last executing test programs: 3.66335467s ago: executing program 4 (id=1201): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x1, 0x4000000, 0x48, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xff, 0x2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x8, 0x70bd29, 0x25dfdbf4, {0x0, 0x0, 0x0, r1, {0x5, 0xa}, {0xffff}, {0xf, 0xf}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket(0x22, 0x800, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', r1, 0x700, 0x10, 0x401, 0x80, {{0x24, 0x4, 0x3, 0x4, 0x90, 0x67, 0x0, 0x51, 0xe, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x11}, {[@end, @end, @end, @lsrr={0x83, 0x27, 0xd1, [@broadcast, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xf6, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x81}, {@loopback, 0x1}, {@multicast1, 0x1}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x4}, {@loopback}]}, @end, @rr={0x7, 0xb, 0x4, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xe8, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0xe, &(0x7f00000001c0)={@rand_addr=' \x01\x00', r7}, 0x14) 3.456379639s ago: executing program 4 (id=1204): r0 = socket(0x2b, 0x1, 0x1) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x2020400) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8851}, 0x2400c800) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000f6dbdf2503000000050003000000000008000600ac14143f"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20020081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="78010000", @ANYRES16=r6, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000e8008000b0006000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x40) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r12, &(0x7f00000000c0)="a931", &(0x7f0000000100)=@tcp6=r11, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r12, &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00', @ANYRES8=r9, @ANYRES16=r9], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r15 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r15, @ANYBLOB="08000300", @ANYRES32=r14], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 3.333390903s ago: executing program 2 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000300)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000080)="1d18c71af5b7f06f", 0x8}], 0x2) 3.149878613s ago: executing program 3 (id=1206): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00\b\x00', 0x28, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x80, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x2b4, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9ff93b8ff8be8651fc08978ae4b01e4c10d0a39e0ebb822faca70d2a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5c78ca0185fbfd4cb31f328abf270ed0b18c298165c52112c8d86d348dafc09c5752cdfb"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "cfe06d640e5906949f04978a8687722d1ee10f101997d4adefb2"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "9e77c967e84334806e4f0b4ceebbee3baa8ddbd1707b9812"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x896}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdde0, @remote, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x40, @loopback, 0x4}}}}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfcc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9196}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x3, 0x8, 0x301, 0x0, 0x0, {0xd, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xbb5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x44}}, 0x40084) 3.025233247s ago: executing program 4 (id=1207): listen(0xffffffffffffffff, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x2) 2.979406376s ago: executing program 0 (id=1210): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 2.89967428s ago: executing program 3 (id=1211): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x81884c2591322961) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0a000000"]}, 0x138) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000240000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f500000a00000000"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2e, "49720705000000004709b86fb2c55c00a79e082584e55fee49e00255020f1f55001d00"/46}}) 2.754173125s ago: executing program 2 (id=1213): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x7d, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x5b, 0x0, @wg=@data={0x4, 0x5, 0x40000000000f, "9dffbb0c43dfef13acc3f21ac11f83bb921e846ceccb939d50c5c25afac981f688e02af5958f8e62067410c186095d60146531a2c6855773288b61b0b4617e8def20c4"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x5300, &(0x7f0000000540), 0x3c}, 0x7}], 0x1, 0x10000, 0x0) 2.676122775s ago: executing program 3 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="050009e60300000006000e0002", @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES16=r1], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r3, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c508000000000000080002"], 0x160}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000060000000800000008", @ANYRES16=0x0], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0xf, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, 0x0, 0x0) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r12, 0x890b, 0x0) ioctl$sock_rose_SIOCDELRT(r12, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x2, [@bcast, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 2.545092418s ago: executing program 0 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0xca01}) socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000280)={0x0, 0x2}, 0x8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x200000000000004d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa569, 0x7, 0xba, 0x23f6, 0x0, 0x4c000000, 0x1, 0x0, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.524581885s ago: executing program 1 (id=1216): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000020000000007000000000000000000000000a29833a4c408708a1eda682f38c72a810173a9772a6b864f06707404af771a366894cf81ea3d591611945971143a81ca06df05ea2fb28f00d74db180b26d918dac2e440d8d8075fcacd783f29493b1cafc41223c7cd08a360fe9ac351b6d472815639948c859a1a5929eb750de2e816b52716cc9b243bb2fe8317991776dcdde8b6cb0e9684de5689220a5c4006db797f777e15c313bac07d8ffc08ef17e84b69db180ec363fc00354db9aedc5082ecdee"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r1, 0x7}, 0x14) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.252976026s ago: executing program 3 (id=1217): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getqdisc={0x34, 0x26, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {0xb, 0x4}, {0xffff, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000041}, 0x40040) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="85"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="d4"]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0xfffffffffffffd62, &(0x7f0000003000)=[{&(0x7f0000002000)=""/4080, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x1, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x44810) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d40)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000ac010000000000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001574800004000000bf91000000000000b702000001000000850000008456a5c2fe4dc6ee6d1a89353c360399369b5745601c1b7999490e856b20000000"], &(0x7f0000001c00)='syzkaller\x00', 0x1, 0x10, &(0x7f0000001c40)=""/16, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x2, 0xe, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[0x1, r2, 0x1], 0x0, 0x10, 0xe}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e00)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001f40)={@map, 0x2, 0x0, 0xb, &(0x7f0000001e40)=[0x0], 0x1, 0x0, &(0x7f0000001e80)=[0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f00), 0x0}, 0x40) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001fc0)='syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r10, @ANYRES32=r7, @ANYBLOB='\'\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="2fe2879e8fef6233", @ANYRES64=r9], 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000340)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000540)={0x1100, 0x1, 0x2e38, 0x10000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x23, &(0x7f0000003040)=ANY=[@ANYBLOB="0000000007000000000000000010000018110000b0de283af6970b00c12277013f908ccbb58263049fb0ef36e92956693e8a661a5c7fc49cca9120f6d311f103601a3bc75a35b95e8b87828a0244a852d4c7578379a32c7d702c0821705a792fe68109dcaae78f7d36fcd7725310cae7df294bf556a491305ddf97e774173fce67a330d13d359dc0aa11fcbd1c4c5810433779693cf9a59b9f6d0cd2c22f6658de1abee8812cf0b5546be6705dceba2874494f57f844db8ac7374f98578f0789c5eea3fa7450bd4b3464050c8f991b1eabd56238dde7101c94c4f630316e9f8c574fdb596035fc7455bd6a3698", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018390000010000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000000600000018110000", @ANYRES32, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x8001, 0x1000, &(0x7f0000000c00)=""/4096, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000140)=[{0x4, 0x3, 0x9, 0x7}, {0x3, 0x4, 0x7, 0x3}, {0x2, 0x1, 0x7, 0xb}, {0x3, 0x3, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@map, 0xffffffffffffffff, 0xe, 0x4}, 0x20) 2.092781123s ago: executing program 1 (id=1218): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x401c5820, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) close(0x4) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x3d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000006c00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8200000000280000180034801400350300696d367265670000000000000000001400350062726964676530"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x23, &(0x7f0000000040)=""/21, &(0x7f0000000080)=0x15) sendmmsg$inet6(r5, &(0x7f00000057c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000006c0)="8c125bf8679f1392eca2d97ec1940fd20c4c0604f5e7f324c7d075396b709298e827f4271add0eb647107ee08888fb01d3eb4fe0209f49b2b13f81f03549938c61ec1c6f88c7a1148482d6e112cf1b18512d7cd8", 0x54}, {&(0x7f0000000740)="eedc1a81b551e0c6202814f98376864cf5c12aa572160edbad57089c3daf9ea578619dd7df03cb2eada5287a8d710eb2c261982a24003a120c102a604703d6008c6808702942fb97524d3ae096fadc43411836690e434a43c446ac1eb6fd4fb9ebd8da5cfc86c3b04b1e89475bceb7bc525018027cf010dddf556ffaec6f039d2d0e2431d6cd2b831c7af8b8797d5e9585fe8523b3e9508452a05ab683f59cb11024516ee34528067d98060a74a3afe7a20b0e5948bae68524ce6a5554c48b51892dce45d57fb772aa9e87714ee7b79ddbc3db8b6030", 0xd6}], 0x2, &(0x7f0000000540)=[@tclass={{0x14, 0x29, 0x43, 0xb36a}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="5c18742bb7665c80fb7e695f314528cc09d4417b8759452f35da4871ff3265a0349505f36a22c74fa1c43a9c555a8a05e00036927fa2d1c6304c20d7a7ca66afbe4de894d85ad7d00d3d02f6f49e7f9f523b9e03f8302f9bc6d712f76ed287b86bee2df2dae0890e6643e4e5ec96f8c4b1ad5650d4332ed90b9c2257a1dd300dd3a620b62f83bca5ed3596f9d66d02dee02f991782977e0879bfdf81c2b15b095718f29595702ca31acc4f2d6c", 0xad}], 0x1, &(0x7f0000000980)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6, 0x2, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x35}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hopopts_2292={{0x178, 0x29, 0x36, {0x2b, 0x2b, '\x00', [@generic={0x2, 0xb2, "2c869fedf1029db7c9af603c7d87b99ae881b07277dc78ea7f3f3028522c60675eaaa1157270fab1c618b2321614b13edf479f22cdbe8c7d48b0d86ef4940fcfac7c591c303ae2276cd71bd7b3947803284d94595cd568a38d37e23aac61910263cc8c974747115f2a5ac2311f0c2688ea05f870fe2716c98f20649a9fee136427474066c020d9da42ffb7de294073467f8c728b8c528204b678ea80c49a37cc5c18ecc5a6d9c65b7f239b3642946db0b9de"}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x40, {0x3, 0xe, 0x80, 0x1, [0x2, 0x3, 0x3, 0x5, 0x6, 0x8, 0xb]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x1, 0x1ff, [0x3, 0x2, 0x20000000000000, 0xd, 0x2]}}, @jumbo, @jumbo={0xc2, 0x4, 0x40}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}]}}}], 0x1d0}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x0, @private2, 0x10000}, 0x1c, &(0x7f0000003080)=[{&(0x7f0000000bc0)="a52d42613b65ebbce6c83d4ff554d14bc47184fe6e79f505ea1c88143076d2eb1bcaabbc1f4068fbbdc60d92b156689146b8225c697b8e7e3fb00ae8f435461e6d9cb68e724a8b9fcdfad0343b31301c82e147791f0977d900502873d8e7b421787ef6744a54583c241c1af5c2d23d182358267b9821b06fbc0de95fd360772c4d701bb83d9e3673098102147c42eeeb220da257b82c0f187d0857d708b52f564774531a227ad7fcf109290f682b86955f6b0250b21e3d233beec64d571e0fe1b1d31fc023fdd5037cf73dc3bdf6139d4ca6f4b665d2385a903508a60965e6", 0xdf}, {&(0x7f0000000cc0)="7d4e9e4470c20db2da91eaa0fe52843294df9ed7e0c09e9913fe8cfb5c82d264d22448a385e19537f57a7a6d4a87a3be3f44a99b012e33a415f07b7cf4bf3cc60e3bc81dd9328272d522fcb1274462f843953c5e71914ee92675f15bf77d04b7b2d422812dc194536149c83bd569eb2b2834d72322fa9461099fe0b88a4c4cbdc46fe6f6254f8c95c82c9b257b0d7e4ee79a01813692e986ad1c588e5ed4606a6986a6f2e4e18fc834714ad959e82a7486e4485e02d012f894663cc38354ab43e77d99b7e3ee41be7c9e579528bbe399f758d19a6558c18b41f56c80184c3b39325dd0d6ba7365d05c77063683eb240f39ede959046011f3f3e05f6e7a1c47742f84ffa53d494495b7056a717f689d083de9bf575093ff87224266d2a9187fa2b6d91124f077e50ec0253ac78c7a720fca2a0c16888448ecf10cade720d8f9c2a60803434cb5732853717f865803a71a38b090bedb5ea1d6c7b94001aed07052511915419c26dd54ffd861a2a7f348fa1d4837fabd30628dad3b8e251b7a972e8d6499c2df09c3d1b0fff4b2034ebdd0bb32e8dcfc0f6b14a9f8a26d1097d8290b06db6a7cf459f6185e73c120a48d83c6d201357123929ab128a790f7c785e103f92fd4fdcfcae22dd0976ce00536f3bc06861190e33e6a3154850bb7a03ada0e41ac29d78a74db8103c7aa993ca562b4ca7f814676814f2f30d87e62d05c40c8778b1fcc0ee213076f224e599c29eacbe8b10fbdba529c6dc0bb9ac8c7dcf1235f639754429c29978a6eed67098481f269f84f472b66ac5b17444aa83d4d91d0ee27e119047b86afaf02c0856d7fee790bda3b9edceb7bce5dd766aa27a82468d6f50081e9117b68b15a3e5432020432f0f0f5023ac0f1528cd3be257a571b1e66ecbddb5367580827a9d8adbe39d67236ff9bf113aed8c12b7be8714015cc0c8350c20e7f814137a6aacab2728f1bbf47654cfbcade806c09ba6a3f255b3f58e9532ef70677f4e379647cfae3f2ae15da1d51ce9230d4810e8822b92cc2fb62a3fdab601c790797cc7a011935ee21740fc2e3bcc01022f8da92267ff9a70fe85bbd6363d53fb5c0790931678d45e32410d68defde07777a4433a5a305df1167649f94fdff78ce3bc455e356ab61d349f4fac9ef15cedd1e030a873aa342b6dfc340b2c3adfcc224624ec835cd4d877eb9472c422bf76e660f1d7cdccce1ae7379b11785e272a38139cf57ce482fe50e282e4694817033becf830357d3d4b9dd4414e16de74880168d536038978922462a7c7441243f5964b50fcab0a781dfde767a4c51643c024a41b2d4ec185a4d7d9d422b20b05648fb78a8599a22c5e135d4890273d91ede58ceac625e881f79888fe3115e5a94242f719f7ff791117f12af9dfc5b9263e1d475c08c7177fd7e2d4b7ff9bacc3122003a3a8b98f25ffa284f7a3fd715b729816b9cb3ca0c7d6de1e9912f87f570f0de680a01f8ed6e49dc53e5d45cbac0344712b013abd9f99c17ed7630783c6aa923c0cf0c8490856f14f51ed15364f04fe1e6ada3c3df05f7815e44872944fc2bf2fce1b098920d15ff09d8133a253effde895d771906b7ad9624886fd2d77edf633cd4971faa39524572c0838831aa07bd2dbdeb0ddb54c723d5935c0dd394a4975bd7fc9e862859106d0c9679bcaaee08677694382f95faeab9b218293ce00b5f22a85dfb943dc324729ec314322cbefa55b7fc8b9d26f8d126ca8c3c33ca716a2c8cd1dcb5a33ee0744cbf64c6b29c4cd8494d3e306884b6124a8e100a6a250d505e31cc864309027d0d8e783c0e69c9aa04edfe270d1f428e9b7609b69523323bd6dbd8264bd55735188835fee9536a42e504e5eb9c8423faa5b4668d8f4242cf3469406dd45c3f1499d74df14301769ec1e94273b2fa7fd6d9da916487e92a730c2d9d6aeeee523fc2a75d68fabda5fc2e493ede753226d597c8f2419cb844112e007df9171f1236b8866e4ba6b9a3b8202b43807d82473f3bb098560ec80bc8b4f78e4f92338b6488560a0996b807e6230dc9ec0da71358994ec1712b10fe25e453611ade09749cd137fa9bdf62442f7976a52b7a4cec52b832448565ea8d7e590fcf6057043ce507387385b3e1ffbd8cc56966d8e9685ce98de4a32017525ca2faf4c00f46fb305f9cf34c0cb566bf244a4a27d3c1a644a82e3ece8509e272039e10c40843f4cb900f4f2894eef1df9e3463f89fd4643b4677e3c92218c509c1dc96f76baf33c1f70146c96f63b8025ca5e03eec02a7bf0d54a37e14433bb0295adba26dda49fa15b1f0498d0854c627d7391bd8d0d8e46e4a9dcd59d826affe2636ac2752860ba9f483b376e4caf425d9da76952f0d886631c2d8f5c97a73c5a4bbc9f0927865118f1589a5f0afb96c78d794471392d0ebb29b063488b4e897bca0d6010cb0eb6bd47400710a995c9dfd5a19c7752dfc0ba30f797a439e19c79821de7ebfbeacd54063ee8c23174b6966eb24287bdad042140c082a4b3cd6ba2b4b92bfe85775f3624a8e92287ec9f1da2a8abafa00ad4988d8d3576cd70e1c1fdf88eaf7334407bd606a8d7f5e9a6e8f3c36bcd969bf57cc42199aff1a7eb07aea06367f48b1fbaa3d95666ff10f56000cfe7c21c27e4f070bb1ef7cb31734282b2447ee7fb54e8690b1e8deee3f9d2781e9c1af68e5701f67866cc0442aa1fffd85f13006f06ca4488721c31a0bb4e312d3314b4c2cbf0f8212f5b8b4ff5e6547afd3d543a65fb32306da6b683c5c08186dc370685140a2f39c72cf64bce60ae3c6829a525478481b95c4da84e231d59a150828e148b45d1610b9b51bc85d1af67238d9abe6837aeeb5331efcbf440a199f60c5fefa5c6e9772b797ebcc42f8b67d58b3df62264c1da2c0313160e483175939d340f1c4b5d4769f914e621c52f408932e96d1e54324b8369c9b5185c24b59d4d64aec774b42c6551bfeb7a93eef933bf9bf70f7cb52f5fb99bda7431ae0c2f09fdc323fdf4e5dacb9cb94094bc01c457752211a42541866563cd8617f4fffe5ee3228e38c5516baca50f2deadeb8a2cb57bf8f4bf47fc745d9fe25e04f79d59566b4d674f6e6b9fe7cddce74bda7e82650c432d06d8f176aebb10a43fa334b17b9551fa0332384a151c919637aa85480d6a7e0230eb80a4c6968b941f25bc975a7ec09e1516746dea8a83096882c2678e338b3c37108cf483aa41a238908ca1456212174653e37fad91c16300d30a31d92b0f8971f83c62675057451a8dfd90ea83ca14c253522a7519c81c84591966eabeacc638b5468039edeb60766bbc7dc02ba174f4bd9ffbd4b662eaa7a0c9189383202dda3acfe96d66671e9563180e15c9028503d37c40387077d38faca0ab4814d0948a6ee0862b82bc6e34d57b1646259baaf316ac843d6459f741073af719333ae643f7e2961965bf811ae4a8649574d2c536d9e1fb8fdc505d480b2d1da20767f8a4e5d5da91f624dcf44a57a044e35b4b39b7c86d29c5f038d064eb223130e3d88bb51a163954bab918206b34b0f2da9d6ab65840e9f1378a92a416ec9d4bea65e79c373887f53f661c3bb30db4baf39abe490645a88309a6eae76462e4ecc1c53b4c2d4ee7eaeec97b6e977a9a2b6bb27c0e6a0cc623376128e01097e33ffb132f57172daf584b9eb79a62414832720adc496efb9b024a0557e8a49529a7ae1b63a9f0bdf894fb6d0347018e178de08fc44df167d53aa960d413bccbee77f04ea3a694ad729854faeae8e573eb39d88569000d71d58d9f0f633c69aaac170adfceac4c49208eea1b429adc114205aa86280a4cfd94d10ffe71ae20a124066c9e182cd47ab8371f6a3d0bfcccfad447464602918ea525006f9c1090cff266fe9e9f511d1eaa02276f88d04ada555a13702da270e5672b3367a4a34d20b0a9e799e5662bb6dfcb4f3c8230fd6c58eab23ad3533c1e0563dd8a419abe1819f7e8f973afbfb401b928484a1e99dff736e6c5f87397426b7981267401b6a4e4182d9b9efdb231a352b85687e4776b15a3de1029a4c401b73262b3207902f174d36eaa1b693ef2a6dca48396e489eaf73bbff56e46299e4fb9f7fc410d78dbb92616518701b058b72c7fc3edd2a3a64eb98cb2a2f5d00ac73ab4d954044ed0329800113baf80475fc0ee157b20ba2ad54e8bfe9c6da821ff837992bc0cb26f94623285c0f8f3ba64fcefa46189bd356a268b7072946d0ceb2f0aae16ddb645e1ca69d1b42788bc11629434451827d6f48e10f2b44bd55b8303f96877c3c7630d904057680f38894b26ad4d4c4d07e295836f1e73c661ba922f289848af4da074bfe2571fa82dcd152a40d1d5983a02fc754221b03b1de97af1f1f8ad3641cb0fdb0e727a1389d09725329946df366797bfb69852f63d9b22dbdc4afa9ed115b60009c6ad61dc4cf7f6997eefd486b6ac686d2df322afe775af838f6afa466ed6b901fa419b9510883d83736ad888130625d9935ff20e777cef8ea7a4fd6a86e64accbc09b922806212d86b74b6459602a5a2dc5aa9ab1c49aac646fe1fb5e3d1846aefa88d2aa0b5fbf07cd9be9ac9fd74f2f6d3b25fc8f40d5cc4b71d55abad5a752e160742dfa5402af597fc51a27eba50d2d1c2985d4ab071f871afc2d3edff6dde9e0194f6ea6d1f3c0254d40968b8166961b50dcd5a5a241ffb6cee2ce80121874b47411af1b29a66a3457c4874bb06285ab137d3f3159adce265682d69fb13e272ce59c7eba1617ac8f7109725234b3b14eaf9f0fbca8cd73d9300e6117f589bfe7dad1d6772175e7af80a29ff693bdd19e97fe2afd481db19adeda0ad9461e0dcb3d7b0a09df8cead03d93ea5bc7ff96dd9de00890963f775217d6d2c33c077901223b1c93445168c1c68802ac55bf660cdbbdab3c5c6f9e576a8ba6a714fbe46989c51f9ed2d5d2a8809ad1e9079d835d12b7a5aadf7318a529954f014c679f8830b17f573d04a975bc4a464390d1724e6110a1a59197ef9e5cc843a7ecb8b825109f81e39c6ec182bd9982279fe0a4c472294796300db48b5c4686c9b3ed761556f71c94afe86a9b8a258527471941cb8542d4afc60b044598a5e12de8cbb50e26d4835874ae0f4093b5cbb79edc72d4829dccbe509d93d905a1d27667bb34b4d744417a917d92444769669809dcb6260383f4d900a600ec8997fe8e2c05a8647b7940cf0a6577354b0e915f0b6121cfa9d51a29296a504efcee919b32ff90cf7a97525bca3aad7ab89142ce2cc126eceae468ca67e40b45d311f80348c08573c1ab3d14c43b6cd6b2c5422d79e43e0f58012017c7c975771f7df67208bbb74cbe2b4b8de21620a13659f79caa7266b06fa8706841b754701e2abee31f616d14767741df3c58d353e7ccf29dd5b26352d6d52a2e57fc40bce0fab1c8c68a69777e7d88f69dfd999e37fc1dd5e92118ac01e637f260fb6a4fe644fb3c7a3889b5e98f96d74f1f8ac96fb091862b05d7de840b8f9a680bb8fb7dd295b29588cc8c23e134aeb220c2e1199c3d63dd0dd68591ace9e3cc8134612715f988b07e813a47b2af1e7f7aea58b100d3aef0b1a0bbd1aaaaaa6cc89bcdc8119e428d229e076c289f2040c5f9d1486f40c65ef43e406e8a53fb293e03ed8919b93857dca901beb16b8a405f939bf873188bb11a5f2d71ec98753275d64ba0bdae983b87bf6b7a620b0f94b2a9b31b09c9ce619f89552cb6cbe1bd59684878092d33a4238398fb7c3bc4b9aa891b0810d71492856e48d221b39e3ecab04ddf8e741", 0x1000}, {&(0x7f0000001cc0)="bed17f6640cf42aa4d157b2e3b96649e78c3f14285879b6a2c33386fd5a4d88a9495d713d75070a61169a2c989c0dfc76fac69b25386f3eade791a3688e3ee33af87e15ff1bf9298e7694f00a25a33a4d3eb57b7764ac76bc1f27a065f14153232d7cbe4199dc271cce96bc3d3091f24a167d1c52652983b0830ea22ebc6aa5bfd79065032f487c193f8383d93d2ef007109528d6ffcdd4aeff832ad5b88193b9158", 0xa2}, {&(0x7f0000001d80)="578cb825b46efb1b3151e02bc95b39a7c30413c1d23e7014491697eda96b2bb92eaa9bb114a421cb9f96d575940848b2469f4f1a6a1bc950cbe026f03ec8f12861c6ad410e9cac749f4db006e8d643", 0x4f}, {&(0x7f0000001e00)="4e05c3cf0241fd517f93fe40f3677d9aba1630321abee0bc7c973fe380e3bd679a1c44f4e34ec652d9695a77a920a6e9a67e91d2b23a7dca44918f1ddd97f2c5b7a7f41590fa7fd7b00fd62186a5181428285a484313e40923601cda834471849e66f6146c8c0b00cb1bbbc3e7215624614e40b45865f2269ff3503b4a0a2854677030391f8b7691bb8339", 0x8b}, {&(0x7f0000001ec0)="174a44d2033902859c2427443e32fff7b2b0167971219466ec5eb8c3b01c9d7991080b5c89bb08eb2b658195ab27e93c176ad2cb96140686231a", 0x3a}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="4f987c23b6abd74b5ed8bf537808c5edff425cc3f9bd5ee1ca0d0f2f73c957df60b0b9044692e6e4d75e781769d46d5ef5032ad11785b822b8fc052e4e0414da6d9fd4e7b3cdc8b5ae5c119a0a055c12294c329a74b1dfd49cc4f0feb106d50d6309ebb16dc1c05676d2b0d06ac3552df4989c7e61f31ec6fe2c98ddfdbd9963cc0ea52d5a30fda9aa73031b08117fd7bdf46f6609cd9d3331bfdae96972f2637952994c0da59eaea12ff315bf0e3072a5", 0xb1}, {&(0x7f0000002fc0)="1eb8", 0x2}, {&(0x7f0000003000)="e4fc74adb9c654242c8beeb4bf1fdc66ea83c0ba055f1ed6cb40c2c748e658c3271d143842b4bf64e9a00739447dd75435001ff53d7c3e2deec8138423cbfcf7b85acb9391fd8e98ed588cc68150456de1af8f2c4373919bf108", 0x5a}], 0xa}}, {{&(0x7f0000003140)={0xa, 0x4e22, 0x10000, @remote}, 0x1c, &(0x7f0000005680)=[{&(0x7f0000003180)="be5d84c1f208970cb581d4c95b18c2de8d0aa2130cc916ae3b261bf51390936031eb324bfc76a1342e96ca74beafc6905bc7850e568fed6aae4ae21a5e76f68e89099b283f50e55de2fa070f428655207abbc6a0ceb1a46fde2fd685ead7fdf7d4184def6da31995838cbf69043965ff9b382e3a57919a434fb899b2342b56d9b0acc623910f09061d18684bd2f6", 0x8e}, {&(0x7f0000005900)="d6b1f198708deb109e7eabaef7c403ccaac31edc7f818a1f893de65fb055085c69e31716875a29315fab2f8e99f8c7aa8213b78794a963d82185c91c9b0c1a7b1d6909cbaefebc476e1f6bd62f3bd22eafa171a66aba2b073a757c855292a11838047b8e62791cb128534f0eabf57cc07776ff00107dd61a55874617c7c13ff9db377c0933d6d4aa77ab4a9dd78cd4fc2d2f7f5cf7925f12e01fcff7c4df2bdc54a2de2348d479f4810ed23aacae09ec1ec0436d3759fa79debeab713dd7a7478e502e0f232744d6fa64dc7da07b594b4bd24c59f06aa1750c7ddb9ac5449ccbbbcb1bb7225276a71d96c4c61663b13235acdf192c2e5f344d6a9f88428f60c5611987e4e785dbb6ee822ba1ffea91842f38a4105e6fb983ed9c3c4512c3d3a8fa05f31b8529f58e3a924f66376e4977c373b0b549b91a041ac81d21f2124b61f690b8553636d856ede193fa8f4025547d3c213bf809e3b9bc1cd8312a54685e1c63619182d0a4aec8f57adba3285de1daff4d62e726a039c5619603ce0fdf1dc7b0ba7dd865b3d73a4ac5c256f4af070d605a47062a8e2f760a3d472c707a2c88f4b0d0a265740ea20c6342895fd134fd55d154507bdd01aef67461a3a2075f87fad39104c8f6ce5ad1f68558cc9504cc4f4336a730ddc5abc3bff53f7e0864ed5fde156f9fa6c89002906c2d257587fe07c7915857800c719255738ca7be78b744026f0797dcaa1667c8167ed01869608a59d8c94568d6befdc5b1f620654c4ad00755b5ce4ee85a738713420a98ebf6e97297341aad814da49688cb360982a6feca424f8c08d29ecdfd4878ccc3f7271921c85e3c54f1bf39b38af377f0fc056fd492c8e319823768cbcff62e2012213a3fe0130def2eecaf552b31ac85c7c4f215d4bc115700e4f5f02ffc95b961307f384f263b3dd55c036760cf7070cd71162b0946c272fd4ee1e06c83fe9e29cefa9a1a8acd6daf831e91b5d52a78093879e333ce6d2c0655fd051f571f637ed686fae40fdbe24b56a0e9bd4697c6713b4859760c7cda5470f5619682147b36936cbcd6a8cfb286e760fa554c5902ca2add2b1066d24c021b44cc01229594dd38fbb13ac90110bb68c2d806ed2518a7ba8e9a7d000d1b623a9b7b662d506bb11e9729f8c056435b66360e4c57ded554b612a195e9aac2cb18126aadeb7d683f2e8618f770aec1553d3d553fd7d8912411affd094e3af24274ebdab37484fb1f34a97f33018267071e73addd92c9d71b171556c40a089b2ac03b158c997b24493a75a75f8ed71572c80217e34247f7aff2e9d56e86fe922ab7f0fdf7a1f4c4ed0993512412297b2f1926130bc0eb5dba8d2f8c1dea2f7c35a5fefa35dd330b530986dbcb5a6ea6f267eb01d32f363c2b2f9103d249c3b21c961b6340b2f69fd3d1969060a19bab505fad3c8d07fd40042a443d5e3b1cdd54934aa383b51d8dff1ffb327b8c43d4faf88fa66fa429f51bd70c8db502bfd06b8d5e4730d28329e4f7fec541adddd3c726f990bae535b45811fdac9898671ed45ef6a23b72cd66d35b7da4faed69b7337a5d6e85f754aaf6208331f51f8e4d58d8bc0654d40ff041f1af6a87c74eb710b140399dd1d3dad146ef3cff3401506ac17ba586efe72bb4cd048aac8adfb78ae9ce56c4e1c2a3fdca4705b7f6ec96a9b33fc64b8faf053f1ec913b233abdaf051636a7af16e91f0ca5cde251a082cabb397e4f60939e1fe7ef5cc0f9f2bda5d68e4fa292be263fbd0451f5b98dcb26f8be8581bfd69e8976daa68e02a0e86990f20fe7c33b022c411e9fda0d6221498f932401abf8ca5270efec55fc82ca8cc6172250078ae2d27c678032f00e9b94a29f8feaffd8e07a8cba2d2f19c90e50b260c761c8ec898f5652d5175d2bd883144bc889012ce606b48c4cdd354674aee0634584cee95749891b0878e0acc396bd3782a6fa88ce8882f1b356bbe219f08c19a950c42f92798fc8049e787d56a1a4b4cbba0ca213e8cf0dd1934c08b45abd1f789f2decebd7f6ae0a6209535a182a3fb3903af5e2be32c5060fd28a4adece7f195052367402a50cdc71c006e9d1c643d3e1def7669b12573dc11279c6f33c92645c289d210fc15934b911aa7c6041da3fa86c3a706ac3545ec7ee96ff224388eff3b5d4560988a567fd76629a1b150ff1ef51d27750fcea43b22b3009e43b220454bdaabe960b43e8ae34af7a8de715f6c5bdeacba81304c54cf896f8fabb115f9d2de33cb32d85ca6a43b604302a1426fb6ce84686bc6fcbeb1166d69d991f1f915970f0f65968d022c0e71459e8151d7db010c2274b78ce2031a4ea13464621e9913d282045f3ba8ea6d7ef10a9520e1c6dec5230c8ffa468a9564a8314044dc768500d6969ded89b2cd27aa1909c89ac564ac3590dbe884a00dffecd5e0118030575a544b665d467f8b76fd85a9ed46691514a932d9bb558e6bb77e4f5d9eda0ff0ca47afa161731113770731ae6fac34aab486de01a040d670d132afd37467db4966a4d1f33bfde26a8019a664feda8eea63847f629e08b3824119f315ba7a0f64af18406cacc9552adfac51db96164f84bba96856804e2a0e245510c36c89983d41a78ac64fa7ecab3cde1b930a30f63bc7cb38dc403dd0b3c2f95222a0bfa367f0497a55c49c95d42b06620cd10cb9a23d361e635cecca58b73da711a7514f8a2f33e8ecbbbce3ecd398ca2c62111b281b7a4da6312d457b538918170c3c708f77bb883ae06f18481e96ecedc8d5ef45e66c1f5b6ac0dd191715b04d6214885ad944c64162768f6d476abf4d0a8129bd40e284679cc805a02b7ebe203ef988633daca5b322a3dd63d5d1ca9b183ea4312f56378cba96339c5823d82837618b036733f1bfa7c0d50b1254d5aa0c7717397449d02253382587186c0097f903fef52b8dd54d29ba0921205e7d3053d86985cd603db348bdf1f1991276772158a02295b8bffca11168d2d52973b4bdf34c3f44eddcd0b2cd915c9d6016aa93458e3c9c60558e5c17a4f9547349524096dccaddff171e90e65095726fb883521ce6648c9eea5cee3f36c20195af077e022ffc44b06335418a46527c7f4adf2534f04ef34d52aa4dd668a6be552b5b87c30af4f8e38185f8918686b1f827dee6de6dfe554b02ac5d97cf4e5fb69701243e15947d4dfc53246590de0e7bcf226ca395fb3f4542bf10863683923614de0205d84e86493ca0f9ad39410c06120f788fc3a407c5f325166c645a46722da0c2fcc63738f80ed94447cdd5f8e734e72b3dcf718ec0b02e68d3c49b849e16eede6218129f5d6690a2b826c1a06fbb1b0a63c933cc7d029f2659d168f9cac0e524550254a974b95f3c78823a0485fde71c983cb3e415e117cd9538117544c414842130f1c01cc2f3970f99e512478904cc4ffa8ce31d6cc3e8e6102f42c44a4e9aa1a1a20df4f46bab194d5b1712581b90164071a3cf76b3dd2e368230971254101c70b71a2b2a93e81d8a2a9f1077cc1a2a2afa3d723945228e65b18d1405f8ea9f81ab3573af5e9828ef878c06c73e5374c845c8663ab80f07516376d9a8313487ccb0768deb74ed55028a0dab4d211a729450090f831c0f12f657d8f8f3dbe467d4a91027215ee5f3867b70f7bf8fb44b579f7cff3a7150d3b5153fb8343e6855fa105413274cf76d74ef1a43be55e866c555bf441189347f1bfb926a0ad459af94f88a040abc365af6298cd1f3f846af596a889a33601f1284948eda300a5f33d2b1fdb5373550f31d507e76dcbd1883175b7f9669ebaea030b9439078dcdd36d4c8ed20d1b481dad8aa41b83c6ba73ac3365accf1967c13eb22858bc6160edd56845e809f29816e8ad4e24642a69a9e580d176fba86aa8c17df9ee962b862f7f508fa5591c92c7224d82045975715d1040d491fd09d9dcfeaf11d3b0d464183710cf52b9b7b425559cde3c1b8ce6624d6bffec938384b55fbc0df3806d5e425678d338b947cae9698a75000d7daba526529f413d37ef5b542e63207f9e4cdcae0d4ec78525ed6e1b1c3910edba1e2fd513a5596d337d32ef007262f21c15ac0b54c9ffbe50a366dc12801a57982631c539cbe7e2920299ab43d9bb972b6f50de79262977477a8ede77c7bc3c15b472fa56171ade3a008148fa1ee9564ba203195b6b9e5270ca3d462d028ffac823fa66aa146efc0f80e5242d175029d61c1aa8f6dab142c2e0ffe4defa78273e3af4b903b9a40986cbfb9800018a75ac7c7ca8f1929da63529544722a2627ed2f085d83d82566187ab03ca1669d6b9431f9b67411023e8a7bb6eb2a020376579e5d81f414db6cde79aa79d78a65f515c8ead7dcf0eb285c2056d5809bd1570520ff0f20a5ff6dd1b70a144826bc55f9c17a3bfd9a9da3726ca6e53dcfecfa464c599510a83a263061662745289d39400f28aeaec7c8410ac08dd6b8feb274503c33ef11be5b2318f41d2cc49a20f5815ee938c664c3dfdc0f14af1624345b4827024dac63919d08c44b5d032735b0012ab14240f97498fadb0d7d04a9e5adea4c21e68655faca6e5b8bbfcff53b33d30531d49ff4a650acf652047ccfa368fbe4111b141707de744b409392dccad78cd21682fc8df0d275e85fdc0aff76f464734ade260eaf93c511f3c6fdb6ba9e04ca65dd2670f9f71b995488e6e31edad73c6bbdedcedef3d5078fa20daf8dca8c657bb30652957b965fe7344dbad0a79cb06743e5f460a5ae07ac6db41e84340f6817f4171afa9136fd2a2eed696b53ac0e937e4847ba6e41103b91d65a0afa4087cfcaa206d4d6a273b6c0f528e95507a734ff6dac90007a551589969736b94935619b7c4549f0a0c78bb6d4159af7d03bb04f62ba78965ed2c55695482c2d3f16f1e22198dce3fcdea5fc2194361051e428027d969047d0ce09fe842ad9076e440dd6322651dfd5a5c84de7d19ab4b5372285705e72cf70d59107411888151ff0f1f8ad77af7b561d39280f0e9f8c33d402bce36e3bd4737efcee7df894dbae85a4df94dff4d69f69e5559726b566214371cf7e6c5fb9ef2aec975a5be6bb3b99e6fb2a98e20a21e406dd91b53200ad3bb00ceea1922de75519683565612b6e637af65d0fcec3f8444b1e98db45726318c59bcc3d81130ce739cc948bd40085a6c407904a8645e9f8fb6693dad062999d09c3de7e72b34f4cec8e4a5a1eff1ef27f11f059d4ed20d12b962468ee3cd9484482407cb21ba8aadcd3dc906a93b94a76adeaff5eea0305b702258242727998ac028b5cbf0c446206ea24becd771f7a92d6c945d89b085da4c1fc379e2a43a2341e958e496ad4f2d18de808c71b129f6fe8ea333e4fdf8485a72c7673d13c213d9d5c3e15b740a17b3c5044bea1b6e41743b6580736af80fb009863a57e28d06b2b358fa963312b29b54ad259886c531811c425bc0cb0422f6866fdc4e1a04db4fb1331765756627898b95c8dbed3c4bdad9adf74081647312367ac5ac69fb842a0050da294d5eb0b48d5527a493cc9f5eb0bc6349dac607020afb365ac3df063b1d66e3e5c4c799a091520a55cc71551101674f90913378139481b02baaf8535640551ff83f4cd3fe0b4a99cfea4f13d5b9c3a0ee918d2d9c93c48e417a24cc9bff5a46d9ffa3e968e5c307d83fa49634f0860336180fb23fb120e14d51e547900835a4552f01ee63b5833f0e85fa53db163df7ee93160a9a6a282ff9757c2eed1a362ca9c21a4db1bf058a3b3e72e045f3638211196e69d9cd186550f85dfe794d947a0d705b9", 0x1001}, {&(0x7f0000003240)="726a14c335a69e51866f7f08fa791086e4860fbf8ed8886f37f42ce142497080ef13e3d291456173c2adcc", 0x2b}, {&(0x7f0000003280)="87a659e8c093d581a11bd6b3e7861336af1cfc87094b4398d680f9e342febb40a26f8ab99c8dae9974586b7f24c799f8ca7c966fa14623ec8d49b9785f4152562cbe4720539878213fb2a9a2e15e2c9fb69fa947701d297c9273d415f7c83febd7bbfa1b00166a8c0a981e4d1ad0529e6e55114869bd6653590a7bea5797f6a429692c931720040d42cd", 0x8a}, {&(0x7f0000003340)="ae6c896e56300d33c79e656a59574865231cb40ba3476fca31a3277d2d16fa27940d3385360c16b9e2ce70d9d1014ccda2d9a6019e33cb1d4c943190bcf64566749dd1c25b9efe748917b6b1d9b1e2a835a97a7bb8ca9cadb6f8543b2c9bf04471da8761194e0099ae2f77c2bbad86d3b167e975e7f4c05005102fa2a0887aee6def", 0x82}, {&(0x7f0000003400)="65fa9fa5aa1938fa230c63688214cf12c27bafd9b76ece66295d156d27708a74c81325efa5bf5d9914773066f6015ec841780feefb1fffbfc010cec1b9eb10884b06f4185625bc1f26b1b8298f500762f96fe6295fca819f1668eae2d388c129364457c90c5598d0cdbbfa7b40724e21babe855a211829c748d837d031ffba4a0e895a2c711423b6c78427ba2fa6d28958eabcb9fd026bbb58db3c3262fc69b4404614bb6effc4b83cff12f96ed770cd1a24b905ac8d667d3fa1470b386703321cb6c567afe339f0ef58c561", 0xcc}, {&(0x7f0000005580)="d070741dc80318390b1f04d3c61be5d3afa8b2fb53f3a9b81aab8522a41b8129e319e5575c9d001b25864aa8788c82dacd8ba7a87f097066dac19911d40b8c9d612275807f8c3ff27f9bfb111ce7033f417cd63ee48055bf55d6a9660fe638f76ffbd8d3b4c72d2e948e415972b067824edc254ba1345d92c16d8c855e4b419269710c9ac999f84192d30e38cc5f3f6c03ea03bb29c2364a7b835867a52275f74be3d2d1066280ae0350f28394730aefe4905c04a946af62e340a71989275ebe026b6122d34db1c6cd58a9e35359e6467bd1c908e63690763fd04fa37b1e3ab863cf40", 0xe3}, {&(0x7f0000003500)="7898e20656cf6497dc2c811683e120590598e16896393db062d030c533d6c974f1b1b503720632eb05ef14dea43bbb2e6e7191538428ef7b27891b1f73e39f7b71d7ce14d21a30d8", 0x48}], 0x8, &(0x7f0000005700)=[@rthdrdstopts={{0x68, 0x29, 0x37, {0x8, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @jumbo={0xc2, 0x4, 0x80}, @calipso={0x7, 0x28, {0x2, 0x8, 0xbe, 0x101, [0x9228, 0x2c, 0x4, 0xfffffffffffffffc]}}, @ra]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x98}}], 0x5, 0x20008050) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r9, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003640)={0x6, 0x24, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @alu={0x4, 0x0, 0x9, 0x0, 0x7, 0x10, 0xfffffffffffffff0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @alu={0x4, 0x1, 0x5, 0x5, 0x7, 0xfffffffffffffff8, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x15}, @jmp={0x5, 0x0, 0x8, 0xc, 0x0, 0x50, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x27, &(0x7f00000001c0)=""/39, 0x40f00, 0x4, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x7, 0x6, 0xffffacef}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000840)=[r3, r3, r3], &(0x7f0000003580)=[{0x4, 0x1, 0xb, 0x4}, {0x3, 0x5, 0x10, 0x6}, {0x2, 0x2, 0xa}, {0x3, 0x2, 0xd, 0x6}, {0x2, 0x4, 0x6, 0x1}, {0x5, 0x1, 0x2, 0x4}, {0x4, 0x5, 0xa, 0x3}, {0x5, 0x1, 0x1, 0xb}, {0x4, 0x5, 0xd, 0x4}], 0x10, 0x5}, 0x94) 1.759381179s ago: executing program 1 (id=1219): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xb, 0x95a8, 0x5, 0x101, 0x2}, 0x0, 0x1}, [{0x7, 0x6, 0x18, 0x8, 0x80000001, 0x4}, {0x35, 0xbd6, 0x7, 0x7, 0xc294, 0x9}, {0x800, 0x6, 0x8001, 0x1, 0x0, 0x4}, {0x5, 0x1, 0xe00, 0xd32, 0xfff}, {0x2, 0x200, 0x7, 0xd64, 0x5, 0xc}, {0x3, 0x7ff, 0xfff, 0xb, 0xfff, 0x5}, {0x2, 0x4, 0x0, 0x3, 0x3, 0x10001}, {0xfff, 0x5, 0x7f, 0x2, 0x0, 0x8}, {0x111fdbe2, 0x3, 0x8, 0x5, 0x2000000, 0x4}, {0x9, 0x7, 0x5, 0x466, 0xfffffc01, 0x2}, {0x1000, 0x5, 0xed87, 0xd2a, 0x0, 0x1}, {0x8, 0x5, 0x8000, 0x10, 0x6, 0x7c2}, {0x2, 0x7, 0x6, 0x7, 0xc, 0x8}, {0x2, 0x240, 0x7, 0xc, 0xfffffffd, 0x7}, {0x9, 0x6, 0x4, 0x101, 0xffff8001, 0x200}, {0x1d2cbf69, 0xfffffbff, 0x2, 0x2, 0xf, 0x3}, {0x2ce, 0x7, 0x1, 0x3e18, 0x8, 0x4}, {0xfc5, 0xae7, 0x80000000, 0x1ff, 0x8b, 0xfffffffd}, {0x3, 0x8, 0x2, 0xfffffff8, 0x3, 0xf2e}, {0x5, 0x5, 0xffffffff, 0x7, 0x1, 0x3}, {0x3, 0x7d6, 0xe4, 0x5, 0x2, 0x10001}, {0x9fa3, 0x1fc, 0x0, 0x9, 0x0, 0xc29}, {0x7, 0x5, 0x6, 0x80000001, 0x0, 0x1}, {0x8, 0x0, 0xfe000000, 0xa, 0x3, 0x161}, {0x9, 0x8, 0x4, 0x3, 0x10001, 0x25075c96}, {0x101, 0x8000, 0xe7, 0x200, 0xf, 0x3}, {0x15000000, 0x2d41, 0x6, 0x8, 0x6, 0x2e}, {0x6, 0x401, 0x1, 0x28a, 0xf5c, 0xe2a}, {0x0, 0x3ff, 0x0, 0x5ce, 0x42, 0x3}, {0x0, 0x4, 0x6cce, 0x2}, {0x3, 0x1, 0x3, 0x0, 0xa1, 0x2}, {0x7, 0x9, 0x8, 0x3045, 0x2, 0x1}, {0x7, 0x4, 0x6, 0x510cc509, 0x6, 0x6}, {0x89f9, 0xe5ff, 0x1, 0x9, 0x2f37}, {0x9c, 0x10000, 0x8, 0x9717, 0x9, 0x8001}, {0xfffffffe, 0xfff, 0x5, 0x8001, 0x5, 0x3}, {0x80, 0x3, 0x80000001, 0x80000001, 0x8, 0x81}, {0x6, 0x9, 0x4, 0x7, 0x0, 0x1}, {0x58d47774, 0x5dba, 0x1, 0x2, 0x3, 0x9}, {0x1, 0x3ff, 0xd, 0x7, 0x80000000, 0x3d}, {0x9, 0x0, 0x200, 0xaeb, 0x1, 0x28ec}, {0x7fff, 0x4, 0x6, 0x80, 0x8, 0x5}, {0x100, 0x3, 0x9, 0x0, 0x6, 0xc639}, {0xc, 0x9, 0x6, 0x100, 0x400, 0x1ff}, {0x3, 0x9, 0x1, 0x3, 0x9, 0x6}, {0x17, 0x200, 0x5, 0x1, 0x4, 0x9}, {0x5, 0x8, 0x7, 0xca, 0x3, 0xfff}, {0x0, 0xfffffff8, 0x9, 0x9, 0x6, 0x80}, {0x10100000, 0x0, 0x7, 0x80000000, 0x5, 0x51}, {0x6, 0x5, 0x8, 0x3ea7, 0x4, 0x9e4}, {0x7fffffff, 0xc, 0x3, 0x7, 0x7f, 0x7}, {0x5, 0x5b07f77b, 0x7, 0xd4, 0xd96, 0x4b3}, {0x1, 0x0, 0xda9b, 0x9, 0x4, 0x2e1}, {0x4, 0x1, 0x9, 0x7, 0xd, 0x9}, {0x8, 0x8, 0x4, 0x6726953b, 0x34, 0x8}, {0xc45, 0x3, 0x401, 0x7fff, 0x2}, {0x40000, 0x0, 0x80, 0xd7b, 0x7, 0x100000}, {0x6, 0x6, 0x4, 0xf, 0xfffffffa, 0x3}, {0xc, 0x8, 0x7ff, 0x1, 0x5, 0xfffffff8}, {0x5, 0x68f, 0x2, 0x5, 0x400, 0x100}, {0x1, 0xa, 0xc, 0x5, 0x0, 0x7fff}, {0xfffffff5, 0x1, 0x5, 0x0, 0x4000, 0x602b}, {0x8, 0x1, 0x1000, 0xf4, 0xffffff01, 0x2}, {0x8, 0x1ff, 0x81, 0x4, 0x6, 0x8000}, {0x6, 0x80000001, 0x3, 0x240, 0x6, 0x8}, {0x7, 0x3, 0x9, 0x4, 0x4, 0xcf88}, {0x6c7, 0x4, 0x9c, 0x18, 0x0, 0xc}, {0x2, 0x9, 0x200, 0x7, 0x4, 0x7}, {0x800, 0xaf7b, 0x5, 0x80, 0x3, 0x2}, {0x5, 0xfffffbff, 0x9, 0x4, 0x5, 0x80000001}, {0x7, 0x9, 0x81, 0x2fd, 0x40, 0x2}, {0x30, 0x8, 0x81, 0x80000001, 0xa, 0xcc8}, {0x8, 0xa, 0x4, 0x2, 0x9d5, 0x7}, {0x539, 0x2, 0xb673, 0x4, 0x80000000, 0x1000}, {0x2, 0x3, 0x8000, 0x6, 0x7, 0x7}, {0x2, 0x9, 0x6, 0x7, 0x187, 0x800}, {0x200, 0xad1, 0x0, 0x8a, 0x5, 0xffff}, {0x4, 0xf, 0x8, 0x9, 0x5, 0x6}, {0x8, 0x10, 0x9, 0x1, 0x3, 0x4}, {0xfffff800, 0xffffff7e, 0x1, 0x10001, 0x8, 0x7}, {0x7ff, 0x9, 0x0, 0xd, 0x7, 0xfffff54c}, {0x6087, 0x2, 0x1, 0x0, 0x2, 0x1}, {0x9, 0x8, 0x7d, 0x6970bd98, 0x63c1, 0x1}, {0x9, 0x13e39b74, 0x8, 0x7, 0x400}, {0x40, 0x6, 0x81, 0x93, 0x6, 0x3}, {0x9, 0x7, 0xffff622e, 0x87, 0x1000, 0xfffffffb}, {0x8, 0x8e8, 0x7, 0xffff0001, 0x101, 0x3}, {0x7f, 0x2, 0x5, 0x3, 0x5, 0x6}, {0xfffffffd, 0x3, 0x3, 0xff, 0x3, 0xffff}, {0xffff, 0x1, 0x1, 0x7, 0x5, 0x5}, {0x4, 0x4, 0x0, 0x2, 0x0, 0xa}, {0x9, 0x2, 0x1, 0x81, 0x2, 0x3}, {0x654c5d3b, 0xffffffff, 0xef, 0x4, 0xdaf6, 0xc}, {0x8, 0x5, 0x2, 0x7ff, 0xffffff51, 0x3}, {0x7, 0x200, 0xa34, 0x1, 0x6, 0xffffff03}, {0x1, 0x0, 0x9, 0x5, 0x5, 0xb08}, {0x6, 0x890, 0x588d, 0x7, 0x1, 0x8}, {0xf, 0x9, 0x8, 0x2, 0x2, 0xf}, {0x4, 0x7, 0x7, 0x5, 0x4, 0x1}, {0x8, 0x44a, 0x7, 0x80, 0x6, 0x10001}, {0x800, 0xd2, 0x8, 0x0, 0x4, 0x5}, {0x6, 0x9, 0x23f, 0x9, 0x94, 0xffff}, {0xfffffffb, 0x1dd, 0x0, 0x6, 0xb5e, 0x800}, {0xb, 0xd851, 0xfff, 0xc9, 0xec, 0x5}, {0x7a4316df, 0x3ff, 0x3, 0x20c4, 0x0, 0x1000}, {0x8, 0x464, 0x7fff, 0x8, 0x1, 0x9}, {0x10, 0xa, 0x9, 0x6, 0x57ca, 0xfffff000}, {0x8, 0xee, 0x7, 0xffffff0d, 0x4, 0x3}, {0x4c0, 0x7, 0x2, 0x0, 0x8, 0x100}, {0x1, 0x6, 0x0, 0x6, 0x80000000, 0x4}, {0x0, 0x8e80, 0x65, 0x6, 0xffffffff, 0x6}, {0x3, 0x1, 0x1, 0x0, 0x8, 0xa}, {0x8001, 0x100, 0x1, 0x1, 0x6, 0x3b}, {0xfffff7e5, 0xff, 0x10, 0x0, 0xa, 0x6}, {0x9, 0x75, 0x9, 0xef, 0xff, 0x89}, {0x4, 0x8, 0x7, 0x5, 0x8, 0x3f}, {0xf083, 0x74406f13, 0x80000001, 0x1ff, 0x9, 0x9}, {0xfffffffb, 0x10001, 0x1, 0xfffffffe, 0x1000}, {0x8001, 0x4c6a, 0x8, 0x25e9, 0x90b, 0x5}, {0x7, 0xa, 0x4, 0x1000, 0xfff, 0x7}, {0x7fb, 0xd, 0x8, 0x78, 0x7, 0x9}, {0x1, 0xfffffffe, 0x800, 0x1, 0x1, 0x4}, {0x80000000, 0x3, 0xa31f6f1f, 0x1, 0x5, 0x8000}, {0x7, 0x7, 0x4, 0x8, 0x10001}, {0xfffffff7, 0x0, 0x40, 0x6, 0x5, 0x5}, {0x5, 0xfff, 0xe7da, 0x2, 0x9, 0x7}, {0x6, 0x0, 0x80000001, 0x5, 0x4, 0x4}, {0xfffffffb, 0x1c000000, 0x0, 0x8001, 0x8, 0x9}], [{0x5}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5aba00c555baa7ef, 0x1}, {0x1, 0x2}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0xd}, {0x5, 0x1}, {0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x181885f84a3b5ba1}, {0x3, 0x1}, {0x1}, {0x1}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5}, {0x1b187e6351498f25}, {0x0, 0x1}, {0x4, 0x1}, {0x970f042e95146b82, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x7}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000100", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf251a0000000c00228004000080040000800600210061000000"], 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x8010) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0x1a, 0x0, &(0x7f00000001c0)=0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20020000005b0000400012800c0001006d6163766c616e00300002800800010010000000100005800a00e9ffa9aaaaaaaaaa000008000300030000000a000400aa"], 0x68}}, 0x20000090) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.758730795s ago: executing program 2 (id=1220): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079004f000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1, 0x10012, r1, 0x1000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="030000000000000000001e00000000000000000013e925e1a414508cdf6f00c6a8c4bcad6c2371a5ea93c55d020929e8764e23978743a0c1348856f3d759a41403bd4e7ca35b843ef9985a2968f05b68f14db2b851a11967d244ba2c62556b3276ff5aaaa142fee793cfa981eb59631bce438cf0851cd66d6e7c08e0d732f3aa1106e7369836e02d77e310fea45acf7f04d0c1a14b8db2ff16a5aec4d9e8bd7c47f20c57a8ab498ac06680ee6a75cfdb20dcace630b99181d14edd7f7363a243f99242f353ca4eec00"/211, @ANYRES32=r2, @ANYRES32, @ANYBLOB="03000000020000000100"/28], 0x50) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x105, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x88, @loopback, 0x4e23, 0x3, 'lblcr\x00', 0x30, 0x400ceb3, 0x15}, 0x2c) 1.737783108s ago: executing program 0 (id=1221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) 1.484463687s ago: executing program 0 (id=1222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x3, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xd}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x16, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@generic={0x7, 0x2, 0x8, 0x2, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000006}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xa0}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x66}]}, &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x45, &(0x7f00000001c0)=""/69, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x10, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x2, 0x5, 0x8}, {0x1, 0x5, 0xb, 0x1}, {0x0, 0x3, 0x5, 0xa}, {0x4, 0x2, 0x6, 0xa}, {0x5, 0x3, 0xb, 0xc}, {0x5, 0x5, 0x0, 0x9}, {0x5, 0x4, 0x5, 0xa}], 0x10, 0x2}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x4, 0x8001, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x10, 0x1ff, 0xff}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r3, 0x25, 0x3, @void}, 0x10) 1.462518293s ago: executing program 2 (id=1223): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4e7a370000991dffffffffffff", @ANYRES16=r1, @ANYBLOB="040029bd7000fddbdf25010000000900010073797a3100000000050004000200000005000400020000000900030073797a30000000000900010073797a3200000000140002006e657464657673696d30000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) 1.431564197s ago: executing program 1 (id=1224): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x6, [@restrict={0xa, 0x0, 0x0, 0xb, 0x1}, @struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x2, 0x3, 0x5}]}, @enum={0x2, 0x6, 0x0, 0x6, 0x4, [{0x7, 0x8}, {0xb, 0xfffffffc}, {0xb, 0x3}, {0x3, 0xfffffff9}, {0x5, 0xffffffff}, {0x5, 0xb}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0xb}}, @float={0x4, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0xa}]}, {0x0, [0x0, 0x5f, 0x2e, 0x30]}}, &(0x7f00000008c0)=""/84, 0xb2, 0x54, 0x0, 0x401}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r1, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000900040000000000000000000006000000000000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000280)='ER', 0x0, 0x0, 0x0, 0x4, r2}, 0x38) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f00000002c0)='syzkaller\x00', 0x8000, &(0x7f0000000300)={@align=0x10001, {0x3, 0x8, 0x7, 0x6}}, 0x0, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x4}, 0x3, &(0x7f0000000600)=[{0x2, 0x101, &(0x7f00000003c0)=')$\x00', &(0x7f0000000400)="fce313d25d07c48d5b783d8732217aaac302c31becec0a20769ec4fbd32adcafaf01c3e2fe38cd1ba07704f6aa41aa258a16c5ec49be7b3d45b1d2d2954f21665c26ae6b923042467165697d223dc293fadc09d2af9a40580236d6099543f5d2a651bbd60e0cb78847e3a38d18754136ad5bd7f1ec63abd6f8e23bfe136b38ba7432c0534a1711", 0x87, 0x2a}, {0x2, 0x2, &(0x7f00000004c0)='^-\x00', &(0x7f0000000500), 0x0, 0x28}, {0x1, 0x4427, &(0x7f0000000540)='\x00', &(0x7f0000000580)="d4c5044e03de2a536a7bffa8dc29355ec347a8797cb90cc848576385e67c63a153191136b325be729b5f5b2e05226e2e90b675cca2cb00059cf5983a7dacbe1cd7f047a8449ab527d884cbfc6bb42e9f77dace11eb74a64ec0b32c5dd33002586d8f5815b688096f8393147eb11f25522f722cbd7952c57cb75c8ca7fe", 0x7d, 0x38}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r5 = accept$inet6(r3, 0x0, &(0x7f0000000500)) sendto$inet6(r5, &(0x7f0000000700)="790d87a095f7dec0c9b665494970f88742e5160ce8960e258a57ead15f288530bd71008f6018a90de379c94af3900556027eb10a15a8bc41e17f51cc6325b4a739b7d5cff95e8b70714815316272245de77e54809f8fa96ef9bbce7a31ea717a37bc806525a73bb1287eb33b18cb169b0f77ee9c0c106a1adcbd70e09a78c58b3643f503e5b47ec67936210e8125a125dccd7d1d9739e50265c00ccdefb89d80521efad954673b62e6314b63645e455976aaaf38306d252b50b5f420a083cd72b415ac5090048789fa07cb58c10ad5594e40163a1a3c058bbaf5ad9b99", 0xdd, 0x40000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000078612301affffffb703000008000000b704000000000000850000003800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.241122309s ago: executing program 2 (id=1225): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000007c0)) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @remote, 0x4001, "43045553e8378e722b7c8c306c74eef33a9732c5b10fc016c5803a7e9283cecc", 0x5, 0xfffffe01, 0x8, 0x1}, 0x3c) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x12, @tcp_ip4_spec={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e21, 0x4e20, 0x5}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, 0xa, 0x0, [0x10000, 0x3]}, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x5, 0x80}, {0x0, @empty, 0xc, 0x2, [0x5, 0x10000000]}, 0x3, 0x6}}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) writev(r3, &(0x7f00000003c0)=[{&(0x7f00000004c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4c004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130032b6af19c1e8fec297fb9392a9000200000000fbdbdf257f00e001000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000050000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff0000000000000000000000000000000017cd00000000000009000000000000400001020300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c20000000180c1fff500080045000018000000007800000000"], 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @broadcast}}, 0x24) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r4) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002e253c0717833063467910e80c59ab30f97a0ab5b609042528ed8e97d75be1f5c8ce1bb1389dd58aa500df02cae3a4dcf3c10ac265294a56bb25a49b000000000000", @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf2502020200"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 1.233911154s ago: executing program 3 (id=1226): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000140)=0x400030, 0x4) (async) sendto$inet(r2, 0x0, 0x0, 0x4000011, 0x0, 0x0) (async) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x204, 0x8001, 0x7f, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r4, 0x6}, &(0x7f00000002c0)=0x8) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) (async) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81400) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)={0x6c, r5, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x50, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6000000000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff7fff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004009) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) 1.230082708s ago: executing program 0 (id=1227): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d00"/62], &(0x7f0000000a80)=""/172, 0x3e, 0xac, 0x9}, 0x28) syz_emit_ethernet(0x7d, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x5b, 0x0, @wg=@data={0x4, 0x5, 0x40000000000f, "9dffbb0c43dfef13acc3f21ac11f83bb921e846ceccb939d50c5c25afac981f688e02af5958f8e62067410c186095d60146531a2c6855773288b61b0b4617e8def20c4"}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x36, 0x0, &(0x7f00000004c0)="7a7ea22c2a1a89df53ff2a2d86ddc774fd7a4c3f95c215566c904bd259cf0f1ede9266052b3310a3aefae86a7cbf5b4c7d0561cb956a", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x3c}, 0x7}], 0x1, 0x10000, 0x0) 1.195880662s ago: executing program 1 (id=1228): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000140)='802.15.4 MAC\x00', 0x0, &(0x7f0000000180)={@_ha_fsid={[0xc63, 0x3]}, {0x8, 0x43e, 0xfffffa84, 0x3}}, 0x5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x9}) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000000380)={0x64, r4, 0x400, 0x20000, 0x25dfdbfc, {0x3}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x44}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xce}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}]}, 0x64}}, 0x24008000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff2}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x4, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x3ff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0xfc], [0xfff1, 0x5, 0xffff, 0xfff7, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0xb]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x7, 0x290, 0x0, {r13, r14/1000+60000}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "317df02c6a24b98f"}}, 0x48}, 0x1, 0x0, 0x0, 0x404c041}, 0x8000) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x34, r15, 0x60b, 0x70bd2d, 0x4000, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x34}, 0x1, 0x8000000, 0x0, 0x40001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xbfffffff, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xa, 0xe}, {0xa, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r16 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r16, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.008309609s ago: executing program 0 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @private=0x313}, 0x10) r4 = socket$inet6(0xa, 0x805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}, 0x40000020) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044060}, 0x4010) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r13, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xd12e49c5}]}}}]}, 0x3c}}, 0x0) 874.16407ms ago: executing program 4 (id=1230): r0 = socket(0x2, 0x2, 0x8001) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x4, 0x3}, 0x10) close(r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r6, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) 816.756077ms ago: executing program 3 (id=1231): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x7d, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x5b, 0x0, @wg=@data={0x4, 0x5, 0x40000000000f, "9dffbb0c43dfef13acc3f21ac11f83bb921e846ceccb939d50c5c25afac981f688e02af5958f8e62067410c186095d60146531a2c6855773288b61b0b4617e8def20c4"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x680b, &(0x7f0000000540), 0x3c}, 0x7}], 0x1, 0x10000, 0x0) 628.37813ms ago: executing program 2 (id=1232): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000340), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4008000) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@enum64={0x3, 0x0, 0x0, 0x13, 0x0, 0x2}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0x7, 0x3921aa88}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000005c0)=""/226, 0x54, 0xe2, 0x1, 0x5}, 0x28) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000280)=""/37, 0x25}], 0x1) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 561.228801ms ago: executing program 4 (id=1233): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xf}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000040)='\x00', 0x80, &(0x7f0000000080)={@_ha_fsid={[0x0, 0xc424]}, {0xd, 0x9, 0xffff, 0xffffffffffffffce}}, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xa00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x2b}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0xf20, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x44}}, 0x0) sendto$packet(r7, &(0x7f00000000c0)="3f031c00", 0x4, 0x0, &(0x7f0000000040)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0x34}}, 0x20000000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xf979c228d365e12d}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r13, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x72}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendto$inet6(r12, 0x0, 0x0, 0x42050, &(0x7f00000002c0)={0xa, 0xcaa1, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x404}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001200000221bd70000080000007000000", @ANYRES32=r10, @ANYBLOB="240100000000000007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048831}, 0x20000045) 452.760107ms ago: executing program 1 (id=1234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009400"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), 0x0) unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0xffffffffffffffc0) 0s ago: executing program 4 (id=1235): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002e00090027bd7000000000000400000009ac0f00"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xb8, 0x148, 0x150, 0x230, 0x242, 0x150, 0x215, 0x3, 0x0, {[{{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x1, 0x70}, 0x0, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz1\x00'}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x3, 0x0}, 0xffffffff, 0xfffefe, 'veth1_to_bridge\x00', 'lo\x00', {}, {}, 0x2, 0x2, 0xf}, 0xec010000, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x9, 0x5d, 0xffbd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x45}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e1e, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x2, 0x40) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba8783b2, 0x7, 0x2}, 0x9c) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107f000000000004100000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r7, 0x29, 0x1, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x5, 0x7665}, 0x8) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x307, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 'veth0_to_batadv\x00'}) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 79.927123][ T5809] cgroup: Unknown subsys name 'net' [ 80.061665][ T5809] cgroup: Unknown subsys name 'cpuset' [ 80.071530][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.758336][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.889001][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.898375][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.906870][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.906906][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.915256][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.923257][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.938563][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.940202][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.946168][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.953535][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.961449][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.967705][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.975657][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.982418][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.997063][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.005275][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.014891][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.022383][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.032186][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.041887][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.050159][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.058076][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.066369][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.075762][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.088167][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.570860][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 84.776015][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 84.803953][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.811533][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.819824][ T5828] bridge_slave_0: entered allmulticast mode [ 84.827046][ T5828] bridge_slave_0: entered promiscuous mode [ 84.854053][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 84.898082][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.905345][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.912865][ T5828] bridge_slave_1: entered allmulticast mode [ 84.920118][ T5828] bridge_slave_1: entered promiscuous mode [ 85.071138][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.080536][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 85.123937][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.140345][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 85.152421][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.159935][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.167744][ T5823] bridge_slave_0: entered allmulticast mode [ 85.175546][ T5823] bridge_slave_0: entered promiscuous mode [ 85.219927][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.227385][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.234832][ T5823] bridge_slave_1: entered allmulticast mode [ 85.242019][ T5823] bridge_slave_1: entered promiscuous mode [ 85.302904][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.310228][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.317665][ T5821] bridge_slave_0: entered allmulticast mode [ 85.325315][ T5821] bridge_slave_0: entered promiscuous mode [ 85.335721][ T5828] team0: Port device team_slave_0 added [ 85.373248][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.380699][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.388298][ T5821] bridge_slave_1: entered allmulticast mode [ 85.395840][ T5821] bridge_slave_1: entered promiscuous mode [ 85.407123][ T5828] team0: Port device team_slave_1 added [ 85.427236][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.472939][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.519100][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.526349][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.552725][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.586353][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.606306][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.613563][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.639937][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.678137][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.687623][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.695034][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.702289][ T5824] bridge_slave_0: entered allmulticast mode [ 85.709609][ T5824] bridge_slave_0: entered promiscuous mode [ 85.741130][ T5823] team0: Port device team_slave_0 added [ 85.756802][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.764345][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.773209][ T5824] bridge_slave_1: entered allmulticast mode [ 85.781110][ T5824] bridge_slave_1: entered promiscuous mode [ 85.801071][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.809064][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.816523][ T5822] bridge_slave_0: entered allmulticast mode [ 85.824437][ T5822] bridge_slave_0: entered promiscuous mode [ 85.834066][ T5823] team0: Port device team_slave_1 added [ 85.872130][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.879653][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.886902][ T5822] bridge_slave_1: entered allmulticast mode [ 85.894761][ T5822] bridge_slave_1: entered promiscuous mode [ 85.925066][ T5821] team0: Port device team_slave_0 added [ 85.933659][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.955503][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.962746][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.989303][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.012769][ T5821] team0: Port device team_slave_1 added [ 86.020781][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.041898][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.049456][ T5827] Bluetooth: hci4: command tx timeout [ 86.049792][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.081752][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.099523][ T5828] hsr_slave_0: entered promiscuous mode [ 86.105993][ T5828] hsr_slave_1: entered promiscuous mode [ 86.128636][ T5827] Bluetooth: hci2: command tx timeout [ 86.128697][ T5840] Bluetooth: hci0: command tx timeout [ 86.134404][ T5833] Bluetooth: hci1: command tx timeout [ 86.154867][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.206774][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.216263][ T5833] Bluetooth: hci3: command tx timeout [ 86.231828][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.239065][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.265861][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.279312][ T5824] team0: Port device team_slave_0 added [ 86.316844][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.324509][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.354790][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.368714][ T5824] team0: Port device team_slave_1 added [ 86.445290][ T5822] team0: Port device team_slave_0 added [ 86.457130][ T5823] hsr_slave_0: entered promiscuous mode [ 86.463752][ T5823] hsr_slave_1: entered promiscuous mode [ 86.470473][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 86.476297][ T5823] Cannot create hsr debugfs directory [ 86.512691][ T5822] team0: Port device team_slave_1 added [ 86.520467][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.527443][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.554040][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.607086][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.614969][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.641407][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.669277][ T5821] hsr_slave_0: entered promiscuous mode [ 86.676118][ T5821] hsr_slave_1: entered promiscuous mode [ 86.683434][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 86.689422][ T5821] Cannot create hsr debugfs directory [ 86.696165][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.707098][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.733461][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.793046][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.800147][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.827839][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.978626][ T5824] hsr_slave_0: entered promiscuous mode [ 86.985812][ T5824] hsr_slave_1: entered promiscuous mode [ 86.992385][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 86.999293][ T5824] Cannot create hsr debugfs directory [ 87.176736][ T5822] hsr_slave_0: entered promiscuous mode [ 87.183784][ T5822] hsr_slave_1: entered promiscuous mode [ 87.197690][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 87.204358][ T5822] Cannot create hsr debugfs directory [ 87.390859][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.412890][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.450550][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.505576][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.666305][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.677063][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.691177][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.715831][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.801390][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.814269][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.825314][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.840032][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.954977][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.980310][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.998842][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.011300][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.040586][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.089623][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.122670][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.131888][ T5833] Bluetooth: hci4: command tx timeout [ 88.167452][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.175012][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.208216][ T5833] Bluetooth: hci1: command tx timeout [ 88.210205][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.213839][ T5833] Bluetooth: hci2: command tx timeout [ 88.213870][ T5833] Bluetooth: hci0: command tx timeout [ 88.221175][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.247312][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.261076][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.286090][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.293992][ T5840] Bluetooth: hci3: command tx timeout [ 88.306470][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.313663][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.329138][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.343096][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.350556][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.370353][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.454621][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.476536][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.489104][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.565819][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.595167][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.602438][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.644558][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.652060][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.845404][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.895925][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.934160][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.941596][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.980055][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.987303][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.012038][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.051621][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.075139][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.103281][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.137181][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.144531][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.204501][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.212164][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.341559][ T5823] veth0_vlan: entered promiscuous mode [ 89.401983][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.465720][ T5823] veth1_vlan: entered promiscuous mode [ 89.597443][ T5821] veth0_vlan: entered promiscuous mode [ 89.650503][ T5821] veth1_vlan: entered promiscuous mode [ 89.680159][ T5823] veth0_macvtap: entered promiscuous mode [ 89.717300][ T5823] veth1_macvtap: entered promiscuous mode [ 89.774363][ T5821] veth0_macvtap: entered promiscuous mode [ 89.819564][ T5821] veth1_macvtap: entered promiscuous mode [ 89.845676][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.883345][ T5828] veth0_vlan: entered promiscuous mode [ 89.903026][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.930381][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.952859][ T5828] veth1_vlan: entered promiscuous mode [ 89.964744][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.981868][ T140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.006527][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.019467][ T140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029648][ T140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.055125][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.063937][ T140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.117517][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.131430][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.163643][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.174379][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.184066][ T5824] veth0_vlan: entered promiscuous mode [ 90.193027][ T5828] veth0_macvtap: entered promiscuous mode [ 90.209499][ T5840] Bluetooth: hci4: command tx timeout [ 90.230843][ T5828] veth1_macvtap: entered promiscuous mode [ 90.264607][ T5824] veth1_vlan: entered promiscuous mode [ 90.290381][ T5840] Bluetooth: hci0: command tx timeout [ 90.290407][ T5833] Bluetooth: hci2: command tx timeout [ 90.296006][ T5840] Bluetooth: hci1: command tx timeout [ 90.354733][ T5822] veth0_vlan: entered promiscuous mode [ 90.360203][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.360247][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.378719][ T5840] Bluetooth: hci3: command tx timeout [ 90.409649][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.422076][ T5822] veth1_vlan: entered promiscuous mode [ 90.460233][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.476503][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.488110][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.555814][ T140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.564979][ T140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.582500][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.591368][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.591746][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.600658][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.606862][ T140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.624905][ T140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.637382][ T5824] veth0_macvtap: entered promiscuous mode [ 90.670928][ T5824] veth1_macvtap: entered promiscuous mode [ 90.723926][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.752269][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.765440][ T5822] veth0_macvtap: entered promiscuous mode [ 90.793087][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.825247][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.907557][ T1102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.928844][ T1102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.942158][ T5822] veth1_macvtap: entered promiscuous mode [ 90.956737][ T1102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.055956][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.078069][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.140226][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.223296][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.241102][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.254520][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.352685][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.396415][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.432958][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.441188][ T5960] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 91.444202][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.500939][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.532904][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.636706][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.662657][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.673667][ T5966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 91.716305][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 91.736900][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 91.914871][ T5969] openvswitch: netlink: Key type 148 is out of range max 32 [ 92.002434][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.069763][ T796] cfg80211: failed to load regulatory.db [ 92.122107][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.226065][ T5991] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 92.288569][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.298047][ T5840] Bluetooth: hci4: command tx timeout [ 92.324691][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.346422][ T5986] syzkaller1: entered promiscuous mode [ 92.355494][ T5986] syzkaller1: entered allmulticast mode [ 92.368579][ T5840] Bluetooth: hci2: command tx timeout [ 92.375631][ T5833] Bluetooth: hci1: command tx timeout [ 92.382870][ T5827] Bluetooth: hci0: command tx timeout [ 92.405932][ T5981] pimreg: tun_chr_ioctl cmd 1074025677 [ 92.422427][ T5981] pimreg: linktype set to 0 [ 92.448960][ T5840] Bluetooth: hci3: command tx timeout [ 92.463591][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.480678][ T5993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.499175][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.517783][ T5981] bond1 (unregistering): Released all slaves [ 92.882917][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 93.172719][ T6011] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 93.237597][ T6011] !: entered promiscuous mode [ 93.379843][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21'. [ 93.411199][ T6023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21'. [ 93.436092][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21'. [ 93.446402][ T6028] netlink: 192 bytes leftover after parsing attributes in process `syz.0.20'. [ 93.498077][ T6023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21'. [ 93.689375][ T6032] netlink: 'syz.4.23': attribute type 10 has an invalid length. [ 93.754748][ T6032] syz_tun: entered promiscuous mode [ 93.799379][ T6032] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 94.860855][ T70] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 94.938413][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.947259][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.145766][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.167772][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.338100][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.368114][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.380479][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.645508][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.715986][ T6091] netlink: 'syz.4.37': attribute type 8 has an invalid length. [ 95.830410][ T6096] netlink: 'syz.4.37': attribute type 28 has an invalid length. [ 95.872459][ T6096] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 95.923277][ T6091] geneve2: entered promiscuous mode [ 95.998516][ T6091] geneve2: entered allmulticast mode [ 96.039951][ T6091] Zero length message leads to an empty skb [ 96.155721][ T29] audit: type=1804 audit(1771596253.415:2): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.40" name="/newroot/6/memory.events" dev="tmpfs" ino=48 res=1 errno=0 [ 96.211764][ T29] audit: type=1800 audit(1771596253.415:3): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.40" name="memory.events" dev="tmpfs" ino=48 res=0 errno=0 [ 96.270917][ T6115] tipc: Started in network mode [ 96.287173][ T6115] tipc: Node identity a65d087f28c6, cluster identity 4711 [ 96.298640][ T6115] tipc: Enabled bearer , priority 0 [ 96.323584][ T6115] syzkaller0: entered promiscuous mode [ 96.349898][ T6115] syzkaller0: entered allmulticast mode [ 96.405661][ T6122] netlink: 'syz.0.45': attribute type 58 has an invalid length. [ 96.435106][ T6119] team0: Device gtp0 is of different type [ 96.443574][ T6115] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 96.460369][ T6115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.474646][ T6121] x9: renamed from bridge_slave_0 (while UP) [ 96.511845][ T6115] tipc: Resetting bearer [ 96.544124][ T6114] tipc: Resetting bearer [ 96.659422][ T6114] tipc: Disabling bearer [ 96.715728][ T6136] __nla_validate_parse: 9 callbacks suppressed [ 96.715785][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.48'. [ 96.837387][ T6141] sctp: [Deprecated]: syz.4.47 (pid 6141) Use of int in max_burst socket option deprecated. [ 96.837387][ T6141] Use struct sctp_assoc_value instead [ 96.921747][ T6147] netlink: 340 bytes leftover after parsing attributes in process `syz.2.48'. [ 97.027089][ T6154] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 97.754621][ T6177] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 97.799464][ T6174] tipc: Started in network mode [ 97.811827][ T6174] tipc: Node identity f291e0b4d3b9, cluster identity 4711 [ 97.837411][ T6174] tipc: Enabled bearer , priority 0 [ 97.877536][ T6169] netlink: 'syz.1.57': attribute type 27 has an invalid length. [ 97.922167][ T6182] syzkaller0: entered promiscuous mode [ 97.928576][ T6182] syzkaller0: entered allmulticast mode [ 97.972262][ T6174] tipc: Resetting bearer [ 98.025601][ T6171] tipc: Resetting bearer [ 98.053916][ T6171] tipc: Disabling bearer [ 98.246028][ T6192] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 98.435368][ T6201] netlink: 'syz.4.66': attribute type 1 has an invalid length. [ 98.492158][ T6201] netlink: 'syz.4.66': attribute type 1 has an invalid length. [ 98.902147][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 99.360300][ T6208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.977626][ T6263] syzkaller0: entered promiscuous mode [ 99.988846][ T6263] syzkaller0: entered allmulticast mode [ 100.208839][ T6267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.323336][ T6275] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 100.537426][ T6286] warning: `syz.1.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.670809][ T6283] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.736542][ T6283] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 100.965540][ T6309] ip6erspan0: entered allmulticast mode [ 101.221577][ T6325] netlink: 'syz.4.98': attribute type 16 has an invalid length. [ 101.239733][ T6325] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.98'. [ 101.275401][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.98'. [ 101.283607][ T6327] openvswitch: netlink: Flow actions attr not present in new flow. [ 101.468996][ T6336] netlink: 'syz.0.102': attribute type 39 has an invalid length. [ 101.514625][ T6339] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.104'. [ 101.586257][ T6344] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 101.666076][ T6347] IPv6: Can't replace route, no match found [ 101.736175][ T6347] IPv6: Can't replace route, no match found [ 101.791114][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 101.830455][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 101.976922][ T6363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'. [ 102.053118][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 102.338998][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.361734][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 102.393816][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.414806][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 102.431321][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 102.473823][ T6377] team0: entered promiscuous mode [ 102.479326][ T6377] team_slave_0: entered promiscuous mode [ 102.485365][ T6377] team_slave_1: entered promiscuous mode [ 102.503210][ T6356] openvswitch: netlink: Message has -2 unknown bytes. [ 102.526081][ T29] audit: type=1804 audit(1771596259.785:4): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.116" name="/newroot/18/memory.events" dev="tmpfs" ino=109 res=1 errno=0 [ 102.526777][ T6371] netlink: 'syz.0.112': attribute type 101 has an invalid length. [ 102.558117][ T6371] netlink: 'syz.0.112': attribute type 7 has an invalid length. [ 102.569186][ T6356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.584150][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.107'. [ 102.617771][ T6371] netlink: 'syz.0.112': attribute type 16 has an invalid length. [ 102.712228][ T6371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.128857][ T6406] pim6reg: entered allmulticast mode [ 103.142717][ T6406] pim6reg: left allmulticast mode [ 103.370369][ T6415] 9: renamed from lo (while UP) [ 103.428728][ T6418] syzkaller1: entered promiscuous mode [ 103.448834][ T6418] syzkaller1: entered allmulticast mode [ 103.524909][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 103.553262][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 103.847396][ T6440] validate_nla: 1 callbacks suppressed [ 103.847417][ T6440] netlink: 'syz.1.131': attribute type 13 has an invalid length. [ 103.911970][ T6448] netlink: 'syz.2.132': attribute type 2 has an invalid length. [ 103.955734][ T6450] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 103.964575][ T6450] netlink: 'syz.0.134': attribute type 2 has an invalid length. [ 103.977364][ T6450] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 103.986692][ T6450] netlink: 'syz.0.134': attribute type 3 has an invalid length. [ 104.000754][ T6445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.478481][ T6465] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 104.813283][ T6481] netlink: 'syz.3.144': attribute type 9 has an invalid length. [ 105.170602][ T6506] netlink: 'syz.4.152': attribute type 1 has an invalid length. [ 105.844571][ T6548] netlink: 'syz.4.160': attribute type 6 has an invalid length. [ 105.904948][ T6548] netlink: 'syz.4.160': attribute type 6 has an invalid length. [ 105.936099][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.967087][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.076356][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.096751][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.205708][ T6609] __nla_validate_parse: 23 callbacks suppressed [ 107.205729][ T6609] netlink: 5 bytes leftover after parsing attributes in process `syz.2.180'. [ 107.379332][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.387173][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.604550][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.623625][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.650687][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 107.789477][ T1333] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.819546][ T1333] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.852794][ T1333] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.885962][ T1333] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.917405][ T1333] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.939076][ T6604] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 107.947438][ T6604] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 107.956799][ T1333] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.981877][ T1333] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.008571][ T1333] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.179380][ T6648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.414938][ T6653] netlink: 207416 bytes leftover after parsing attributes in process `syz.2.189'. [ 108.519802][ T6666] syzkaller1: entered promiscuous mode [ 108.574404][ T6666] syzkaller1: entered allmulticast mode [ 108.940779][ T6677] syzkaller0: entered promiscuous mode [ 108.946328][ T6677] syzkaller0: entered allmulticast mode [ 108.948550][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 109.033677][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.196'. [ 109.063863][ T6689] netlink: 44 bytes leftover after parsing attributes in process `syz.0.199'. [ 109.221784][ T1333] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.372056][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 109.420889][ T1333] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.444521][ T1333] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.603022][ T6705] xt_l2tp: v2 doesn't support IP mode [ 109.614373][ T1333] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.648623][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.203'. [ 109.678077][ T6705] validate_nla: 3 callbacks suppressed [ 109.678097][ T6705] netlink: 'syz.1.203': attribute type 7 has an invalid length. [ 109.746006][ T6705] netlink: 'syz.1.203': attribute type 8 has an invalid length. [ 109.821960][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 110.152985][ T6722] bridge1: entered promiscuous mode [ 110.165755][ T6722] bridge1: entered allmulticast mode [ 110.202555][ T6722] team0: Port device bridge1 added [ 110.797233][ T6737] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 110.872722][ T6741] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.213'. [ 110.951242][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 110.971134][ T6741] netlink: Unknown conntrack attr (0) [ 110.977458][ T6749] netlink: 'syz.4.215': attribute type 4 has an invalid length. [ 111.014284][ T6737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.035391][ T6754] netlink: 'syz.4.215': attribute type 4 has an invalid length. [ 111.406610][ T6763] bridge1: entered promiscuous mode [ 111.414847][ T6763] bridge1: entered allmulticast mode [ 111.459038][ T6763] team0: Port device bridge1 added [ 111.486625][ T6767] bridge0: port 3(team0) entered blocking state [ 111.520701][ T6767] bridge0: port 3(team0) entered disabled state [ 111.557015][ T6767] team0: entered allmulticast mode [ 111.608213][ T6767] team_slave_0: entered allmulticast mode [ 111.614065][ T6767] team_slave_1: entered allmulticast mode [ 111.730751][ T6767] team0: entered promiscuous mode [ 111.735863][ T6767] team_slave_0: entered promiscuous mode [ 111.744437][ T6767] team_slave_1: entered promiscuous mode [ 112.283388][ T6809] __nla_validate_parse: 6 callbacks suppressed [ 112.283408][ T6809] netlink: 56 bytes leftover after parsing attributes in process `syz.1.231'. [ 112.347972][ T6809] netlink: 164 bytes leftover after parsing attributes in process `syz.1.231'. [ 112.430215][ T6815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.524991][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 112.564989][ T6821] x_tables: duplicate entry at hook 3 [ 112.593796][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 112.593823][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.617588][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.634747][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.649393][ T6821] netlink: 5 bytes leftover after parsing attributes in process `syz.1.235'. [ 112.668001][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.713685][ T6821] 0{X: renamed from gretap0 (while UP) [ 112.724865][ T6821] 0{X: entered allmulticast mode [ 112.741131][ T6821] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 112.793714][ T6829] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 113.043832][ T6837] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.240'. [ 113.247586][ T6843] syzkaller0: entered promiscuous mode [ 113.265267][ T6843] syzkaller0: entered allmulticast mode [ 113.362730][ T6846] vxcan1: Caught tx_queue_len zero misconfig [ 113.382601][ T6850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.245'. [ 113.666662][ T6855] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.246'. [ 113.856254][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 113.960807][ T6869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.199241][ T6879] syzkaller0: entered promiscuous mode [ 114.211019][ T6879] syzkaller0: entered allmulticast mode [ 114.317222][ T6890] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 114.540772][ T6899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.577138][ T29] audit: type=1800 audit(1771596271.835:5): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.256" name="memory.events" dev="tmpfs" ino=303 res=0 errno=0 [ 114.585370][ T6902] vlan2: entered promiscuous mode [ 114.604172][ T6902] vlan2: entered allmulticast mode [ 114.616195][ T6902] hsr_slave_1: entered allmulticast mode [ 114.658717][ T6899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.744600][ T6899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.843305][ T6899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.075671][ T6908] netlink: 'syz.4.259': attribute type 29 has an invalid length. [ 115.130997][ T6913] netlink: 'syz.4.259': attribute type 29 has an invalid length. [ 115.162892][ T6913] netlink: 596 bytes leftover after parsing attributes in process `syz.4.259'. [ 115.252388][ T140] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.262934][ T140] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.294767][ T140] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.312246][ T140] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.582588][ T6936] netlink: 'syz.3.265': attribute type 2 has an invalid length. [ 115.698898][ T6940] netlink: 'syz.2.267': attribute type 5 has an invalid length. [ 115.766113][ T6945] xt_hashlimit: max too large, truncated to 1048576 [ 115.774980][ T6945] xt_hashlimit: overflow, try lower: 13/0 [ 116.001811][ T6938] team0 (unregistering): Port device team_slave_0 removed [ 116.036579][ T6938] team0 (unregistering): Port device team_slave_1 removed [ 116.206085][ T6959] ip6tnl1: entered allmulticast mode [ 116.311745][ T6965] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 116.381000][ T6971] netlink: 'syz.2.276': attribute type 29 has an invalid length. [ 116.466219][ T6972] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 116.488118][ T6972] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 116.593289][ T6979] tc_dump_action: action bad kind [ 116.792410][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.804743][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.959489][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.055838][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.481527][ T7018] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 117.495838][ T7018] netlink: 'syz.2.291': attribute type 2 has an invalid length. [ 117.567392][ T7020] __nla_validate_parse: 12 callbacks suppressed [ 117.567413][ T7020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.290'. [ 117.612720][ T7022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 117.719762][ T140] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.748323][ T7025] tipc: Enabled bearer , priority 10 [ 117.823546][ T140] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.839227][ T140] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.927441][ T7031] team0: Device ipvlan1 failed to register rx_handler [ 117.949179][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.295'. [ 117.973503][ T140] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.987547][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.295'. [ 117.987985][ T7031] netlink: 26 bytes leftover after parsing attributes in process `syz.1.294'. [ 118.049499][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'. [ 118.615026][ T7061] team0: left promiscuous mode [ 118.641390][ T7061] team_slave_0: left promiscuous mode [ 118.670389][ T7061] team_slave_1: left promiscuous mode [ 118.721413][ T7061] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.745042][ T7061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.773624][ T7079] netlink: 48 bytes leftover after parsing attributes in process `syz.0.305'. [ 118.876750][ T796] tipc: Node number set to 556327092 [ 119.009530][ T7087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.308'. [ 120.034159][ T7148] netlink: 120 bytes leftover after parsing attributes in process `syz.1.323'. [ 120.502349][ T7162] xt_cgroup: invalid path, errno=-2 [ 120.547571][ T7162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.327'. [ 120.568348][ T7150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.324'. [ 120.651619][ T7163] validate_nla: 7 callbacks suppressed [ 120.651641][ T7163] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 120.884581][ T7179] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 120.992202][ T7183] trusted_key: syz.3.332 sent an empty control message without MSG_MORE. [ 121.391855][ T7201] netlink: 'syz.2.336': attribute type 9 has an invalid length. [ 121.415954][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 121.449163][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 121.571298][ T47] IPVS: starting estimator thread 0... [ 121.676181][ T7211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.689116][ T7212] IPVS: using max 29 ests per chain, 69600 per kthread [ 121.758532][ T7218] sit0: Caught tx_queue_len zero misconfig [ 121.821646][ T7211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.964909][ T7211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.045810][ T7211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.066609][ T7238] netlink: 'syz.1.346': attribute type 15 has an invalid length. [ 122.270750][ T7245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.279333][ T7244] bridge0: port 3(veth0_to_bridge) entered blocking state [ 122.287006][ T7244] bridge0: port 3(veth0_to_bridge) entered disabled state [ 122.295850][ T7244] veth0_to_bridge: entered allmulticast mode [ 122.308070][ T7244] veth0_to_bridge: entered promiscuous mode [ 122.318025][ T140] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.338593][ T7249] tipc: Enabling of bearer rejected, failed to enable media [ 122.373198][ T140] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.414300][ T140] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.434345][ T140] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.516460][ T7256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.538773][ T7256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.154528][ T7278] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 123.168332][ T7278] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 123.178626][ T7278] __nla_validate_parse: 10 callbacks suppressed [ 123.178648][ T7278] netlink: 108 bytes leftover after parsing attributes in process `syz.0.360'. [ 123.215760][ T7283] bond0: entered promiscuous mode [ 123.267947][ T7283] bond_slave_0: entered promiscuous mode [ 123.298294][ T7283] bond_slave_1: entered promiscuous mode [ 123.324105][ T7283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 123.389701][ T7283] netlink: 152 bytes leftover after parsing attributes in process `syz.2.361'. [ 123.423983][ T7283] block nbd0: not configured, cannot reconfigure [ 123.444446][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 123.456319][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 123.488496][ T7283] vlan2: entered allmulticast mode [ 123.494066][ T7283] bridge0: port 3(vlan2) entered blocking state [ 123.510805][ T7283] bridge0: port 3(vlan2) entered disabled state [ 123.527730][ T7283] vlan2: entered promiscuous mode [ 123.928131][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.015180][ T7313] bridge_slave_1: left allmulticast mode [ 124.036671][ T7313] bridge_slave_1: left promiscuous mode [ 124.046872][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.076647][ T7313] bond0: (slave bond_slave_0): Releasing backup interface [ 124.093447][ T7313] bond_slave_0: left promiscuous mode [ 124.103112][ T7313] bond0: (slave bond_slave_1): Releasing backup interface [ 124.122594][ T7313] bond_slave_1: left promiscuous mode [ 124.134152][ T7313] team0: Port device team_slave_0 removed [ 124.145423][ T7313] team0: Port device team_slave_1 removed [ 124.152342][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.161031][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.173275][ T7333] netlink: 'syz.3.373': attribute type 32 has an invalid length. [ 124.182862][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.190397][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.206657][ T7313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.426827][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 124.447008][ T7342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.376'. [ 124.473728][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 124.485031][ T7344] FAULT_INJECTION: forcing a failure. [ 124.485031][ T7344] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.499203][ T7342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.376'. [ 124.544815][ T7344] CPU: 0 UID: 0 PID: 7344 Comm: syz.3.377 Not tainted syzkaller #0 PREEMPT(full) [ 124.544843][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.544854][ T7344] Call Trace: [ 124.544862][ T7344] [ 124.544870][ T7344] dump_stack_lvl+0xe8/0x150 [ 124.544903][ T7344] should_fail_ex+0x412/0x560 [ 124.544932][ T7344] _copy_from_user+0x2d/0xb0 [ 124.544959][ T7344] __sys_bpf+0x229/0x950 [ 124.544991][ T7344] ? __pfx___sys_bpf+0x10/0x10 [ 124.545035][ T7344] ? ksys_write+0x242/0x270 [ 124.545058][ T7344] ? __pfx_ksys_write+0x10/0x10 [ 124.545085][ T7344] __x64_sys_bpf+0x7c/0x90 [ 124.545112][ T7344] do_syscall_64+0x14d/0xf80 [ 124.545139][ T7344] ? trace_irq_disable+0x3b/0x150 [ 124.545166][ T7344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.545185][ T7344] ? clear_bhb_loop+0x40/0x90 [ 124.545208][ T7344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.545228][ T7344] RIP: 0033:0x7fd50b19c629 [ 124.545246][ T7344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.545262][ T7344] RSP: 002b:00007fd50bf9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.545283][ T7344] RAX: ffffffffffffffda RBX: 00007fd50b415fa0 RCX: 00007fd50b19c629 [ 124.545297][ T7344] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 124.545309][ T7344] RBP: 00007fd50bf9f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.545320][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.545331][ T7344] R13: 00007fd50b416038 R14: 00007fd50b415fa0 R15: 00007ffddd940bd8 [ 124.545370][ T7344] [ 124.686868][ T7352] syzkaller0: entered promiscuous mode [ 124.780157][ T7352] syzkaller0: entered allmulticast mode [ 124.814721][ T7354] syzkaller0: entered promiscuous mode [ 124.838335][ T7354] syzkaller0: entered allmulticast mode [ 124.951353][ T7354] macsec2: entered promiscuous mode [ 125.374319][ T7384] tipc: Started in network mode [ 125.381565][ T7384] tipc: Node identity e216de34d106, cluster identity 4711 [ 125.403796][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 125.411495][ T7384] tipc: Enabled bearer , priority 0 [ 125.434271][ T7384] syzkaller0: entered promiscuous mode [ 125.468524][ T7384] syzkaller0: entered allmulticast mode [ 125.474785][ T7394] xt_connbytes: Forcing CT accounting to be enabled [ 125.582101][ T7384] tipc: Resetting bearer [ 125.594736][ T7384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.608260][ T7382] tipc: Resetting bearer [ 125.625146][ T7382] tipc: Disabling bearer [ 125.855053][ T7412] gtp0: entered promiscuous mode [ 125.861637][ T7412] gtp0: entered allmulticast mode [ 125.869159][ T7414] netlink: 'syz.3.395': attribute type 12 has an invalid length. [ 125.880522][ T7414] netlink: 'syz.3.395': attribute type 7 has an invalid length. [ 125.889286][ T7414] netlink: 'syz.3.395': attribute type 5 has an invalid length. [ 125.899634][ T7406] netlink: zone id is out of range [ 125.905802][ T7406] netlink: zone id is out of range [ 125.928764][ T7406] netlink: zone id is out of range [ 125.954622][ T7406] netlink: zone id is out of range [ 125.967446][ T7406] netlink: zone id is out of range [ 125.974179][ T7406] netlink: zone id is out of range [ 125.977651][ T7409] xfrm0: entered promiscuous mode [ 125.983907][ T7406] netlink: zone id is out of range [ 125.991585][ T7409] xfrm0: entered allmulticast mode [ 125.997640][ T7406] netlink: zone id is out of range [ 126.094189][ T7416] vlan2: entered promiscuous mode [ 126.118095][ T7416] veth0_virt_wifi: entered promiscuous mode [ 126.125991][ T7416] vlan2: entered allmulticast mode [ 126.133049][ T7416] veth0_virt_wifi: entered allmulticast mode [ 126.383019][ T7434] netlink: 'syz.3.403': attribute type 21 has an invalid length. [ 126.510455][ T7434] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 126.723211][ T7449] veth3: entered promiscuous mode [ 126.784502][ T5843] IPVS: starting estimator thread 0... [ 126.802704][ T7459] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 126.897981][ T7460] IPVS: using max 28 ests per chain, 67200 per kthread [ 127.160823][ T7477] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 127.230757][ T7480] netlink: 'syz.0.416': attribute type 2 has an invalid length. [ 127.269284][ T7482] netlink: 'syz.0.416': attribute type 2 has an invalid length. [ 127.354615][ T7482] !: entered promiscuous mode [ 127.820394][ T7508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.837662][ T7508] bond0: (slave rose0): Enslaving as an active interface with an up link [ 128.659587][ T7525] syz.1.429 (7525) used obsolete PPPIOCDETACH ioctl [ 129.120957][ T7549] __nla_validate_parse: 59 callbacks suppressed [ 129.120977][ T7549] netlink: 32 bytes leftover after parsing attributes in process `syz.1.432'. [ 129.988667][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.066127][ T7599] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 130.093046][ T7603] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 130.247499][ T7600] netlink: 'syz.4.442': attribute type 16 has an invalid length. [ 130.535652][ T7603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.710707][ T7605] bond1: (slave veth3): Enslaving as an active interface with a down link [ 130.838217][ T7600] syz_tun: left promiscuous mode [ 130.851290][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.860415][ T7600] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.875490][ T7600] net_ratelimit: 770 callbacks suppressed [ 130.875502][ T7600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.952520][ T7611] bond1: (slave veth5): Enslaving as an active interface with a down link [ 131.168014][ T7651] netlink: 48 bytes leftover after parsing attributes in process `syz.2.450'. [ 131.200172][ T7645] netlink: zone id is out of range [ 131.211646][ T7645] netlink: zone id is out of range [ 131.216842][ T7645] netlink: zone id is out of range [ 131.262334][ T7645] netlink: zone id is out of range [ 131.269182][ T7645] netlink: zone id is out of range [ 131.285961][ T7645] netlink: zone id is out of range [ 131.318193][ T7645] netlink: zone id is out of range [ 131.340308][ T7645] netlink: zone id is out of range [ 131.374623][ T7645] netlink: zone id is out of range [ 131.667512][ T7673] IPVS: length: 131 != 8 [ 131.703328][ T7673] pimreg: entered allmulticast mode [ 131.747318][ T7676] IPVS: length: 35 != 24 [ 132.141163][ T7695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.463'. [ 132.341324][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 132.351291][ T7703] validate_nla: 1 callbacks suppressed [ 132.351309][ T7703] netlink: 'syz.4.466': attribute type 30 has an invalid length. [ 132.367707][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 132.385492][ T7703] netlink: 'syz.4.466': attribute type 11 has an invalid length. [ 132.394445][ T7703] netlink: 173856 bytes leftover after parsing attributes in process `syz.4.466'. [ 132.643582][ T7707] netlink: 84 bytes leftover after parsing attributes in process `syz.1.467'. [ 132.735000][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.467'. [ 132.929405][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 133.014564][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.019115][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.472'. [ 133.023560][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.333033][ T7719] can: request_module (can-proto-3) failed. [ 133.735902][ T7753] bond1: invalid ARP target 0.0.0.0 specified for addition [ 133.806570][ T7753] bond1: option arp_ip_target: invalid value (0) [ 133.846875][ T7753] bond1 (unregistering): Released all slaves [ 134.643119][ T7796] netlink: 'syz.0.491': attribute type 9 has an invalid length. [ 134.855751][ T7806] __nla_validate_parse: 2 callbacks suppressed [ 134.855771][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 134.906256][ T7807] netlink: 'syz.4.494': attribute type 6 has an invalid length. [ 134.914772][ T7807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.494'. [ 135.019062][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 135.072896][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 135.206281][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 135.207274][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 135.278639][ T7829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.501'. [ 135.472463][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.481769][ T7842] bridge0: port 1(1x9) entered disabled state [ 135.664901][ T7856] netlink: 2 bytes leftover after parsing attributes in process `syz.3.508'. [ 135.780458][ T7856] netlink: 'syz.3.508': attribute type 10 has an invalid length. [ 135.806031][ T7859] dvmrp0: entered allmulticast mode [ 135.822180][ T7860] dvmrp0: left allmulticast mode [ 135.833291][ T7863] netlink: 'syz.3.508': attribute type 10 has an invalid length. [ 135.833760][ T7860] pimreg: left allmulticast mode [ 135.911370][ T7856] dummy0: entered promiscuous mode [ 135.922390][ T7856] dummy0: entered allmulticast mode [ 135.929617][ T7856] team0: Port device dummy0 added [ 135.942388][ T7863] dummy0: left promiscuous mode [ 135.947519][ T7863] dummy0: left allmulticast mode [ 135.972867][ T7863] team0: Port device dummy0 removed [ 136.002397][ T7863] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.064829][ T7868] batman_adv: batadv0: Adding interface: dummy0 [ 136.091700][ T7868] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.120808][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 136.156169][ T7868] batman_adv: batadv0: Interface activated: dummy0 [ 136.195094][ T7869] net_ratelimit: 372 callbacks suppressed [ 136.195195][ T7869] batadv0: mtu less than device minimum [ 136.216046][ T7869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.228245][ T7869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.240332][ T7869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.252436][ T7869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.264667][ T7869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.276623][ T7869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.288764][ T7869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.300646][ T7869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.312677][ T7869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.355850][ T7883] netlink: 'syz.1.517': attribute type 7 has an invalid length. [ 136.521595][ T7892] netlink: 'syz.2.519': attribute type 14 has an invalid length. [ 136.616042][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.522'. [ 136.805581][ T7904] netlink: 'syz.0.525': attribute type 2 has an invalid length. [ 136.836730][ T7904] : entered promiscuous mode [ 136.860337][ T7904] netlink: 'syz.0.525': attribute type 2 has an invalid length. [ 136.876399][ T7904] : left promiscuous mode [ 137.355401][ T7934] tipc: Enabling of bearer rejected, failed to enable media [ 138.060315][ T7972] netlink: 'syz.4.545': attribute type 11 has an invalid length. [ 138.068486][ T7972] netlink: 'syz.4.545': attribute type 11 has an invalid length. [ 138.079227][ T7973] netlink: 'syz.4.545': attribute type 11 has an invalid length. [ 138.092939][ T7973] netlink: 'syz.4.545': attribute type 11 has an invalid length. [ 138.190199][ T1333] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.201927][ T1333] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.221022][ T1333] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.365601][ T7971] bond2: option updelay: invalid value (18446744072924056005) [ 138.396925][ T7971] bond2: option updelay: allowed values 0 - 2147483647 [ 138.513322][ T7971] bond2 (unregistering): Released all slaves [ 138.581043][ T1333] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.599135][ T7993] ipvlan3: entered promiscuous mode [ 138.606926][ T7993] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 138.704235][ T8005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.713840][ T8067] bridge0: entered allmulticast mode [ 141.067699][ T8086] __nla_validate_parse: 15 callbacks suppressed [ 141.067715][ T8086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 141.084698][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 143.169843][ T8063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.369976][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 143.409703][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 143.433592][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 143.481240][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 143.511987][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.578'. [ 143.521367][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 143.548630][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 143.884901][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 143.898862][ T8133] xt_TCPMSS: Only works on TCP SYN packets [ 144.001279][ T8132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.033602][ T8136] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 144.365727][ T8156] veth7: entered promiscuous mode [ 146.675806][ T8117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.907717][ T8183] __nla_validate_parse: 1 callbacks suppressed [ 146.907737][ T8183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.592'. [ 146.961820][ T8179] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 146.991842][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 147.040066][ T8179] netlink: 'syz.0.594': attribute type 20 has an invalid length. [ 147.050740][ T8189] netlink: 'syz.2.592': attribute type 2 has an invalid length. [ 147.066179][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 147.071319][ T8179] netlink: 'syz.0.594': attribute type 21 has an invalid length. [ 147.103700][ T8189] netlink: 44 bytes leftover after parsing attributes in process `syz.2.592'. [ 147.150570][ T8196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.599'. [ 147.397321][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 147.409050][ T8201] tipc: Enabling of bearer rejected, failed to enable media [ 147.423868][ T8201] netlink: 140 bytes leftover after parsing attributes in process `syz.2.600'. [ 147.441832][ T8205] net_ratelimit: 12 callbacks suppressed [ 147.441850][ T8205] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 147.956360][ T8231] Bluetooth: MGMT ver 1.23 [ 148.187416][ T8238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'. [ 148.238364][ T8238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.611'. [ 148.283956][ T8236] tipc: Started in network mode [ 148.305068][ T8236] tipc: Node identity e6e942d0b6, cluster identity 4711 [ 148.329332][ T8236] tipc: Enabled bearer , priority 0 [ 148.399273][ T8239] syzkaller0: entered promiscuous mode [ 148.415152][ T8239] syzkaller0: entered allmulticast mode [ 148.507645][ T8249] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 148.581641][ T8249] netlink: 224 bytes leftover after parsing attributes in process `syz.1.613'. [ 148.599507][ T8235] tipc: Resetting bearer [ 148.700581][ T8235] tipc: Disabling bearer [ 150.322693][ T8316] pimreg: tun_chr_ioctl cmd 1074025677 [ 150.330719][ T8316] pimreg: linktype set to 774 [ 150.380252][ T8320] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 150.471825][ T8320] bond2 (unregistering): Released all slaves [ 150.669695][ T8329] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 150.960485][ T8337] geneve2: entered promiscuous mode [ 150.965769][ T8337] geneve2: entered allmulticast mode [ 151.756846][ T8369] : renamed from bond_slave_0 [ 151.879302][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.026626][ T8374] netlink: 'syz.0.643': attribute type 4 has an invalid length. [ 152.099335][ T8374] netlink: 'syz.0.643': attribute type 4 has an invalid length. [ 152.123080][ T8378] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 152.464624][ T8395] __nla_validate_parse: 12 callbacks suppressed [ 152.464645][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.651'. [ 152.518710][ T8395] netlink: 'syz.4.651': attribute type 10 has an invalid length. [ 152.536922][ T8395] syz_tun: entered promiscuous mode [ 152.569840][ T8395] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 152.788083][ T8399] syzkaller0: entered promiscuous mode [ 152.793645][ T8399] syzkaller0: entered allmulticast mode [ 152.887536][ T8401] netlink: 14 bytes leftover after parsing attributes in process `syz.2.653'. [ 152.898840][ T8401] batman_adv: batadv0: Interface deactivated: dummy0 [ 152.918531][ T8401] batman_adv: batadv0: Removing interface: dummy0 [ 153.113716][ T8401] syzkaller0: entered promiscuous mode [ 153.119641][ T8401] syzkaller0: entered allmulticast mode [ 153.219943][ T8408] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 153.229161][ T8408] netlink: 224 bytes leftover after parsing attributes in process `syz.3.656'. [ 153.492625][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.0.659'. [ 154.755406][ T8412] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 154.897972][ T8441] : renamed from bond_slave_0 (while UP) [ 155.128134][ T8450] tipc: Enabled bearer , priority 0 [ 155.144838][ T8450] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 155.170068][ T8450] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 155.188802][ T8450] tipc: Resetting bearer [ 155.217336][ T8450] netlink: 'syz.3.666': attribute type 89 has an invalid length. [ 155.306122][ T8459] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 155.525929][ T8468] netdevsim netdevsim0: Direct firmware load for - [ 155.525929][ T8468] failed with error -2 [ 155.545272][ T8468] netdevsim netdevsim0: Falling back to sysfs fallback for: - [ 155.545272][ T8468] [ 155.786299][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 155.810905][ T1163] tipc: Resetting bearer [ 156.036859][ T8492] lo: Caught tx_queue_len zero misconfig [ 156.043823][ T8492] netlink: 48 bytes leftover after parsing attributes in process `syz.1.675'. [ 156.238504][ T47] tipc: Node number set to 2392524927 [ 156.311566][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 156.513239][ T8518] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.679'. [ 158.755752][ T8482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.197309][ T8540] macvtap0: entered promiscuous mode [ 159.611000][ T8567] netlink: 108 bytes leftover after parsing attributes in process `syz.0.692'. [ 159.631075][ T8569] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 159.653691][ T8569] SET target dimension over the limit! [ 159.684518][ T8569] syzkaller0: entered promiscuous mode [ 159.690423][ T8569] syzkaller0: entered allmulticast mode [ 160.120008][ T8574] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 160.195555][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.699'. [ 160.241543][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 160.262611][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.699'. [ 160.308736][ T8576] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 160.339352][ T8576] erspan1: entered allmulticast mode [ 160.480720][ T8585] FAULT_INJECTION: forcing a failure. [ 160.480720][ T8585] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 160.510640][ T8585] CPU: 1 UID: 0 PID: 8585 Comm: syz.4.701 Not tainted syzkaller #0 PREEMPT(full) [ 160.510667][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.510678][ T8585] Call Trace: [ 160.510686][ T8585] [ 160.510694][ T8585] dump_stack_lvl+0xe8/0x150 [ 160.510729][ T8585] should_fail_ex+0x412/0x560 [ 160.510758][ T8585] prepare_alloc_pages+0x22a/0x650 [ 160.510792][ T8585] __alloc_frozen_pages_noprof+0x12f/0x380 [ 160.510821][ T8585] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.510849][ T8585] ? __pfx_policy_nodemask+0x10/0x10 [ 160.510873][ T8585] ? trace_kmalloc+0x2a/0x110 [ 160.510897][ T8585] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 160.510923][ T8585] alloc_pages_mpol+0x232/0x4a0 [ 160.510953][ T8585] alloc_pages_noprof+0xa8/0x190 [ 160.510980][ T8585] alloc_skb_with_frags+0x233/0x890 [ 160.511024][ T8585] sock_alloc_send_pskb+0x878/0x990 [ 160.511075][ T8585] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 160.511117][ T8585] ? iov_iter_advance+0x8b/0x1c0 [ 160.511145][ T8585] tun_get_user+0x92d/0x3dd0 [ 160.511183][ T8585] ? aa_file_perm+0x12d/0x1630 [ 160.511214][ T8585] ? aa_file_perm+0x440/0x1630 [ 160.511239][ T8585] ? __pfx_tun_get_user+0x10/0x10 [ 160.511270][ T8585] ? __lock_acquire+0x6b5/0x2cf0 [ 160.511307][ T8585] ? ref_tracker_alloc+0x363/0x4d0 [ 160.511335][ T8585] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 160.511365][ T8585] ? tun_get+0x1c/0x2f0 [ 160.511396][ T8585] ? tun_get+0x1c/0x2f0 [ 160.511421][ T8585] ? tun_get+0x1c/0x2f0 [ 160.511451][ T8585] tun_chr_write_iter+0x113/0x200 [ 160.511478][ T8585] vfs_write+0x61d/0xb90 [ 160.511517][ T8585] ? __pfx_vfs_write+0x10/0x10 [ 160.511549][ T8585] ? __fget_files+0x2a/0x420 [ 160.511586][ T8585] ksys_write+0x150/0x270 [ 160.511609][ T8585] ? __pfx_ksys_write+0x10/0x10 [ 160.511649][ T8585] do_syscall_64+0x14d/0xf80 [ 160.511677][ T8585] ? trace_irq_disable+0x3b/0x150 [ 160.511704][ T8585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.511725][ T8585] ? clear_bhb_loop+0x40/0x90 [ 160.511750][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.511770][ T8585] RIP: 0033:0x7fbcea79c629 [ 160.511790][ T8585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.511806][ T8585] RSP: 002b:00007fbceb57d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.511828][ T8585] RAX: ffffffffffffffda RBX: 00007fbceaa15fa0 RCX: 00007fbcea79c629 [ 160.511842][ T8585] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000003 [ 160.511855][ T8585] RBP: 00007fbceb57d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.511867][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.511879][ T8585] R13: 00007fbceaa16038 R14: 00007fbceaa15fa0 R15: 00007ffcdab847f8 [ 160.511912][ T8585] [ 160.970754][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.702'. [ 161.143144][ T8603] tipc: Enabled bearer , priority 0 [ 161.158862][ T8603] syzkaller0: entered promiscuous mode [ 161.172997][ T8603] syzkaller0: entered allmulticast mode [ 161.199851][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 161.234355][ T8603] tipc: Resetting bearer [ 161.380426][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 161.519144][ T8601] tipc: Resetting bearer [ 161.557711][ T8627] xt_bpf: check failed: parse error [ 161.563558][ T8601] tipc: Disabling bearer [ 161.702091][ T8611] syz.4.707 (8611) used greatest stack depth: 17472 bytes left [ 161.754668][ T8605] syz.4.707 (8605) used greatest stack depth: 16776 bytes left [ 161.786855][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 161.813777][ T8640] netlink: 60 bytes leftover after parsing attributes in process `syz.4.715'. [ 161.849326][ T8640] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 161.877991][ T8640] netlink: 96 bytes leftover after parsing attributes in process `syz.4.715'. [ 161.917052][ T8640] netlink: 1 bytes leftover after parsing attributes in process `syz.4.715'. [ 161.930918][ T8640] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 161.940732][ T8640] netlink: 'syz.4.715': attribute type 8 has an invalid length. [ 162.263303][ T8663] x_tables: duplicate underflow at hook 3 [ 162.350667][ T8675] team0: left allmulticast mode [ 162.355599][ T8675] team_slave_0: left allmulticast mode [ 162.402645][ T8675] team_slave_1: left allmulticast mode [ 162.446470][ T8675] bridge1: left allmulticast mode [ 162.461338][ T8675] team0: left promiscuous mode [ 162.467529][ T8675] team_slave_0: left promiscuous mode [ 162.475224][ T8675] team_slave_1: left promiscuous mode [ 162.482788][ T8675] bridge1: left promiscuous mode [ 162.490992][ T8675] bridge0: port 3(team0) entered disabled state [ 162.509885][ T8675] bridge_slave_1: left allmulticast mode [ 162.515900][ T8675] bridge_slave_1: left promiscuous mode [ 162.523210][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.544478][ T8675] bridge_slave_0: left allmulticast mode [ 162.551260][ T8675] bridge_slave_0: left promiscuous mode [ 162.564375][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.077290][ T8713] ip6gre0: entered promiscuous mode [ 163.252005][ T8719] netlink: 'syz.0.736': attribute type 15 has an invalid length. [ 164.303552][ T8768] syzkaller0: entered promiscuous mode [ 164.310192][ T8768] syzkaller0: entered allmulticast mode [ 164.379955][ T8773] sctp: [Deprecated]: syz.4.745 (pid 8773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.379955][ T8773] Use struct sctp_sack_info instead [ 166.498775][ T8736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.507659][ T8764] __nla_validate_parse: 13 callbacks suppressed [ 166.507678][ T8764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.747'. [ 166.781270][ T8793] IPVS: length: 243 != 8 [ 166.816336][ T8797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.754'. [ 166.876053][ T8797] tipc: Invalid UDP bearer configuration [ 166.876117][ T8797] tipc: Enabling of bearer rejected, failed to enable media [ 166.890748][ T8802] netlink: 68 bytes leftover after parsing attributes in process `syz.0.757'. [ 166.941639][ T8805] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 166.959010][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 166.968421][ T8805] netlink: 264 bytes leftover after parsing attributes in process `syz.3.759'. [ 166.987174][ T8805] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 167.009398][ T8805] netlink: 264 bytes leftover after parsing attributes in process `syz.3.759'. [ 167.029848][ T8806] vlan0: entered promiscuous mode [ 167.264304][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 167.300291][ T8829] netlink: 'syz.4.762': attribute type 27 has an invalid length. [ 167.309598][ T8826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.766'. [ 167.327104][ T8826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.766'. [ 167.337009][ T8826] netlink: 540 bytes leftover after parsing attributes in process `syz.1.766'. [ 167.351592][ T8826] syzkaller0: entered promiscuous mode [ 167.357284][ T8826] syzkaller0: entered allmulticast mode [ 167.391636][ T8826] tipc: Enabled bearer , priority 0 [ 167.411031][ T8825] tipc: Resetting bearer [ 167.454201][ T8825] tipc: Disabling bearer [ 167.517768][ T8836] bond0: (slave syz_tun): Releasing backup interface [ 167.766263][ T8860] ip6tnl0: Caught tx_queue_len zero misconfig [ 168.027950][ T8879] 8021q: VLANs not supported on sit0 [ 168.102270][ T8879] netlink: 'syz.3.780': attribute type 10 has an invalid length. [ 168.486105][ T29] audit: type=1800 audit(1771596325.745:6): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.775" name="cgroup.controllers" dev="tmpfs" ino=830 res=0 errno=0 [ 168.948471][ T8926] veth1_macvtap: left promiscuous mode [ 169.080711][ T8926] veth1_macvtap: entered promiscuous mode [ 169.693037][ T8962] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 170.015433][ T8997] netlink: 'syz.3.795': attribute type 21 has an invalid length. [ 170.229590][ T29] audit: type=1800 audit(1771596327.495:7): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.797" name="memory.events" dev="tmpfs" ino=852 res=0 errno=0 [ 170.276243][ T8975] bond2: entered promiscuous mode [ 170.292865][ T8975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.335436][ T8975] bond2 (unregistering): Released all slaves [ 170.371803][ T8978] netlink: 'syz.2.796': attribute type 33 has an invalid length. [ 170.394758][ T8997] netlink: 'syz.3.795': attribute type 4 has an invalid length. [ 170.426555][ T8999] bridge_slave_0: entered promiscuous mode [ 170.492574][ T9008] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 170.517557][ T9008] NCSI netlink: No device for ifindex 0 [ 170.529744][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.538830][ T9003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.559725][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.476962][ T9067] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 171.500620][ T9067] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 171.528410][ T9067] tipc: Resetting bearer [ 171.556045][ T9073] __nla_validate_parse: 13 callbacks suppressed [ 171.556066][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 171.616338][ T9078] netlink: 'syz.0.815': attribute type 13 has an invalid length. [ 171.910508][ T9091] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 172.129009][ T9091] bond2: entered promiscuous mode [ 172.134121][ T9091] bond2: entered allmulticast mode [ 172.182601][ T9091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.253004][ T9094] erspan2: entered allmulticast mode [ 172.268363][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 172.292622][ T9094] bond2: (slave erspan2): making interface the new active one [ 172.303282][ T9094] erspan2: entered promiscuous mode [ 172.315562][ T9094] bond2: (slave erspan2): Enslaving as an active interface with an up link [ 172.503221][ T9120] netlink: 'syz.0.824': attribute type 31 has an invalid length. [ 173.313162][ T9167] netlink: 'syz.1.836': attribute type 89 has an invalid length. [ 173.385719][ T9173] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 173.421404][ T9173] netlink: 244 bytes leftover after parsing attributes in process `syz.3.837'. [ 173.574564][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 173.611434][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 173.699535][ T9180] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 173.720145][ T9184] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 173.797804][ T9185] delete_channel: no stack [ 173.845063][ T9194] netlink: 'syz.3.841': attribute type 21 has an invalid length. [ 173.858119][ T9194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.841'. [ 173.996943][ T9194] openvswitch: netlink: IP tunnel dst address not specified [ 174.280905][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 174.358483][ T9218] syzkaller0: entered promiscuous mode [ 174.427735][ T9218] syzkaller0: entered allmulticast mode [ 174.647554][ T9226] delete_channel: no stack [ 174.692730][ T9226] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 174.719504][ T9226] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.848'. [ 174.811261][ T9233] ip6gretap1: entered allmulticast mode [ 174.836796][ T9223] tipc: Started in network mode [ 174.841838][ T9223] tipc: Node identity 8ab4f3c3d17f, cluster identity 4711 [ 174.878150][ T9223] tipc: Enabled bearer , priority 0 [ 174.903544][ T9241] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 174.930111][ T9239] tunl0: Caught tx_queue_len zero misconfig [ 174.941722][ T9241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.853'. [ 174.961564][ T9244] netlink: zone id is out of range [ 174.978363][ T9244] netlink: get zone limit has 4 unknown bytes [ 175.105516][ T9245] netlink: 'syz.3.854': attribute type 2 has an invalid length. [ 175.136371][ T9252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.187391][ T9245] : entered promiscuous mode [ 175.224194][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 175.268710][ T9255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.345466][ T9223] tipc: Disabling bearer [ 176.227655][ T9307] geneve3: entered promiscuous mode [ 176.253341][ T140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.271044][ T140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.290483][ T140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.338080][ T140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.638845][ T9333] batadv0: entered promiscuous mode [ 176.644473][ T9333] vlan3: entered promiscuous mode [ 177.002028][ T9354] __nla_validate_parse: 7 callbacks suppressed [ 177.002049][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 177.122393][ T9359] netlink: 92 bytes leftover after parsing attributes in process `syz.0.883'. [ 177.438127][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.889'. [ 178.055270][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 178.546749][ T9435] netlink: 'syz.1.897': attribute type 1 has an invalid length. [ 178.585220][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 179.212540][ T9448] bridge3: entered promiscuous mode [ 179.220670][ T9448] bridge3: entered allmulticast mode [ 179.223966][ T9451] netlink: 'syz.4.904': attribute type 6 has an invalid length. [ 179.232238][ T9448] team0: Port device bridge3 added [ 179.246010][ T9451] netlink: 'syz.4.904': attribute type 7 has an invalid length. [ 179.254950][ T9451] netlink: 'syz.4.904': attribute type 8 has an invalid length. [ 179.364053][ T9456] netlink: 276 bytes leftover after parsing attributes in process `syz.4.905'. [ 179.509806][ T9462] netlink: 'syz.4.907': attribute type 1 has an invalid length. [ 179.581400][ T9462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.627212][ T9465] bond3: (slave geneve4): making interface the new active one [ 179.639874][ T9465] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 179.794878][ T9475] netlink: 5 bytes leftover after parsing attributes in process `syz.4.910'. [ 179.806709][ T9475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.269038][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 180.382222][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 180.724513][ T9532] netlink: 68 bytes leftover after parsing attributes in process `syz.1.926'. [ 181.110660][ T9550] bond2: option mode: invalid value (254) [ 181.118998][ T9550] bond2 (unregistering): Released all slaves [ 181.356807][ T9567] xt_hashlimit: max too large, truncated to 1048576 [ 181.698505][ T9581] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 181.736336][ T9581] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 181.748644][ T9581] tipc: Resetting bearer [ 181.771139][ T29] audit: type=1804 audit(1771596339.025:8): pid=9586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.939" name="/newroot/189/memory.events" dev="tmpfs" ino=983 res=1 errno=0 [ 181.849500][ T29] audit: type=1800 audit(1771596339.025:9): pid=9586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.939" name="memory.events" dev="tmpfs" ino=983 res=0 errno=0 [ 182.033533][ T9609] __nla_validate_parse: 3 callbacks suppressed [ 182.033552][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 182.081430][ T9608] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 182.430654][ T9626] netlink: 'syz.4.948': attribute type 1 has an invalid length. [ 182.580166][ T9638] netlink: 104 bytes leftover after parsing attributes in process `syz.4.949'. [ 182.599994][ T9638] veth0: entered promiscuous mode [ 182.740568][ T9636] veth0: left promiscuous mode [ 182.761785][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.951'. [ 182.794274][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 182.803984][ T9646] netlink: 'syz.0.952': attribute type 1 has an invalid length. [ 183.151199][ T9666] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.718749][ T9666] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.794124][ T1163] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.799123][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 183.804571][ T1163] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.432694][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 184.458035][ T9720] hsr_slave_0: left promiscuous mode [ 184.465681][ T9720] hsr_slave_1: left promiscuous mode [ 185.025411][ T9747] netlink: 'syz.0.973': attribute type 10 has an invalid length. [ 185.054190][ T9747] netlink: 228 bytes leftover after parsing attributes in process `syz.0.973'. [ 185.144423][ T9754] sctp: [Deprecated]: syz.1.974 (pid 9754) Use of int in maxseg socket option. [ 185.144423][ T9754] Use struct sctp_assoc_value instead [ 185.337402][ T9765] pim6reg1: entered promiscuous mode [ 185.343189][ T9765] pim6reg1: entered allmulticast mode [ 185.374417][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 185.603482][ T9778] IPVS: length: 181 != 8 [ 185.679129][ T9779] syzkaller0: entered promiscuous mode [ 185.684673][ T9779] syzkaller0: entered allmulticast mode [ 186.192249][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 186.194133][ T9801] xt_hashlimit: size too large, truncated to 1048576 [ 186.217703][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 186.405778][ T9807] Bluetooth: MGMT ver 1.23 [ 186.594817][ T9821] Bluetooth: MGMT ver 1.23 [ 186.776929][ T9803] infiniband syz1: set down [ 186.796337][ T9803] infiniband syz1: added ipvlan0 [ 186.976454][ T9803] RDS/IB: syz1: added [ 186.984701][ T9803] smc: adding ib device syz1 with port count 1 [ 186.991483][ T9803] smc: ib device syz1 port 1 has no pnetid [ 187.250175][ T9847] __nla_validate_parse: 2 callbacks suppressed [ 187.250196][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1001'. [ 187.278111][ T9847] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1001'. [ 187.307730][ T9852] 8021q: VLANs not supported on vxcan0 [ 187.329400][ T9847] ip6gre0: left promiscuous mode [ 187.340737][ T9847] bridge_slave_0: left promiscuous mode [ 187.378861][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 187.418688][ T9847] tipc: Resetting bearer [ 187.461665][ T9847] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 187.470668][ T9847] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 187.512967][ T9847] ip6gretap1: left allmulticast mode [ 187.524827][ T9859] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 187.718999][ T9863] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 187.726582][ T9863] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 187.745390][ T9863] tipc: Resetting bearer [ 187.778457][ T9863] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1004'. [ 187.797717][ T9863] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1004'. [ 188.649991][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 188.959606][ T9902] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 188.975552][ T9902] : renamed from bond_slave_0 [ 189.238299][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1017'. [ 189.369870][ T9911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1019'. [ 189.466823][ T9915] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1021'. [ 189.472147][ T9913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1020'. [ 190.282030][ T9931] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 190.983419][ T9965] syzkaller0: entered promiscuous mode [ 190.998388][ T9965] syzkaller0: entered allmulticast mode [ 191.134337][ T9983] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 191.631141][T10001] netlink: 'syz.0.1042': attribute type 4 has an invalid length. [ 191.688485][T10001] netlink: 'syz.0.1042': attribute type 4 has an invalid length. [ 192.514066][T10037] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 192.531267][T10037] __nla_validate_parse: 9 callbacks suppressed [ 192.531287][T10037] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1049'. [ 192.574401][T10034] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1048'. [ 192.584427][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 192.623232][T10034] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1048'. [ 192.638275][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 192.750550][T10047] netlink: 'syz.2.1048': attribute type 2 has an invalid length. [ 192.809665][T10052] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1048'. [ 192.831930][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 193.405956][T10076] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 193.679422][T10084] bond2: entered promiscuous mode [ 193.734895][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 193.755665][T10091] bridge0: left allmulticast mode [ 194.045066][T10105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1071'. [ 194.454197][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1079'. [ 194.575039][T10120] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 195.027375][T10153] bridge1: port 1(ip6gretap2) entered blocking state [ 195.046482][T10153] bridge1: port 1(ip6gretap2) entered disabled state [ 195.055510][T10153] ip6gretap2: entered allmulticast mode [ 195.063853][T10153] ip6gretap2: entered promiscuous mode [ 195.479784][T10183] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 195.726874][T10196] syzkaller0: entered promiscuous mode [ 195.738318][T10196] syzkaller0: entered allmulticast mode [ 195.746135][T10196] TC_ACT_REPEAT abuse ? [ 196.143583][T10226] x_tables: duplicate underflow at hook 3 [ 196.521623][T10234] netlink: 'syz.2.1109': attribute type 12 has an invalid length. [ 196.753463][T10247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.767625][T10247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.061596][T10259] ipvlan2: entered allmulticast mode [ 197.109482][T10259] veth0_vlan: entered allmulticast mode [ 197.159962][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.183582][T10258] netlink: 'syz.0.1116': attribute type 1 has an invalid length. [ 197.219977][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.237813][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.285331][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.723488][T10288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.019983][T10298] vlan4: entered promiscuous mode [ 198.043579][T10298] geneve1: entered promiscuous mode [ 198.093543][T10298] vlan4: entered allmulticast mode [ 198.109021][T10298] geneve1: entered allmulticast mode [ 198.781296][ T29] audit: type=1800 audit(1771596356.045:10): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1126" name="memory.events" dev="tmpfs" ino=1153 res=0 errno=0 [ 199.681750][T10377] __nla_validate_parse: 15 callbacks suppressed [ 199.681764][T10377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 199.707504][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 199.717314][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 199.726597][T10377] netlink: 'syz.3.1135': attribute type 14 has an invalid length. [ 201.232783][T10317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.432605][T10389] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 201.464563][T10394] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 201.625845][T10389] bond1: entered promiscuous mode [ 201.631753][T10389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.688542][T10394] bond3: entered promiscuous mode [ 201.699541][T10394] bond3: entered allmulticast mode [ 201.705914][T10394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.852491][T10413] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1144'. [ 201.870973][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 201.953148][T10418] tipc: Can't bind to reserved service type 1 [ 201.978338][T10418] netlink: 'syz.4.1146': attribute type 39 has an invalid length. [ 202.008461][T10422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1146'. [ 202.032097][T10422] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1146'. [ 202.050312][T10422] netlink: 'syz.4.1146': attribute type 5 has an invalid length. [ 202.074171][T10422] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1146'. [ 202.681979][T10425] bridge0: entered allmulticast mode [ 202.793500][T10437] sctp: [Deprecated]: syz.0.1148 (pid 10437) Use of int in max_burst socket option. [ 202.793500][T10437] Use struct sctp_assoc_value instead [ 202.858797][T10438] Only authenc() type AEADs are supported by ESSIV [ 203.148145][T10448] netlink: 'syz.0.1150': attribute type 9 has an invalid length. [ 203.157058][T10448] netlink: 'syz.0.1150': attribute type 6 has an invalid length. [ 203.209179][T10448] netlink: 'syz.0.1150': attribute type 7 has an invalid length. [ 203.216978][T10448] netlink: 'syz.0.1150': attribute type 8 has an invalid length. [ 203.403792][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 203.497257][T10470] tipc: Enabled bearer , priority 10 [ 203.824125][T10489] block nbd0: not configured, cannot reconfigure [ 203.905815][T10493] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 203.924789][T10493] syzkaller1: linktype set to 270 [ 203.957998][T10497] tipc: Trying to set illegal importance in message [ 204.003382][T10503] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1167'. [ 204.218744][T10510] FAULT_INJECTION: forcing a failure. [ 204.218744][T10510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.242917][T10512] x_tables: duplicate entry at hook 3 [ 204.253667][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.2.1169 Not tainted syzkaller #0 PREEMPT(full) [ 204.253694][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.253704][T10510] Call Trace: [ 204.253711][T10510] [ 204.253720][T10510] dump_stack_lvl+0xe8/0x150 [ 204.253747][T10510] should_fail_ex+0x412/0x560 [ 204.253769][T10510] _copy_from_user+0x2d/0xb0 [ 204.253790][T10510] ___sys_recvmsg+0x175/0x590 [ 204.253818][T10510] ? __pfx____sys_recvmsg+0x10/0x10 [ 204.253858][T10510] ? __fget_files+0x3a0/0x420 [ 204.253887][T10510] do_recvmmsg+0x334/0x800 [ 204.253915][T10510] ? __pfx_do_recvmmsg+0x10/0x10 [ 204.253946][T10510] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.253984][T10510] __x64_sys_recvmmsg+0x198/0x250 [ 204.254008][T10510] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 204.254039][T10510] do_syscall_64+0x14d/0xf80 [ 204.254059][T10510] ? trace_irq_disable+0x3b/0x150 [ 204.254080][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.254094][T10510] ? clear_bhb_loop+0x40/0x90 [ 204.254112][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.254126][T10510] RIP: 0033:0x7f97c9f9c629 [ 204.254141][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.254153][T10510] RSP: 002b:00007f97c81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 204.254170][T10510] RAX: ffffffffffffffda RBX: 00007f97ca215fa0 RCX: 00007f97c9f9c629 [ 204.254180][T10510] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000003 [ 204.254189][T10510] RBP: 00007f97c81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.254198][T10510] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 204.254215][T10510] R13: 00007f97ca216038 R14: 00007f97ca215fa0 R15: 00007ffdf955ebc8 [ 204.254240][T10510] [ 204.773677][T10495] batadv_slave_0: entered promiscuous mode [ 204.785140][T10494] batadv_slave_0: left promiscuous mode [ 204.916006][T10537] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1178'. [ 204.966135][T10537] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1178'. [ 205.202205][T10562] FAULT_INJECTION: forcing a failure. [ 205.202205][T10562] name failslab, interval 1, probability 0, space 0, times 1 [ 205.215029][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.2.1184 Not tainted syzkaller #0 PREEMPT(full) [ 205.215054][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.215064][T10562] Call Trace: [ 205.215071][T10562] [ 205.215079][T10562] dump_stack_lvl+0xe8/0x150 [ 205.215102][T10562] should_fail_ex+0x412/0x560 [ 205.215118][T10562] should_failslab+0xa8/0x100 [ 205.215132][T10562] __kmalloc_noprof+0xe8/0x760 [ 205.215144][T10562] ? iovec_from_user+0x87/0x250 [ 205.215157][T10562] ? __lock_acquire+0x6b5/0x2cf0 [ 205.215173][T10562] iovec_from_user+0x87/0x250 [ 205.215193][T10562] __import_iovec+0x163/0x7e0 [ 205.215213][T10562] import_iovec+0x73/0xa0 [ 205.215230][T10562] ___sys_recvmsg+0x4bd/0x590 [ 205.215251][T10562] ? __pfx____sys_recvmsg+0x10/0x10 [ 205.215280][T10562] ? __fget_files+0x3a0/0x420 [ 205.215301][T10562] do_recvmmsg+0x334/0x800 [ 205.215321][T10562] ? __pfx_do_recvmmsg+0x10/0x10 [ 205.215344][T10562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 205.215370][T10562] __x64_sys_recvmmsg+0x198/0x250 [ 205.215388][T10562] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 205.215410][T10562] do_syscall_64+0x14d/0xf80 [ 205.215426][T10562] ? trace_irq_disable+0x3b/0x150 [ 205.215441][T10562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.215452][T10562] ? clear_bhb_loop+0x40/0x90 [ 205.215466][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.215476][T10562] RIP: 0033:0x7f97c9f9c629 [ 205.215490][T10562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.215504][T10562] RSP: 002b:00007f97c81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 205.215525][T10562] RAX: ffffffffffffffda RBX: 00007f97ca215fa0 RCX: 00007f97c9f9c629 [ 205.215538][T10562] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000003 [ 205.215549][T10562] RBP: 00007f97c81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.215560][T10562] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 205.215571][T10562] R13: 00007f97ca216038 R14: 00007f97ca215fa0 R15: 00007ffdf955ebc8 [ 205.215603][T10562] [ 206.770693][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.771892][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 206.776869][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 207.825505][T10537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.998957][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1191'. [ 208.063454][T10592] netlink: 'syz.4.1190': attribute type 15 has an invalid length. [ 208.063713][T10583] bond2: entered promiscuous mode [ 208.071575][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'. [ 208.082616][T10583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.122092][T10596] netlink: 'syz.4.1190': attribute type 2 has an invalid length. [ 208.130146][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1190'. [ 208.164471][T10593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.178724][T10593] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 208.190786][T10593] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 208.404413][T10616] netlink: 'syz.4.1197': attribute type 1 has an invalid length. [ 208.466124][T10616] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.539321][T10622] bond5: (slave veth7): Enslaving as an active interface with a down link [ 208.557709][T10624] netlink: 'syz.1.1200': attribute type 9 has an invalid length. [ 208.595915][T10616] bond5: (slave dummy0): making interface the new active one [ 208.606463][T10616] dummy0: entered promiscuous mode [ 208.613703][T10616] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 208.628231][T10624] netlink: 'syz.1.1200': attribute type 6 has an invalid length. [ 208.646765][T10624] netlink: 'syz.1.1200': attribute type 7 has an invalid length. [ 208.670434][T10624] netlink: 'syz.1.1200': attribute type 8 has an invalid length. [ 208.751249][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 208.770831][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.780194][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 208.789665][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.799160][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.812004][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.831115][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1201'. [ 208.964992][T10632] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 208.983063][T10635] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1202'. [ 209.014607][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1202'. [ 209.351438][T10652] tipc: New replicast peer: 255.255.255.255 [ 209.370431][T10652] tipc: Enabled bearer , priority 10 [ 210.033699][T10686] tipc: Enabled bearer , priority 0 [ 210.090183][T10686] syzkaller0: entered promiscuous mode [ 210.095714][T10686] syzkaller0: entered allmulticast mode [ 210.301956][T10686] tipc: Resetting bearer [ 210.335315][T10699] __nla_validate_parse: 4 callbacks suppressed [ 210.335335][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 210.382919][T10685] tipc: Resetting bearer [ 210.405983][T10699] netlink: 'syz.1.1218': attribute type 30 has an invalid length. [ 210.420852][T10685] tipc: Disabling bearer [ 210.432399][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 210.432416][T10694] xt_CT: No such helper "syz0" [ 210.777554][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 210.891383][T10719] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 210.913058][T10719] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1222'. [ 211.323588][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 211.356990][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 211.369574][T10736] netlink: 'syz.2.1225': attribute type 4 has an invalid length. [ 211.378551][T10734] netlink: 'syz.1.1228': attribute type 12 has an invalid length. [ 211.424501][T10744] netlink: 'syz.2.1225': attribute type 4 has an invalid length. [ 211.431927][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 211.432600][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.472897][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 211.529118][T10736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.562404][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.592527][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.611204][T10729] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1225'. [ 211.629352][T10745] syzkaller0: entered promiscuous mode [ 211.634938][T10745] syzkaller0: entered allmulticast mode [ 211.643376][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.681212][T10745] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 211.863070][T10750] bond3: option updelay: invalid value (18446744072924056005) [ 211.896885][T10750] bond3: option updelay: allowed values 0 - 2147483647 [ 211.946887][T10750] bond3 (unregistering): Released all slaves [ 212.109685][T10761] tipc: Disabling bearer [ 212.234505][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 212.244162][T10771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.368264][ C0] ================================================================== [ 212.376393][ C0] BUG: KASAN: slab-use-after-free in ipvlan_hard_header+0xa2/0x120 [ 212.384683][ C0] Read of size 8 at addr ffff888056ad6010 by task dhcpcd-run-hook/10782 [ 212.393212][ C0] [ 212.395624][ C0] CPU: 0 UID: 0 PID: 10782 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 212.395653][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.395664][ C0] Call Trace: [ 212.395673][ C0] [ 212.395680][ C0] dump_stack_lvl+0xe8/0x150 [ 212.395712][ C0] print_report+0xba/0x230 [ 212.395734][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 212.395755][ C0] kasan_report+0x117/0x150 [ 212.395778][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 212.395802][ C0] ipvlan_hard_header+0xa2/0x120 [ 212.395824][ C0] ? __pfx_ipvlan_hard_header+0x10/0x10 [ 212.395843][ C0] tipc_l2_send_msg+0x31f/0x400 [ 212.395870][ C0] tipc_bearer_xmit_skb+0x2b3/0x400 [ 212.395907][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 212.395928][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 212.395952][ C0] ? tipc_disc_timeout+0x576/0x6f0 [ 212.395977][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 212.396003][ C0] tipc_disc_timeout+0x595/0x6f0 [ 212.396027][ C0] ? __mod_timer+0xb37/0xf30 [ 212.396048][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 212.396079][ C0] call_timer_fn+0x192/0x640 [ 212.396102][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 212.396125][ C0] ? call_timer_fn+0xd4/0x640 [ 212.396146][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 212.396183][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 212.396208][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 212.396232][ C0] __run_timer_base+0x652/0x8b0 [ 212.396253][ C0] ? ktime_get+0x45/0x200 [ 212.396275][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 212.396299][ C0] ? sched_clock_cpu+0x74/0x440 [ 212.396326][ C0] run_timer_softirq+0xb7/0x170 [ 212.396348][ C0] handle_softirqs+0x22a/0x870 [ 212.396371][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 212.396394][ C0] __irq_exit_rcu+0x5f/0x150 [ 212.396413][ C0] irq_exit_rcu+0x9/0x30 [ 212.396432][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 212.396456][ C0] [ 212.396463][ C0] [ 212.396470][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.396487][ C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 212.396509][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 24 e3 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 cf de 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 b3 de [ 212.396524][ C0] RSP: 0018:ffffc900025a72a0 EFLAGS: 00000293 [ 212.396543][ C0] RAX: ffffffff81b9addd RBX: 1ffff110170e812d RCX: ffff88801ef9dac0 [ 212.396557][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 212.396568][ C0] RBP: ffffc900025a73e0 R08: ffffffff901172b7 R09: 1ffffffff2022e56 [ 212.396578][ C0] R10: dffffc0000000000 R11: fffffbfff2022e57 R12: ffff8880b8740968 [ 212.396591][ C0] R13: dffffc0000000000 R14: ffff8880b863bf80 R15: 0000000000000001 [ 212.396607][ C0] ? smp_call_function_many_cond+0xcfd/0x12c0 [ 212.396634][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 212.396659][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 212.396679][ C0] ? rcu_is_watching+0x15/0xb0 [ 212.396705][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 212.396724][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 212.396744][ C0] flush_tlb_mm_range+0x5c3/0x10c0 [ 212.396771][ C0] tlb_flush_mmu+0x1af/0xa30 [ 212.396795][ C0] tlb_finish_mmu+0xf9/0x230 [ 212.396814][ C0] free_ldt_pgtables+0x19d/0x350 [ 212.396843][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 212.396877][ C0] ? down_read+0x272/0x2e0 [ 212.396894][ C0] ? exit_mmap+0x183/0xa10 [ 212.396921][ C0] exit_mmap+0x1af/0xa10 [ 212.396945][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 212.396977][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 212.397008][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.397027][ C0] ? __pfx_exit_aio+0x10/0x10 [ 212.397054][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 212.397079][ C0] ? uprobe_clear_state+0x27c/0x290 [ 212.397102][ C0] __mmput+0x118/0x430 [ 212.397127][ C0] exec_mmap+0x3b4/0x440 [ 212.397156][ C0] begin_new_exec+0x134a/0x24a0 [ 212.397198][ C0] ? load_elf_phdrs+0x1ac/0x240 [ 212.397220][ C0] ? __pfx_begin_new_exec+0x10/0x10 [ 212.397249][ C0] load_elf_binary+0xa47/0x2980 [ 212.397284][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 212.397312][ C0] bprm_execve+0x93d/0x1460 [ 212.397337][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 212.397354][ C0] ? count+0x1e0/0x230 [ 212.397373][ C0] do_execveat_common+0x50d/0x690 [ 212.397396][ C0] __x64_sys_execve+0x97/0xc0 [ 212.397415][ C0] do_syscall_64+0x14d/0xf80 [ 212.397441][ C0] ? trace_irq_disable+0x3b/0x150 [ 212.397466][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.397484][ C0] ? clear_bhb_loop+0x40/0x90 [ 212.397505][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.397523][ C0] RIP: 0033:0x7f42b9af6107 [ 212.397548][ C0] Code: Unable to access opcode bytes at 0x7f42b9af60dd. [ 212.397558][ C0] RSP: 002b:00007ffca2f1dd18 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 212.397576][ C0] RAX: ffffffffffffffda RBX: 0000559cd80f3030 RCX: 00007f42b9af6107 [ 212.397588][ C0] RDX: 0000559cd80f3050 RSI: 0000559cd80f3030 RDI: 0000559cd80f30d8 [ 212.397600][ C0] RBP: 0000559cd80f30d8 R08: 00007ffca2f1feb6 R09: 0000000000000000 [ 212.397612][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000559cd80f3050 [ 212.397623][ C0] R13: 00007f42b9cbbe8b R14: 0000559cd80f3050 R15: 0000000000000000 [ 212.397642][ C0] [ 212.397649][ C0] [ 212.925900][ C0] Allocated by task 5824: [ 212.930323][ C0] kasan_save_track+0x3e/0x80 [ 212.935185][ C0] __kasan_kmalloc+0x93/0xb0 [ 212.939877][ C0] __kvmalloc_node_noprof+0x528/0x8a0 [ 212.945337][ C0] alloc_netdev_mqs+0xa6/0x11b0 [ 212.950362][ C0] rtnl_create_link+0x31f/0xd70 [ 212.955304][ C0] rtnl_newlink_create+0x277/0xb70 [ 212.960605][ C0] rtnl_newlink+0x1666/0x1be0 [ 212.965373][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 212.970662][ C0] netlink_rcv_skb+0x232/0x4b0 [ 212.975431][ C0] netlink_unicast+0x80f/0x9b0 [ 212.980194][ C0] netlink_sendmsg+0x813/0xb40 [ 212.985313][ C0] __sys_sendto+0x709/0x7a0 [ 212.989904][ C0] __x64_sys_sendto+0xde/0x100 [ 212.994759][ C0] do_syscall_64+0x14d/0xf80 [ 212.999438][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.005427][ C0] [ 213.007760][ C0] Freed by task 10761: [ 213.011831][ C0] kasan_save_track+0x3e/0x80 [ 213.016571][ C0] kasan_save_free_info+0x46/0x50 [ 213.021598][ C0] __kasan_slab_free+0x5c/0x80 [ 213.026446][ C0] kfree+0x1c1/0x630 [ 213.030347][ C0] device_release+0x9e/0x1d0 [ 213.034938][ C0] kobject_put+0x228/0x560 [ 213.039354][ C0] netdev_run_todo+0xc75/0xde0 [ 213.044211][ C0] rtnl_dellink+0x6a7/0x820 [ 213.048805][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 213.053826][ C0] netlink_rcv_skb+0x232/0x4b0 [ 213.058586][ C0] netlink_unicast+0x80f/0x9b0 [ 213.063349][ C0] netlink_sendmsg+0x813/0xb40 [ 213.068112][ C0] ____sys_sendmsg+0xa68/0xad0 [ 213.072884][ C0] ___sys_sendmsg+0x2a5/0x360 [ 213.077655][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 213.082777][ C0] do_syscall_64+0x14d/0xf80 [ 213.087376][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.093273][ C0] [ 213.095599][ C0] The buggy address belongs to the object at ffff888056ad6000 [ 213.095599][ C0] which belongs to the cache kmalloc-cg-4k of size 4096 [ 213.109940][ C0] The buggy address is located 16 bytes inside of [ 213.109940][ C0] freed 4096-byte region [ffff888056ad6000, ffff888056ad7000) [ 213.124006][ C0] [ 213.126337][ C0] The buggy address belongs to the physical page: [ 213.132918][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56ad0 [ 213.141946][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 213.150619][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 213.158163][ C0] page_type: f5(slab) [ 213.162148][ C0] raw: 00fff00000000040 ffff88813fe00500 dead000000000122 0000000000000000 [ 213.170735][ C0] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 213.179505][ C0] head: 00fff00000000040 ffff88813fe00500 dead000000000122 0000000000000000 [ 213.188617][ C0] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 213.197547][ C0] head: 00fff00000000003 ffffea00015ab401 00000000ffffffff 00000000ffffffff [ 213.206397][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 213.215447][ C0] page dumped because: kasan: bad access detected [ 213.221944][ C0] page_owner tracks the page as allocated [ 213.227651][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5824, tgid 5824 (syz-executor), ts 87302067245, free_ts 25805370138 [ 213.251265][ C0] post_alloc_hook+0x231/0x280 [ 213.256208][ C0] get_page_from_freelist+0x24dc/0x2580 [ 213.261766][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 213.267580][ C0] allocate_slab+0x77/0x660 [ 213.272084][ C0] refill_objects+0x331/0x3c0 [ 213.277204][ C0] __pcs_replace_empty_main+0x2b9/0x620 [ 213.282933][ C0] __kvmalloc_node_noprof+0x657/0x8a0 [ 213.288656][ C0] alloc_netdev_mqs+0xa6/0x11b0 [ 213.293688][ C0] rtnl_create_link+0x31f/0xd70 [ 213.298621][ C0] rtnl_newlink_create+0x277/0xb70 [ 213.303735][ C0] rtnl_newlink+0x1666/0x1be0 [ 213.308414][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 213.313458][ C0] netlink_rcv_skb+0x232/0x4b0 [ 213.318237][ C0] netlink_unicast+0x80f/0x9b0 [ 213.323067][ C0] netlink_sendmsg+0x813/0xb40 [ 213.327834][ C0] __sys_sendto+0x709/0x7a0 [ 213.332340][ C0] page last free pid 1 tgid 1 stack trace: [ 213.338140][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 213.343788][ C0] free_contig_range+0xbb/0x170 [ 213.348663][ C0] destroy_args+0x4e5/0x570 [ 213.353194][ C0] debug_vm_pgtable+0x3f8/0x410 [ 213.358161][ C0] do_one_initcall+0x250/0x8d0 [ 213.362973][ C0] do_initcall_level+0x104/0x190 [ 213.367924][ C0] do_initcalls+0x59/0xa0 [ 213.372348][ C0] kernel_init_freeable+0x2a6/0x3e0 [ 213.377821][ C0] kernel_init+0x1d/0x1d0 [ 213.382246][ C0] ret_from_fork+0x51e/0xb90 [ 213.386928][ C0] ret_from_fork_asm+0x1a/0x30 [ 213.391784][ C0] [ 213.394103][ C0] Memory state around the buggy address: [ 213.400438][ C0] ffff888056ad5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.408719][ C0] ffff888056ad5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.417027][ C0] >ffff888056ad6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.425452][ C0] ^ [ 213.430056][ C0] ffff888056ad6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.438118][ C0] ffff888056ad6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.446207][ C0] ================================================================== [ 213.454485][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 213.461794][ C0] CPU: 0 UID: 0 PID: 10782 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 213.471718][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.482078][ C0] Call Trace: [ 213.485391][ C0] [ 213.488319][ C0] vpanic+0x56c/0xa60 [ 213.492339][ C0] ? __pfx_vpanic+0x10/0x10 [ 213.496914][ C0] ? irqentry_exit+0x59e/0x620 [ 213.501719][ C0] panic+0xc5/0xd0 [ 213.505563][ C0] ? __pfx_panic+0x10/0x10 [ 213.510095][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 213.515504][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 213.520657][ C0] check_panic_on_warn+0x89/0xb0 [ 213.525723][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 213.530880][ C0] end_report+0x73/0x180 [ 213.535427][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 213.540750][ C0] kasan_report+0x128/0x150 [ 213.545387][ C0] ? ipvlan_hard_header+0xa2/0x120 [ 213.551578][ C0] ipvlan_hard_header+0xa2/0x120 [ 213.556824][ C0] ? __pfx_ipvlan_hard_header+0x10/0x10 [ 213.562756][ C0] tipc_l2_send_msg+0x31f/0x400 [ 213.567821][ C0] tipc_bearer_xmit_skb+0x2b3/0x400 [ 213.573231][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 213.578913][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 213.584846][ C0] ? tipc_disc_timeout+0x576/0x6f0 [ 213.589999][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 213.595408][ C0] tipc_disc_timeout+0x595/0x6f0 [ 213.600737][ C0] ? __mod_timer+0xb37/0xf30 [ 213.605456][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 213.610971][ C0] call_timer_fn+0x192/0x640 [ 213.615601][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 213.621436][ C0] ? call_timer_fn+0xd4/0x640 [ 213.626300][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 213.631474][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.636892][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 213.642564][ C0] __run_timer_base+0x652/0x8b0 [ 213.647446][ C0] ? ktime_get+0x45/0x200 [ 213.651898][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 213.657411][ C0] ? sched_clock_cpu+0x74/0x440 [ 213.662834][ C0] run_timer_softirq+0xb7/0x170 [ 213.667828][ C0] handle_softirqs+0x22a/0x870 [ 213.672818][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 213.677720][ C0] __irq_exit_rcu+0x5f/0x150 [ 213.682452][ C0] irq_exit_rcu+0x9/0x30 [ 213.686920][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 213.692607][ C0] [ 213.695568][ C0] [ 213.698526][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.704542][ C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 213.711341][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 24 e3 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 cf de 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 b3 de [ 213.731502][ C0] RSP: 0018:ffffc900025a72a0 EFLAGS: 00000293 [ 213.737719][ C0] RAX: ffffffff81b9addd RBX: 1ffff110170e812d RCX: ffff88801ef9dac0 [ 213.745820][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 213.754347][ C0] RBP: ffffc900025a73e0 R08: ffffffff901172b7 R09: 1ffffffff2022e56 [ 213.762552][ C0] R10: dffffc0000000000 R11: fffffbfff2022e57 R12: ffff8880b8740968 [ 213.770830][ C0] R13: dffffc0000000000 R14: ffff8880b863bf80 R15: 0000000000000001 [ 213.779118][ C0] ? smp_call_function_many_cond+0xcfd/0x12c0 [ 213.785257][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 213.790596][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 213.797238][ C0] ? rcu_is_watching+0x15/0xb0 [ 213.802146][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 213.807464][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 213.812809][ C0] flush_tlb_mm_range+0x5c3/0x10c0 [ 213.818143][ C0] tlb_flush_mmu+0x1af/0xa30 [ 213.822945][ C0] tlb_finish_mmu+0xf9/0x230 [ 213.827569][ C0] free_ldt_pgtables+0x19d/0x350 [ 213.832650][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 213.838343][ C0] ? down_read+0x272/0x2e0 [ 213.842968][ C0] ? exit_mmap+0x183/0xa10 [ 213.847512][ C0] exit_mmap+0x1af/0xa10 [ 213.851888][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 213.856711][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 213.862403][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 213.867479][ C0] ? __pfx_exit_aio+0x10/0x10 [ 213.872381][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 213.878314][ C0] ? uprobe_clear_state+0x27c/0x290 [ 213.883546][ C0] __mmput+0x118/0x430 [ 213.887668][ C0] exec_mmap+0x3b4/0x440 [ 213.892039][ C0] begin_new_exec+0x134a/0x24a0 [ 213.897121][ C0] ? load_elf_phdrs+0x1ac/0x240 [ 213.902184][ C0] ? __pfx_begin_new_exec+0x10/0x10 [ 213.907897][ C0] load_elf_binary+0xa47/0x2980 [ 213.912881][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 213.918346][ C0] bprm_execve+0x93d/0x1460 [ 213.923157][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 213.928409][ C0] ? count+0x1e0/0x230 [ 213.932511][ C0] do_execveat_common+0x50d/0x690 [ 213.937747][ C0] __x64_sys_execve+0x97/0xc0 [ 213.942455][ C0] do_syscall_64+0x14d/0xf80 [ 213.947078][ C0] ? trace_irq_disable+0x3b/0x150 [ 213.952221][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.958407][ C0] ? clear_bhb_loop+0x40/0x90 [ 213.963217][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.969310][ C0] RIP: 0033:0x7f42b9af6107 [ 213.973849][ C0] Code: Unable to access opcode bytes at 0x7f42b9af60dd. [ 213.980976][ C0] RSP: 002b:00007ffca2f1dd18 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 213.989684][ C0] RAX: ffffffffffffffda RBX: 0000559cd80f3030 RCX: 00007f42b9af6107 [ 213.997856][ C0] RDX: 0000559cd80f3050 RSI: 0000559cd80f3030 RDI: 0000559cd80f30d8 [ 214.006032][ C0] RBP: 0000559cd80f30d8 R08: 00007ffca2f1feb6 R09: 0000000000000000 [ 214.014053][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000559cd80f3050 [ 214.022062][ C0] R13: 00007f42b9cbbe8b R14: 0000559cd80f3050 R15: 0000000000000000 [ 214.030177][ C0] [ 214.033365][ C0] Kernel Offset: disabled [ 214.037774][ C0] Rebooting in 86400 seconds..