.092591][ T4746] netlink: 212 bytes leftover after parsing attributes in process `syz.3.8148'. [ 922.146485][ T4758] netlink: 'syz.2.8149': attribute type 1 has an invalid length. [ 922.206136][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8149'. [ 922.277778][ T4761] gretap1: entered allmulticast mode [ 922.425062][ T4768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8152'. [ 922.502902][ T4773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8155'. [ 922.701000][ T4786] syzkaller0: entered promiscuous mode [ 922.706775][ T4786] syzkaller0: entered allmulticast mode [ 922.724847][ T4788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8160'. [ 922.736040][ T4788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8160'. [ 922.749866][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8160'. [ 922.803423][ T4788] netlink: 'syz.2.8160': attribute type 1 has an invalid length. [ 922.886553][ T4792] bridge6: entered promiscuous mode [ 923.013530][ T4802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8165'. [ 923.025050][ T4804] tipc: New replicast peer: 255.255.255.255 [ 923.042107][ T4804] tipc: Enabled bearer , priority 6 [ 923.188151][ T4813] batman_adv: batadv0: Adding interface: macsec2 [ 923.195469][ T4813] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.227229][ T4813] batman_adv: batadv0: Interface activated: macsec2 [ 923.319450][ T4819] lo: entered promiscuous mode [ 923.324955][ T4819] tunl0: entered promiscuous mode [ 923.338841][ T4819] gre0: entered promiscuous mode [ 923.349550][ T4819] gretap0: entered promiscuous mode [ 923.363398][ T4819] ip_vti0: entered promiscuous mode [ 923.376453][ T4819] ip6_vti0: entered promiscuous mode [ 923.435691][ T4819] ip6tnl0: entered promiscuous mode [ 923.443951][ T4819] ip6gre0: entered promiscuous mode [ 923.450669][ T4819] syz_tun: entered promiscuous mode [ 923.456591][ T4819] ip6gretap0: entered promiscuous mode [ 923.467733][ T4819] bridge0: port 3(team0) entered blocking state [ 923.474230][ T4819] bridge0: port 3(team0) entered forwarding state [ 923.481182][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.488426][ T4819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.499453][ T4819] bond0: entered promiscuous mode [ 923.504687][ T4819] bond_slave_0: entered promiscuous mode [ 923.514176][ T4819] bond_slave_1: entered promiscuous mode [ 923.532218][ T4819] nlmon0: entered promiscuous mode [ 923.549951][ T4819] 0ªX¹¦À: entered promiscuous mode [ 923.555121][ T4819] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 923.767318][ T4846] IPv6: NLM_F_CREATE should be specified when creating new route [ 924.082251][ T4857] xt_TPROXY: Can be used only with -p tcp or -p udp [ 924.602209][ T4889] netlink: 'syz.2.8191': attribute type 27 has an invalid length. [ 924.613839][ T4889] ip6tnl4: left allmulticast mode [ 924.646416][ T4889] gretap1: left allmulticast mode [ 924.659241][ T4889] bridge6: left promiscuous mode [ 924.678565][ T4889] batman_adv: batadv0: Interface deactivated: macsec2 [ 924.797922][ T4898] bridge0: left promiscuous mode [ 924.837711][ T4898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.869461][ T4898] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.901242][ T4898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 925.234248][ T4930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.324585][ T4930] bond9 (unregistering): Released all slaves [ 925.474163][ T4935] lo speed is unknown, defaulting to 1000 [ 925.589602][ T4941] dvmrp1: entered allmulticast mode [ 925.638174][ T4941] dvmrp1: left allmulticast mode [ 925.806741][ T4947] netlink: 'syz.0.8207': attribute type 28 has an invalid length. [ 925.949735][ T4935] lo speed is unknown, defaulting to 1000 [ 926.085363][ T13] tipc: Subscription rejected, illegal request [ 926.119608][ T4961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.547256][ T4975] lo speed is unknown, defaulting to 1000 [ 927.132174][ T4983] lo speed is unknown, defaulting to 1000 [ 927.139635][ T4975] lo speed is unknown, defaulting to 1000 [ 927.356378][ T5013] __nla_validate_parse: 14 callbacks suppressed [ 927.356400][ T5013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8226'. [ 927.708330][ T5030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8231'. [ 928.017767][ T4983] lo speed is unknown, defaulting to 1000 [ 928.044144][ T5030] syzkaller1: entered promiscuous mode [ 928.049745][ T5030] syzkaller1: entered allmulticast mode [ 928.373778][ T5051] bridge0: entered promiscuous mode [ 928.386834][ T5051] bridge0: entered allmulticast mode [ 928.401874][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8240'. [ 928.441938][ T5065] x_tables: duplicate underflow at hook 3 [ 929.147452][ T5091] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8247'. [ 929.168307][ T5091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8247'. [ 929.523041][ T5101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8251'. [ 929.594387][ T5103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8252'. [ 929.813522][ T5110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8255'. [ 929.828920][ T5110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8255'. [ 930.105346][ T3829] IPVS: starting estimator thread 0... [ 930.117794][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8259'. [ 930.219930][ T5123] IPVS: using max 28 ests per chain, 67200 per kthread [ 930.591806][ T5151] lo speed is unknown, defaulting to 1000 [ 930.723461][T25946] nci: nci_ntf_packet: unknown ntf opcode 0x39 [ 930.734450][ T5163] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 930.763637][ T5154] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 930.779456][ T5165] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 930.911796][ T5153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 930.952386][ T5168] netlink: 'syz.3.8270': attribute type 1 has an invalid length. [ 931.039030][ T5151] lo speed is unknown, defaulting to 1000 [ 931.080851][ T5184] pimreg: entered allmulticast mode [ 931.289535][ T5195] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 931.401038][ T5195] bond9 (unregistering): Released all slaves [ 931.612967][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.624979][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 932.455466][ T5254] __nla_validate_parse: 14 callbacks suppressed [ 932.455490][ T5254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8289'. [ 932.560402][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8292'. [ 932.829361][ T5274] lo speed is unknown, defaulting to 1000 [ 932.992808][ T5274] lo speed is unknown, defaulting to 1000 [ 933.190162][ T5284] wg0: entered promiscuous mode [ 933.195111][ T5284] wg0: entered allmulticast mode [ 933.224778][ T5286] netlink: 'syz.0.8299': attribute type 10 has an invalid length. [ 933.241201][ T5287] netlink: 'syz.0.8299': attribute type 10 has an invalid length. [ 933.293321][ T5286] team0: Failed to send options change via netlink (err -105) [ 933.310241][ T5286] team0: Port device dummy0 added [ 933.324724][ T5287] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 933.402753][ T5287] team0: Failed to send options change via netlink (err -105) [ 933.428786][ T5287] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 933.459666][ T5287] team0: Port device dummy0 removed [ 933.542275][ T5287] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 933.590730][T25946] team0: Failed to send port change of device bond0 via netlink (err -105) [ 933.758587][T25946] bond0: (slave dummy0): interface is now down [ 933.765264][T25946] bond0: now running without any active interface! [ 934.094873][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8315'. [ 935.739350][ T5270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 935.891439][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8321'. [ 935.901333][ T5350] netlink: 'syz.3.8321': attribute type 1 has an invalid length. [ 935.950827][ T5350] 8021q: adding VLAN 0 to HW filter on device bond11 [ 936.086126][ T5350] bond11: (slave veth7): Enslaving as an active interface with a down link [ 936.142823][ T5359] syzkaller0: entered promiscuous mode [ 936.157893][ T5359] syzkaller0: entered allmulticast mode [ 936.214414][ T5365] FAULT_INJECTION: forcing a failure. [ 936.214414][ T5365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.248181][ T5365] CPU: 0 UID: 0 PID: 5365 Comm: syz.2.8326 Not tainted syzkaller #0 PREEMPT(full) [ 936.248211][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 936.248225][ T5365] Call Trace: [ 936.248234][ T5365] [ 936.248244][ T5365] dump_stack_lvl+0xe8/0x150 [ 936.248279][ T5365] should_fail_ex+0x412/0x560 [ 936.248312][ T5365] _copy_from_iter+0x1d3/0x1670 [ 936.248355][ T5365] ? __pfx__copy_from_iter+0x10/0x10 [ 936.248395][ T5365] ? aa_sk_perm+0x6d5/0x900 [ 936.248420][ T5365] ? skb_put+0x11b/0x210 [ 936.248454][ T5365] hci_sock_sendmsg+0x426/0xf40 [ 936.248480][ T5365] ? __pfx_aa_sk_perm+0x10/0x10 [ 936.248528][ T5365] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 936.248554][ T5365] ? aa_sock_msg_perm+0xf1/0x1b0 [ 936.248583][ T5365] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 936.248609][ T5365] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 936.248633][ T5365] sock_write_iter+0x49b/0x4f0 [ 936.248663][ T5365] ? __pfx_sock_write_iter+0x10/0x10 [ 936.248700][ T5365] ? bpf_lsm_file_permission+0x9/0x20 [ 936.248739][ T5365] ? security_file_permission+0x75/0x260 [ 936.248770][ T5365] vfs_write+0x61d/0xb90 [ 936.248801][ T5365] ? __pfx_vfs_write+0x10/0x10 [ 936.248834][ T5365] ? __fget_files+0x2a/0x420 [ 936.248881][ T5365] ksys_write+0x150/0x270 [ 936.248907][ T5365] ? __pfx_ksys_write+0x10/0x10 [ 936.248940][ T5365] do_syscall_64+0x14d/0xf80 [ 936.248968][ T5365] ? trace_irq_disable+0x3b/0x150 [ 936.248997][ T5365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.249019][ T5365] ? clear_bhb_loop+0x40/0x90 [ 936.249044][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.249064][ T5365] RIP: 0033:0x7fc0f959c799 [ 936.249085][ T5365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.249103][ T5365] RSP: 002b:00007fc0fa3b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 936.249125][ T5365] RAX: ffffffffffffffda RBX: 00007fc0f9815fa0 RCX: 00007fc0f959c799 [ 936.249140][ T5365] RDX: 0000000000000013 RSI: 0000200000000000 RDI: 0000000000000007 [ 936.249154][ T5365] RBP: 00007fc0fa3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 936.249167][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.249179][ T5365] R13: 00007fc0f9816038 R14: 00007fc0f9815fa0 R15: 00007ffc95540598 [ 936.249212][ T5365] [ 936.626559][ T5374] macsec0: entered promiscuous mode [ 936.805378][ T5385] gretap0: entered promiscuous mode [ 936.846633][ T5390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8336'. [ 936.864293][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8336'. [ 936.969148][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 936.977226][ C0] lec:lec_tx_timeout: lec0 [ 936.982115][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 937.034907][ T5407] netlink: 200 bytes leftover after parsing attributes in process `syz.0.8339'. [ 937.071611][ T5410] FAULT_INJECTION: forcing a failure. [ 937.071611][ T5410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.103758][ T5403] batman_adv: batadv0: Adding interface: gretap1 [ 937.126139][ T5403] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.159753][ T5403] batman_adv: batadv0: Interface activated: gretap1 [ 937.188898][ T5410] CPU: 0 UID: 0 PID: 5410 Comm: syz.2.8340 Not tainted syzkaller #0 PREEMPT(full) [ 937.188930][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 937.188944][ T5410] Call Trace: [ 937.188954][ T5410] [ 937.188963][ T5410] dump_stack_lvl+0xe8/0x150 [ 937.188999][ T5410] should_fail_ex+0x412/0x560 [ 937.189033][ T5410] _copy_from_user+0x2d/0xb0 [ 937.189068][ T5410] kstrtouint_from_user+0xd6/0x180 [ 937.189099][ T5410] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 937.189148][ T5410] proc_fail_nth_write+0x8e/0x210 [ 937.189180][ T5410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 937.189218][ T5410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 937.189252][ T5410] vfs_write+0x29a/0xb90 [ 937.189286][ T5410] ? __pfx_vfs_write+0x10/0x10 [ 937.189313][ T5410] ? __fget_files+0x2a/0x420 [ 937.189350][ T5410] ? __fget_files+0x3a0/0x420 [ 937.189381][ T5410] ? __fget_files+0x2a/0x420 [ 937.189423][ T5410] ksys_write+0x150/0x270 [ 937.189449][ T5410] ? __pfx_ksys_write+0x10/0x10 [ 937.189488][ T5410] do_syscall_64+0x14d/0xf80 [ 937.189519][ T5410] ? trace_irq_disable+0x3b/0x150 [ 937.189550][ T5410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.189574][ T5410] ? clear_bhb_loop+0x40/0x90 [ 937.189601][ T5410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.189624][ T5410] RIP: 0033:0x7fc0f955cfce [ 937.189646][ T5410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 937.189666][ T5410] RSP: 002b:00007fc0fa3b0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 937.189690][ T5410] RAX: ffffffffffffffda RBX: 00007fc0fa3b16c0 RCX: 00007fc0f955cfce [ 937.189707][ T5410] RDX: 0000000000000001 RSI: 00007fc0fa3b10a0 RDI: 0000000000000006 [ 937.189720][ T5410] RBP: 00007fc0fa3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 937.189734][ T5410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.189748][ T5410] R13: 00007fc0f9816038 R14: 00007fc0f9815fa0 R15: 00007ffc95540598 [ 937.189783][ T5410] [ 937.602285][ T5430] mac80211_hwsim hwsim80 syzkaller0: entered promiscuous mode [ 937.610442][ T5430] mac80211_hwsim hwsim80 syzkaller0: entered allmulticast mode [ 937.714513][ T5433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8346'. [ 938.666940][ T5478] netlink: 'syz.2.8359': attribute type 1 has an invalid length. [ 938.712497][ T5456] lo speed is unknown, defaulting to 1000 [ 938.715103][ T5465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8351'. [ 938.761508][ T5465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8351'. [ 938.918836][ T5481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8360'. [ 938.948936][ T5492] netlink: 'syz.0.8361': attribute type 27 has an invalid length. [ 938.981780][ T5497] netlink: 'syz.0.8361': attribute type 27 has an invalid length. [ 939.136518][ T5456] lo speed is unknown, defaulting to 1000 [ 939.795977][ T5524] netlink: 'syz.1.8370': attribute type 12 has an invalid length. [ 940.105240][ T5539] lo speed is unknown, defaulting to 1000 [ 940.577925][ T5539] lo speed is unknown, defaulting to 1000 [ 941.080473][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8388'. [ 941.234246][ T5606] pimreg: entered allmulticast mode [ 941.276209][ T5600] lo speed is unknown, defaulting to 1000 [ 941.640089][ T5600] lo speed is unknown, defaulting to 1000 [ 941.693364][ T5625] netlink: 'syz.0.8394': attribute type 4 has an invalid length. [ 941.782086][ T5627] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8395'. [ 941.783512][ T5628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8395'. [ 941.812018][ T5627] bond1: left promiscuous mode [ 941.837321][ T5627] bond2: left promiscuous mode [ 941.854974][ T5627] bond3: left promiscuous mode [ 941.860397][ T5627] bond5: left promiscuous mode [ 941.865578][ T5627] bond6: left promiscuous mode [ 941.870971][ T5627] veth9: left promiscuous mode [ 941.876232][ T5627] macsec2: left promiscuous mode [ 941.881887][ T5627] bond8: left promiscuous mode [ 941.887082][ T5627] bond9: left promiscuous mode [ 941.892251][ T5627] vlan1: left promiscuous mode [ 941.897294][ T5627] bridge0: left promiscuous mode [ 941.922541][ T5627] mac80211_hwsim hwsim80 syzkaller0: left promiscuous mode [ 941.956074][ T5637] "syz.2.8397" (5637) uses obsolete ecb(arc4) skcipher [ 941.989054][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 941.997188][ C0] lec:lec_tx_timeout: lec0 [ 942.134079][ T5643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8398'. [ 942.323797][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8402'. [ 942.644239][ T5673] lo speed is unknown, defaulting to 1000 [ 942.684706][ T5682] netlink: 'syz.4.8407': attribute type 11 has an invalid length. [ 942.792383][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8408'. [ 943.047959][ T5690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8409'. [ 943.108907][ T5673] lo speed is unknown, defaulting to 1000 [ 943.312470][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8416'. [ 943.356685][ T5711] syzkaller0: entered promiscuous mode [ 943.364374][ T5711] syzkaller0: entered allmulticast mode [ 943.511023][ T5716] netlink: 'syz.4.8418': attribute type 1 has an invalid length. [ 943.573683][ T5717] bond11 (unregistering): Released all slaves [ 943.618656][ T5716] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 943.748019][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8419'. [ 945.614681][ T5680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.789643][ T5750] netlink: 'syz.1.8425': attribute type 2 has an invalid length. [ 945.804007][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8425'. [ 945.805264][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8429'. [ 945.823877][ T5754] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 945.903920][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8428'. [ 946.001063][ T5768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8432'. [ 946.097775][ T5775] lo: entered allmulticast mode [ 946.229365][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8436'. [ 946.249237][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8436'. [ 946.817523][ T5766] lo: left allmulticast mode [ 947.241793][ T5814] netlink: 'syz.1.8442': attribute type 1 has an invalid length. [ 947.275150][ T5814] netlink: 'syz.1.8442': attribute type 3 has an invalid length. [ 947.309791][ T5814] sctp: [Deprecated]: syz.1.8442 (pid 5814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 947.309791][ T5814] Use struct sctp_sack_info instead [ 947.576622][ T5819] lo speed is unknown, defaulting to 1000 [ 947.733759][ T5830] Cannot find del_set index 49151 as target [ 947.951718][ T5844] __nla_validate_parse: 6 callbacks suppressed [ 947.951739][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8452'. [ 947.967975][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8452'. [ 947.981274][ T5821] lo speed is unknown, defaulting to 1000 [ 947.982254][ T5819] lo speed is unknown, defaulting to 1000 [ 948.140778][ T5858] delete_channel: no stack [ 948.282790][ T5869] 5nè‹Ò: entered promiscuous mode [ 948.455347][ T5829] lo speed is unknown, defaulting to 1000 [ 948.455359][ T5821] lo speed is unknown, defaulting to 1000 [ 948.489798][ T3829] page_pool_release_retry() stalled pool shutdown: id 342, 1 inflight 60 sec [ 948.703553][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8462'. [ 949.264292][ T5829] lo speed is unknown, defaulting to 1000 [ 949.540104][ T5934] batadv0: entered promiscuous mode [ 949.550212][ T5934] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 949.580467][ T5934] batadv0: left promiscuous mode [ 949.898076][ T5951] netlink: 'syz.1.8478': attribute type 49 has an invalid length. [ 949.910036][ T5950] syzkaller0: entered promiscuous mode [ 949.915623][ T5950] syzkaller0: entered allmulticast mode [ 950.045529][ T5953] syzkaller0: entered promiscuous mode [ 950.055102][ T5953] syzkaller0: entered allmulticast mode [ 950.135342][ T5953] macsec1: entered promiscuous mode [ 950.223167][ T5955] lo speed is unknown, defaulting to 1000 [ 950.258987][ T5960] netlink: 836 bytes leftover after parsing attributes in process `syz.1.8481'. [ 950.341851][ T5962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8482'. [ 950.566191][ T5965] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 950.608961][ T5965] syzkaller1: linktype set to 823 [ 950.667972][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8485'. [ 950.714538][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 950.737529][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 950.757467][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 950.779283][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8485'. [ 950.796952][ T5955] lo speed is unknown, defaulting to 1000 [ 950.804449][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 950.830224][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 950.951446][ T5972] lo speed is unknown, defaulting to 1000 [ 951.420729][ T5972] lo speed is unknown, defaulting to 1000 [ 951.452669][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8490'. [ 951.462726][ T5987] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8490'. [ 951.603736][ T5989] lo speed is unknown, defaulting to 1000 [ 951.855378][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 951.995890][ T6016] tipc: Trying to set illegal importance in message [ 952.088746][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 952.151017][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.160193][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.168124][ T5972] bridge_slave_0: entered allmulticast mode [ 952.177114][ T5972] bridge_slave_0: entered promiscuous mode [ 952.186572][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.194185][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.202149][ T5972] bridge_slave_1: entered allmulticast mode [ 952.211201][ T5972] bridge_slave_1: entered promiscuous mode [ 952.235486][ T5989] lo speed is unknown, defaulting to 1000 [ 952.371308][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8502'. [ 952.393485][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.467210][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.550238][ T6038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.632743][ T5972] team0: Port device team_slave_0 added [ 952.676847][ T5972] team0: Port device team_slave_1 added [ 952.903016][ T5837] Bluetooth: hci4: command tx timeout [ 952.949959][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.956973][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.030515][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.068997][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.076141][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.103060][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.143123][ T6054] __nla_validate_parse: 3 callbacks suppressed [ 953.143143][ T6054] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.8509'. [ 953.186446][ T5972] hsr_slave_0: entered promiscuous mode [ 953.195067][ T5972] hsr_slave_1: entered promiscuous mode [ 953.202023][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 953.207777][ T5972] Cannot create hsr debugfs directory [ 953.216357][ T6054] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8509'. [ 953.589626][ T6074] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8514'. [ 953.604345][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8514'. [ 953.867652][ T5972] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 953.885780][ T5972] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 953.904694][ T5972] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 953.950897][ T5972] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 954.188941][ T6108] lo speed is unknown, defaulting to 1000 [ 954.306493][ T6107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 954.473569][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.526707][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.555124][T25948] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.562387][T25948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.625061][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8526'. [ 954.634953][T25948] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.642194][T25948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.730061][ T6130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8525'. [ 954.755728][ T6115] lo speed is unknown, defaulting to 1000 [ 954.762104][ T6108] lo speed is unknown, defaulting to 1000 [ 954.969162][ T5837] Bluetooth: hci4: command tx timeout [ 955.123706][ T6150] netlink: 'syz.3.8528': attribute type 2 has an invalid length. [ 955.216638][ T6150] !: entered promiscuous mode [ 955.329540][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.360556][ T6144] netlink: 'syz.0.8529': attribute type 1 has an invalid length. [ 955.398503][ T6144] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.8529'. [ 955.507098][ T6115] lo speed is unknown, defaulting to 1000 [ 955.687412][ T6159] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8530'. [ 955.780745][ T6159] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8530'. [ 955.825368][ T6159] netlink: 'syz.3.8530': attribute type 5 has an invalid length. [ 955.856938][ T6159] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8530'. [ 956.256409][ T5972] veth0_vlan: entered promiscuous mode [ 956.313847][ T5972] veth1_vlan: entered promiscuous mode [ 956.397430][ T5972] veth0_macvtap: entered promiscuous mode [ 956.418262][ T5972] veth1_macvtap: entered promiscuous mode [ 956.472107][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.512680][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.540058][T25946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.555026][T25946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.602316][T25946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.611474][T25946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.821374][T25948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.842962][T25948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.014069][T25946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.022545][T25946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.058624][ T5837] Bluetooth: hci4: command tx timeout [ 957.376627][ T6233] netlink: 'syz.3.8547': attribute type 1 has an invalid length. [ 957.417935][ T6238] netlink: 'syz.4.8551': attribute type 1 has an invalid length. [ 958.023639][ T6260] lo speed is unknown, defaulting to 1000 [ 958.099042][ T6265] x_tables: duplicate underflow at hook 2 [ 958.485518][ T6277] netlink: 'syz.4.8567': attribute type 1 has an invalid length. [ 958.498988][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.524903][ T6253] __nla_validate_parse: 8 callbacks suppressed [ 958.524928][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8557'. [ 958.822441][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8569'. [ 958.994834][ T6260] lo speed is unknown, defaulting to 1000 [ 959.038218][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8559'. [ 959.129795][ T5837] Bluetooth: hci4: command tx timeout [ 959.355558][ T6315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8574'. [ 959.453933][ T6319] netlink: 428 bytes leftover after parsing attributes in process `syz.2.8574'. [ 959.489585][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8574'. [ 959.624652][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8577'. [ 959.728942][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8576'. [ 959.767770][ T6328] macsec1: entered promiscuous mode [ 959.774971][ T6328] erspan0: entered promiscuous mode [ 959.785615][ T6328] macsec1: entered allmulticast mode [ 959.793003][ T6328] erspan0: entered allmulticast mode [ 959.801690][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8576'. [ 959.835793][ T6328] erspan0: left allmulticast mode [ 959.916852][ T6328] erspan0: left promiscuous mode [ 959.970494][ T6329] macsec1: entered promiscuous mode [ 959.986076][ T6329] erspan0: entered promiscuous mode [ 960.008698][ T6329] macsec1: entered allmulticast mode [ 960.028496][ T6329] erspan0: entered allmulticast mode [ 960.061650][ T6329] erspan0: left allmulticast mode [ 960.077307][ T6329] erspan0: left promiscuous mode [ 960.333639][T18299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 960.343359][T18299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 960.353997][T18299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 960.374480][T18299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 960.399665][T18299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 960.550445][ T6350] lo speed is unknown, defaulting to 1000 [ 960.668776][ T6362] netlink: 'syz.0.8586': attribute type 12 has an invalid length. [ 960.785462][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8586'. [ 961.066779][ T6364] lo speed is unknown, defaulting to 1000 [ 961.075236][ T6350] lo speed is unknown, defaulting to 1000 [ 961.404022][ T6384] netlink: 'syz.1.8590': attribute type 4 has an invalid length. [ 961.419961][ T6389] sock: sock_timestamping_bind_phc: sock not bind to device [ 961.438550][ T6388] IPv6: NLM_F_CREATE should be specified when creating new route [ 961.479432][ T6384] .`: renamed from bond0 (while UP) [ 961.534404][ T6392] netlink: 'syz.3.8593': attribute type 1 has an invalid length. [ 961.555318][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 961.591942][ T6364] lo speed is unknown, defaulting to 1000 [ 961.879388][ T6396] syzkaller1: entered promiscuous mode [ 961.885322][ T6396] syzkaller1: entered allmulticast mode [ 962.106154][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.113921][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.122377][ T6350] bridge_slave_0: entered allmulticast mode [ 962.149755][ T6350] bridge_slave_0: entered promiscuous mode [ 962.159974][T25949] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.179163][T25949] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.195698][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.208803][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.226956][ T6350] bridge_slave_1: entered allmulticast mode [ 962.244617][ T6350] bridge_slave_1: entered promiscuous mode [ 962.280618][T25949] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.294089][T25949] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.341314][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.375459][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.486871][ T6350] team0: Port device team_slave_0 added [ 962.498761][T18299] Bluetooth: hci3: command tx timeout [ 962.511346][ T6350] team0: Port device team_slave_1 added [ 962.556993][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.564491][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.595809][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.610477][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.618297][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.664179][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.783160][ T6350] hsr_slave_0: entered promiscuous mode [ 962.791655][ T6350] hsr_slave_1: entered promiscuous mode [ 962.799091][ T6350] debugfs: 'hsr0' already exists in 'hsr' [ 962.805157][ T6350] Cannot create hsr debugfs directory [ 962.829290][ T6434] tipc: Invalid UDP bearer configuration [ 962.829345][ T6434] tipc: Enabling of bearer rejected, failed to enable media [ 962.905744][ T6443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.401483][ T6481] netlink: zone id is out of range [ 963.406888][ T6481] netlink: zone id is out of range [ 963.413078][ T6481] netlink: zone id is out of range [ 963.418799][ T6481] netlink: zone id is out of range [ 963.424045][ T6481] netlink: zone id is out of range [ 963.430861][ T6481] netlink: zone id is out of range [ 963.436342][ T6481] netlink: zone id is out of range [ 963.442166][ T6481] netlink: zone id is out of range [ 964.308570][ T6350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 964.344256][ T6350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 964.380810][ T6350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 964.406706][ T6350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 964.524375][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.563042][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.579962][T18299] Bluetooth: hci3: command tx timeout [ 964.592881][T25946] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.600142][T25946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.616832][T25946] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.624096][T25946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.715594][ T6523] syzkaller0: entered promiscuous mode [ 964.723191][ T6523] syzkaller0: entered allmulticast mode [ 964.904925][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.986931][ T6350] veth0_vlan: entered promiscuous mode [ 965.009997][ T6350] veth1_vlan: entered promiscuous mode [ 965.020553][ T6533] syzkaller0: entered promiscuous mode [ 965.026828][ T6533] syzkaller0: entered allmulticast mode [ 965.066555][ T6534] __nla_validate_parse: 11 callbacks suppressed [ 965.066577][ T6534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8630'. [ 965.089505][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8630'. [ 965.101376][ T6350] veth0_macvtap: entered promiscuous mode [ 965.143495][ T6350] veth1_macvtap: entered promiscuous mode [ 965.209754][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.236783][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.259977][ T6511] delete_channel: no stack [ 965.266813][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.286498][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.320285][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.347131][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.506287][ T6537] syzkaller1: entered promiscuous mode [ 965.539238][ T6537] syzkaller1: entered allmulticast mode [ 965.586562][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8633'. [ 965.753653][ T6551] 8021q: adding VLAN 0 to HW filter on device bond13 [ 965.763491][ T6551] team0: Port device bond13 added [ 965.809397][T25949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.819193][T25949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.987568][T25925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.001604][T25925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.214984][ T6580] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8641'. [ 966.227537][ T6580] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8641'. [ 966.353501][ T6584] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8642'. [ 966.374818][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8642'. [ 966.451463][ T6587] lo speed is unknown, defaulting to 1000 [ 966.649129][T18299] Bluetooth: hci3: command tx timeout [ 966.901871][ T6595] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8645'. [ 966.913233][ T6595] netlink: 'syz.0.8645': attribute type 1 has an invalid length. [ 966.948595][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8645'. [ 966.962420][ T6587] lo speed is unknown, defaulting to 1000 [ 966.978732][ T6595] netlink: 'syz.0.8645': attribute type 1 has an invalid length. [ 967.110559][ T6598] tipc: Started in network mode [ 967.123816][ T6598] tipc: Node identity 862145c83018, cluster identity 4711 [ 967.160610][ T6598] tipc: Enabled bearer , priority 0 [ 967.215337][ T6601] bridge0: port 3(macvlan2) entered blocking state [ 967.233897][ T6601] bridge0: port 3(macvlan2) entered disabled state [ 967.249478][ T6601] macvlan2: entered allmulticast mode [ 967.261652][ T6601] bridge0: entered allmulticast mode [ 967.280507][ T6601] macvlan2: left allmulticast mode [ 967.293575][ T6601] bridge0: left allmulticast mode [ 967.332837][ T6598] syzkaller0: entered promiscuous mode [ 967.343993][ T6598] syzkaller0: entered allmulticast mode [ 967.356064][ T6605] netlink: 'syz.4.8646': attribute type 16 has an invalid length. [ 967.481223][ T6597] tipc: Resetting bearer [ 967.504900][ T6597] tipc: Disabling bearer [ 967.773497][ T6613] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8650'. [ 967.902117][ T6622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 968.536748][ T6646] FAULT_INJECTION: forcing a failure. [ 968.536748][ T6646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.550474][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.4.8659 Not tainted syzkaller #0 PREEMPT(full) [ 968.550505][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 968.550520][ T6646] Call Trace: [ 968.550530][ T6646] [ 968.550540][ T6646] dump_stack_lvl+0xe8/0x150 [ 968.550576][ T6646] should_fail_ex+0x412/0x560 [ 968.550611][ T6646] _copy_from_user+0x2d/0xb0 [ 968.550646][ T6646] get_timespec64+0x96/0x1b0 [ 968.550674][ T6646] ? __pfx_get_timespec64+0x10/0x10 [ 968.550714][ T6646] __x64_sys_recvmmsg+0x14b/0x250 [ 968.550743][ T6646] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 968.550780][ T6646] do_syscall_64+0x14d/0xf80 [ 968.550811][ T6646] ? trace_irq_disable+0x3b/0x150 [ 968.550858][ T6646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.550882][ T6646] ? clear_bhb_loop+0x40/0x90 [ 968.550910][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.550933][ T6646] RIP: 0033:0x7fb54059c799 [ 968.550954][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.550973][ T6646] RSP: 002b:00007fb541508028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 968.550997][ T6646] RAX: ffffffffffffffda RBX: 00007fb540815fa0 RCX: 00007fb54059c799 [ 968.551014][ T6646] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 968.551030][ T6646] RBP: 00007fb541508090 R08: 0000200000003700 R09: 0000000000000000 [ 968.551046][ T6646] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 968.551061][ T6646] R13: 00007fb540816038 R14: 00007fb540815fa0 R15: 00007ffee8b1df88 [ 968.551096][ T6646] [ 968.730233][T18299] Bluetooth: hci3: command tx timeout [ 969.059239][ T6655] tipc: Enabling of bearer rejected, failed to enable media [ 969.088879][ T6656] tipc: Enabling of bearer rejected, failed to enable media [ 969.273479][ T6665] 8021q: VLANs not supported on ipvlan0 [ 969.373538][ T6669] netlink: 'syz.2.8667': attribute type 9 has an invalid length. [ 969.479185][ T6674] vlan2: entered promiscuous mode [ 969.488926][ T6674] vlan2: entered allmulticast mode [ 969.494243][ T6674] hsr_slave_1: entered allmulticast mode [ 969.961665][ T6704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.160917][ T6712] netlink: 'syz.0.8676': attribute type 4 has an invalid length. [ 971.208292][ T6756] netlink: 'syz.2.8686': attribute type 1 has an invalid length. [ 971.656400][ T6764] __nla_validate_parse: 7 callbacks suppressed [ 971.656415][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8687'. [ 971.672453][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8687'. [ 971.686573][ T6764] batadv0: entered promiscuous mode [ 971.693794][ T6764] batadv0: left promiscuous mode [ 973.295152][ T6717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 973.319029][ T6751] netlink: 'syz.0.8685': attribute type 11 has an invalid length. [ 973.327072][ T6751] netlink: 'syz.0.8685': attribute type 23 has an invalid length. [ 973.346788][ T6751] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8685'. [ 973.586610][ T6787] syzkaller0: entered promiscuous mode [ 973.592635][ T6787] syzkaller0: entered allmulticast mode [ 973.620078][ T6791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8694'. [ 973.749781][ T6802] ip6tnl1: entered promiscuous mode [ 973.763925][ T6802] ip6tnl1: entered allmulticast mode [ 974.073982][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8697'. [ 974.770883][ T6853] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8710'. [ 974.920722][ T6862] Bluetooth: MGMT ver 1.23 [ 975.135492][ T6867] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8713'. [ 975.145415][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8713'. [ 975.554717][ T6876] lo speed is unknown, defaulting to 1000 [ 975.776243][ T6876] lo speed is unknown, defaulting to 1000 [ 976.030360][ T6891] sctp: [Deprecated]: syz.2.8717 (pid 6891) Use of int in max_burst socket option deprecated. [ 976.030360][ T6891] Use struct sctp_assoc_value instead [ 976.109374][ T6893] netlink: 'syz.1.8720': attribute type 1 has an invalid length. [ 976.117218][ T6893] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8720'. [ 976.570022][ T6904] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8721'. [ 976.788307][ T6909] netlink: 'syz.3.8725': attribute type 2 has an invalid length. [ 976.823977][ T6911] batadv_slave_0: entered promiscuous mode [ 976.891032][ T6914] netlink: 'syz.1.8727': attribute type 10 has an invalid length. [ 977.033957][ T6910] batadv_slave_0: left promiscuous mode [ 977.260636][ T6934] __nla_validate_parse: 2 callbacks suppressed [ 977.260658][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8731'. [ 977.322232][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8731'. [ 977.375058][ T6943] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8733'. [ 977.457985][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8732'. [ 977.647582][ T6954] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8734'. [ 977.669917][ T6947] lo speed is unknown, defaulting to 1000 [ 978.147258][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8739'. [ 978.209602][ T6972] vlan2: entered promiscuous mode [ 978.219195][ T6972] bridge0: entered promiscuous mode [ 978.241273][ T6970] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8738'. [ 978.259060][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8738'. [ 978.282504][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8740'. [ 979.900470][ T6947] lo speed is unknown, defaulting to 1000 [ 980.008047][ T6985] IPv6: addrconf: prefix option has invalid lifetime [ 980.111656][ T6989] x_tables: duplicate entry at hook 1 [ 981.162938][ T7032] netlink: 'syz.2.8755': attribute type 12 has an invalid length. [ 981.246613][ T7036] openvswitch: netlink: Actions may not be safe on all matching packets [ 981.321569][ T7041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8757'. [ 981.361973][ T7045] netlink: 'syz.4.8758': attribute type 1 has an invalid length. [ 981.382270][ T7041] tipc: Started in network mode [ 981.398770][ T7041] tipc: Node identity ac14140f, cluster identity 4711 [ 981.416568][ T7041] tipc: New replicast peer: 255.255.255.255 [ 981.427128][ T7041] tipc: Enabled bearer , priority 6 [ 982.548567][ T3829] tipc: Node number set to 2886997007 [ 982.643271][ T7113] __nla_validate_parse: 3 callbacks suppressed [ 982.643291][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8778'. [ 982.733728][ T7115] dummy0: entered allmulticast mode [ 982.797558][ T7114] dummy0: left allmulticast mode [ 983.092865][ T7134] syzkaller0: entered promiscuous mode [ 983.103417][ T7134] syzkaller0: entered allmulticast mode [ 983.369955][ T7145] lo speed is unknown, defaulting to 1000 [ 983.690827][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8792'. [ 983.718614][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8792'. [ 983.753374][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8792'. [ 983.796359][ T7158] syzkaller1: entered promiscuous mode [ 983.802257][ T7158] syzkaller1: entered allmulticast mode [ 983.814314][ T7158] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8791'. [ 983.907025][ T7158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8791'. [ 984.024830][ T7163] bond11: entered allmulticast mode [ 984.036543][ T7163] 8021q: adding VLAN 0 to HW filter on device bond11 [ 984.064025][ T7145] lo speed is unknown, defaulting to 1000 [ 984.409370][ T7172] netlink: 'syz.3.8797': attribute type 9 has an invalid length. [ 984.460002][ T7172] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.8797'. [ 984.575421][ T7173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.773703][ T7173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.966486][ T7173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.999124][ T7190] netlink: 'syz.1.8802': attribute type 2 has an invalid length. [ 985.011344][ T7190] netlink: 'syz.1.8802': attribute type 2 has an invalid length. [ 985.070676][ T7192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8803'. [ 985.121783][ T7173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.189807][ T7193] netlink: 'syz.0.8803': attribute type 2 has an invalid length. [ 985.197738][ T7193] netlink: 'syz.0.8803': attribute type 1 has an invalid length. [ 985.230273][ T7195] IPVS: Scheduler module ip_vs_7 not found [ 985.237807][ T7193] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8803'. [ 985.463076][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8806'. [ 986.096608][ T7247] netlink: 'syz.3.8821': attribute type 1 has an invalid length. [ 986.175978][ T7247] bond14: entered promiscuous mode [ 986.193231][ T7247] 8021q: adding VLAN 0 to HW filter on device bond14 [ 986.456011][ T7253] xt_hashlimit: overflow, try lower: 18446744073709551607/511 [ 986.776491][ T7290] netlink: 'syz.2.8831': attribute type 4 has an invalid length. [ 986.995067][ T7295] FAULT_INJECTION: forcing a failure. [ 986.995067][ T7295] name failslab, interval 1, probability 0, space 0, times 0 [ 987.041159][ T7295] CPU: 1 UID: 0 PID: 7295 Comm: syz.0.8834 Not tainted syzkaller #0 PREEMPT(full) [ 987.041189][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 987.041203][ T7295] Call Trace: [ 987.041211][ T7295] [ 987.041221][ T7295] dump_stack_lvl+0xe8/0x150 [ 987.041257][ T7295] should_fail_ex+0x412/0x560 [ 987.041291][ T7295] should_failslab+0xa8/0x100 [ 987.041319][ T7295] ? skb_clone+0x212/0x3a0 [ 987.041345][ T7295] kmem_cache_alloc_noprof+0x87/0x650 [ 987.041368][ T7295] ? __netlink_lookup+0xc6/0x8b0 [ 987.041406][ T7295] skb_clone+0x212/0x3a0 [ 987.041433][ T7295] __netlink_deliver_tap+0x404/0x850 [ 987.041475][ T7295] ? netlink_deliver_tap+0x2e/0x1b0 [ 987.041507][ T7295] netlink_deliver_tap+0x19c/0x1b0 [ 987.041538][ T7295] netlink_unicast+0x7e3/0x9b0 [ 987.041574][ T7295] ? __pfx_netlink_unicast+0x10/0x10 [ 987.041603][ T7295] ? netlink_sendmsg+0x650/0xb40 [ 987.041631][ T7295] ? skb_put+0x11b/0x210 [ 987.041667][ T7295] netlink_sendmsg+0x813/0xb40 [ 987.041708][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.041742][ T7295] ? aa_sock_msg_perm+0xf1/0x1b0 [ 987.041771][ T7295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 987.041799][ T7295] ____sys_sendmsg+0x972/0x9f0 [ 987.041831][ T7295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 987.041863][ T7295] ? import_iovec+0x73/0xa0 [ 987.041907][ T7295] ___sys_sendmsg+0x2a5/0x360 [ 987.041935][ T7295] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.041996][ T7295] ? __fget_files+0x2a/0x420 [ 987.042026][ T7295] ? __fget_files+0x3a0/0x420 [ 987.042078][ T7295] __x64_sys_sendmsg+0x1bd/0x2a0 [ 987.042102][ T7295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 987.042132][ T7295] ? __pfx_ksys_write+0x10/0x10 [ 987.042166][ T7295] do_syscall_64+0x14d/0xf80 [ 987.042193][ T7295] ? trace_irq_disable+0x3b/0x150 [ 987.042222][ T7295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.042243][ T7295] ? clear_bhb_loop+0x40/0x90 [ 987.042269][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.042289][ T7295] RIP: 0033:0x7f2c7f59c799 [ 987.042309][ T7295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.042326][ T7295] RSP: 002b:00007f2c8043c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.042348][ T7295] RAX: ffffffffffffffda RBX: 00007f2c7f815fa0 RCX: 00007f2c7f59c799 [ 987.042364][ T7295] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 987.042376][ T7295] RBP: 00007f2c8043c090 R08: 0000000000000000 R09: 0000000000000000 [ 987.042389][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.042401][ T7295] R13: 00007f2c7f816038 R14: 00007f2c7f815fa0 R15: 00007ffc303621b8 [ 987.042452][ T7295] [ 987.373482][ T7300] netlink: 'syz.0.8836': attribute type 1 has an invalid length. [ 987.417392][ T7300] bond12: entered promiscuous mode [ 987.424824][ T7300] 8021q: adding VLAN 0 to HW filter on device bond12 [ 987.642446][ T7305] 8021q: adding VLAN 0 to HW filter on device bond15 [ 987.653118][ T7314] netlink: 'syz.0.8839': attribute type 10 has an invalid length. [ 987.661391][ T7314] __nla_validate_parse: 10 callbacks suppressed [ 987.661413][ T7314] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8839'. [ 987.677470][ T7312] netlink: 'syz.3.8838': attribute type 14 has an invalid length. [ 987.759605][ T7314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 987.781162][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8838'. [ 987.810731][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8838'. [ 987.823876][ T7314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 987.837896][ T7314] hsr0: entered promiscuous mode [ 987.844009][ T7318] netlink: 'syz.3.8838': attribute type 4 has an invalid length. [ 987.862754][ T7318] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8838'. [ 987.885822][ T7318] .`: renamed from bond0 [ 987.928798][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 988.726045][ T7334] netlink: 'syz.0.8846': attribute type 4 has an invalid length. [ 988.749953][ T7334] netlink: 'syz.0.8846': attribute type 4 has an invalid length. [ 989.034284][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8852'. [ 989.044990][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8851'. [ 989.059918][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8852'. [ 989.164698][ T7353] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8853'. [ 989.174290][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8853'. [ 989.249775][ T7358] netlink: 'syz.0.8854': attribute type 15 has an invalid length. [ 989.423178][ T7366] xt_TCPMSS: Only works on TCP SYN packets [ 989.496900][ T7368] openvswitch: netlink: IP tunnel dst address not specified [ 989.673289][ T7373] netlink: 'syz.0.8861': attribute type 1 has an invalid length. [ 989.707388][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8861'. [ 989.728344][ T7373] vlan4: entered allmulticast mode [ 989.735125][ T7373] bond13: entered allmulticast mode [ 990.230255][ T7394] netlink: 'syz.0.8866': attribute type 6 has an invalid length. [ 990.429098][ T3829] lo speed is unknown, defaulting to 1000 [ 990.446424][ T3829] syz0: Port: 1 Link ACTIVE [ 990.460471][ T3826] lo speed is unknown, defaulting to 1000 [ 990.489094][ T7404] macvlan0: entered promiscuous mode [ 990.495226][ T7404] macvlan0: entered allmulticast mode [ 990.501553][ T7404] veth1_to_batadv: entered allmulticast mode [ 990.720980][ T7413] !: entered promiscuous mode [ 990.774449][ T7414] IPv6: sit1: Disabled Multicast RS [ 991.170844][ T7441] veth0_to_hsr: left promiscuous mode [ 991.183072][ T7441] veth0_to_hsr: left allmulticast mode [ 991.207118][ T7441] bond1: left promiscuous mode [ 991.213008][ T7441] vti0: left promiscuous mode [ 991.225253][ T7441] bond2: left promiscuous mode [ 991.236207][ T7441] bond3: left promiscuous mode [ 991.241591][ T7441] bond4: left promiscuous mode [ 991.326985][ T7441] bond7: left promiscuous mode [ 991.335071][ T7441] bond9: left promiscuous mode [ 991.362043][ T7441] bridge0: left promiscuous mode [ 991.367066][ T7441] bridge0: left allmulticast mode [ 991.501232][ T7441] bond14: left promiscuous mode [ 991.524376][ T3826] lo speed is unknown, defaulting to 1000 [ 991.533534][ T3826] syz0: Port: 1 Link DOWN [ 991.542836][ T7434] lo speed is unknown, defaulting to 1000 [ 991.555020][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.577301][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.639752][ T3828] lo speed is unknown, defaulting to 1000 [ 991.652079][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.668562][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.830313][ T7434] lo speed is unknown, defaulting to 1000 [ 991.830313][ T7447] lo speed is unknown, defaulting to 1000 [ 992.126170][ T7473] tipc: Disabling bearer [ 992.348729][ T7450] lo speed is unknown, defaulting to 1000 [ 992.581227][ T7450] lo speed is unknown, defaulting to 1000 [ 992.666668][ T7447] lo speed is unknown, defaulting to 1000 [ 993.053708][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.066612][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 993.291381][ T7487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 993.548579][ T7523] IPv6: addrconf: prefix option has invalid lifetime [ 993.560902][ T7525] __nla_validate_parse: 9 callbacks suppressed [ 993.560923][ T7525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8898'. [ 993.658080][ T7530] IPv6: addrconf: prefix option has invalid lifetime [ 993.880687][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8901'. [ 993.940050][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8905'. [ 993.960640][ T7538] lo speed is unknown, defaulting to 1000 [ 994.030212][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8906'. [ 994.057948][ T7551] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8906'. [ 994.079044][ T7553] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8906'. [ 994.109259][ T7555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8907'. [ 994.215765][ T7563] xt_connbytes: Forcing CT accounting to be enabled [ 994.269970][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8907'. [ 994.400969][ T7565] bond0: entered promiscuous mode [ 994.406531][ T7565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.479329][ T7555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.486920][ T7555] bond0: (slave sit2): The slave device specified does not support setting the MAC address [ 994.499753][ T7555] bond0: (slave sit2): Error -95 calling set_mac_address [ 994.549626][ T7538] lo speed is unknown, defaulting to 1000 [ 994.550040][ T7537] lo speed is unknown, defaulting to 1000 [ 994.807446][ T7591] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8913'. [ 994.919883][ T7561] lo speed is unknown, defaulting to 1000 [ 995.202778][ T7561] lo speed is unknown, defaulting to 1000 [ 995.315799][ T7537] lo speed is unknown, defaulting to 1000 [ 995.556988][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8919'. [ 995.578115][ T7614] validate_nla: 1 callbacks suppressed [ 995.578139][ T7614] netlink: 'syz.0.8920': attribute type 309 has an invalid length. [ 995.805706][ T7610] syzkaller1: entered promiscuous mode [ 995.811758][ T7610] syzkaller1: entered allmulticast mode [ 995.837419][ T7627] FAULT_INJECTION: forcing a failure. [ 995.837419][ T7627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.859752][ T7627] CPU: 0 UID: 0 PID: 7627 Comm: syz.0.8921 Not tainted syzkaller #0 PREEMPT(full) [ 995.859782][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 995.859796][ T7627] Call Trace: [ 995.859806][ T7627] [ 995.859815][ T7627] dump_stack_lvl+0xe8/0x150 [ 995.859852][ T7627] should_fail_ex+0x412/0x560 [ 995.859887][ T7627] _copy_from_user+0x2d/0xb0 [ 995.859922][ T7627] __sys_bpf+0x229/0x950 [ 995.859958][ T7627] ? __pfx___sys_bpf+0x10/0x10 [ 995.860009][ T7627] ? ksys_write+0x242/0x270 [ 995.860035][ T7627] ? __pfx_ksys_write+0x10/0x10 [ 995.860067][ T7627] __x64_sys_bpf+0x7c/0x90 [ 995.860098][ T7627] do_syscall_64+0x14d/0xf80 [ 995.860130][ T7627] ? trace_irq_disable+0x3b/0x150 [ 995.860170][ T7627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.860193][ T7627] ? clear_bhb_loop+0x40/0x90 [ 995.860221][ T7627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.860243][ T7627] RIP: 0033:0x7f2c7f59c799 [ 995.860263][ T7627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.860282][ T7627] RSP: 002b:00007f2c8043c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 995.860306][ T7627] RAX: ffffffffffffffda RBX: 00007f2c7f815fa0 RCX: 00007f2c7f59c799 [ 995.860322][ T7627] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 995.860336][ T7627] RBP: 00007f2c8043c090 R08: 0000000000000000 R09: 0000000000000000 [ 995.860350][ T7627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.860364][ T7627] R13: 00007f2c7f816038 R14: 00007f2c7f815fa0 R15: 00007ffc303621b8 [ 995.860399][ T7627] [ 996.091772][ T7629] netlink: 'syz.2.8922': attribute type 1 has an invalid length. [ 996.214568][ T7634] Cannot find del_set index 1536 as target [ 996.411734][ T7640] siw: device registration error -23 [ 996.607642][ T7647] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 996.671900][ T7651] netlink: 'syz.3.8929': attribute type 2 has an invalid length. [ 996.697897][ T7652] netlink: 'syz.0.8930': attribute type 29 has an invalid length. [ 997.037716][ T7669] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 997.228054][ T7681] netlink: 'syz.2.8936': attribute type 10 has an invalid length. [ 997.270785][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.293217][ T7681] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 998.078411][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 998.086500][ C0] lec:lec_tx_timeout: lec0 [ 998.091757][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 998.205478][T25943] bridge_slave_1: left allmulticast mode [ 998.227848][T25943] bridge_slave_1: left promiscuous mode [ 998.239295][T25943] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.268001][T25943] bridge_slave_0: left allmulticast mode [ 998.286460][T25943] bridge_slave_0: left promiscuous mode [ 998.292681][T25943] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.344636][T25943] batman_adv: batadv0: Interface deactivated: gretap2 [ 998.434007][T25943] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 998.687661][T25943] batman_adv: batadv0: Removing interface: gretap2 [ 998.730038][T25943] bond9 (unregistering): (slave geneve3): Releasing active interface [ 998.749866][T25943] geneve1 (unregistering): left allmulticast mode [ 998.756968][T25943] geneve1 (unregistering): left promiscuous mode [ 999.196428][T25943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.207659][T25943] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 999.217162][T25943] bond0 (unregistering): Released all slaves [ 999.232169][T25943] bond1 (unregistering): Released all slaves [ 999.247488][T25943] bond2 (unregistering): Released all slaves [ 999.262210][T25943] bond3 (unregistering): Released all slaves [ 999.277123][T25943] bond4 (unregistering): Released all slaves [ 999.296058][T25943] bond5 (unregistering): Released all slaves [ 999.316771][T25943] bond6 (unregistering): Released all slaves [ 999.331624][T25943] bond7 (unregistering): Released all slaves [ 999.347409][T25943] bond8 (unregistering): (slave veth5): Releasing active interface [ 999.359242][T25943] bond8 (unregistering): Released all slaves [ 999.381550][T25943] bond9 (unregistering): Released all slaves [ 999.395880][T25943] bond10 (unregistering): Released all slaves [ 999.411284][T25943] bond11 (unregistering): Released all slaves [ 999.621370][T25943] : left promiscuous mode [ 999.808783][T25943] tipc: Left network mode [ 999.886322][ T7774] netlink: 'syz.2.8959': attribute type 27 has an invalid length. [ 1000.111455][ T7783] __nla_validate_parse: 7 callbacks suppressed [ 1000.111475][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8961'. [ 1000.167072][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8961'. [ 1000.225480][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.233260][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.625320][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.635361][ T7816] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.8966'. [ 1000.737411][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.941019][ T7774] vlan2: left promiscuous mode [ 1000.945944][ T7774] bridge0: left promiscuous mode [ 1000.987032][ T7779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.995848][ T7779] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.007737][ T7779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1001.034058][ T7798] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.8964'. [ 1001.047061][ T7819] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1001.129580][ T7820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1001.195308][T25949] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.206596][T25949] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.272035][T25949] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.325656][T25949] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.353916][ T7839] netlink: 'syz.0.8972': attribute type 21 has an invalid length. [ 1001.434348][ T7839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8972'. [ 1001.489391][ T7848] netlink: 'syz.4.8974': attribute type 83 has an invalid length. [ 1001.643437][ T7851] netlink: 'syz.1.8976': attribute type 10 has an invalid length. [ 1001.668994][ T7851] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8976'. [ 1001.763443][ T7851] hsr0: entered promiscuous mode [ 1001.789211][ T7851] bridge0: port 2(hsr0) entered blocking state [ 1001.819648][ T7851] bridge0: port 2(hsr0) entered disabled state [ 1001.857544][ T7851] hsr0: entered allmulticast mode [ 1001.882827][ T7851] hsr_slave_0: entered allmulticast mode [ 1001.907369][ T7851] bridge0: port 2(hsr0) entered blocking state [ 1001.913797][ T7851] bridge0: port 2(hsr0) entered forwarding state [ 1001.976434][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8980'. [ 1002.088757][ C1] [ 1002.091182][ C1] ============================================ [ 1002.097376][ C1] WARNING: possible recursive locking detected [ 1002.103624][ C1] syzkaller #0 Not tainted [ 1002.108083][ C1] -------------------------------------------- [ 1002.114282][ C1] syz.0.8978/7859 is trying to acquire lock: [ 1002.120293][ C1] ffff8880581a4f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1002.129416][ C1] [ 1002.129416][ C1] but task is already holding lock: [ 1002.136803][ C1] ffff888032cd4f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1002.147086][ C1] [ 1002.147086][ C1] other info that might help us debug this: [ 1002.155696][ C1] Possible unsafe locking scenario: [ 1002.155696][ C1] [ 1002.163189][ C1] CPU0 [ 1002.166513][ C1] ---- [ 1002.169837][ C1] lock(&hsr->seqnr_lock); [ 1002.174396][ C1] lock(&hsr->seqnr_lock); [ 1002.178951][ C1] [ 1002.178951][ C1] *** DEADLOCK *** [ 1002.178951][ C1] [ 1002.187134][ C1] May be due to missing lock nesting notation [ 1002.187134][ C1] [ 1002.195501][ C1] 9 locks held by syz.0.8978/7859: [ 1002.200653][ C1] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 1002.209444][ C1] #1: ffffc90000a08ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 1002.219508][ C1] #2: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1002.228773][ C1] #3: ffff888032cd4f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1002.239505][ C1] #4: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 1002.249025][ C1] #5: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 1002.259028][ C1] #6: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 1002.268281][ C1] #7: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 1002.278235][ C1] #8: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1002.287410][ C1] [ 1002.287410][ C1] stack backtrace: [ 1002.293319][ C1] CPU: 1 UID: 0 PID: 7859 Comm: syz.0.8978 Not tainted syzkaller #0 PREEMPT(full) [ 1002.293339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1002.293351][ C1] Call Trace: [ 1002.293360][ C1] [ 1002.293369][ C1] dump_stack_lvl+0xe8/0x150 [ 1002.293393][ C1] print_deadlock_bug+0x279/0x290 [ 1002.293419][ C1] __lock_acquire+0x253f/0x2cf0 [ 1002.293444][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1002.293469][ C1] lock_acquire+0xf0/0x2e0 [ 1002.293488][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1002.293508][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1002.293524][ C1] _raw_spin_lock_bh+0x36/0x50 [ 1002.293545][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1002.293561][ C1] hsr_dev_xmit+0x237/0x360 [ 1002.293577][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 1002.293594][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 1002.293623][ C1] __dev_queue_xmit+0x17a7/0x38d0 [ 1002.293643][ C1] ? __dev_queue_xmit+0x28d/0x38d0 [ 1002.293662][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1002.293685][ C1] ? ebt_do_table+0x2665/0x2830 [ 1002.293702][ C1] ? ebt_do_table+0x2665/0x2830 [ 1002.293721][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1002.293748][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 1002.293779][ C1] br_dev_queue_push_xmit+0x370/0x4a0 [ 1002.293803][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1002.293827][ C1] NF_HOOK+0x360/0x3f0 [ 1002.293851][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1002.293872][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1002.293894][ C1] ? nf_hook+0x22a/0x3a0 [ 1002.293917][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1002.293962][ C1] br_forward_finish+0xd3/0x130 [ 1002.293985][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1002.294010][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1002.294033][ C1] NF_HOOK+0x360/0x3f0 [ 1002.294057][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1002.294079][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1002.294103][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1002.294128][ C1] ? __skb_clone+0x483/0x7a0 [ 1002.294144][ C1] ? br_handle_vlan+0x61/0x530 [ 1002.294165][ C1] __br_forward+0x397/0x540 [ 1002.294188][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1002.294213][ C1] br_flood+0x6ee/0xb80 [ 1002.294242][ C1] ? br_dev_xmit+0x193/0x1980 [ 1002.294260][ C1] br_dev_xmit+0x12bd/0x1980 [ 1002.294278][ C1] ? br_dev_xmit+0x193/0x1980 [ 1002.294298][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 1002.294315][ C1] ? __skb_get_hash_net+0x13f/0x2e0 [ 1002.294332][ C1] ? __pfx___skb_get_hash_net+0x10/0x10 [ 1002.294349][ C1] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 1002.294370][ C1] ? skb_network_protocol+0x234/0x3f0 [ 1002.294388][ C1] ? __pfx_passthru_features_check+0x10/0x10 [ 1002.294408][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 1002.294432][ C1] __dev_queue_xmit+0x17a7/0x38d0 [ 1002.294449][ C1] ? handle_softirqs+0x22a/0x870 [ 1002.294472][ C1] ? __ip_local_out+0x558/0x6a0 [ 1002.294494][ C1] ? __dev_queue_xmit+0x28d/0x38d0 [ 1002.294512][ C1] ? do_syscall_64+0x14d/0xf80 [ 1002.294541][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1002.294563][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 1002.294583][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1002.294608][ C1] ? skb_clone+0x246/0x3a0 [ 1002.294626][ C1] hsr_forward_skb+0x157b/0x2860 [ 1002.294651][ C1] ? hsr_forward_skb+0xb3/0x2860 [ 1002.294673][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1002.294693][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1002.294712][ C1] ? __asan_memset+0x22/0x50 [ 1002.294727][ C1] ? __skb_pad+0x405/0x610 [ 1002.294746][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 1002.294770][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1002.294790][ C1] hsr_announce+0x1db/0x370 [ 1002.294808][ C1] ? hsr_announce+0x89/0x370 [ 1002.294825][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1002.294847][ C1] call_timer_fn+0x192/0x640 [ 1002.294869][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1002.294886][ C1] ? call_timer_fn+0xd4/0x640 [ 1002.294906][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1002.294931][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1002.294951][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1002.294970][ C1] __run_timer_base+0x652/0x8b0 [ 1002.294988][ C1] ? ktime_get+0x45/0x200 [ 1002.295008][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1002.295029][ C1] ? sched_clock+0x3f/0x60 [ 1002.295046][ C1] ? sched_clock_cpu+0x74/0x440 [ 1002.295072][ C1] run_timer_softirq+0xb7/0x170 [ 1002.295091][ C1] handle_softirqs+0x22a/0x870 [ 1002.295114][ C1] ? do_softirq+0x76/0xd0 [ 1002.295136][ C1] ? ipt_do_table+0x2b2/0x1630 [ 1002.295153][ C1] do_softirq+0x76/0xd0 [ 1002.295174][ C1] [ 1002.295180][ C1] [ 1002.295186][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1002.295207][ C1] ipt_do_table+0x13d2/0x1630 [ 1002.295235][ C1] ? ipt_do_table+0x2b2/0x1630 [ 1002.295251][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 1002.295269][ C1] ? iptable_mangle_hook+0x2c7/0x4c0 [ 1002.295290][ C1] ? nf_nat_ipv4_local_fn+0x1de/0x540 [ 1002.295312][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 1002.295328][ C1] nf_hook_slow+0xc5/0x220 [ 1002.295356][ C1] ? __pfx_dst_output+0x10/0x10 [ 1002.295379][ C1] nf_hook+0x22a/0x3a0 [ 1002.295403][ C1] ? nf_hook+0xa1/0x3a0 [ 1002.295424][ C1] ? __pfx_nf_hook+0x10/0x10 [ 1002.295447][ C1] ? __pfx_dst_output+0x10/0x10 [ 1002.295473][ C1] ? __ip_local_out+0x152/0x6a0 [ 1002.295496][ C1] __ip_local_out+0x558/0x6a0 [ 1002.295518][ C1] ? __pfx_dst_output+0x10/0x10 [ 1002.295542][ C1] ip_local_out+0x2a/0x190 [ 1002.295566][ C1] ip_send_skb+0x45/0xc0 [ 1002.295591][ C1] udp_send_skb+0x7e4/0xf70 [ 1002.295618][ C1] udp_sendmsg+0x1937/0x21a0 [ 1002.295634][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1002.295662][ C1] ? __pfx_udp_sendmsg+0x10/0x10 [ 1002.295685][ C1] ? aa_sk_perm+0x6d5/0x900 [ 1002.295710][ C1] ? sock_rps_record_flow+0x19/0x350 [ 1002.295736][ C1] ? inet_sendmsg+0x29c/0x370 [ 1002.295760][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1002.295780][ C1] ____sys_sendmsg+0x80a/0x9f0 [ 1002.295800][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1002.295821][ C1] ? import_iovec+0x73/0xa0 [ 1002.295848][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1002.295866][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.295891][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1002.295926][ C1] __sys_sendmmsg+0x27c/0x4e0 [ 1002.295944][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1002.295960][ C1] ? do_futex+0x333/0x420 [ 1002.295983][ C1] ? __sys_connect+0x39c/0x450 [ 1002.296014][ C1] ? rcu_is_watching+0x15/0xb0 [ 1002.296040][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 1002.296057][ C1] do_syscall_64+0x14d/0xf80 [ 1002.296080][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.296098][ C1] ? clear_bhb_loop+0x40/0x90 [ 1002.296117][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.296134][ C1] RIP: 0033:0x7f2c7f59c799 [ 1002.296152][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.296167][ C1] RSP: 002b:00007f2c8043c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1002.296185][ C1] RAX: ffffffffffffffda RBX: 00007f2c7f815fa0 RCX: 00007f2c7f59c799 [ 1002.296198][ C1] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 1002.296209][ C1] RBP: 00007f2c7f632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1002.296220][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.296231][ C1] R13: 00007f2c7f816038 R14: 00007f2c7f815fa0 R15: 00007ffc303621b8 [ 1002.296251][ C1] [ 1003.099528][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1003.107627][ C0] lec:lec_tx_timeout: lec0 [ 1003.313455][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.361328][ T7880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.379698][ T7880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.625156][T25943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.632871][T25943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.640597][T25943] batman_adv: batadv0: Removing interface: ipvlan2 [ 1003.791601][T25943] team0 (unregistering): Port device team_slave_1 removed [ 1004.124637][T25943] IPVS: stop unused estimator thread 0...