last executing test programs: 3.053341649s ago: executing program 2 (id=6875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.51285366s ago: executing program 2 (id=6890): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @mss={0x2, 0x9}, @mss={0x2, 0x4}, @timestamp, @mss={0x2, 0xf}, @sack_perm], 0x8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="000100002000040028bd7000fbdbdf2508005b0007000000080035000a010102dd002f80c74463e66e74218d1ffa1d7689909466b087b46617b00067280efcdec8f03dd1d7c25f0100510665e2022128380c144aa3812b977e9018b1df5a240c538c0936bf99502fcd532c51fd12ea726daaf9276cba721bf77d5db0c5643f82086a950ced282a999095732414232c407919286f4a374a25cad02f50e94c76c6f1d88a7867c3d604b1add536f6262432a24fb1199d997e893fb54f8bd12d7e838eeae570439f0e2e4e0e661c68e4aadf27f95b7704ce4a26a37d5e930db29b16f90c15fa15eb89c3b6aed017f73c5ddcd976b5c715dd05ea48d217866a6150aca2781380e64d000000"], 0x100}, {0x0}], 0x2, 0x0, 0x0, 0x4040000}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffff2a, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0xd, 0x0}}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r9, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106"], 0x40}}, 0x0) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83", 0xb, 0x48880, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x4, 0x6, @local}, 0x14) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000099b192bd7d0e8f4d0616c5a64e070000009500400000000000975450494baeb47cb94d746feb461d9e71dbc1b6fa619bc9ef303c8e6e47e33270ed2f5d2fed8d4abc9a51d3ffa669629e37dd059f077538f1369ec1e2eab7125c80b4baa3d39c4c118f79b2956eb6b46be2a75954774162d695000000000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r10, 0x80811501, &(0x7f0000000700)={0x80}) 2.349460332s ago: executing program 2 (id=6894): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x187ffabe, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x8, 0x7, {{0xf, 0x4, 0x2, 0x3d, 0x3c, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x24, 0xc8, 0x0, 0x4, [0x80000001, 0x0, 0x400, 0x10, 0x6, 0x675c, 0x9efc, 0xffffffff]}, @noop]}}}}}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f00000003c0)=',5}+}\x00', 0x4000, &(0x7f0000000400)={@align=0x9, {0x3, 0x101, 0x5, 0x7}}, 0xffffffff, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a8}]}}}]}, 0x40}}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1f1441, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x3, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x3, 0xf, 0x18, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x7, 0xc7, &(0x7f0000000200)=""/199, 0x41100, 0x1, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x6, 0xe, 0x8}, 0x10, 0x13029, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[r7], 0x0, 0x10, 0x2}, 0x94) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd, 0xfff2}, {0x6}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x488c) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 2.231435806s ago: executing program 2 (id=6896): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x6, 0x4, 0x62, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8000, 0x800, 0x400}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x6, 0x3, {{0x1b, 0x4, 0x2, 0x5, 0x6c, 0x65, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x31}, {[@lsrr={0x83, 0x13, 0x22, [@remote, @local, @multicast2, @multicast2]}, @cipso={0x86, 0x42, 0x3, [{0x6, 0xe, "e8cb73358bf547744a7969b6"}, {0x7, 0x6, "317cec8b"}, {0x6, 0x8, "fce772051acc"}, {0x0, 0x2}, {0x7, 0x8, "4f1ffac1507f"}, {0x0, 0x5, "a7c287"}, {0x7, 0x11, "dcc580c0a4e0a21a351c1f98b01e75"}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnexthop={0x44, 0x6a, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r2}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x44801) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELTABLE={0x154, 0x2, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x13, 0x6, "8a3c1a9e88f2a94f42114e0b9ba9b3"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "2e2fbfd3e7a8b2f7934816898bad2b7f531d02fc953fb24afebf639b5e764e00a7ff67762066b5a44abec2c17e4409c8c443019284b4cf46578590ae7803904842d503082201e82bb6e24529e139f05b3980049aff1a90725fd611e067333ee8e570f3ab156a07ebc0cfe5cc75c86ed3c2ddea5e588f3ef368622f495dbedd8e03fce4d8329053d40c97c62ab7536340efc3fb05f5d48b406e50c43260387269d5f743f518f1652d234f0baddd94d42bd4223196c5105c780d7796f3b69f5a5ec98a0c5c8b2b1d2638751e32d5ce0e7be8116fb352132ba4b8db90d7d2"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x17c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0x20, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @jmp={0x5, 0x1, 0xa, 0x9, 0x2, 0xffffffffffffffc0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x15}}, @map_idx={0x18, 0xb}, @alu={0x4, 0xd0835390d10d03dd, 0x4, 0x2, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x1, 0x4, 0xb, 0x100, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x31a53239}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x3, 0xb0, &(0x7f0000000700)=""/176, 0x40f00, 0x65, '\x00', r5, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x6, 0x7, 0x67}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000008c0)=[r1, r1, r1, r1, r1], 0x0, 0x10, 0x101}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6_vti0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000a40)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000a80)='ns/pid_for_children\x00') setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000ac0)=0x1000, 0x4) recvmsg(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000b00)=""/84, 0x54}, {&(0x7f0000000b80)=""/239, 0xef}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/114, 0x72}, {&(0x7f0000001d00)=""/51, 0x33}], 0x5, &(0x7f0000001dc0)=""/159, 0x9f}, 0x1000) accept4$packet(r1, &(0x7f0000001ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001f00)=0x14, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x28, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3ff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r7 = socket$inet6(0xa, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)=@getlink={0x5c, 0x12, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x0, 0x30000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge_slave_0\x00'}]}, @IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000003240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003200)={&(0x7f00000021c0)=@ipmr_delroute={0x103c, 0x19, 0x4, 0x70bd27, 0x25dfdbfe, {0x80, 0x10, 0x20, 0x10, 0xfc, 0x2, 0xfd, 0x0, 0x1000}, [@RTA_TABLE={0x8, 0xf, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}, @RTA_MULTIPATH={0xc, 0x9, {0xb1, 0x8, 0xfa, r5}}]}, 0x103c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4044}, 0xc, &(0x7f0000003340)={&(0x7f00000032c0)=@gettfilter={0x54, 0x2e, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x5, 0xb}, {0xf, 0xfff1}, {0x8, 0x9}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000034c0)={&(0x7f0000003400)=@ipv6_newrule={0x98, 0x20, 0x0, 0x70bd2d, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x6, 0x81, 0x0, 0x0, 0x3, 0x17}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_SRC={0x14, 0x2, @private1}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'batadv_slave_0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x50) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000003540)) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000003640)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x30, 0x1406, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000003840)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x460a1b603bfd5fb7}, 0xc, &(0x7f0000003800)={&(0x7f0000003740)={0x94, r10, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x6c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5b1a82e865ff8a1ec1537b39c8a87db2"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6fb83e0e754123eeee46ce5bd21e729f872dc48e7b9843b0c0791f00f924a5df"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x71}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4005041}, 0x5) 1.519610903s ago: executing program 0 (id=6919): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d640500fffd000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) 1.510379191s ago: executing program 0 (id=6920): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001240)={{r0, &(0x7f0000001100)='syz1\x00', 0x420042, &(0x7f0000001140)={@_ha_fsid={[0x3, 0x80000000]}, {0x3, 0x800, 0x7, 0x1}}, 0x31, &(0x7f0000001180)={@_ha_fsid}, &(0x7f00000011c0)=0x5}, {[0x3, 0x4, 0x9, 0x76]}, 0x4, 0x3e, &(0x7f0000001200)=""/62}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000012c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x26c0, '\x00', 0x0, 0x0, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'erspan0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060086dd"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$bt_hci(r2, 0x84, 0x2, &(0x7f0000000040)=""/4137, &(0x7f0000000000)=0x2b2) 1.316083973s ago: executing program 3 (id=6923): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10) sendmsg$rds(r0, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000008610e356810423df1cb73e00a89f3acd7c27e660d90800000000000000000080fc800c000180080006000000000000", @ANYRES32=0x0, @ANYBLOB="08000280725eb86208000500", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020025bd7000fcdbdf250200000014000b00fc010000000000000000000000000000c0009fe1051c664dbcb5de4c7af1a3af2c4b01c83706e0815e97144a1b1d74636aed3aed145f87d92e05887e4ffee7e7212184aa6201b9ccd635ab980f2978fd9d7ee40020334748b5dd9e2b33fa211601796299807249ec8cfa1bcd78830f90cfc95cdabb56fc4291cd7740dbdbe0078c10d3"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x200800c5) 1.313434413s ago: executing program 2 (id=6924): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a0c829fef27fdb1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r8, 0x89e0, &(0x7f00000002c0)={0x3, 0x2}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="ac60fe54924f77fc4579452a83234500020aab587731227205fbae2c469093d5b5cf5a756d4f1d930bf5a2376aa6c2f17bb546d36e47352e8a07a84bb998ca03b181e9e648b9bebc0b745956506ed87d", @ANYRES32=r6, @ANYBLOB="0c0099000200000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xae, 0x6}, [@NDA_LLADDR={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 1.217398203s ago: executing program 2 (id=6927): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write(r0, &(0x7f00000001c0)="1d08b35daee3630aabb2fe0957f3a6be5a7aca233bc344b563df2b4dfe05beb8bb204cf013d3ee9b12e5af3e1398c57ec776851652ab63355cb4a455dad6d76a120f2c7cd17508c3a15b01f2a6b76c18d3616828f7f3fddd6283eee8d8ef80ba8750f5afe1d2e0eab9311a528f4cf646256b54b862b21409c44b2d3ff3a7cbf9f514098f921c66dead949356d8313bff49d992f783237b3ff9b741e6cfef5f9cabb2f5823adec072a9c1b4bfea6506a02ebb25e6dfbdc66e2daf8df03066956c42e9b6bcd298114ffa90a2fb3cc6eeeedef774610ea0aefdc5fe3563447770d62610239d", 0xe4) write$tun(r2, &(0x7f00000003c0)={@val={0x4}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b79a56", 0x44, 0x29, 0x0, @local, @mcast2={0xff, 0x3}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x1}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0xfffffffc}}}}}}}}, 0x7e) (async) write$tun(r2, &(0x7f00000003c0)={@val={0x4}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b79a56", 0x44, 0x29, 0x0, @local, @mcast2={0xff, 0x3}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x1}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0xfffffffc}}}}}}}}, 0x7e) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 1.140025188s ago: executing program 3 (id=6929): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_attach_bpf(r0, 0x111, 0x87, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r3) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r4, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80802000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0xd04, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008030}, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 915.41495ms ago: executing program 3 (id=6933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000014c0)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xa0, 0x2, [@TCA_MATCHALL_ACT={0x94, 0x2, [@m_vlan={0x90, 0x1, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x3a, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x147}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfa5, 0x0, 0x7, 0x8, 0x7}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x4}, {0xfffffffffffffe3c, 0x7, {0x1}}, {0xc}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c044) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000014c0)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xa0, 0x2, [@TCA_MATCHALL_ACT={0x94, 0x2, [@m_vlan={0x90, 0x1, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x3a, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x147}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfa5, 0x0, 0x7, 0x8, 0x7}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x4}, {0xfffffffffffffe3c, 0x7, {0x1}}, {0xc}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c044) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e00)={'ip_vti0\x00', r4, 0x20, 0x10, 0x8000, 0x10001, {{0x1e, 0x4, 0x2, 0x6, 0x78, 0x67, 0x0, 0x3, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x3c, 0x96, 0x1, 0xc, [{@multicast1, 0x8}, {@rand_addr=0x64010102, 0xd3}, {@remote, 0x400}, {@remote, 0x1ff}, {@multicast2, 0x9}, {@remote, 0xf1c}, {@local, 0x5}]}, @lsrr={0x83, 0x1b, 0x7, [@loopback, @multicast2, @broadcast, @loopback, @broadcast, @remote]}, @generic={0x44, 0xc, "ee32af86d3547f7cfcb9"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e00)={'ip_vti0\x00', r4, 0x20, 0x10, 0x8000, 0x10001, {{0x1e, 0x4, 0x2, 0x6, 0x78, 0x67, 0x0, 0x3, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x3c, 0x96, 0x1, 0xc, [{@multicast1, 0x8}, {@rand_addr=0x64010102, 0xd3}, {@remote, 0x400}, {@remote, 0x1ff}, {@multicast2, 0x9}, {@remote, 0xf1c}, {@local, 0x5}]}, @lsrr={0x83, 0x1b, 0x7, [@loopback, @multicast2, @broadcast, @loopback, @broadcast, @remote]}, @generic={0x44, 0xc, "ee32af86d3547f7cfcb9"}]}}}}}) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x8e, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000440)="e72ab60860782e3dcc62d192c5cadd011433f58566f0bb4bd2a7a75150b67b8172ffca0a0859fb68344959c2302642af43eb6f7213bf53ec25665f594dc777ccd126673fcd3dceb0ecf34b9ea45f7d8edc7524409bb47720f7157a902111477f2fd85d57d2d258ff08a8df8d49321674d19a51ac0396303b5f873b83c40224b22fb7827c8e2b55b3954c117eca0dcfd12ce8acc674b5fa3aac365da89bb88df1afea5ce5b8e6ab8ba285054e2c195e1d5618c1a8c80e0dc2f7b29c53f520a1eb6bc9b606a391df5e219fbda0c0db7547c1c74dd25f19d746ce2d18", 0xdb}, {&(0x7f0000000740)="372a71c2e54b671fb46c92efa9c3f4876f5cfcba0e1583b74520750bdba62804fafc2d3ef42f3e9172ecf75b66766bba8c0155b77a2a50796ac508dcf1f0de643f6fce55aa0da502742778e0f1bba829530664fa20d6617b51846cda09648f48724ae1d9ee9c015e143f0a23f6388420d4f8b3ff6f6a804c2a0feea10e5b5021245d764089d02aae13c9249bce8890b69f4a96d21a45531659e2bac481b6cccaf5b7607c22ff64ee4c009fb3d68b4a71da27", 0xb2}], 0x2}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x6, @local, 0x6}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000880)="7793599959f5f8579c4e7afa0d573f5605be62123be6aa30eb24b4ed020d7aeddda0daf6dbb5dcbdba6ebfb6dfd0811ddb5173970ef51d32ac473f02dadf426c352bf8b3d4ea5f44dee5c0e4726f07", 0x4f}, {&(0x7f0000000900)="76ebf3877b40", 0x6}, {&(0x7f0000000940)}, {&(0x7f0000000980)="406daa6b0d30d8d965a4e05de48ca1cf11bc2e0e6757e5bfec325d3d8cf9eb22c518631b6c3d168c8cf1afb8a6936bc1b348eab0a4daf5969dead122e5d160152b843e2a0db2a0f961d32e2ea2013db91ae73b37311bfbbc236a07cfe3af8af671bf34d4252d2238906cc5f0c0e6f9e671cbed1e3f0b37124960dc239f4f7f8d2b1487b1dc0e7a39a3d0ee35beb7da7266ff0d2352c13dac4eb0e06266c0e48bf7f297644e83b815fe9363339bd7e84a0685df99a5a11889cd55ae6f20d3fa15001fe44ef178860c81", 0xc9}, {&(0x7f0000000b40)="bbe5296294b571a1a2fea80a6c5f3a49991569751c939ca65e42683addcaf921fd393d8716a015d1e485a583d4bb2996cb6c7014f50c13671fd4084aa03de8850003585c7cdcc0a08cae1b44a21baa84efc4ebc36fcf5cefeadc9ea7863a04bc57633fb94fde2cb6cda467884f713c16d85bfffeb05c0bdf381437f151abff54d92bf2d520062b672e08afce3855026cbf14ee3515805da6f1bd1d50739d9458484d7493d262b01338649cf18e3b796bf2350d72c76287954893129c0c6a373e9ff1d3ec68347816f94f585c12916cef94d3f7e5955c38924326baf1abbd1b61af90cfd22d054ee78572e02e568863", 0xef}, {&(0x7f0000000c40)="a10de5d40e704f44ebae5be89b028679b5b4da81d5b018e72fe788a4fa42dd07e6c9166a41bc127d26f1ab01882c7d3818106edc83a2cf97cbd75d75b159e94f2a47d78e336e6a3d7a9dda710aa491d9c3af6bfacb75795abbb37b8c629d720311d349597c9b966763f7025d896a3acf946de04b20cf86f8d1bcda338143bf3243822685092469a28ec6cc2d56fcfb4acb07c3eb6281cb2c9cb3310d9ef5ea3df43243cb72399707e1147218b3e7f9", 0xaf}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)}], 0x8, &(0x7f0000000f00)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x11}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r4}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r8}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x82}}, @rthdr={{0x38, 0x29, 0x39, {0x67, 0x4, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00', @remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, r4}}}], 0xe0}}, {{&(0x7f0000001000)={0xa, 0x4e23, 0x7, @empty, 0x4}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000001040)="409a1e54cd7cfe5da71dc5914b40a7307b5b8633664702d527069d0e8d8e7868801031ad7f24df07a2932a778526cb90567bf00cd54b85cd58a3427512d8b19939ac14876b59814e5d7560683ce18e2464a04676ab2c25f26f1441782c0118ef336424666e8cf19c0fa801b6d2ba3840d531bdee137fbb35f11551edc54406b60351ce4f8bfcd1de7f04da28771dfc3122308e8b67a42d40c946a50061a31ee7efe1a99a582469657d10ca770c9dbf301ed2df69255c98b4b28d841fc017ddc69025382c3dcea74491e856aac02b24ac00d58c9a56fb2c", 0xd7}], 0x1, &(0x7f00000015c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dontfrag={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr={{0x98, 0x29, 0x39, {0x3c, 0x10, 0x0, 0x37, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @loopback, @empty]}}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0x3a, 0x1e, '\x00', [@generic={0x5, 0xef, "765da3d4132756115d09bbc0798f225fc562c9db7b77a13586ca4f42080f888cd87a0b3eab422d6386ab3324641673c741c74ad31e7424335740190369e03c6a64119d159c88bebbff4d05fcc753efc5026def785120c9f2c36792e4b752f828a4ff7431405a3cc9dc6eab0d092a7957bff5c3f19f65bc6294109db62ea19e5df55cc634d3ab36cd558721a8b8b8cd564548c5a63151cf855c0f68d71048102eba43f16c9f89b6b712e1eaf0eb1a039b3acc444e354b44703ca109af9f9fc5ac3840d91c018c89de077bb6f1538190702ea8a424e02c8b4447491e2236509b10a66414b4019a331383bb770719f7e5"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x140, 0x29, 0x37, {0x2, 0x25, '\x00', [@jumbo={0xc2, 0x4, 0x401}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x3, 0xf8, "7cd9517b6e217d390a759acc6eb18527f65fcea1d3cc80ab8699327694ab88815b2a01250056ba2fcae35021a3573647bc969357c2912fa2f3918c959307851a5e9f09c8029db407282566a7354b44b5f05918bb340a3323d8d287d1e7f601601b224aa2a659d7e4f655c3cc2aee86adac5f2f5771172d9d9c65909a494c10bc13be0aa6939a4bfec9f7ffa05a812eeee8dceb70884cb674149d2e141e5b4022b436901b653f58b43330dee59d94a60786bf6916d249f870f7eee0f5ae3aa030697fd8a050880b6f35491858c913ee8daf0b8dfa5c3bcb1115898d358a0fb0d742c1f843b2dfafb8e1e29e351f3d7e782278d1bc5fdd0a03"}, @generic={0x7, 0x4, "de09fba0"}, @pad1, @ra={0x5, 0x2, 0x10}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x1, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0xfffff62e}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x5, [0x4, 0x7, 0x6]}}, @generic={0x7f, 0x16, "3fa2b983ce1f3404b51ae79ef39dc34693edc2698e64"}, @enc_lim={0x4, 0x1, 0x7}]}}}], 0x3a8}}], 0x3, 0x48004) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r12, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 914.699221ms ago: executing program 0 (id=6934): syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaa0bffffffffffff0800450000780000000000019078ac1e0001ac1414aa03049078030500004700000000000000002f0000ac14140a0000000044246af3e000000100000001ac1e010100000001ac1e000100000002ac149ac20000000644240e51e0000001000000010a01010100000006ffffffff000001ffe0000002fffffffe"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001a000100000000000000000080"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000bc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x581}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008021}, 0x0) sendmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="1973cfc833614c91521ef87fe7cb3031f37f09cca99bb66db48f5dd1fe24f5a2680c2ea3db8857d488919aa648f32bca9e7ab6bbb426fa6d6f88e04999afd2b9a7871d9946ac301a1544cd628a1473c907d73a1d5e94566724cc6205bdfd07a7780a339ec97f00fca2ef033e95befd0b6d45538ec31af62286c973f9f5717ea5737a3af2d5eba893d00dd28fcde438a8835c96bae04b01b6ba0e7a0c535c4845a1adc4976d7c005b2bc75d4f72349bbf924caa4d0e77aba1b4b8c92ff321f5357c4b80a27552670a76962e9216fb97d2d2cf8afa10e28edf2ab55b732f29152a94ec7f7a73399f7344766dadf6338c1bd68ed77f2c097a0f", 0xf8}, {&(0x7f0000000280)="14efed44c8a479dd74f124fcd853b54e9a1a053987c9a8739f972a9b6db8e985c40055983f7beea297a74d1555ab8c60f60c893ebecedc3c61c305cf9230a15a9e08db84a0ddd1f092e0520f664d0d9675c91ff07ef88848b027415cf959e415f7f906f397de42896808a5f9f397199b42bc286f015c9fe536cc7efc326dfc6330b45c4b4860e569d31300d53ce09b2a33f02521bb95cc21dc1e8c4bb962bd1b831f211ed03bb8d03f787ea3be1dc309818db7d9180367e6ee581034a3a963989165300f821ea6c158fe8ea74a266e01ce2a479e", 0xd4}, {&(0x7f0000000380)="57924f5a3e0d610036102375e028f8872cfe54de6184f3f270a227b9178ed036031a678281d8ebb7de13653498d1bca3de4d7b376c2287362b883f0468aafac469190de7574a9d7fd3f11d1036f033312a0a4853eea03cd96215d4", 0x5b}, {&(0x7f0000000400)="9c5baa4fefb7b6780cbbe8466c3bdad3f7a12acf6712fe7bcd8af733d4663d72b5265ceeb4f31dc86c9d6e3ba64c180af1c8517b1173d3af185264fcc22a37e716e80f3204be13ae82f4ea9966b2cbd70e8a43c0be235385c408a3ac23e026eac317a01dfa0e6e45c4c0e4c4e2c2dfc843b26667894ea761fd2f1fa69792ea26a876d62fd3cfe6c78b7fc9c6", 0x8c}, {&(0x7f00000004c0)="52233605af6d590cd792ada22d50633b7cc772358473f5b02d149a68f63fa9ed124c934d2d7df7ee0e1b348f03f45b1d63858f420c4a56951c926dffc4fe6fffb93c95cd709768ddaca04907514801f32b1d67f1edc527d921da51651eaa35", 0x5f}, {&(0x7f0000000540)="7a67de6b74f2cde1cc11e9ecb5e309bfbe2c3becd7331956984c923eea3661791cd51d888e2afbef7968de7af857b162cf2156d9e222e06aa29fe620192ee2ec929b4d12b1cc717ebb378940e0d4e1b26567e9a6ace18b999d1765525b69b2d6b97fb6801a13be3ae3ebf723a57199b44aeb06c58db583271fa6ab87a78104bbb4aa816f0974bb525b36aee4d240d7518b638ea8e6480145122619ac8a2ac96831deded4cdc27de026c186efee96bbf2096dd12e6a8c7ad3f6dd578a9bac9c6230454985493291c83ecd581c606582df6d706cbac9b050cc36b7ae24132c591c56ceba8bed15b3df9cef8c7cd888022023832681cc", 0xf5}, {&(0x7f0000000640)="39db6d82588312d2dec0f07b6c72ff90", 0x10}, {&(0x7f0000000680)="664807933f4c0cb639a98253ce17dc355fccdddb90ecbd801a4d5b260bc73a744b567906977c373d9f0a6716b3cd8ccd1213c91354401c9d8d4604a917962adfeb89c328a655aba8356afb69f052ac549a76d00713dd6faf3d954d1e64fcb2eb711ee7060e80086f6e3692207923295733fe78683bde1a5318c409830e1f527b12c41a362a18a25e748cd2e159c196", 0x8f}, {&(0x7f0000000740)="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", 0xfc}], 0x9, &(0x7f0000000900)=[{0x110, 0x84, 0x8, "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"}, {0x70, 0x101, 0x2a9, "746d9c1f0babeea34ae4e54e8ed6f26d07b6c9426f026b2ab05681802bb4a4c803a09d1a8fd01fd952b5f6e2461290590a855553c32e1236c2a434eec2f0e05ac6bdf94a1cad08a3e96555e45f8f731e3b0dd6f97563b61ad08f496c"}], 0x180}, 0x45) 830.379706ms ago: executing program 0 (id=6935): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = accept$phonet_pipe(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010001000000000000000000000a40000000060a0b040000000000000000020000001c00048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f500000a"], 0x68}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x7, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) syz_emit_ethernet(0x83, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x4d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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", 0x153}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a", 0x9b}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept$phonet_pipe(r2, &(0x7f00000001c0), &(0x7f0000000140)=0x10) (async) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010001000000000000000000000a40000000060a0b040000000000000000020000001c00048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f500000a"], 0x68}}, 0x0) (async) socket$kcm(0x2, 0x3, 0x84) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x7, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) (async) syz_emit_ethernet(0x83, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x4d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a20000", 0x153}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a", 0x9b}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async) 824.757116ms ago: executing program 4 (id=6936): r0 = socket(0x23, 0x2, 0x9) syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c20402"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) 636.05877ms ago: executing program 0 (id=6937): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x108}}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 635.244825ms ago: executing program 4 (id=6938): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0xe, 0xb, 0x8, 0x6d, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_key={0x1c, 0x8, 0x6a0, 0x0, "4e7ec29e96989dba3dfe06c1d4c14c39229f88751048d90788026d51dd1ba61d1d0c486036bab9df664c5d6ce1472c1568eda6558e4a49b46c36e717baac1642a04ef05ca595e61badd30c41948550174d48e93390c2504c6109704a96e83d37bb5b2f28f9286b4c56967fdd06c56bfab3d885a0591d9911337e60f6ecc96483282e293e5e5fa5dcabe2ab5961f4e455aaf7cf3b29dd6c10dffa07f1bb7c23e68c81017b06cba7c249f30ca977e759353f04312e5d429bef113d4abc38d6e3806eb240686de09a4277d2090155f23e6131244f42"}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_lifetime={0x4, 0x3, 0x6, 0x3e, 0x0, 0x8}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd28, 0x3501}, @sadb_x_sec_ctx={0x18, 0x18, 0x2, 0x10, 0xb8, "36c1a223393953bcb4177cf9b6f869c28fd80d93b0173f4fdd50c22521ee36860dc7fa5e068a3911505aa5d305482fa60d9df4c4bbcf19e603a1b7f8a9fd9c0cff7059cb572663977ee97bc5beb7643671ad202dc839f21275ee4bb0596ee08df1027b2c2430d533a0283b2f76457d882777567ef0631871a7e6700d331d5db8e17390b5dd2cba57991685673f13dca06337dff91bcfc440d7f40a467ebb0ee82a1445f176e08c152b7298ef3e68c0388e6db2593581ebd1"}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x7, @empty, 0xfffffff7}, @in6={0xa, 0x4e22, 0x1, @private1, 0x5}}, @sadb_x_sec_ctx={0xb, 0x18, 0x5, 0x3, 0x4a, "169ec0ba7fa6d013ba5488b11dd13b1ec6a00ad207153d49d16f3d0afa5ffc21fb8c9f0ecb57649028d39759869656d87b136a894c9d5c0a28a8f25fcb4250e15c78409124c4994893d0"}, @sadb_x_nat_t_type={0x1, 0x14, 0xf9}, @sadb_x_sec_ctx={0x1b, 0x18, 0x9, 0x6d, 0xcc, "6b49d52e9ef9cedba0ff6a208156cca2da5e82547df6816483f2d179c14bb791a19af6f6dea8d0bb6f7a899fd70f53ea235bbf287668b223864a331e7bf2b2a2b96e7506295dc3459f7d06b9a387cffe2751135bbe6607f2443b11976e74e84d4326089b0299e64a937a9d48a9d28edb08cd4360bc96f0b79427c87d420c7cbcc8d57198d2313958a8e1a543654f9b4331c7a2bc63410495164b0c6292bdffaf1c03c7dedcaa7d9ecbc9ba3c62c8ae948384cb85510023ed866a55312791b273c47a80f7c55a14cde272dd07"}]}, 0x368}}, 0x243b6678165f23b9) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={0x0, 0x913, 0x3, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={0x0, 0x913, 0x3, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r1, "cacbd62c93cc818e18f03fae8c60f39d"}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x96}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa6}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x96}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa6}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f00000019c0)={r0, 0x0, 0x7, 0x7, 0x3, 0x4, [0x8, 0xb0, 0x1, 0x401, 0x0, 0x8]}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x40, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40841}, 0x20040084) connect$tipc(0xffffffffffffffff, &(0x7f0000001c80)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x3}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000001cc0)) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r3, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) (async) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r3, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000001e00)={0xe, 0x8, 0x8, 0x40}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000001e40)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @multicast2}], 0x30) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000001e80)={'veth1_vlan\x00', 0x6}) ioctl(r6, 0x80, &(0x7f0000001ec0)="f9d3b7603321387bf28eac774838869fd954d20b557b31d09c4ec25c02695aae2ee773af23965fcee6c3520f03fd5331e6836a2540d0a1e1312f64d985d6f48ce83482750bd38b288e996bab39ee567e18") (async) ioctl(r6, 0x80, &(0x7f0000001ec0)="f9d3b7603321387bf28eac774838869fd954d20b557b31d09c4ec25c02695aae2ee773af23965fcee6c3520f03fd5331e6836a2540d0a1e1312f64d985d6f48ce83482750bd38b288e996bab39ee567e18") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x8150004}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)=@mpls_delroute={0x40, 0x19, 0x10, 0x70bd28, 0x25dfdbfe, {0x1c, 0x10, 0x10, 0x8, 0xfd, 0x1, 0xc8, 0x9, 0xc00}, [@RTA_DST={0x8, 0x1, {0xce0e}}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x1d, "bfd9ae0a3b544bfe444945b18256"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000000}, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000002040)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x6b0f31f2, 0x6, 0x95, 0x4, 0xffffffffffffffff, 0xfffffffffffffff9, 0x7, 0x200, 0x8000000000000001, 0x7, 0x8, 0xde0, 0x1, 0x7, 0x80000001]}, &(0x7f0000002140)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000002180)={r8, @in={{0x2, 0x4e20, @multicast2}}, 0x1, 0x2}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000002240)={0x0, r2}, 0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000022c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) accept4(r5, &(0x7f0000002300)=@phonet, &(0x7f0000002380)=0x80, 0x800) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000023c0), &(0x7f0000002400)=0x4) (async) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000023c0), &(0x7f0000002400)=0x4) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x3c, 0x464, 0x4, 0x70bd26, 0x25dfdbfe, "10106e8e814ff718e903152ee9bf2608dc060df0a52cb27fb8e8611be32337f4b85981778b8f0b0acdc17a08", [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000814}, 0x4004) (async) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x3c, 0x464, 0x4, 0x70bd26, 0x25dfdbfe, "10106e8e814ff718e903152ee9bf2608dc060df0a52cb27fb8e8611be32337f4b85981778b8f0b0acdc17a08", [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000814}, 0x4004) 596.301506ms ago: executing program 4 (id=6939): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x5d, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 64) close(0x3) (async, rerun: 64) close(0x4) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}], &(0x7f0000000500)='GPL\x00', 0x0, 0xf3, &(0x7f0000000640)=""/243, 0x41000, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000740)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x401, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r4, r4], &(0x7f0000000800)=[{0x3, 0x3, 0x3, 0x8}], 0x10, 0x6}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x2, 0x7f, &(0x7f0000000200)=""/127, 0x41100, 0x24, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2a6df, r6, 0x8, &(0x7f0000000980)=[r4, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x4, 0x2, 0x10, 0x7}, {0x5, 0x1, 0xf, 0x1}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x2, 0x8, 0x1}, {0x2, 0x4, 0xd, 0x8}, {0x2, 0x4, 0x1, 0xb}, {0x2, 0x2, 0x10, 0x6}, {0x2, 0x4, 0xe, 0x4}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) close(0x4) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'bridge_slave_1\x00', {0x2958}, 0x3}) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x11, &(0x7f0000000180)=0x400000001, 0x4) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0xf4, r10, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xf4}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x5}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xc8, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) (rerun: 64) 454.202788ms ago: executing program 3 (id=6940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x3a2206e0e2c5bf19, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040080}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 336.421811ms ago: executing program 4 (id=6941): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) 335.776032ms ago: executing program 1 (id=6942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'hsr0\x00', 0x400}) 328.867202ms ago: executing program 4 (id=6943): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x0) 308.107035ms ago: executing program 0 (id=6944): syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffdfffd}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x100}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 244.268951ms ago: executing program 3 (id=6945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 243.266422ms ago: executing program 4 (id=6946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009110960000df000095000000000000006ab5ee06ef6fa95a633e9736c593ddb237397ce9079b15fd3183fbb890b56006790ebb3a37537ff892d7b9564628f6554c287bd4322628d68f8b74c2a2813cca58bfd209fa0cddb9676f660079dc5f3833bf41ca49c8b50c7e2cfe93f74f7f10715302141272d6146837e516ab7b9014e7ecc95ec1ad2442171e1aefb1025edfccbeb9d7884d5a5db0bb"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x12}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4, 0xc8, r10}, [@IFA_FLAGS={0x8, 0x8, 0x408}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r13, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x5, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xfffffff2, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x77, 0x385, 0x3ff, 0x100, 0x2, 0x5, 0x4, 0x7, 0xb9, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x5, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x0, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x1, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff29, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x1, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(r6, &(0x7f0000000380), &(0x7f0000000400)=0x6e, 0x800) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) 219.729871ms ago: executing program 1 (id=6947): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x14, 0x29, 0xb, 0x14}}], 0x18}, 0x922bac8556bda5ce) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) setsockopt$inet_mreq(r0, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001000)=ANY=[@ANYRES8=r2], 0x90}, 0x1, 0x0, 0x0, 0x804}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x4) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000010c0)={r4, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)={0x2c8, 0x37, 0x1, 0x0, 0x0, "", [@nested={0x2b8, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r5}, @nested={0x2a9, 0xd5, 0x0, 0x1, [@generic="ee181f1088ad322d32af07404cc1794a8b4c0bcbe73cec8b331e46353cdbe3f8d6738acaff93e916e41ce6a0db9a0f4d8897002f9c09cebb9480dbf9438bbd7cb0ad1fe6e6dfd2f41755571a09b096fbbc39f829a840c9bacdf22b6e91", @nested={0x75, 0x36, 0x0, 0x1, [@typed={0xc, 0xd1, 0x0, 0x0, @u64=0x1}, @generic="a3c92946ca49427190b881dfd55b02a9ac14528513316a8e19f96076dc91b34d7000a195345218d5404f5ef8db1c8e380aeea0b2f021f3da3543ff0b03e8934206b2c94222603ad92034dd8da1a6cb7032ff941a7e47377a8cbc960b4b3ab26b5d", @nested={0x4, 0x131}]}, @nested={0x1d0, 0x115, 0x0, 0x1, [@nested={0x4, 0xd1}, @generic="4fc59dff288b73240b455644ec57fe36ee86c7def3b3c495f6b38bf7ff84ca5c4cb719c8fc3177a22dd858fc01d086173eda21c20955e1a4e5d2c6ff759dd19b6619f015e730828e1223eb91cbb0ca3c0f80bf59503296fe7ac4b29bae0a0ae9afaa1770225978af79b7e47fc559e7f31f3712d64e01c1f5137da9650c6902b013aba36105eb4cba34763e3a6fc6b29655824fe08c0076db653154c23287f78d49488afd87372cd82add923e0fc76193df4b34c75986874975db3e4ce730824d43fe91c9f06543cfe615bd2ddb6e2df9e2eb", @generic="c28b2b95f316dc5c6f262381317ef3fc0c424584adbb68c231821c82be0c295513255533ee17344e42d77dc5304c3ffc94f3e92f1ebb081500d6866f825f27422a3a9389027c6a695b34411c5db713d6da4a087f4205356e3984d60c4ce6e9d1ce9a54f1aa0fdb318d21a3c9f8b26250daef85a32a2d16f81f8103bd731cd32ae30709a80419012be0415e426c6ed87960bb4331a8f761a2ef57cc63fa35647cee41b49b05ea02c5fa95c3d6170e8560190154de2a61c54bac459cc060333a6135885588f00abf15680a3e54d132fdff72e756ad5948aa1a4d90a7244505c4f5b0df6ca2e5aa856a7d58f8f1c2b6", @typed={0x8, 0xe9, 0x0, 0x0, @str='GPL\x00'}]}]}]}]}, 0x2c8}], 0x1}, 0x20040040) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = accept4$inet6(r6, &(0x7f0000001100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001240)=0x1c, 0x800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001140)="c9fa00180057b6617172380c3561d1357c82645dff63503cec9a534a9ff6ab0c3bc880f50f69f5951d8b4a1264a36e8111db963c58d92580f41d68ff1a6c9214463b890bc01a5ec542ed2b9951f9e7a3eb848aa3276b937bf225a75e2834be3c51f64164215df2c280059ba4846d0658c9ccd5c31c00f59f7d71e46cd6468b380d6efc48f5fb8fd59c6c70ceb140e102fe3eca32e256d9e63fdce89081ebfb8a7fe1ff5e98825e751a1cd5372fef43cbf402dd9f85771893e5dfa697b5b2cfa6f9807565208085d1761ac4f866bb848ea0b4f2e31334", 0xfc) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) getsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000001280), &(0x7f00000012c0)=0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r10, 0x1, 0x22, &(0x7f0000001300)=0x6, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"/350, @ANYRES32=r11, @ANYRES32=0xee00, @ANYRES16, @ANYRES8=r6, @ANYRES16=r3, @ANYRES64=r1], 0x16c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 195.103849ms ago: executing program 3 (id=6948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) poll(0x0, 0x0, 0x2e90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) 134.774728ms ago: executing program 1 (id=6949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) (async) socketpair(0xa, 0x80000, 0x6, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)={0x14, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)={0x44c, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0x22, [0x5d6c, 0x6, 0x7, 0x7f, 0xa6, 0x6, 0x800, 0x95b, 0x0, 0xccf7, 0x0, 0x0, 0x0, 0x4, 0x3, 0x9, 0x7fffffff, 0x400, 0x4, 0x8d9, 0xfffffffa, 0x7, 0x8000, 0x5, 0x7fff, 0x1, 0xb, 0x8, 0x3, 0x5, 0x7f, 0x20400000, 0x10, 0x6, 0x3000000, 0x7, 0x3fe, 0x0, 0x0, 0x4, 0xfd, 0x4, 0x8, 0x0, 0xfff, 0x7, 0x7f, 0x7f, 0x8001, 0x9, 0xa9f5, 0x0, 0x81, 0x3, 0x7, 0xd5f, 0x10, 0x0, 0x8, 0x80000001, 0x6, 0x6, 0xf, 0x3], [0x200, 0x800, 0x3, 0x80000000, 0x761889fe, 0x9, 0x1, 0x1, 0xc02, 0x6bd, 0x6, 0x9, 0x2, 0x1, 0x9, 0x5, 0x6, 0x4, 0x6, 0x4000, 0x3, 0x4, 0x3, 0xfff, 0x800, 0x401, 0x3ff, 0x6f, 0xffff, 0xc, 0x7, 0x7, 0x21, 0xf4c1, 0x2, 0x7, 0x8, 0x48a2, 0x3, 0x7, 0x9, 0x4, 0x9, 0x3, 0x8, 0x6e, 0x6, 0x2, 0x1, 0x1, 0x2, 0x80000000, 0x7, 0x4, 0x1, 0x7fffffff, 0x80, 0x400, 0x8, 0x0, 0x37a, 0xd7a, 0x1, 0x9], [0x3, 0x5, 0xfff, 0xd, 0xd, 0x4, 0x4, 0x9, 0x4c44, 0x3b, 0xb, 0x6f, 0x40, 0x9, 0x40000000, 0x1, 0xfffffffb, 0x10000, 0x0, 0x1, 0xfffffff8, 0x3, 0xcb800000, 0x5, 0x2, 0x9, 0x1, 0x1ff, 0x10, 0x2c, 0x0, 0x7fffffff, 0x7, 0xfdd, 0x1, 0x204000, 0x101, 0xdd, 0x764bb5f, 0x5, 0x10, 0x9, 0x80, 0xf, 0x40000, 0x401, 0x8, 0xbb4c, 0x400, 0xd915, 0x3, 0x9, 0xd1, 0x7, 0x2, 0x5, 0x0, 0x9, 0x843, 0x81, 0x200, 0xff, 0x7f, 0x7], [0x7, 0x40, 0xc, 0x7, 0xfffffffe, 0x35, 0xce0, 0xf, 0x7b5e, 0x9, 0x9, 0xfffffffb, 0x64, 0xa, 0x4, 0x0, 0x8, 0x8, 0x1, 0x7fffffff, 0x1, 0xefd8, 0x6c0, 0x0, 0xf, 0x6, 0x4, 0x401, 0x2, 0x62b6, 0x3ff, 0x2, 0x8, 0x9, 0x8, 0x156f, 0x2000000, 0x7a, 0x9, 0x5, 0xfffffffc, 0x101, 0x5, 0x1, 0x40, 0x401, 0x0, 0x886f, 0x1, 0x100, 0x0, 0x4, 0x6, 0x1, 0x0, 0x8, 0xffff0000, 0x7, 0x6, 0x4, 0x7, 0x2, 0x0, 0x80000000], 0x29, ['[\\\x00', 'GPL\x00', 'devlink\x00', '\x00', 'netdevsim', 'netdevsim\x00', '!\x00', 'GPL\x00']}, [""]}, 0x44c}}, 0x4000) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000100)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000001c0)=0x84) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="440100001a0001000000000000000000000000000000000000e6ff0000000000000000000000000000003300000000000d6352742a3badee0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e40010000000000000000000000000000000033000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600810000004c0014"], 0x144}}, 0x800) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000000000079100800000000001ea0000000000000951fa85401b853c1906478eb2c00000000000000899d90574a30b4329d1473d0e21a8efd92fd05b0386be8af7a88e5f776be1982c995"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 40.009003ms ago: executing program 1 (id=6950): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) unshare(0x22020400) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r3, &(0x7f0000000200)=""/196, 0xc4) 28.238297ms ago: executing program 1 (id=6951): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) (async) unshare(0x100000) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) (async) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '.\x00'}, 0x6e) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 0s ago: executing program 1 (id=6952): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x2048085) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7800, 0x40, 0xd, 0x10, {{0x13, 0x4, 0x2, 0x3e, 0x4c, 0x64, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @empty, {[@lsrr={0x83, 0xb, 0x35, [@dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0xd}]}, @rr={0x7, 0x13, 0x5f, [@remote, @multicast2, @remote, @remote]}, @timestamp={0x44, 0x18, 0x8c, 0x0, 0x7, [0x1db8abe4, 0x0, 0x10001, 0xdeb0, 0x3584]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x700, 0x7800, 0x4c1, 0x80000000, {{0x11, 0x4, 0x1, 0x23, 0x44, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @local, {[@rr={0x7, 0x7, 0xf9, [@local]}, @end, @rr={0x7, 0x17, 0x8, [@multicast2, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1]}, @generic={0x82, 0x11, "9ddae8b3c1bfbcab46929496e6a606"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f0000001a80)={&(0x7f00000003c0)={0x16c0, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1070, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7513}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb5f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "6056d1e30341c9eaa07cf7d3e74b75e6e415f1d5ee0128c062addf78490828daf2aa0f4034747b67743b8a399df6fc8e8ad2dba5f8b08088a25593889dd60a5024a5aa16b32c573d2578f46dcfb49364a6815a2d538ba02ba73bc954e9fa0bdc12bea3ef3e64cdcdc00df652b9791c90ae40b538132453253e747deace69855f9e2509520bb18c580d1e209656cad0cd846d5721d86c064c7beb17d0cc59a89238d5b520c7f08beeb915fefdda79ff9150abf62debe47136e3ca764c20e793bffcc1da53104a5903936396703a618c120edf1ec942beace5accaeefbe338be8a47addbfa6e6aea0fbed28ab6dcebace57ba9466eba9f873a9cbec9b6aa91de1cb6d7df0fbd19147a9c2c25ef5605b9b4b0ca52ff701faff7af33ff18c1b0351fe189b4a3aa08888063e9c1ff309bea4a24ee4d9f8b7c0efa9130417b9fa7075f38f0dad5b3faa275e62d07f389c2ddc1f9a25a041b9b7001305902f211c0ef4d0b5a51dfd028e560ed57296821f6e7af905c98dd8bbfa7ee75d18b5973c0846b279533d602432b6ad1f12a73cf07f3f86422d2780614a428ed4dde2a1c59ce48000f78c4a0741919904863554dad596c9696ba796f3283a22912a6ec306b83fdeab136eb4c11814b1f978b3508cc2e255392a7815912b3f2efddebf2dc8fcc85db792435f1c62fef9db5bfb01ced84f2c1fd2e3648abc7f1bff494eb439fbe74b19df97f586046d2e96a432ea3fae897bf17fe6f6220a8fb076ad12483fe91e20ca80116218919f864e6101ce09714c1b694c264e11e32a58281f1176bdfb7ce2d0fa0c7355491641cfcaa748c0bdb6ff87cc973c77dc778cc7c5459981ea53d18ca855e46e485117e282dea3e86a7d363fc3040e1f9e9480eccd0727049d0da59a09ccc5206261c29ff0b28506f4e0e3d033a2b8683cbcebf6579c849d958179d0e3985a55d52c9a0e1bbaedeb0bd75ca5b3dcc4f40a0c0555a9d4d4f588a6c2b3985f9de3dff44af206560654cfc323d9fe9490fa037c0bf9c81599f8d2bcc4b5de5b332e56ac110107341bdac5c51f2339afca2f813abdab5858b09c480bcc7771ef626d3998007bdf16e6443310f1fa8cbe564ca972a9d60b6641636b9e558996a0fbabb233b5f9dda0c861010a0c12b7143d4ce6ec5c352e1f4549e225b6f928e30cfcb2df1770d38cd0218c53377737e5b67bc8f2d23e5b355056a289146d88c868ddbf863a4f26caa5f51d255076ac9f67ef6dc35447d40ef9a73a6885d18a0da48697a4d31cfcb010e5b94f5c9a74028496001b84d6a7baacf58ce87fe17d9ee2629f9b1fbc658038a269b51b9f8135521155f8223a3d3cc6fcefdc9cf1c3b0df535a18e187ec2be4437071bc8c31710b8852b75153b7ad820eab724c87176ec8c3b0a08b1ea105161938590ef1ed6ecc7d70e580eef3a909b8cf55d606bf73b71bb11a4f33e0bd3396231165282f08d29a975c393ada922dae8401bc1569318f6e615b6c12896be30445c0d78ff1ac3216eae13194a90b69b5295ec1ae560630a04be0b7b8202fee1d990e3599dc8d6dc96bdece50bf87c6dc18c77d171f3d6bcae8f799766145650ee02e7a94548eea735d700ce7617efa8f133dffd0880eb7f98ee401b549a2086af355c1c207c81f87b0efccf23e737e0c629c1046a6e757cdbc51db4f7df08b6abc7c704c88ba06beda1c52d4f20f0212f63b31b3f56593aa726deab508e115216a260c5ff5c1c07de7daf5be8f13307151261bb64906a17dfa254752063ca486ff8f528039dfd705809ca6d2bb2592abaaa239f29a47b4a19a0af39ca9e19405801c0b89e38477b127b67fe918c5b2bc3cf5c50d87ccfca28ed25e3f90e0f6ed61b7ebbaa9fa3b82ea6d5534382364c5b11a86b5eb34da98b2fbe238c8c4d63f8a48820b5e2025b1eaf98c0010e0cc36296585b7794eeaa7617c4aad67a5dbf9fd1ac1f9c5758a153d82cda4ecb2a8d0ad45a80135402aaca71369da9839dffb992f40a6f4c55b9ed5eb192fd49efbfa80aa4eeab514b4c256c860a08f1e94fa6faa13583c5d6310c08e903684ce473de3c0d9f904f187c645146b899fa8042f4846b1ee535d54f16dc6b5beb3f2884f89fff7865d9a486812caf7f26e9008e9b0adb08fc8cdacb1998efbff1cb332216f7f70c02f1c32669090591c52e3d80c50b641bb27fc590aa9cc4520d960ee83d22d1dcf3ac2d7d1ca094e5c14fd09233df972068e93555f69e03605ed12ffa26fbe3ef32972cdfc33658c06394e3c9d1ec01c6414a7a24b8e33eae5e1c27d9595604f418f054bd6cc2a3d7ccd4486ff578e9db4c05bd98203aaa7254f8544500bb9202b3b54e3eb60a9954700dfb6ee9184d5a9bd7757058de8a812e601ff095a6acda6ad2565a77f9d93495fc2ac8508c6442b7822de10a12529102845fabdc1dcb1329598184c085a04f17be9dd375c5e653e77ff64e53641fbccf89a37275d382749fd1b56d3e57f8bff50cc6d8ba55bc20f5e6d21f957efcd3665ecac7b85d0f45777109b590374de79efa81dee9ddfbbf98a35db0c82f3755b1b6506ce47927a3710cb96cb7884714e01fe9248a9ee7d03810b30cfbccfb7cd7f457e6a5949bfcb1d20114f74a1423c428199ff21b23e78c2f0784e98da48373bdbf9d74f48b2b6abd9494c5671d084d785c80db190fa32c606c6639d4c1356427ff0c3e52c9c1571bcfe686451ea38064672b617e763da2566d7ce58c5eddd7a759577f9283ab0de88100a01701170d7bc417941dc662bd6c2d740910bada42a1c08c5ea8e7dbd6a52ca4f9cebd280c5f44fe7d883d686a81fbd55dec5fef1b414ba7a7cf45f9a7ea2ac1bf8a02c8406d895c046addf1c0f48aa3cbefeaf509e4cb6fe25e4367714033f88c1b8804c550ae71c15993920b4ea215bd793ab534836d5f1bf77d8b0eb01fc1010ee7d04f32f844f14f970dd9475cd04822e3335409a4e1c48a174daadd973439aa4b2266d782f3f0809d97898b9d1aade70a05eef84b3096ea2825d85056718eee1e6ab2b03d85a9d8103eaa304d3e3189ba2b9e5b609aa2acf5034f59dd8907cdb9838535ba32ebd57231ab8d70c68489a67c75af5e8e27446ea8d5cf3631b33d4dc171bb702a448059c5f5880c39e4dec6603335551d6d9912df52112a9a37ade886af8a10b505478434e0943e4cdea340122161a545b90f8bf01db8c0b2e0f741d0fc17b035bff429e1d11c5b829f4a0b30285f5e1f02b14547c3174f029ca5237ff233ad1bfb47a1fbe99e223d0bdead8b8824fb8a8f8c6cbcec8dd3629b5ec95273d157e224014a640b05fe732621cbb75af2a46e1773c436de8fb49a2740e2d93f1ae15e3780aa0c347dfd2cb3357eb181319f3b5000c6140892402e52facea9ff6fd6340e91a9c1c836011ea0c543d020021d22fed17c824b649c04c6789e9b4a8880eb398a7d2e130266d855034a9077dc1b5fc786d22404aca1681099ad6aa48f4e51aa4b2bfbd8dc541fbe57c0c07f3059e41fcfacc482891cd1a102e613d890b531377d3c3e3fbf78646ef9e24cadae964e08cf09dc4fb07ac492fc47c176898c06c3304d2d478b34a53e3ed41877556e30c743a037c9521dfb9aa16119acec77f23cc91302b4f08b591256806621b2c00bc4e32278a016421b0cc807b9ebcd237913ccf5d63ee762304ffa4de594bf78feb26afbf14e35c6befe28e90b25e44fa8d9f464842b693280891236ebbd0b89c4bc7ae81b4d677589483b3943012fa26094e392d163aaa8fea88daf022d6dcff22c8b1cb871e8f7032d8896920219470e7195df56c9a735e527aaacf2a5ee69447551d7280caa379f83a126b168facf0cdf641d5bafa2c74e4f1b9f9c63efc0e43bd370044b2e4ee20dddc17370bdb503bd2f0e56f4d0c84e5b5b2d856f392b58dd2d808c981c487f32277c678167e182247b00b469bf76ff4e3878bd71d418b44b32d822fc7dbce7e28b0045d3e880b3b0200995bfd58c02d96101944f010ae58c4fa86514de8ac206fbdc2ff13168c6534917030cdf6321bf4cda281a9012dc889ebc128efe99422790cb49fc45f438f3db4bcc0eaab865080a58126a830352591e3c289b7a6cce25ad91291f6b27850b5e76d2ba70a58067f5c6c268fdba31ed01a07f5e360d445d72df23d4844ff3f377f028bd705c1d24f840f185a7875e8236ccbee57d415d260983eb0c864ca0c5205d0ba509d7ead40252a7e30835200ca67925eef0d019491dc59e0c3924ce76e594393a4d4deea850ade2768edfb4d439b159bb91d58ec6f9f6770def2464e25b5b938efef59e837cb8f4449cc6a908f79f05600b278798fba31d4cc026c2ff772db1ff509c7a3fa34c7f762dcda0835de48c1fdca72d04c074da2505324162c98de7258c43f8bce94789de888070955d2567b487a3f51d060e51b2a797d60dd5cc039dc3a4d880fba9429f6b75bc7b9313141f2ba55206692404ffe175401b6d21f01827d37f25a514b3dbdf76eb682ed616e8fd8bb1486fafb28f8b76cdfee2d8de66c1665c3eaa5774e24c83015eef693e5d832f5a460e0365d5d4506153e7bbf82817fdcb6f5df441f7964b091bad3cab731a931f260d4554d78668ca039f77dcd097ef79a6f820f20cdb2b5159929d052232507a773fe3b0fbbd9c514ab38f7a01f076fc3872eb9b6677339ab5ba83683ec69e783faa2e21ee14a9a60d25534fa7285a77a33797060d0ca46195707b79df4d33a9570117bc3d2c308acf91b3d95ce72a02883245e313505d106ee25526046d0c75203851c9f1bf0aa5eb96118e262b86f12d96c47f26ca5be309e6f8c98059ab866381417d2b1f1e26dd8529d2eaac2d7fb408fe730609c6028fc4d236cfa3eada7a01d406e444a6ca348032e2f64b1e4bfe2398c942a268ff6cbaf567dd00048dec09f453b9d78577ddaabc77e915e937649f216ee8d826a9808f0f567294e62379018614ac1e1b5768917ff61b189afb15edd0ad5291b856cca41ed612dddb4deb861cf4765bcf1fc849ba5b767e507572b7306857831c1f87167275f8424d9d06bc5ef822b318f8ba13c5287115b1737a915111292434b54c874b413f7841a39468d6a34032db1b4629a9b6c62c3cdcfa05e38d4a1de104c481eb6e6a3276f1fb7fa952d337b4406bca75e425f90b90f2d92c9566b769129c8a9b729a4eb31fedd1b4103f4c8d5a5a3697f71a1dd4ea2aaf01b8aaf8bfa183c21148ae91d9323f28e22378394b29cb1dacf8c2129ca6c4c28bb28e65b53b275ae7e76a99403c520d744a71da7975d539be922a82d88588964c94bf2f93010af0bedca38e68efa188a320505e184217a280277e46130bc88eb462f3230a84863ea868f4a7cae36ac49f6039c95fb639a483849778391af843fafe41fa5d2d0f318818dfa5d89683761c063ca8e56f06420e9a8df50ebdfafbfd568e6ebd33a6f6bf38430535d880c0e6299892ee3855c4631bd92ff2e79cb55ae27f6c8434aee32fcce816a6b31bddb6df4be76e2bb854fcec5fe02fae64e71a10c906d26afaef32b4abc3724a3a20fb1ba90f5d7738efda439af4c5565784d8c21de4ad22cad6b076444dc62ceb416c3ee4da838f33369b6e2fd8936264850cf674d64ab90b2043b165cf88bdde158b7c72990aa0d139e90e12f18b6ed3168c9a15ccbd835bcd023fecd5093c06ca1377b3dd55718634c3a988d10e1cf89ffbaa2a1760a806ead850ca68218d0d9d9499a79aee3f05b9219fb413f2c907028ee203a1c8cc702e0b"}, @ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "ec97b4d6c7713ad7cba9712dc8dd3c35a4e504de635265ff1599812e731987be810fa975"}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb8c}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "2818f5f8fff34c748c76a3802ac131cfcfb75bc6df48111ea505a0a5ca8fe10ed7df2e2917b684810568aa715f7a"}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!\x97}M\'u*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(#(\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x516}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb080}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ':*@#*:\xd0:#-@!+\'}\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x26, 0x4, "5a621761cc7aff736b086ead0cec992759cfe8343338db4eb0ee40301d0eb3b01ec0"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcd}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '**]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2fd7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4b}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x384, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "e41f7a4410a12d773c14d0b5d5a652145ea676aa32ff6062e4b3cc52710fb8c965bbf8a5cc499e68b02815fb06587a8d3da4aa812efd04f493b9663025cb6ecc1f852edb8d59a8b3110fe62c607a92205cf98be23568658def645f357a336e8fce1f26cecd0ae772d15921a610473744b8ba45b99d04316068eea613a1a3daef841564e20e01f87bb802eb0f7479459ea825dd79"}, @ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfca}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}&-\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a767f57}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f000}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc65}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'k}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ',/-\n,[@+&/(\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '){\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x81, 0x5, "5c7ae27b48a58eded235af834e756fc7852ef1c40d2f1be176d419493f12934c5a1f5e13ea3a051be02f7aaff944b972a6bff54be3b09651a6d1b2e4f2daaa1bc9ce84a02c96f9105ad5fa5325fd3153b151526b269e6aa0a0d48cc6050c3a96ac9f6e31623f2a55b6def94039e57f75ba29d4acc5b423e0a68cb94133"}, @ETHTOOL_A_BITSET_MASK={0xdb, 0x5, "24bf8533baf1b3d0d419dfb7b819a6241416bfb3d5017c50c4a59add9b55d7d3d8c68cf4ef54691f6b59b3d4ed99e43a74c5c90ba91ee21aadae8150cda897380828d55dfa108e89ffb28e3deec2dd688c9e561261cc01501cf269646577197474c2f7bce1b7524bd1856b3431a4ee6bec7866f5ed703383fe56811c389e818ead62e212906f09d2027ca09525975d6f5605b3a8917cffaa12839b95699461203f0b3cf65e5ff16c0f85fd07592aece845940e0940abcf8bf244d8b9fb98f46b5b6cc29d6ffcf0283b133e36c49b60635ddc995975f578"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7888}]}]}, 0x16c0}, 0x1, 0x0, 0x0, 0xd6b51a238b1fc4e2}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001b80)={'ip6_vti0\x00', &(0x7f0000001b00)={'ip6tnl0\x00', r8, 0x29, 0x7f, 0x7, 0xfffffff8, 0x29, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x1, 0x5, 0x1}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@bloom_filter={0x1e, 0xfe, 0x4, 0x9, 0x4000, 0xffffffffffffffff, 0x1, '\x00', r7, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xc}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001c40)={'team0\x00', 0x0}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c80)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0xfffffff5, '\x00', r12, r13, 0x5}, 0x50) r14 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x110, r9, 0xfee66000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000001d40)) ioctl$OCFS2_IOC_INFO(r11, 0x80106f05, &(0x7f0000006280)={&(0x7f00000060c0)=[&(0x7f0000001d80)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000001e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001e40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x7}, &(0x7f0000001f80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000001fc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000002000)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000002040)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000002080)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f00000020c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002100)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000002140)=@journal={{0x4f32494e, 0x7, 0x10, 0xa0000001}}, &(0x7f0000002180)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f00000021c0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000002240)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000002280)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f00000022c0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f0000002340)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000002380)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000002400)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000002440)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000002480)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f00000024c0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002500)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x5, 0x40}, {0x2949, 0xfffffffffffffffe}, {0x4, 0xc14}, {0x7bca, 0x7}, {0x6, 0x3}, {0x782027e, 0xed}, {0x8000000000000000, 0x8}, {0x398, 0x4}, {0xff, 0x3}, {0x7, 0x1}, {0x84f, 0x3}, {0x7, 0x5}, {0x100, 0x7fff}, {0xffffffffffff4da4, 0x7}, {0x6, 0x2}, {0xd4, 0x87}, {0x7, 0x3}, {0x1, 0xa4}, {0x9, 0x3}, {0x60, 0x8001}, {0x101, 0x10}, {0x1, 0x7}, {0x6, 0xfd}, {0x1, 0x7}, {0x3, 0x9}, {0x8d, 0x5}, {0x80, 0x80}, {0x2, 0xae}, {0x0, 0x1b05}, {0x5, 0x3ff}, {0x3, 0x3}, {0x2}, {0x6, 0x458}, {0x81, 0x4}, {0x80000001, 0x2a72}, {0xffffffff, 0x6}, {0x3, 0x80000000}, {0x4, 0x80000000}, {0x6, 0x2}, {0x6, 0x2}, {0x8, 0x2e2}, {0x5, 0x5}, {0x80000000, 0x8000000000000001}, {0xb, 0x3}, {0xc93a, 0x1}, {0x7, 0x7}, {0x840, 0x7}, {0xb412, 0x8}, {0x9, 0x1}, {0x3ff, 0x8}, {0x3, 0x10}, {0x101, 0x31}, {0x1, 0x29a}, {0x80000000, 0xffffffffffffa7ca}, {0x9, 0x3}, {0x7, 0x20c}, {0x1000, 0x8001}, {0x1, 0x5}, {0xe9, 0x7}, {0xfffffffffffffff8, 0x9}, {0x7f, 0x2}, {0x4, 0x7}, {0x7fffffffffffffff, 0x5}, {}, {0xe9, 0x4}, {0xf3ae, 0x67}, {0x8, 0x8}, {0x4, 0x10000}, {0x9, 0x1}, {0xffffffffffffffff, 0x7f}, {0x800, 0x3}, {0x32, 0x8000000000000000}, {0x8, 0x1}, {0x7, 0x1}, {0x6, 0x8}, {0x1000000000000000, 0x7fffffff}, {0x9, 0x3c4}, {0x90f1, 0x80}, {0x9, 0x9}, {0xfffffffffffffffe, 0x7fff}, {0x3, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x5, 0x1}, {0xa3, 0xfffffffffffffffc}, {0x8, 0x80cb}, {0xd, 0x101}, {0x9, 0x186}, {0x7, 0x8}, {0xfffffffffffffff9, 0x40}, {0x4}, {0xd3, 0x6}, {0x8, 0x3}, {0x8000, 0x3}, {0x9, 0x3}, {0xa, 0x2}, {0x7, 0x601}, {0x2, 0x4}, {0x2, 0x101}, {0x80000001, 0x9}, {0x9, 0x3}, {0x0, 0xc2}, {0x4, 0x7fffffff}, {0x8, 0x10}, {0x2, 0x10000}, {0x1, 0xf}, {0x94, 0x10001}, {0x9, 0x1}, {0x8001, 0x8}, {0x1ff, 0x5}, {0x807, 0xffffffff}, {0x3, 0x8}, {0x7, 0x7}, {0x376, 0x401}, {0x8, 0x6}, {0x8, 0x8}, {0x9, 0x400}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x2}, {0x1}, {0x6, 0x4}, {0x5, 0x5}, {0xd534}, {0x80000000, 0xd}, {0xfffffffffffff001, 0x81}, {0x9, 0xfff}, {0x100, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xfffffffffffff001}, {0x7f6e, 0x3}, {0x10000, 0x6}, {0x9, 0x6}, {0x0, 0x9}, {0x8, 0xbc}, {0x41, 0xc}, {0x10, 0x6}, {0x7, 0x4}, {0x9, 0xffffffffffffffff}, {0xdaa6, 0x80}, {0x0, 0x7f}, {0x2, 0x1}, {0x9, 0x4}, {0x1000, 0x2}, {0xa1a}, {0x5b3a, 0x8f2}, {0x64, 0x496}, {0xbfe0, 0x3928}, {0x200, 0x2}, {0x6, 0x101}, {0x80000000, 0xffe4}, {0x40, 0x10001}, {0x4, 0x8}, {0x800, 0xa6cd}, {0x2, 0xe}, {0x7fff, 0xe2}, {0xffff, 0xf}, {0x5fc}, {0x0, 0xd4}, {0x5, 0x74}, {0x9000, 0x2}, {0x10000, 0x3}, {0x2, 0x7}, {0x80, 0x100000000}, {0x5, 0x7ff}, {0x6d6d, 0x1ff}, {0x4, 0x9}, {0x0, 0x267e}, {0xfff, 0x3}, {0x400, 0x1}, {0x2, 0x8}, {0x8, 0x6}, {0x7, 0x80000001}, {0x9, 0x7f}, {0xd2e, 0x5}, {0x40, 0x4}, {0x100000000, 0x7}, {0x31, 0x101}, {0x8, 0x80000000}, {0x7, 0xfff}, {0x4, 0x565}, {0x8, 0x9}, {0x8d, 0x5}, {0x7, 0x9}, {0x200, 0xfa}, {0x1, 0x5}, {0x3, 0x403}, {0x8000, 0x579c}, {0x1}, {0x7f, 0x4}, {0x2, 0x81}, {0x4, 0x100000000000000}, {0xda, 0x5}, {0x68, 0x9}, {0x3, 0x80000000}, {0x1, 0x8}, {0x1, 0x100000001}, {0x7, 0x8}, {0x1000, 0x3}, {0x8000000000000001, 0x6527}, {0x2, 0x6}, {0x1a0, 0x5}, {0x7f, 0x77}, {0x8, 0x194f}, {0x4, 0x7}, {0x6, 0xc0000000000000}, {0x9, 0x2}, {0x5, 0x7}, {0x1, 0x7}, {0x9, 0xaea8}, {0x4, 0x1}, {0x5, 0xc}, {0x1000, 0xeb}, {0xe, 0x6}, {0x8, 0x400}, {0x9, 0x7b1}, {0x5, 0x5}, {0x0, 0x2}, {0x746, 0x3}, {0x5, 0x3}, {0x6ed, 0x173f}, {0x3, 0x3}, {0x9, 0x1ff}, {0x9, 0x5}, {0x1, 0x400}, {0x81, 0x1}, {0x100000001}, {0x5, 0x100000001}, {0x3, 0x81}, {0x400, 0x7}, {0x800, 0xffffffffffffffff}, {0x401, 0xfffffffffffffffc}, {0x3, 0x7}, {0x5c9, 0x7fffffffffffffff}, {0x5, 0xe3f}, {0x2, 0x5}, {0x9}, {0x401, 0x5}, {0xffffffffffffffff, 0x1d47c086}, {0xffffffff, 0x50}, {0xfffffffffffffff7, 0x9}, {0x4, 0xf}, {0x7fffffffffffffff, 0x8000000000000000}, {0xffffffffffffe9bc, 0x5}, {0x6, 0x1}, {0x4, 0x7ff}, {0x7, 0x9a36}, {0x3, 0xfffffffffffffffd}, {0x3, 0xf}, {0x3, 0x6}, {0x18, 0x5}, {0x3, 0x240e}, {0x9, 0x100000000}, {0x1, 0x8000}]}, &(0x7f0000003540)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000003580)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f00000035c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x2, 0x7fffffffffffffff}, {0xe, 0x24000000000000}, {0x1, 0x40}, {0x5, 0x8}, {0x31a, 0x6}, {0xfb, 0x7}, {0x8000, 0x3}, {0xef, 0x101}, {0x3, 0x4}, {0x100000001, 0xc89c}, {0xffffffffffffffff, 0x3}, {0x2, 0xffffffffffffffff}, {0x5, 0x1}, {0x1, 0x5}, {0x3, 0xca9}, {0x0, 0x6}, {0x101, 0x4}, {0x4, 0xffffffffffffffff}, {0x8000000000000001, 0x8}, {0x2, 0xe}, {0xfff, 0x2d1}, {0x927, 0x7}, {0x88, 0x6}, {0x3, 0x2}, {0x8000, 0x8000}, {0x6, 0x6}, {0x7, 0x2e21}, {0x6, 0x3}, {0x3, 0x4}, {0x7}, {0x9, 0x6}, {0xca, 0x3}, {0xc, 0x8}, {0x6caa, 0x5}, {0x5, 0x22}, {0x80, 0x4}, {0xef4, 0x7}, {0x3, 0x906}, {0x10001, 0xd0}, {0xffffffffffff7fff, 0x443b}, {0xdb, 0x7}, {0x0, 0x7e1}, {0x80000000, 0x2}, {0x1000, 0x9}, {0x8, 0x1000}, {0xc976, 0x401}, {0x3b2}, {0x8, 0x1}, {0x6, 0x1}, {0x8, 0x7ff}, {0x5}, {0x7, 0xc1f800000000000}, {0x3, 0x568}, {0x6, 0x68}, {0x10000, 0x3}, {0x95, 0x7}, {0x2000000, 0x5}, {0x0, 0xb1c9}, {0xffffffffffffffff, 0x4}, {0x5, 0x134a}, {0x100000001, 0xd}, {0x2, 0x7}, {0x7}, {0xc82c}, {0x6}, {0x8, 0x100}, {0x2, 0x1}, {0x40, 0xb}, {0x5, 0x824}, {0x2, 0xfff}, {0xeccc, 0xf}, {0x3, 0x2}, {0x5, 0xffffffff}, {0x3, 0x8}, {0x1}, {0x3, 0x6}, {0xffffffffffffffff, 0x7318}, {0x6, 0x7a33c2c8}, {0x3, 0x7}, {0xb, 0x15}, {0x7c, 0x2}, {0xfffffffffffffffc, 0x800}, {0x6, 0xfffffffffffffff0}, {0x8001, 0x9}, {0x1, 0xa0b}, {0x1, 0x6}, {0xd, 0x80}, {0xd, 0x6}, {0xc, 0x400}, {0x7, 0x2}, {0x4, 0x9}, {0x2, 0x5}, {0x3, 0x3}, {0x2af, 0x1}, {0x1, 0x8}, {0xde, 0x4ca}, {0x7, 0x9}, {0x7fff, 0x8}, {0xa, 0x2}, {0x674, 0x180000000000000}, {0xed, 0x9}, {0x2, 0x7}, {0x9, 0x3}, {0x3}, {0x9, 0x4ab}, {0x0, 0x7fff}, {0xfffffffffffffff7}, {0x401, 0x2}, {0x8, 0x2640000000000000}, {0x7, 0x8}, {0x1, 0x7f}, {0x7, 0x7}, {0x5, 0x10000}, {0x8001, 0xc8}, {0x6, 0x67f}, {0x10000, 0x17ef}, {0x1, 0xfffffffffffff8dd}, {0x3, 0x8}, {0xff, 0x8}, {0x6, 0x2}, {0x4, 0x5cac}, {0x5}, {0x2, 0xde}, {0x1, 0x8}, {0x6, 0xffffffffffff8001}, {0xfffffffffffffff8, 0x80000000}, {0x10000, 0x3}, {0x100000001, 0x7e}, {0x9, 0xbf45}, {0xb, 0x9}, {0x6, 0x9}, {0x230, 0x7fffffffffffffff}, {0x7, 0x9}, {0x4, 0x7f}, {0x8001, 0x9}, {0x2}, {0xdb7, 0x9}, {0xe45}, {0x1, 0x4}, {0xe34a, 0x3}, {0x4d, 0x3}, {0x6, 0xa1}, {0x50d1, 0x8000000000000001}, {0x59, 0x3}, {0x7f, 0x6}, {0x6, 0x6}, {0xff, 0xffffffff}, {0xd}, {0x8, 0x80000001}, {0x3, 0x5}, {0x5, 0x4}, {0x4000000000, 0x5b0}, {0x401, 0x4}, {0x80000000, 0xffffffffffffc166}, {0x5, 0xfca}, {0xb, 0xfffffffffffffff3}, {0x10, 0x2}, {0x3ff, 0x3}, {0x233, 0x7}, {0x101}, {0x2559, 0xe}, {0x535, 0xfffffffffffffffe}, {0x1, 0x8001}, {0x9, 0x1d69}, {0xcdb, 0x9}, {0x8, 0x5}, {0x893, 0xfff}, {0x10, 0x5ad1}, {0xf77, 0x2ae}, {0x6, 0x4}, {0x9a2, 0xc662}, {0x7f, 0x3ff}, {0x7fffffff, 0x7}, {0x2, 0x1}, {0x4, 0x5f}, {0x4a, 0x4}, {0x4, 0x4}, {0x0, 0xa}, {0xcc4, 0x7232}, {0xc03d, 0xe79}, {0x8, 0x100000000}, {0x1, 0x1}, {0x200, 0x8}, {0x6, 0x7}, {0x46}, {0xfffffffffffffff7, 0x8000000000000001}, {0x4, 0x7fffffffffffffff}, {0x571f5ff6}, {0x40, 0x8000000000000001}, {0x9, 0xfffffffffffffffe}, {0x8000000000000001, 0xee2}, {0x4}, {0xc0}, {0x9}, {0x1, 0x2}, {0xfff, 0x401}, {0x7fffffffffffffff, 0x100}, {0xfffffffffffffff7, 0x40}, {0x7, 0x4}, {0x7, 0xa}, {0x7}, {0x7fff, 0x9}, {0x10, 0x8000000000000001}, {0xf, 0x3}, {0x448e1cc5, 0x7}, {0x3, 0x2}, {0x975, 0x3}, {0x8000000000000001, 0x6f83db6f}, {0x4, 0x1}, {0x91, 0x575}, {0x80, 0x37364000000}, {0x3, 0x7}, {0x3, 0x10001}, {0xfffffffffffffffb, 0x52}, {0x8, 0x543}, {0x3, 0x7d28}, {0x401, 0x7}, {0x3}, {0x7, 0x1}, {0x6, 0x2}, {0x8, 0x7ff}, {0x8, 0x400}, {0xed44, 0x9}, {0xfffffffffffffff0, 0xfffffffffffffff8}, {0x4, 0x3}, {0x7, 0x2}, {0x10}, {0x8, 0x8}, {0x4, 0x1054a717}, {0x8, 0x3}, {0x40b, 0xa}, {0x6, 0xfffffffffffffffc}, {0x7, 0x6}, {0x7, 0x8}, {0xb, 0x5}, {0x81, 0x4}, {0x2, 0x7fffffff}, {0x5, 0x4}, {0xf33, 0x8}, {0x2, 0xffffffffffffffff}, {0x6, 0x2}, {0x7, 0x9}, {0x10000, 0x6}, {0x8, 0x800}, {0x3, 0xfffffffffffffff7}, {0x3ff, 0x9}, {0x2, 0xcf}, {0x1, 0x2}, {0x0, 0x6}, {0x7eb4, 0x1}, {0x7, 0xfffffffffffffff4}, {0x800, 0x3}, {0x3, 0x6}, {0x6, 0x8}, {0x10, 0x9}]}, &(0x7f0000004600)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000004640)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1c0000001}}, &(0x7f0000004680)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x1}, &(0x7f00000047c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000004800)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000004840)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f00000048c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004940)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x5}, &(0x7f0000004a80)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000004b00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0xa, 0x81}, {0x3, 0x5}, {0x6, 0xfd06}, {0x7, 0x7f1c}, {0x8, 0x9}, {0x1, 0xd}, {0x3, 0x3}, {0x0, 0x8}, {0x8, 0x7}, {0x5, 0x11f}, {0x8, 0x1}, {0x9, 0x4}, {0x1ff, 0x3}, {0xf, 0x5}, {0x6, 0x4}, {0x4, 0x7ff}, {0x3, 0x7fffffffffffffff}, {0x67b000000}, {0x1, 0x7fffffff}, {0x133, 0x1}, {0xb91, 0x4}, {0xe752, 0x36f}, {0x7, 0x2}, {0x7fff, 0x81}, {0xb5, 0x7}, {0x6, 0x7}, {0x3, 0x9}, {0x3e5, 0xfffffffffffffff9}, {0x3, 0x9}, {0x6, 0x8}, {0x7, 0xd924}, {0x4, 0x4}, {0xf, 0xfffffffffffffff9}, {0x4, 0x159b785}, {0x7, 0x6}, {0x10b9, 0x1ff}, {0x6, 0x2}, {0x8000000000000000, 0x8}, {0x55}, {0x5, 0x1}, {0x1, 0x985e}, {0x1, 0xfffffffffffffa33}, {0x5, 0xd4}, {0xc, 0x200}, {0x0, 0x8acd}, {0x8000000000000000, 0x5}, {0x7, 0x401}, {0x5}, {0x2, 0x5}, {0x4, 0x8}, {0x3, 0x2}, {0x8}, {0x6ee, 0x4}, {0x10001, 0x6}, {0x3, 0x8000000000000001}, {0x280000000000000, 0x101}, {0x0, 0x5}, {0x2131, 0x7}, {0x1fc3, 0x2}, {0xa591, 0x9}, {0x4, 0x5}, {0xa7, 0x9}, {0x7, 0x1}, {0x6}, {0x5, 0x2}, {0x1}, {0xf10, 0x8}, {0x1ff, 0x1}, {0xffffffff7fffffff, 0x10001}, {0x8, 0x80000001}, {0x115000000}, {0x5, 0x5}, {0xe, 0x8}, {0x8, 0x9}, {0x11, 0x1}, {0x3, 0x100000001}, {0x0, 0x1}, {0xfffffffffffff6eb}, {0x0, 0x3cb}, {0x4}, {0x3, 0x4}, {0x7, 0x800000000}, {0x1, 0xfffffffffffffffb}, {0x0, 0x10001}, {0x101, 0x10001}, {0x5, 0x10001}, {0x2, 0x400}, {0xbc7, 0xfffffffffffffff9}, {0x2, 0xfffffffffffffffd}, {0xbbed, 0x7}, {0xc49, 0x7}, {0x1, 0x6}, {0x9, 0x100}, {0x940, 0x639b}, {0x8, 0x200}, {0xf, 0x824}, {0x6, 0x7}, {0x1000, 0x3ff}, {0x9, 0x1}, {0x1, 0x4483918c}, {0x200, 0xff}, {0xfffffffffffffffb, 0x2}, {0x91fc, 0x9a07}, {0xf1, 0x7}, {0x2, 0x8f}, {0x8, 0xce9e}, {0x1, 0xff}, {0x8, 0xfffffffffffffffe}, {0x4, 0xbb8}, {0x4c2e, 0x8}, {0x7, 0xffffffff80000001}, {0xb5, 0x7}, {0x43, 0x7fffffffffffffff}, {0x1, 0x1}, {0x2a4}, {0xfffffffffffffffa, 0x9}, {0xe, 0x7}, {0x0, 0x3}, {0x3, 0x4}, {0x80000001, 0x7}, {0xa82, 0x2}, {0x7ff, 0x1ff}, {0x7, 0x7}, {0x4, 0x3}, {0x17, 0x3}, {0x8, 0x4}, {0x9, 0x5}, {0x8f14, 0x401}, {0x4, 0x7}, {0xd00000, 0x2}, {0x4, 0x1ff}, {0x9, 0x7}, {0xfffffffffffffff8, 0x4a7}, {0xfffffffffffff5fc, 0x6}, {0xffffffffffffffff, 0x800}, {0x3, 0x8}, {0x8, 0x2}, {0xfffffffffffffff9, 0x7ff}, {0x7, 0xc00}, {0x8, 0xf}, {0x7, 0x3}, {0x6, 0x4}, {0x40, 0x7}, {0x2, 0x3}, {0x1c, 0x1000}, {0x3, 0x9}, {0x1e7, 0x5}, {0x200, 0x1}, {0x10000, 0x8000000000000000}, {0x100000000, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0xfff, 0x8}, {0x200, 0xfff}, {0x1, 0xd}, {0x5, 0x8}, {0x100000001, 0xff}, {0x6f, 0x9}, {0x6, 0x5c2}, {0x9}, {0x100, 0x9}, {0x2, 0x9}, {0x8, 0x7}, {0x7, 0x100000001}, {0x1, 0x7}, {0x5, 0x1}, {0x5, 0x80000001}, {0x3, 0x498}, {0x273, 0x8000}, {0xfffffffe00000000, 0x800}, {0x2, 0x1}, {0x3, 0x5}, {0xfffffffffffffffe, 0x7fffffffffffffff}, {0x0, 0x4}, {0x8, 0x7}, {0xfff, 0x3}, {0x1, 0x1}, {0x100, 0xffffffffffffffff}, {0x7, 0x7b3}, {0x8, 0x1}, {0x10, 0x1ff}, {0x7fffffffffffffff, 0x6}, {0xfca0, 0x401}, {0xe8, 0x400}, {0x7, 0x1}, {0x9, 0x94}, {0x5, 0xcf55}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x3}, {0x100, 0x2}, {0x101, 0x6}, {0x7, 0x8}, {0x8, 0x8}, {0x10001, 0x7}, {0x1, 0x9}, {0x8, 0x3}, {0x5}, {0x8, 0x6}, {0x7fffffff, 0x1400000000000000}, {0x6, 0xbae}, {0x14, 0x1000}, {0x7, 0xc}, {0x8, 0x59}, {0x400, 0x4}, {0x7f, 0x9}, {0xd90, 0x1}, {0x10000, 0x8000}, {0x9, 0xd33}, {0x7}, {0xa3eb, 0x3}, {0x2, 0x2}, {0x0, 0x79c9}, {0x2, 0x7ff}, {0x4, 0x7}, {0x8000, 0x2}, {0x2, 0x3}, {0x2}, {0x0, 0x2}, {0x8, 0x9}, {0xffffffff, 0x8}, {0x1, 0x10001}, {0x2, 0x9da50f1}, {0x0, 0xfffffffffffffff7}, {0x1, 0x1}, {0x9, 0x1}, {0xf, 0x100000001}, {0x8, 0xb5}, {0x6, 0xffffffffffffffff}, {0x3, 0x8}, {0x368555c9}, {0xe0, 0x2}, {0x8000000000000000, 0x100}, {0x7, 0x6a1b}, {0x9, 0x3}, {0x2, 0xe4a7}, {0xb4c, 0x7}, {0x2, 0x67a}, {0x80000001, 0x7}, {0x0, 0x28f0}, {0x3, 0xfffffffffffff3f7}, {0x3, 0x3}, {0x401, 0x2}, {0x8, 0x8fbe}, {0x4, 0x58}, {0xaedb, 0x8}, {0x9, 0x200}, {0x6, 0x80000001}, {0x3ff, 0x2}, {0x3dd8, 0x6}, {0x7ff, 0xffffffffffffcc2a}, {0x6, 0x9}, {0x4, 0x6}, {0x7fff, 0x3ff}]}, &(0x7f0000005b40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000005b80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x180000002}, {}, 0x8000}, &(0x7f0000005cc0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000005d00)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000005d40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000005d80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000005dc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000005e00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000005e40)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000005e80)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000005ec0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000005f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x6}, &(0x7f0000006040)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000006080)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}], 0x32}) r15 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r15, &(0x7f00000062c0)={0xa, 0x0, 0x8, @loopback, 0x543, 0x1}, 0x20) ioctl$XFS_IOC_ERROR_CLEARALL(r9, 0x40085875) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r14, 0x8983, &(0x7f0000006300)={0x8, 'xfrm0\x00', {'veth0_to_bridge\x00'}, 0x7}) r16 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r16, &(0x7f0000006440)={&(0x7f0000006340)={0x1d, r10, 0x1, {0x2, 0x1}, 0xfd}, 0x18, &(0x7f0000006400)={&(0x7f0000006380)="e382803d49d2b408873db072660dfc9d0f7ad834c655aac4cd8b2d72c1f03be3a47e019ceb1c65e5657429a2e0aadf89538f26f09bd775337f954f3dda6c73611515550e6e0949c7615d5a22aa5e12cac2c664ce6acb5be5622118e57a3532ae808f412020c2b3cb66a44f56", 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) r17 = accept(r3, &(0x7f0000006480)=@qipcrtr, &(0x7f0000006500)=0x80) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000006540)={0x0, 0x1}, &(0x7f0000006580)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r17, 0x84, 0x6, &(0x7f00000065c0)={r18, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, &(0x7f0000006680)=0x84) kernel console output (not intermixed with test programs): n process `syz.4.6125'. [ 431.748135][ T633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.757612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.766476][T27027] block nbd1: Unsupported socket: should be TCP or UNIX. [ 431.773762][ T30] audit: type=1800 audit(1781839552.835:15): pid=27029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6126" name="cgroup.controllers" dev="tmpfs" ino=159 res=0 errno=0 [ 431.865109][ T633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.878296][T27035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6127'. [ 431.928842][T27039] veth0_to_team: entered promiscuous mode [ 432.073850][T27052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6133'. [ 432.101567][T27055] netlink: 'syz.2.6134': attribute type 2 has an invalid length. [ 432.106886][T27052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6133'. [ 432.210647][T26922] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.219531][T26922] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.228059][T26922] bridge_slave_0: entered allmulticast mode [ 432.236510][T26922] bridge_slave_0: entered promiscuous mode [ 432.246087][T27052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6133'. [ 432.248303][T26922] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.262289][T26922] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.272237][T26922] bridge_slave_1: entered allmulticast mode [ 432.288728][T26922] bridge_slave_1: entered promiscuous mode [ 432.334107][T27069] tipc: Enabled bearer , priority 0 [ 432.343043][T26922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.356185][T26922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.366673][T27069] syzkaller0: entered promiscuous mode [ 432.374686][ T5620] Bluetooth: hci5: command tx timeout [ 432.383360][T27069] syzkaller0: entered allmulticast mode [ 432.425081][T27069] tipc: Resetting bearer [ 432.440951][T27068] tipc: Resetting bearer [ 432.455734][T27068] tipc: Disabling bearer [ 432.478432][T26922] team0: Port device team_slave_0 added [ 432.486603][T27078] netlink: 'syz.1.6139': attribute type 1 has an invalid length. [ 432.493659][T26922] team0: Port device team_slave_1 added [ 432.543265][T26922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.561080][T26922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.593409][T26922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.643659][T26922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.653463][T26922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.692732][T27096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6144'. [ 432.698743][T27098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6145'. [ 432.704076][T26922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.730457][T27096] : entered promiscuous mode [ 432.792507][T26922] hsr_slave_0: entered promiscuous mode [ 432.807504][T26922] hsr_slave_1: entered promiscuous mode [ 432.824238][T26922] debugfs: 'hsr0' already exists in 'hsr' [ 432.833946][T26922] Cannot create hsr debugfs directory [ 432.892445][T27110] netlink: 'syz.1.6145': attribute type 11 has an invalid length. [ 433.042619][T27120] netlink: 'syz.4.6154': attribute type 1 has an invalid length. [ 433.076328][T26922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.087033][T26922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.126109][T27120] 8021q: adding VLAN 0 to HW filter on device bond13 [ 433.128539][T27127] netlink: 'syz.0.6156': attribute type 21 has an invalid length. [ 433.170783][T27124] bond13: (slave veth19): Enslaving as an active interface with a down link [ 433.192466][T27120] bond12: (slave veth0_to_bond): Releasing active interface [ 433.207358][T27120] bond12: (slave veth15): making interface the new active one [ 433.231837][T27120] bond13: (slave veth0_to_bond): making interface the new active one [ 433.259525][T27120] veth0_to_bond: entered promiscuous mode [ 433.270824][T27120] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 433.292606][T27140] netlink: 'syz.2.6161': attribute type 3 has an invalid length. [ 433.300673][T27140] netlink: 'syz.2.6161': attribute type 2 has an invalid length. [ 433.316269][T26922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.351471][T26922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.385200][T27145] netlink: 'syz.1.6163': attribute type 8 has an invalid length. [ 433.407490][T27142] netlink: 'syz.2.6162': attribute type 21 has an invalid length. [ 433.434237][T27142] netlink: 'syz.2.6162': attribute type 6 has an invalid length. [ 433.466983][T26922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.477691][T26922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.531327][T26922] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 433.705936][T26922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 433.741791][T26922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.765971][T26922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 433.782991][T26922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.796756][T27176] netlink: 'syz.1.6173': attribute type 1 has an invalid length. [ 433.810010][T26922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 433.829277][T26922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.838203][T26922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.848085][T26922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.031095][T27207] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.038452][T27207] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.064786][T27207] bridge0: entered promiscuous mode [ 434.124885][T26922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.183853][T26922] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.203596][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.210764][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.259324][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.266483][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.455260][ T5620] Bluetooth: hci5: command tx timeout [ 434.886723][T26922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.973284][T26922] veth0_vlan: entered promiscuous mode [ 435.033781][T27292] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.041266][T27292] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.117376][T27292] net_ratelimit: 8 callbacks suppressed [ 435.117395][T27292] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 435.190280][T26922] veth1_vlan: entered promiscuous mode [ 435.191791][T27302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.277876][ T633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.293459][T26922] veth0_macvtap: entered promiscuous mode [ 435.302726][ T633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.325583][T26922] veth1_macvtap: entered promiscuous mode [ 435.334458][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 435.368382][T26922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.387021][T26922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.412624][ T1164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.428427][ T1164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.445868][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.460169][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.537663][T27331] sctp: [Deprecated]: syz.4.6211 (pid 27331) Use of int in maxseg socket option. [ 435.537663][T27331] Use struct sctp_assoc_value instead [ 435.563871][T27329] 8021q: adding VLAN 0 to HW filter on device bond20 [ 435.613587][T27329] bond20: (slave veth25): Enslaving as an active interface with a down link [ 435.642004][T27338] __nla_validate_parse: 25 callbacks suppressed [ 435.642021][T27338] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6213'. [ 435.658564][T27329] bond19: (slave veth0_to_bond): Releasing active interface [ 435.667466][T27329] veth0_to_bond: left promiscuous mode [ 435.692418][T27329] bond20: (slave veth0_to_bond): making interface the new active one [ 435.707664][T27329] veth0_to_bond: entered promiscuous mode [ 435.713958][T27329] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 435.775034][T27340] netlink: 'syz.1.6212': attribute type 11 has an invalid length. [ 435.786253][T27340] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6212'. [ 435.798696][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.810241][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.861555][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.881958][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.938945][T27360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6219'. [ 435.958626][T27362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6100'. [ 436.146787][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6223'. [ 436.183443][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.191447][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.199080][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.208052][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.221026][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.223108][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.237577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.271086][T27383] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6225'. [ 436.335825][T27385] 8021q: adding VLAN 0 to HW filter on device bond21 [ 436.360634][T27385] bond21: (slave veth27): Enslaving as an active interface with a down link [ 436.379859][T27385] bond20: (slave veth0_to_bond): Releasing active interface [ 436.389402][T27385] veth0_to_bond: left promiscuous mode [ 436.402136][T27385] bond21: (slave veth0_to_bond): making interface the new active one [ 436.412709][T27385] veth0_to_bond: entered promiscuous mode [ 436.419505][T27385] bond21: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 436.480843][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.491329][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.492431][T27392] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 436.517176][T27397] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 436.527417][T27392] bond1 (unregistering): Released all slaves [ 436.534678][ T5620] Bluetooth: hci5: command tx timeout [ 436.550199][T27398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6229'. [ 436.563101][T27395] tipc: Enabled bearer , priority 10 [ 436.673738][ T6803] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.689064][T27406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6232'. [ 436.702809][ T6803] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.715575][T27410] geneve0: entered promiscuous mode [ 436.723284][ T6803] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.739806][ T6803] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.815985][T27379] lo speed is unknown, defaulting to 1000 [ 436.846545][T27417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.857812][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.866903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.867873][T27379] xfrm0 speed is unknown, defaulting to 1000 [ 436.887883][T27417] bond1: (slave dummy0): making interface the new active one [ 436.907103][T27417] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 436.947325][T27417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6234'. [ 436.959198][T27417] dummy0: entered promiscuous mode [ 436.995186][T27417] bond1: (slave dummy0): Releasing active interface [ 437.007936][T27426] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 437.039738][T27379] lo speed is unknown, defaulting to 1000 [ 437.179869][T27438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6240'. [ 437.445341][T27379] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.452618][T27379] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.460111][T27379] bridge_slave_0: entered allmulticast mode [ 437.467909][T27379] bridge_slave_0: entered promiscuous mode [ 437.478079][T27379] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.486059][T27379] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.493511][T27379] bridge_slave_1: entered allmulticast mode [ 437.502418][T27379] bridge_slave_1: entered promiscuous mode [ 437.546969][T27379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.559327][T27379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.570395][T27463] validate_nla: 9 callbacks suppressed [ 437.570415][T27463] netlink: 'syz.0.6248': attribute type 1 has an invalid length. [ 437.588937][T27379] team0: Port device team_slave_0 added [ 437.597033][T27379] team0: Port device team_slave_1 added [ 437.635710][T27379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.653644][T27379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.688582][T27472] netlink: 'syz.2.6250': attribute type 4 has an invalid length. [ 437.704217][T27379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.746831][T27379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.768065][T27379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.811252][T27379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.887406][T27486] netlink: 'syz.3.6253': attribute type 5 has an invalid length. [ 437.906820][T27379] hsr_slave_0: entered promiscuous mode [ 437.913636][T27379] hsr_slave_1: entered promiscuous mode [ 437.920555][T27379] debugfs: 'hsr0' already exists in 'hsr' [ 437.927553][T27379] Cannot create hsr debugfs directory [ 437.944017][T27489] syzkaller0: entered promiscuous mode [ 437.957215][T27489] syzkaller0: entered allmulticast mode [ 438.049402][T27505] x_tables: duplicate underflow at hook 2 [ 438.168158][T27511] gretap1: entered promiscuous mode [ 438.185419][T27511] batman_adv: batadv0: Adding interface: gretap1 [ 438.194124][T27511] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.234669][T27511] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 438.250436][T27521] x_tables: duplicate underflow at hook 1 [ 438.296733][ T5620] Bluetooth: hci3: command tx timeout [ 438.355357][T27526] netlink: 'syz.3.6262': attribute type 5 has an invalid length. [ 438.413030][T27526] netlink: 'syz.3.6262': attribute type 5 has an invalid length. [ 438.444914][T27379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.460711][T27379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.554153][T27379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.610958][T27379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.621550][ T5620] Bluetooth: hci5: command tx timeout [ 438.719329][T27379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.754525][T27379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.846653][T27379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.876764][T27379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.981104][T27591] syzkaller1: entered promiscuous mode [ 438.990017][T27591] syzkaller1: entered allmulticast mode [ 439.034921][T27379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 439.059228][T27379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.072217][T27379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 439.088358][T27379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.326362][T27379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 439.344033][T27379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.411513][T27379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 439.455971][T27379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.628560][T27379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.668969][T27379] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.692971][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.700160][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.756409][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.763570][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.061341][T27680] FAULT_INJECTION: forcing a failure. [ 440.061341][T27680] name failslab, interval 1, probability 0, space 0, times 0 [ 440.074051][T27680] CPU: 0 UID: 0 PID: 27680 Comm: syz.0.6301 Not tainted syzkaller #0 PREEMPT(full) [ 440.074074][T27680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.074083][T27680] Call Trace: [ 440.074089][T27680] [ 440.074095][T27680] dump_stack_lvl+0xe8/0x150 [ 440.074115][T27680] should_fail_ex+0x40c/0x560 [ 440.074132][T27680] should_failslab+0xa8/0x100 [ 440.074152][T27680] kmem_cache_alloc_bulk_noprof+0x85/0x7c0 [ 440.074173][T27680] ? pfn_valid+0x125/0x4c0 [ 440.074190][T27680] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 440.074214][T27680] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 440.074235][T27680] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 440.074267][T27680] ? 0xffffffffa0203e98 [ 440.074279][T27680] ? 0xffffffffa0203ed0 [ 440.074290][T27680] ? 0xffffffffa0204010 [ 440.074300][T27680] ? 0xffffffffa02042d4 [ 440.074331][T27680] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 440.074349][T27680] ? _copy_from_user+0x94/0xb0 [ 440.074369][T27680] ? bpf_test_init+0x113/0x150 [ 440.074387][T27680] ? xdp_convert_md_to_buff+0x5b/0x330 [ 440.074408][T27680] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 440.074428][T27680] ? lock_release+0x4b/0x3c0 [ 440.074452][T27680] ? rcu_is_watching+0x15/0xb0 [ 440.074468][T27680] ? lock_release+0x4b/0x3c0 [ 440.074487][T27680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 440.074507][T27680] ? __fget_files+0x2a/0x420 [ 440.074525][T27680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 440.074547][T27680] bpf_prog_test_run+0x2c5/0x340 [ 440.074569][T27680] __sys_bpf+0x643/0x950 [ 440.074587][T27680] ? __pfx___sys_bpf+0x10/0x10 [ 440.074610][T27680] ? ksys_write+0x242/0x270 [ 440.074631][T27680] ? __pfx_ksys_write+0x10/0x10 [ 440.074650][T27680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.074664][T27680] __x64_sys_bpf+0x7c/0x90 [ 440.074679][T27680] do_syscall_64+0x174/0x580 [ 440.074699][T27680] ? trace_irq_disable+0x3b/0x140 [ 440.074719][T27680] ? clear_bhb_loop+0x40/0x90 [ 440.074736][T27680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.074751][T27680] RIP: 0033:0x7f73f6f9ce59 [ 440.074766][T27680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.074779][T27680] RSP: 002b:00007f73f7e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.074796][T27680] RAX: ffffffffffffffda RBX: 00007f73f7215fa0 RCX: 00007f73f6f9ce59 [ 440.074806][T27680] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 440.074816][T27680] RBP: 00007f73f7e27090 R08: 0000000000000000 R09: 0000000000000000 [ 440.074826][T27680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.074835][T27680] R13: 00007f73f7216038 R14: 00007f73f7215fa0 R15: 00007ffca0e7ede8 [ 440.074852][T27680] [ 440.374533][ T5620] Bluetooth: hci3: command tx timeout [ 440.473960][T27333] bridge_slave_1: left allmulticast mode [ 440.487655][T27333] bridge_slave_1: left promiscuous mode [ 440.499496][T27333] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.702328][T27719] __nla_validate_parse: 17 callbacks suppressed [ 440.702346][T27719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6309'. [ 440.773641][T27722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6313'. [ 440.776780][ T6807] smc: removing ib device syz1 [ 440.813978][ T6807] smbdirect: ib_dev[syz1] removed [ 440.875021][T27333] bond7 (unregistering): (slave geneve2): Releasing active interface [ 440.957903][T27333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.968701][T27333] bond_slave_0: left promiscuous mode [ 441.017681][T27333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.041964][T27333] bond_slave_1: left promiscuous mode [ 441.063063][T27333] bond0 (unregistering): (slave team0): Releasing backup interface [ 441.106344][T27738] netlink: 'syz.2.6311': attribute type 4 has an invalid length. [ 441.111330][T27333] team0: left promiscuous mode [ 441.118985][T27738] netlink: 'syz.2.6311': attribute type 1 has an invalid length. [ 441.119006][T27738] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6311'. [ 441.150290][T27333] team_slave_1: left promiscuous mode [ 441.162061][T27333] bond0 (unregistering): Released all slaves [ 441.173941][T27333] bond2 (unregistering): Released all slaves [ 441.197375][T27333] bond1 (unregistering): Released all slaves [ 441.230809][T27333] bond3 (unregistering): Released all slaves [ 441.258415][T27333] bond4 (unregistering): (slave veth3): Releasing active interface [ 441.270002][T27333] bond4 (unregistering): Released all slaves [ 441.299977][T27333] bond5 (unregistering): Released all slaves [ 441.320548][T27333] bond6 (unregistering): Released all slaves [ 441.352215][T27333] bond7 (unregistering): Released all slaves [ 441.386014][T27333] bond8 (unregistering): Released all slaves [ 441.403838][T27333] bond9 (unregistering): (slave veth5): Releasing active interface [ 441.437546][T27333] bond9 (unregistering): Released all slaves [ 441.461127][T27333] bond10 (unregistering): Released all slaves [ 441.505430][T27333] bond11 (unregistering): (slave veth7): Releasing active interface [ 441.534404][T27333] bond11 (unregistering): Released all slaves [ 441.572537][T27333] bond12 (unregistering): Released all slaves [ 441.593661][T27333] bond13 (unregistering): Released all slaves [ 441.620260][T27333] bond14 (unregistering): (slave veth9): Releasing active interface [ 441.632146][T27333] bond14 (unregistering): Released all slaves [ 441.653219][T27333] bond15 (unregistering): Released all slaves [ 441.686257][T27333] bond16 (unregistering): Released all slaves [ 441.732029][T27333] bond17 (unregistering): Released all slaves [ 441.763182][T27333] bond18 (unregistering): Released all slaves [ 441.777629][T27333] bond19 (unregistering): Released all slaves [ 441.831030][T27333] bond20 (unregistering): Released all slaves [ 441.850280][T27333] bond21 (unregistering): Released all slaves [ 441.872841][T27333] bond22 (unregistering): Released all slaves [ 441.899989][T27333] bond23 (unregistering): Released all slaves [ 441.928588][T27333] bond24 (unregistering): Released all slaves [ 441.974875][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 442.012796][T27333] bond25 (unregistering): (slave veth11): Releasing active interface [ 442.021903][T27333] veth0_to_bond: entered promiscuous mode [ 442.037362][T27333] bond25 (unregistering): (slave veth0_to_bond): Releasing active interface [ 442.053606][T27333] bond25 (unregistering): Released all slaves [ 442.075596][T27333] bond26 (unregistering): Released all slaves [ 442.085201][T27333] bond27 (unregistering): Released all slaves [ 442.095966][T27701] netlink: 'syz.0.6307': attribute type 2 has an invalid length. [ 442.103790][T27702] netlink: 'syz.0.6307': attribute type 2 has an invalid length. [ 442.115727][T27715] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 442.117462][ T8187] xfrm0 speed is unknown, defaulting to 1000 [ 442.138148][ T8187] syz1: Port: 1 Link DOWN [ 442.157598][T27719] veth0_macvtap: left promiscuous mode [ 442.257142][T27333] : left promiscuous mode [ 442.312704][T27333] tipc: Left network mode [ 442.327782][T27379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.347910][T27752] batman_adv: batadv0: Adding interface: dummy0 [ 442.365599][T27752] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.402578][T27752] batman_adv: batadv0: Interface activated: dummy0 [ 442.446665][T27752] net_ratelimit: 10 callbacks suppressed [ 442.446683][T27752] batadv0: mtu less than device minimum [ 442.466466][ T5620] Bluetooth: hci3: command tx timeout [ 442.474942][T27762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6319'. [ 442.500348][T27752] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.511357][T27752] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.522464][T27752] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.533400][T27752] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.544395][T27752] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.555400][T27752] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.566405][T27752] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.577355][T27752] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.588303][T27752] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.603649][T27772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6321'. [ 442.716276][T27768] syzkaller1: entered promiscuous mode [ 442.722952][T27768] syzkaller1: entered allmulticast mode [ 442.748924][T27776] macsec0: entered promiscuous mode [ 442.764944][T27775] macsec0: left promiscuous mode [ 442.793533][T27783] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 442.798136][T27785] netlink: 'syz.0.6325': attribute type 27 has an invalid length. [ 442.810092][T27785] netlink: 'syz.0.6325': attribute type 4 has an invalid length. [ 442.825855][T27379] veth0_vlan: entered promiscuous mode [ 442.843192][T27785] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6325'. [ 442.861833][T27379] veth1_vlan: entered promiscuous mode [ 442.869155][T27787] team0: entered promiscuous mode [ 442.876231][T27787] team_slave_0: entered promiscuous mode [ 442.882117][T27787] team_slave_1: entered promiscuous mode [ 442.939989][T27379] veth0_macvtap: entered promiscuous mode [ 442.960932][T27379] veth1_macvtap: entered promiscuous mode [ 442.984600][T27379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.002247][T27379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.030680][ T94] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.048589][ T94] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.071284][ T94] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.084549][ T94] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.100511][T27797] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6330'. [ 443.183337][T27803] FAULT_INJECTION: forcing a failure. [ 443.183337][T27803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.196919][T27334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.205362][T27334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.215597][T27803] CPU: 1 UID: 0 PID: 27803 Comm: syz.0.6333 Not tainted syzkaller #0 PREEMPT(full) [ 443.215623][T27803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.215634][T27803] Call Trace: [ 443.215640][T27803] [ 443.215647][T27803] dump_stack_lvl+0xe8/0x150 [ 443.215670][T27803] should_fail_ex+0x40c/0x560 [ 443.215690][T27803] _copy_from_user+0x2d/0xb0 [ 443.215711][T27803] ___sys_sendmsg+0x1c6/0x360 [ 443.215733][T27803] ? rcu_is_watching+0x15/0xb0 [ 443.215750][T27803] ? get_pid_task+0x20/0x1f0 [ 443.215765][T27803] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.215788][T27803] ? rcu_is_watching+0x15/0xb0 [ 443.215815][T27803] ? __fget_files+0x2a/0x420 [ 443.215831][T27803] ? __fget_files+0x3a2/0x420 [ 443.215852][T27803] __x64_sys_sendmsg+0x1b1/0x290 [ 443.215874][T27803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.215900][T27803] ? rcu_is_watching+0x15/0xb0 [ 443.215916][T27803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.215933][T27803] do_syscall_64+0x174/0x580 [ 443.215953][T27803] ? trace_irq_disable+0x3b/0x140 [ 443.215973][T27803] ? clear_bhb_loop+0x40/0x90 [ 443.215991][T27803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.216007][T27803] RIP: 0033:0x7f73f6f9ce59 [ 443.216022][T27803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.216035][T27803] RSP: 002b:00007f73f7e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.216053][T27803] RAX: ffffffffffffffda RBX: 00007f73f7215fa0 RCX: 00007f73f6f9ce59 [ 443.216066][T27803] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 443.216077][T27803] RBP: 00007f73f7e27090 R08: 0000000000000000 R09: 0000000000000000 [ 443.216087][T27803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.216096][T27803] R13: 00007f73f7216038 R14: 00007f73f7215fa0 R15: 00007ffca0e7ede8 [ 443.216115][T27803] [ 443.420614][T27805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6332'. [ 443.448196][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.458462][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.529735][T27812] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.536904][T27812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.544389][T27812] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.551509][T27812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.573777][T27812] veth1_vlan: left promiscuous mode [ 443.581823][T27812] veth0_vlan: left promiscuous mode [ 443.588643][T27812] veth0_vlan: entered promiscuous mode [ 443.602316][T27812] veth1_vlan: entered promiscuous mode [ 443.619420][T27812] veth0_macvtap: left promiscuous mode [ 443.627169][T27812] veth0_macvtap: entered promiscuous mode [ 443.640353][T27812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.648505][T27812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.657173][T27812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.673134][T27812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.681268][T27812] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 443.690015][T27812] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 443.702633][T27812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.716946][T27812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.726385][T27812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.769966][T27812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.779216][T27827] FAULT_INJECTION: forcing a failure. [ 443.779216][T27827] name failslab, interval 1, probability 0, space 0, times 0 [ 443.779885][T27812] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.791898][T27827] CPU: 1 UID: 0 PID: 27827 Comm: syz.3.6340 Not tainted syzkaller #0 PREEMPT(full) [ 443.791919][T27827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.791928][T27827] Call Trace: [ 443.791934][T27827] [ 443.791940][T27827] dump_stack_lvl+0xe8/0x150 [ 443.791962][T27827] should_fail_ex+0x40c/0x560 [ 443.791983][T27827] should_failslab+0xa8/0x100 [ 443.792004][T27827] ? skb_clone+0x212/0x3a0 [ 443.792020][T27827] kmem_cache_alloc_noprof+0x87/0x650 [ 443.792039][T27827] ? lock_acquire+0x5f/0x350 [ 443.792063][T27827] skb_clone+0x212/0x3a0 [ 443.792077][T27827] ? raw_local_deliver+0xb1b/0x1010 [ 443.792197][T27827] raw_local_deliver+0xb2e/0x1010 [ 443.792220][T27827] ? raw_local_deliver+0x345/0x1010 [ 443.792235][T27827] ? __pfx_raw_local_deliver+0x10/0x10 [ 443.792250][T27827] ? rcu_is_watching+0x15/0xb0 [ 443.792264][T27827] ? lock_acquire+0x5f/0x350 [ 443.792287][T27827] ip_protocol_deliver_rcu+0x3b/0x440 [ 443.792328][T27827] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 443.792343][T27827] ip_local_deliver_finish+0x3bb/0x6f0 [ 443.792363][T27827] NF_HOOK+0x336/0x3c0 [ 443.792386][T27827] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 443.792402][T27827] ? NF_HOOK+0x9e/0x3c0 [ 443.792415][T27827] ? __pfx_NF_HOOK+0x10/0x10 [ 443.792428][T27827] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 443.792443][T27827] ? ip_rcv_finish_core+0x1128/0x1c00 [ 443.792456][T27827] ? ip_local_deliver+0x113/0x190 [ 443.792470][T27827] ? __pfx_ip_local_deliver+0x10/0x10 [ 443.792484][T27827] ip_sublist_rcv_finish+0x1f0/0x240 [ 443.792502][T27827] ip_sublist_rcv+0x767/0xa70 [ 443.792522][T27827] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 443.792540][T27827] ? __pfx_ip_rcv_finish+0x10/0x10 [ 443.792555][T27827] ? ip_rcv_core+0x88d/0xd50 [ 443.792572][T27827] ip_list_rcv+0x3ec/0x440 [ 443.792590][T27827] ? __pfx_ip_list_rcv+0x10/0x10 [ 443.792606][T27827] ? kasan_save_track+0x4f/0x80 [ 443.792625][T27827] ? kasan_save_track+0x3e/0x80 [ 443.792642][T27827] ? __kasan_slab_alloc+0x6c/0x80 [ 443.792661][T27827] ? kmem_cache_alloc_bulk_noprof+0x49f/0x7c0 [ 443.792681][T27827] ? __pfx_ip_list_rcv+0x10/0x10 [ 443.792696][T27827] __netif_receive_skb_list_core+0x804/0x830 [ 443.792750][T27827] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 443.792772][T27827] netif_receive_skb_list_internal+0x995/0xcf0 [ 443.792819][T27827] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 443.792835][T27827] ? eth_type_trans+0x352/0x800 [ 443.792877][T27827] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 443.792898][T27827] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 443.792944][T27827] netif_receive_skb_list+0x55/0x450 [ 443.792960][T27827] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 443.792983][T27827] bpf_test_run_xdp_live+0x1875/0x1c20 [ 443.793010][T27827] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 443.793036][T27827] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 443.793066][T27827] ? 0xffffffffa0203e98 [ 443.793079][T27827] ? 0xffffffffa0203ed0 [ 443.793090][T27827] ? 0xffffffffa0204010 [ 443.793101][T27827] ? 0xffffffffa02042d4 [ 443.793123][T27827] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 443.793143][T27827] ? _copy_from_user+0x94/0xb0 [ 443.793168][T27827] ? bpf_test_init+0x113/0x150 [ 443.793186][T27827] ? xdp_convert_md_to_buff+0x5b/0x330 [ 443.793208][T27827] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 443.793229][T27827] ? lock_release+0x4b/0x3c0 [ 443.793253][T27827] ? rcu_is_watching+0x15/0xb0 [ 443.793269][T27827] ? lock_release+0x4b/0x3c0 [ 443.793288][T27827] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 443.793312][T27827] ? __fget_files+0x2a/0x420 [ 443.793331][T27827] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 443.793355][T27827] bpf_prog_test_run+0x2c5/0x340 [ 443.793385][T27827] __sys_bpf+0x643/0x950 [ 443.793405][T27827] ? __pfx___sys_bpf+0x10/0x10 [ 443.793430][T27827] ? ksys_write+0x242/0x270 [ 443.793451][T27827] ? __pfx_ksys_write+0x10/0x10 [ 443.793471][T27827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.793488][T27827] __x64_sys_bpf+0x7c/0x90 [ 443.793505][T27827] do_syscall_64+0x174/0x580 [ 443.793525][T27827] ? trace_irq_disable+0x3b/0x140 [ 443.793545][T27827] ? clear_bhb_loop+0x40/0x90 [ 443.793562][T27827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.793578][T27827] RIP: 0033:0x7fb893b9ce59 [ 443.793592][T27827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.793606][T27827] RSP: 002b:00007fb8949d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.793624][T27827] RAX: ffffffffffffffda RBX: 00007fb893e15fa0 RCX: 00007fb893b9ce59 [ 443.793636][T27827] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 443.793646][T27827] RBP: 00007fb8949d5090 R08: 0000000000000000 R09: 0000000000000000 [ 443.793656][T27827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.793666][T27827] R13: 00007fb893e16038 R14: 00007fb893e15fa0 R15: 00007fffd15ac888 [ 443.793684][T27827] [ 443.899690][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.306407][T27812] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.317972][T27812] 8021q: adding VLAN 0 to HW filter on device bond8 [ 444.327607][T27812] 8021q: adding VLAN 0 to HW filter on device bond9 [ 444.336869][T27812] 8021q: adding VLAN 0 to HW filter on device bond10 [ 444.349173][T27812] 8021q: adding VLAN 0 to HW filter on device bond11 [ 444.363180][T27812] 8021q: adding VLAN 0 to HW filter on device bond12 [ 444.396205][T21485] bridge1: entered promiscuous mode [ 444.403319][ T94] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.429871][ T94] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.443883][ T6803] bond7: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 444.461531][ T6803] bond7: (slave veth7): making interface the new active one [ 444.472347][ T6803] bond7: active interface up! [ 444.537058][ T5620] Bluetooth: hci3: command tx timeout [ 444.559871][ T633] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.571620][T27850] sctp: [Deprecated]: syz.4.6347 (pid 27850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.571620][T27850] Use struct sctp_sack_info instead [ 444.573002][ T633] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.598939][ T633] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.610848][ T633] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.624023][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6348'. [ 444.633623][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6348'. [ 444.673236][T27865] netlink: 'syz.4.6352': attribute type 1 has an invalid length. [ 444.684857][ T633] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.694237][ T633] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.765747][T27865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.788719][T27861] syzkaller0: entered promiscuous mode [ 444.805316][T27861] syzkaller0: entered allmulticast mode [ 445.025308][ T94] bond12: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 445.056562][ T94] bond12: (slave veth15): making interface the new active one [ 445.078766][ T94] bond12: active interface up! [ 445.153549][ T30] audit: type=1107 audit(1781839566.285:16): pid=27890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 445.184009][T27894] vcan1: entered promiscuous mode [ 445.283966][T27894] vcan1: entered allmulticast mode [ 445.307793][T27333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.320846][T27333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.329142][T27333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.349034][T27333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.360983][T27333] veth1_macvtap: left promiscuous mode [ 445.367914][T27333] veth0_macvtap: left promiscuous mode [ 445.373760][T27333] veth1_vlan: left promiscuous mode [ 445.603047][T27333] team0 (unregistering): Port device team_slave_1 removed [ 445.731050][T27333] smc: removing net device team0 with user defined pnetid SYZ2 [ 445.865401][ T12] bond8: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 445.881417][T27931] netlink: 'syz.4.6366': attribute type 21 has an invalid length. [ 445.897057][ T12] bond8: (slave veth11): making interface the new active one [ 445.912505][ T12] bond8: active interface up! [ 445.938288][T27931] netlink: 'syz.4.6366': attribute type 6 has an invalid length. [ 445.964160][T27931] __nla_validate_parse: 4 callbacks suppressed [ 445.964177][T27931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6366'. [ 445.987860][ T12] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 446.006459][ T12] bond4: (slave veth5): making interface the new active one [ 446.020958][T27945] netlink: 'syz.0.6370': attribute type 1 has an invalid length. [ 446.033842][ T12] bond4: active interface up! [ 446.056967][ T633] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 446.078476][ T633] bond2: (slave veth3): making interface the new active one [ 446.090878][ T633] bond2: active interface up! [ 446.125214][T27945] 8021q: adding VLAN 0 to HW filter on device bond22 [ 446.161102][ T30] audit: type=1800 audit(1781839567.295:17): pid=27962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6375" name="memory.events" dev="tmpfs" ino=198 res=0 errno=0 [ 446.186091][T27955] bond22: (slave gretap2): making interface the new active one [ 446.194949][ T30] audit: type=1804 audit(1781839567.335:18): pid=27962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6375" name="/newroot/36/memory.events" dev="tmpfs" ino=198 res=1 errno=0 [ 446.255737][T27955] bond22: (slave gretap2): Enslaving as an active interface with an up link [ 446.299829][ T12] veth0_to_bond: left promiscuous mode [ 446.389344][T27977] netlink: 'syz.3.6376': attribute type 64 has an invalid length. [ 446.432570][T27982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6378'. [ 446.470289][T27333] IPVS: stop unused estimator thread 0... [ 446.548656][T27982] syzkaller1: entered promiscuous mode [ 446.564010][T27982] syzkaller1: entered allmulticast mode [ 446.692497][T28002] can: request_module (can-proto-5) failed. [ 446.750721][T28014] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6386'. [ 447.053457][T28034] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.061026][T28034] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.063882][T28049] sctp: [Deprecated]: syz.3.6394 (pid 28049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.063882][T28049] Use struct sctp_sack_info instead [ 447.103164][T28034] batman_adv: batadv0: Interface deactivated: dummy0 [ 447.181718][T28034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.229381][T28034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.309092][T28034] vlan0: left promiscuous mode [ 447.318402][T28034] vlan0: left allmulticast mode [ 447.332156][T28034] veth0_vlan: left allmulticast mode [ 447.387222][T28072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6394'. [ 447.449066][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 447.469426][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 447.481383][T28037] netlink: 'syz.1.6391': attribute type 12 has an invalid length. [ 447.492468][T28037] netlink: 'syz.1.6391': attribute type 29 has an invalid length. [ 447.514530][T28037] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6391'. [ 447.532945][T28037] netlink: 'syz.1.6391': attribute type 3 has an invalid length. [ 447.542387][T28037] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6391'. [ 447.561874][T28079] FAULT_INJECTION: forcing a failure. [ 447.561874][T28079] name failslab, interval 1, probability 0, space 0, times 0 [ 447.574544][T28079] CPU: 1 UID: 0 PID: 28079 Comm: syz.2.6397 Not tainted syzkaller #0 PREEMPT(full) [ 447.574567][T28079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 447.574577][T28079] Call Trace: [ 447.574584][T28079] [ 447.574591][T28079] dump_stack_lvl+0xe8/0x150 [ 447.574612][T28079] should_fail_ex+0x40c/0x560 [ 447.574631][T28079] should_failslab+0xa8/0x100 [ 447.574652][T28079] ? skb_clone+0x212/0x3a0 [ 447.574665][T28079] kmem_cache_alloc_noprof+0x87/0x650 [ 447.574683][T28079] ? lock_acquire+0x5f/0x350 [ 447.574705][T28079] skb_clone+0x212/0x3a0 [ 447.574717][T28079] ? raw_local_deliver+0xb1b/0x1010 [ 447.574736][T28079] raw_local_deliver+0xb2e/0x1010 [ 447.574759][T28079] ? raw_local_deliver+0x345/0x1010 [ 447.574774][T28079] ? __pfx_raw_local_deliver+0x10/0x10 [ 447.574789][T28079] ? rcu_is_watching+0x15/0xb0 [ 447.574805][T28079] ? lock_acquire+0x5f/0x350 [ 447.574828][T28079] ip_protocol_deliver_rcu+0x3b/0x440 [ 447.574845][T28079] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 447.574861][T28079] ip_local_deliver_finish+0x3bb/0x6f0 [ 447.574879][T28079] NF_HOOK+0x336/0x3c0 [ 447.574894][T28079] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 447.574909][T28079] ? NF_HOOK+0x9e/0x3c0 [ 447.574922][T28079] ? __pfx_NF_HOOK+0x10/0x10 [ 447.574937][T28079] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 447.574954][T28079] ? ip_rcv_finish_core+0x1128/0x1c00 [ 447.574969][T28079] ? ip_local_deliver+0x113/0x190 [ 447.574984][T28079] ? __pfx_ip_local_deliver+0x10/0x10 [ 447.574999][T28079] ip_sublist_rcv_finish+0x1f0/0x240 [ 447.575017][T28079] ip_sublist_rcv+0x767/0xa70 [ 447.575038][T28079] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 447.575056][T28079] ? __pfx_ip_rcv_finish+0x10/0x10 [ 447.575071][T28079] ? ip_rcv_core+0x88d/0xd50 [ 447.575089][T28079] ip_list_rcv+0x3ec/0x440 [ 447.575108][T28079] ? __pfx_ip_list_rcv+0x10/0x10 [ 447.575124][T28079] ? kasan_save_track+0x4f/0x80 [ 447.575143][T28079] ? kasan_save_track+0x3e/0x80 [ 447.575168][T28079] ? __kasan_slab_alloc+0x6c/0x80 [ 447.575187][T28079] ? kmem_cache_alloc_bulk_noprof+0x49f/0x7c0 [ 447.575208][T28079] ? __pfx_ip_list_rcv+0x10/0x10 [ 447.575223][T28079] __netif_receive_skb_list_core+0x804/0x830 [ 447.575249][T28079] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 447.575272][T28079] netif_receive_skb_list_internal+0x995/0xcf0 [ 447.575293][T28079] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 447.575310][T28079] ? eth_type_trans+0x352/0x800 [ 447.575325][T28079] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 447.575347][T28079] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 447.575366][T28079] netif_receive_skb_list+0x55/0x450 [ 447.575382][T28079] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 447.575404][T28079] bpf_test_run_xdp_live+0x1875/0x1c20 [ 447.575429][T28079] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 447.575453][T28079] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 447.575483][T28079] ? 0xffffffffa0203dd8 [ 447.575496][T28079] ? 0xffffffffa0203e98 [ 447.575508][T28079] ? 0xffffffffa0204010 [ 447.575520][T28079] ? 0xffffffffa02042d4 [ 447.575540][T28079] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 447.575560][T28079] ? _copy_from_user+0x94/0xb0 [ 447.575580][T28079] ? bpf_test_init+0x113/0x150 [ 447.575600][T28079] ? xdp_convert_md_to_buff+0x5b/0x330 [ 447.575623][T28079] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 447.575645][T28079] ? lock_release+0x4b/0x3c0 [ 447.575667][T28079] ? rcu_is_watching+0x15/0xb0 [ 447.575684][T28079] ? lock_release+0x4b/0x3c0 [ 447.575704][T28079] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 447.575727][T28079] ? __fget_files+0x2a/0x420 [ 447.575747][T28079] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 447.575768][T28079] bpf_prog_test_run+0x2c5/0x340 [ 447.575791][T28079] __sys_bpf+0x643/0x950 [ 447.575812][T28079] ? __pfx___sys_bpf+0x10/0x10 [ 447.575838][T28079] ? ksys_write+0x242/0x270 [ 447.575859][T28079] ? __pfx_ksys_write+0x10/0x10 [ 447.575879][T28079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.575896][T28079] __x64_sys_bpf+0x7c/0x90 [ 447.575915][T28079] do_syscall_64+0x174/0x580 [ 447.575936][T28079] ? trace_irq_disable+0x3b/0x140 [ 447.575957][T28079] ? clear_bhb_loop+0x40/0x90 [ 447.575974][T28079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.575990][T28079] RIP: 0033:0x7fd13b79ce59 [ 447.576005][T28079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.576019][T28079] RSP: 002b:00007fd13c6fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.576036][T28079] RAX: ffffffffffffffda RBX: 00007fd13ba15fa0 RCX: 00007fd13b79ce59 [ 447.576048][T28079] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 447.576059][T28079] RBP: 00007fd13c6fa090 R08: 0000000000000000 R09: 0000000000000000 [ 447.576069][T28079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.576079][T28079] R13: 00007fd13ba16038 R14: 00007fd13ba15fa0 R15: 00007ffe28f54448 [ 447.576098][T28079] [ 448.246413][T28108] validate_nla: 1 callbacks suppressed [ 448.246432][T28108] netlink: 'syz.1.6398': attribute type 1 has an invalid length. [ 448.391117][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.437540][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.480900][T28127] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.6403'. [ 448.495615][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.504950][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.544239][T28132] FAULT_INJECTION: forcing a failure. [ 448.544239][T28132] name failslab, interval 1, probability 0, space 0, times 0 [ 448.602104][T28138] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6406'. [ 448.602285][T28132] CPU: 1 UID: 0 PID: 28132 Comm: syz.2.6405 Not tainted syzkaller #0 PREEMPT(full) [ 448.602307][T28132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.602316][T28132] Call Trace: [ 448.602323][T28132] [ 448.602329][T28132] dump_stack_lvl+0xe8/0x150 [ 448.602352][T28132] should_fail_ex+0x40c/0x560 [ 448.602371][T28132] should_failslab+0xa8/0x100 [ 448.602395][T28132] __kmalloc_noprof+0xe8/0x750 [ 448.602414][T28132] ? lock_release+0x4b/0x3c0 [ 448.602435][T28132] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 448.602457][T28132] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 448.602478][T28132] genl_family_rcv_msg_doit+0xda/0x340 [ 448.602499][T28132] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 448.602520][T28132] ? apparmor_capable+0x126/0x170 [ 448.602630][T28132] ? bpf_lsm_capable+0x9/0x20 [ 448.602645][T28132] ? security_capable+0x7e/0x2c0 [ 448.602723][T28132] genl_rcv_msg+0x614/0x7a0 [ 448.602743][T28132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.602759][T28132] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 448.602833][T28132] ? __netlink_lookup+0xc6/0x8b0 [ 448.602847][T28132] ? rcu_is_watching+0x15/0xb0 [ 448.602866][T28132] netlink_rcv_skb+0x226/0x4a0 [ 448.602939][T28132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.602956][T28132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.602983][T28132] ? down_read+0x2be/0x330 [ 448.603006][T28132] genl_rcv+0x28/0x40 [ 448.603021][T28132] netlink_unicast+0x7bb/0x940 [ 448.603045][T28132] netlink_sendmsg+0x813/0xb40 [ 448.603068][T28132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.603090][T28132] ? aa_sock_msg_perm+0xf1/0x1b0 [ 448.603106][T28132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.603124][T28132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.603145][T28132] ____sys_sendmsg+0x9b9/0xa20 [ 448.603174][T28132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.603195][T28132] ? lock_release+0x4b/0x3c0 [ 448.603217][T28132] ? import_iovec+0x73/0xa0 [ 448.603265][T28132] ___sys_sendmsg+0x2a5/0x360 [ 448.603284][T28132] ? rcu_is_watching+0x15/0xb0 [ 448.603299][T28132] ? get_pid_task+0x20/0x1f0 [ 448.603314][T28132] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.603336][T28132] ? rcu_is_watching+0x15/0xb0 [ 448.603362][T28132] ? __fget_files+0x2a/0x420 [ 448.603378][T28132] ? __fget_files+0x3a2/0x420 [ 448.603399][T28132] __x64_sys_sendmsg+0x1b1/0x290 [ 448.603420][T28132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.603446][T28132] ? rcu_is_watching+0x15/0xb0 [ 448.603463][T28132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.603478][T28132] do_syscall_64+0x174/0x580 [ 448.603497][T28132] ? trace_irq_disable+0x3b/0x140 [ 448.603516][T28132] ? clear_bhb_loop+0x40/0x90 [ 448.603534][T28132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.603550][T28132] RIP: 0033:0x7fd13b79ce59 [ 448.603565][T28132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.603578][T28132] RSP: 002b:00007fd13c6fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.603595][T28132] RAX: ffffffffffffffda RBX: 00007fd13ba15fa0 RCX: 00007fd13b79ce59 [ 448.603607][T28132] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 448.603617][T28132] RBP: 00007fd13c6fa090 R08: 0000000000000000 R09: 0000000000000000 [ 448.603627][T28132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.603637][T28132] R13: 00007fd13ba16038 R14: 00007fd13ba15fa0 R15: 00007ffe28f54448 [ 448.603656][T28132] [ 448.607518][T28129] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 448.976820][T28129] bond1 (unregistering): Released all slaves [ 448.993222][ T94] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.010267][ T94] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.026939][ T94] veth0_to_bond: left promiscuous mode [ 449.089032][T28159] netlink: 'syz.2.6408': attribute type 29 has an invalid length. [ 449.109994][T28168] net_ratelimit: 14 callbacks suppressed [ 449.110014][T28168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.132463][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6408'. [ 449.132629][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6408'. [ 449.171665][T27334] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.194128][T27334] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.210686][T27334] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.223309][T27334] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.627097][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 449.635305][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 449.643460][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 449.651484][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 449.672074][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 449.720489][T28214] FAULT_INJECTION: forcing a failure. [ 449.720489][T28214] name failslab, interval 1, probability 0, space 0, times 0 [ 449.742934][T28214] CPU: 1 UID: 0 PID: 28214 Comm: syz.3.6418 Not tainted syzkaller #0 PREEMPT(full) [ 449.742956][T28214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.742965][T28214] Call Trace: [ 449.742970][T28214] [ 449.742977][T28214] dump_stack_lvl+0xe8/0x150 [ 449.743000][T28214] should_fail_ex+0x40c/0x560 [ 449.743018][T28214] should_failslab+0xa8/0x100 [ 449.743042][T28214] __kmalloc_noprof+0xe8/0x750 [ 449.743062][T28214] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 449.743084][T28214] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 449.743105][T28214] genl_family_rcv_msg_doit+0xda/0x340 [ 449.743126][T28214] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 449.743147][T28214] ? apparmor_capable+0x126/0x170 [ 449.743166][T28214] ? bpf_lsm_capable+0x9/0x20 [ 449.743181][T28214] ? security_capable+0x7e/0x2c0 [ 449.743206][T28214] genl_rcv_msg+0x614/0x7a0 [ 449.743225][T28214] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.743241][T28214] ? ref_tracker_free+0x689/0x830 [ 449.743330][T28214] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 449.743349][T28214] ? __pfx_ref_tracker_free+0x10/0x10 [ 449.743369][T28214] netlink_rcv_skb+0x226/0x4a0 [ 449.743392][T28214] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.743410][T28214] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.743435][T28214] ? down_read+0x2be/0x330 [ 449.743457][T28214] genl_rcv+0x28/0x40 [ 449.743472][T28214] netlink_unicast+0x7bb/0x940 [ 449.743494][T28214] netlink_sendmsg+0x813/0xb40 [ 449.743519][T28214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.743542][T28214] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.743558][T28214] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.743577][T28214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.743600][T28214] ____sys_sendmsg+0x9b9/0xa20 [ 449.743625][T28214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.743647][T28214] ? lock_release+0x4b/0x3c0 [ 449.743670][T28214] ? import_iovec+0x73/0xa0 [ 449.743698][T28214] ___sys_sendmsg+0x2a5/0x360 [ 449.743718][T28214] ? rcu_is_watching+0x15/0xb0 [ 449.743733][T28214] ? get_pid_task+0x20/0x1f0 [ 449.743749][T28214] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.743772][T28214] ? rcu_is_watching+0x15/0xb0 [ 449.743801][T28214] ? __fget_files+0x2a/0x420 [ 449.743819][T28214] ? __fget_files+0x3a2/0x420 [ 449.743848][T28214] __x64_sys_sendmsg+0x1b1/0x290 [ 449.743870][T28214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.743897][T28214] ? rcu_is_watching+0x15/0xb0 [ 449.743914][T28214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.743931][T28214] do_syscall_64+0x174/0x580 [ 449.743951][T28214] ? trace_irq_disable+0x3b/0x140 [ 449.743971][T28214] ? clear_bhb_loop+0x40/0x90 [ 449.743989][T28214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.744004][T28214] RIP: 0033:0x7fb893b9ce59 [ 449.744021][T28214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.744035][T28214] RSP: 002b:00007fb8949d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.744053][T28214] RAX: ffffffffffffffda RBX: 00007fb893e15fa0 RCX: 00007fb893b9ce59 [ 449.744064][T28214] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 449.744075][T28214] RBP: 00007fb8949d5090 R08: 0000000000000000 R09: 0000000000000000 [ 449.744085][T28214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.744095][T28214] R13: 00007fb893e16038 R14: 00007fb893e15fa0 R15: 00007fffd15ac888 [ 449.744112][T28214] [ 450.522167][T28248] sctp: [Deprecated]: syz.4.6428 (pid 28248) Use of int in max_burst socket option deprecated. [ 450.522167][T28248] Use struct sctp_assoc_value instead [ 450.565436][T28254] IPVS: set_ctl: invalid protocol: 107 172.20.20.68:20002 [ 450.735203][T28204] lo speed is unknown, defaulting to 1000 [ 450.749584][T28204] lo speed is unknown, defaulting to 1000 [ 450.848672][T28281] netlink: 'syz.4.6434': attribute type 30 has an invalid length. [ 450.873549][T28281] bond2: option arp_missed_max: invalid value (0) [ 450.892170][T28281] bond2: option arp_missed_max: allowed values 1 - 255 [ 450.906346][T28281] bond2 (unregistering): Released all slaves [ 450.948418][T28286] netlink: 'syz.3.6435': attribute type 6 has an invalid length. [ 450.961356][T28286] netlink: 'syz.3.6435': attribute type 5 has an invalid length. [ 450.970147][T28286] __nla_validate_parse: 7 callbacks suppressed [ 450.970162][T28286] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6435'. [ 451.095873][T28204] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.103081][T28204] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.110896][T28204] bridge_slave_0: entered allmulticast mode [ 451.118005][T28204] bridge_slave_0: entered promiscuous mode [ 451.126034][T28204] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.133212][T28204] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.140640][T28204] bridge_slave_1: entered allmulticast mode [ 451.147997][T28204] bridge_slave_1: entered promiscuous mode [ 451.377472][T28204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.393545][T28204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.429258][T28303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6438'. [ 451.430333][T28204] team0: Port device team_slave_0 added [ 451.448882][T28204] team0: Port device team_slave_1 added [ 451.482361][T28303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.490956][T28303] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.501964][T28303] batman_adv: batadv0: Interface activated: dummy0 [ 451.516368][T28303] batadv0: mtu less than device minimum [ 451.525707][T28303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.536721][T28303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.547680][T28303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.558656][T28303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.569623][T28303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.580603][T28303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.591560][T28303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.602532][T28303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.656966][T28303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.708744][T28308] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6440'. [ 451.730361][T28303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.738326][ T5622] Bluetooth: hci4: command tx timeout [ 451.796249][T28303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.830068][T28314] netlink: 'syz.4.6441': attribute type 19 has an invalid length. [ 451.848298][T28303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.860090][T28303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.876075][T28303] veth1_vlan: left promiscuous mode [ 451.882709][T28303] veth0_vlan: left promiscuous mode [ 451.891222][T28303] veth0_vlan: entered promiscuous mode [ 451.901371][T28303] veth1_vlan: entered promiscuous mode [ 451.916869][T28303] veth1_macvtap: left promiscuous mode [ 451.923687][T28303] veth0_macvtap: left promiscuous mode [ 451.930610][T28303] veth0_macvtap: entered promiscuous mode [ 451.938157][T28303] veth1_macvtap: entered promiscuous mode [ 451.953444][T28303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.962336][T28303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.970968][T28303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.992585][T28303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.005796][T28303] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 452.071636][T27334] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.078807][T27334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.090654][T27334] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.097827][T27334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.136491][ T6803] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.147725][ T6803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.160834][T28204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.170709][T28204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.198309][T28204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.224217][T28204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.232703][T28204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.248388][T28321] netlink: 'syz.2.6442': attribute type 6 has an invalid length. [ 452.259562][T28204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.306925][ T6803] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.323506][ T6803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.375479][ T6803] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.417743][ T6803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.471176][ T6803] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.497291][ T6803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.537051][T28333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6445'. [ 452.561370][T28204] hsr_slave_0: entered promiscuous mode [ 452.575053][T28333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6445'. [ 452.587887][T28204] hsr_slave_1: entered promiscuous mode [ 452.598343][T28204] debugfs: 'hsr0' already exists in 'hsr' [ 452.618506][T28204] Cannot create hsr debugfs directory [ 452.762144][T28349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6448'. [ 452.870837][T28355] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6451'. [ 452.896240][T28204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.906599][T28204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 452.922501][T28204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 452.927015][T28358] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6449'. [ 453.050337][T28368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6454'. [ 453.078738][T28360] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.085931][T28360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.094587][T28368] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6454'. [ 453.111807][T28360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.148156][T28360] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.170942][T28360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.281351][T28360] batman_adv: batadv0: Interface activated: gretap1 [ 453.312226][T27334] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.319410][T27334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.347726][T28374] syzkaller1: entered promiscuous mode [ 453.360153][T28374] syzkaller1: entered allmulticast mode [ 453.411500][T28204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.445070][T28204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 453.468771][T28204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.513231][T28400] netlink: 'syz.4.6458': attribute type 1 has an invalid length. [ 453.579128][T28204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.613413][T28204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 453.643986][T28204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.677493][T28414] FAULT_INJECTION: forcing a failure. [ 453.677493][T28414] name failslab, interval 1, probability 0, space 0, times 0 [ 453.690194][T28414] CPU: 1 UID: 0 PID: 28414 Comm: syz.3.6461 Not tainted syzkaller #0 PREEMPT(full) [ 453.690217][T28414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.690227][T28414] Call Trace: [ 453.690234][T28414] [ 453.690241][T28414] dump_stack_lvl+0xe8/0x150 [ 453.690264][T28414] should_fail_ex+0x40c/0x560 [ 453.690285][T28414] should_failslab+0xa8/0x100 [ 453.690307][T28414] ? skb_clone+0x212/0x3a0 [ 453.690322][T28414] kmem_cache_alloc_noprof+0x87/0x650 [ 453.690342][T28414] ? lock_acquire+0x5f/0x350 [ 453.690365][T28414] skb_clone+0x212/0x3a0 [ 453.690379][T28414] ? raw_local_deliver+0xb1b/0x1010 [ 453.690399][T28414] raw_local_deliver+0xb2e/0x1010 [ 453.690423][T28414] ? raw_local_deliver+0x345/0x1010 [ 453.690439][T28414] ? __pfx_raw_local_deliver+0x10/0x10 [ 453.690455][T28414] ? rcu_is_watching+0x15/0xb0 [ 453.690471][T28414] ? lock_acquire+0x5f/0x350 [ 453.690495][T28414] ip_protocol_deliver_rcu+0x3b/0x440 [ 453.690511][T28414] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 453.690527][T28414] ip_local_deliver_finish+0x3bb/0x6f0 [ 453.690546][T28414] NF_HOOK+0x336/0x3c0 [ 453.690560][T28414] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 453.690576][T28414] ? NF_HOOK+0x9e/0x3c0 [ 453.690589][T28414] ? __pfx_NF_HOOK+0x10/0x10 [ 453.690603][T28414] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 453.690619][T28414] ? ip_rcv_finish_core+0x1128/0x1c00 [ 453.690635][T28414] ? ip_local_deliver+0x113/0x190 [ 453.690650][T28414] ? __pfx_ip_local_deliver+0x10/0x10 [ 453.690664][T28414] ip_sublist_rcv_finish+0x1f0/0x240 [ 453.690681][T28414] ip_sublist_rcv+0x767/0xa70 [ 453.690701][T28414] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 453.690716][T28414] ? __pfx_ip_rcv_finish+0x10/0x10 [ 453.690730][T28414] ? ip_rcv_core+0x88d/0xd50 [ 453.690747][T28414] ip_list_rcv+0x3ec/0x440 [ 453.690766][T28414] ? __pfx_ip_list_rcv+0x10/0x10 [ 453.690782][T28414] ? kasan_save_track+0x4f/0x80 [ 453.690801][T28414] ? kasan_save_track+0x3e/0x80 [ 453.690817][T28414] ? __kasan_slab_alloc+0x6c/0x80 [ 453.690834][T28414] ? kmem_cache_alloc_bulk_noprof+0x49f/0x7c0 [ 453.690855][T28414] ? __pfx_ip_list_rcv+0x10/0x10 [ 453.690870][T28414] __netif_receive_skb_list_core+0x804/0x830 [ 453.690896][T28414] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 453.690919][T28414] netif_receive_skb_list_internal+0x995/0xcf0 [ 453.690939][T28414] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 453.690955][T28414] ? eth_type_trans+0x352/0x800 [ 453.690969][T28414] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 453.690991][T28414] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 453.691009][T28414] netif_receive_skb_list+0x55/0x450 [ 453.691024][T28414] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 453.691046][T28414] bpf_test_run_xdp_live+0x1875/0x1c20 [ 453.691081][T28414] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 453.691105][T28414] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 453.691134][T28414] ? 0xffffffffa0203d88 [ 453.691147][T28414] ? 0xffffffffa0203e98 [ 453.691157][T28414] ? 0xffffffffa0204010 [ 453.691168][T28414] ? 0xffffffffa02042d4 [ 453.691188][T28414] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 453.691207][T28414] ? _copy_from_user+0x94/0xb0 [ 453.691227][T28414] ? bpf_test_init+0x113/0x150 [ 453.691245][T28414] ? xdp_convert_md_to_buff+0x5b/0x330 [ 453.691267][T28414] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 453.691288][T28414] ? lock_release+0x4b/0x3c0 [ 453.691311][T28414] ? rcu_is_watching+0x15/0xb0 [ 453.691328][T28414] ? lock_release+0x4b/0x3c0 [ 453.691348][T28414] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 453.691371][T28414] ? __fget_files+0x2a/0x420 [ 453.691390][T28414] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 453.691413][T28414] bpf_prog_test_run+0x2c5/0x340 [ 453.691435][T28414] __sys_bpf+0x643/0x950 [ 453.691456][T28414] ? __pfx___sys_bpf+0x10/0x10 [ 453.691481][T28414] ? ksys_write+0x242/0x270 [ 453.691502][T28414] ? __pfx_ksys_write+0x10/0x10 [ 453.691523][T28414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.691540][T28414] __x64_sys_bpf+0x7c/0x90 [ 453.691557][T28414] do_syscall_64+0x174/0x580 [ 453.691577][T28414] ? trace_irq_disable+0x3b/0x140 [ 453.691597][T28414] ? clear_bhb_loop+0x40/0x90 [ 453.691614][T28414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.691630][T28414] RIP: 0033:0x7fb893b9ce59 [ 453.691644][T28414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.691658][T28414] RSP: 002b:00007fb8949d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.691676][T28414] RAX: ffffffffffffffda RBX: 00007fb893e15fa0 RCX: 00007fb893b9ce59 [ 453.691687][T28414] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 453.691697][T28414] RBP: 00007fb8949d5090 R08: 0000000000000000 R09: 0000000000000000 [ 453.691707][T28414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.691717][T28414] R13: 00007fb893e16038 R14: 00007fb893e15fa0 R15: 00007fffd15ac888 [ 453.691736][T28414] [ 454.182064][ T5622] Bluetooth: hci4: command tx timeout [ 454.204865][ T5759] net_ratelimit: 59 callbacks suppressed [ 454.204882][ T5759] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 454.225849][ T5759] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 454.437235][T28204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.447888][T28204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 454.461202][T28204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 454.507381][T28432] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 454.554146][T28432] bond1 (unregistering): Released all slaves [ 454.753808][T28447] openvswitch: netlink: IP tunnel dst address not specified [ 454.785783][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 454.800367][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 454.828503][T28204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.831355][T28453] netlink: 'syz.3.6468': attribute type 62 has an invalid length. [ 454.852693][T28204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.876102][T28204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.890747][T28204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.906795][T28204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.941845][T28204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.965660][T28204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.988060][T28204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 455.041074][T28467] vlan2: entered allmulticast mode [ 455.046738][T28467] bond0: entered allmulticast mode [ 455.051891][T28467] bond_slave_0: entered allmulticast mode [ 455.061146][T28467] bond_slave_1: entered allmulticast mode [ 455.087967][T28471] openvswitch: netlink: VLAN attribute unexpected. [ 455.148575][T28473] netlink: 'syz.4.6475': attribute type 1 has an invalid length. [ 455.160334][T28204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.216683][T28473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.249981][T28204] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.269813][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.276993][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.330152][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.337326][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.377661][T28486] team_slave_1: entered promiscuous mode [ 455.384657][ T94] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 455.399056][ T94] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 455.429761][T28486] team0: Port device team_slave_1 removed [ 455.617146][T28499] netlink: 'syz.2.6482': attribute type 1 has an invalid length. [ 455.657458][T28499] bond1: entered promiscuous mode [ 455.663012][T28499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.688753][T28499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.705338][T28499] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 455.720208][T28499] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 455.732455][T28499] bond1: (slave vti0): making interface the new active one [ 455.742527][T28499] vti0: entered promiscuous mode [ 455.753420][T28499] vti0: left promiscuous mode [ 455.929725][T28524] netlink: 'syz.1.6487': attribute type 3 has an invalid length. [ 455.937682][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 455.937710][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 455.975139][T28524] __nla_validate_parse: 9 callbacks suppressed [ 455.975155][T28524] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6487'. [ 456.067088][T28536] netlink: 'syz.4.6489': attribute type 11 has an invalid length. [ 456.084188][T28536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6489'. [ 456.144238][ T94] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.175042][T28543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6493'. [ 456.179540][ T94] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.214776][ T5622] Bluetooth: hci4: command tx timeout [ 456.229833][ T94] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.257825][T28204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.282755][ T94] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.368507][T28204] veth0_vlan: entered promiscuous mode [ 456.417562][T28204] veth1_vlan: entered promiscuous mode [ 456.504556][T28204] veth0_macvtap: entered promiscuous mode [ 456.538498][T28204] veth1_macvtap: entered promiscuous mode [ 456.569181][T28573] netlink: 'syz.2.6504': attribute type 11 has an invalid length. [ 456.578808][T28573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6504'. [ 456.579208][T28574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 456.597031][T28204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.619120][T28574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 456.687800][T28573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.715882][T28580] syzkaller1: entered promiscuous mode [ 456.721671][T28580] syzkaller1: entered allmulticast mode [ 456.755712][T28204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.779718][T28587] raw_sendmsg: syz.4.6506 forgot to set AF_INET. Fix it! [ 456.810144][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.827838][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.848045][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.877912][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.889158][T28591] syzkaller0: entered promiscuous mode [ 456.896074][T28591] syzkaller0: entered allmulticast mode [ 456.948924][T28596] syzkaller0: entered promiscuous mode [ 456.955222][T28596] syzkaller0: entered allmulticast mode [ 457.005456][T27333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.018031][T27333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.054156][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.071379][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.105787][T28599] netlink: 'syz.4.6511': attribute type 21 has an invalid length. [ 457.266157][T28616] 8021q: VLANs not supported on ip_vti0 [ 457.279461][T28623] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 457.358748][T28628] netlink: 'syz.0.6519': attribute type 1 has an invalid length. [ 457.409826][T28636] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6523'. [ 457.431323][T28633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6522'. [ 457.441724][T28636] netlink: 'syz.4.6523': attribute type 5 has an invalid length. [ 457.450249][T28636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6523'. [ 457.539016][T28648] netlink: 'syz.4.6526': attribute type 32 has an invalid length. [ 457.660502][T28661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.670695][T28661] bond0: (slave bond1): Enslaving as an active interface with an up link [ 457.718870][T28672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6534'. [ 457.731903][T28672] netlink: 'syz.1.6534': attribute type 7 has an invalid length. [ 457.827048][T28679] syzkaller0: entered promiscuous mode [ 457.832584][T28679] syzkaller0: entered allmulticast mode [ 457.847687][T28682] Unsupported ieee802154 address type: 0 [ 457.891226][T28688] IPv6: sit1: Disabled Multicast RS [ 458.159965][T28711] rdma_rxe: rxe_newlink: failed to add veth1_to_batadv [ 458.228987][T28711] tipc: Failed to obtain node identity [ 458.261895][T28711] tipc: Enabling of bearer rejected, failed to enable media [ 458.296829][ T5622] Bluetooth: hci4: command tx timeout [ 458.667434][T28746] syzkaller0: entered promiscuous mode [ 458.683444][T28746] syzkaller0: entered allmulticast mode [ 458.873197][T28767] erspan0: entered promiscuous mode [ 458.920685][T28766] bond3 (unregistering): Released all slaves [ 458.961082][T28773] syzkaller0: entered promiscuous mode [ 458.969276][T28773] syzkaller0: entered allmulticast mode [ 459.127450][T28786] bond2 (unregistering): Released all slaves [ 459.165914][T28789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.199325][T28799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.207872][T28799] bond2: (slave bond3): Enslaving as an active interface with an up link [ 459.240106][T28806] net_ratelimit: 15 callbacks suppressed [ 459.240124][T28806] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 459.257986][T28806] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 459.270844][T28806] openvswitch: netlink: IP tunnel TTL not specified. [ 459.285622][T28789] bond2 (unregistering): (slave bond3): Releasing backup interface [ 459.327619][T28789] bond2 (unregistering): Released all slaves [ 459.425383][T28819] syz_tun: entered allmulticast mode [ 459.493701][T28823] openvswitch: netlink: Missing key (keys=40, expected=80) [ 459.515910][ T633] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 459.530477][ T633] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 459.569397][T28832] validate_nla: 1 callbacks suppressed [ 459.569415][T28832] netlink: 'syz.1.6583': attribute type 9 has an invalid length. [ 459.627045][T28836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.682293][T28836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.713751][T28836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.811225][T28836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.822647][T28836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.834198][T28836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.854141][T28859] netlink: 'syz.1.6591': attribute type 24 has an invalid length. [ 459.867266][T28850] syzkaller0: entered promiscuous mode [ 459.872902][T28850] syzkaller0: entered allmulticast mode [ 459.880957][T28852] syzkaller0: entered promiscuous mode [ 459.886823][T28852] syzkaller0: entered allmulticast mode [ 459.920821][T28836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.936051][T28836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.949321][T28836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.973663][T28868] h: entered promiscuous mode [ 460.026419][T28836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.053315][T28874] netlink: 'syz.1.6597': attribute type 1 has an invalid length. [ 460.062177][T28836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.073743][T28836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 460.085835][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 460.100282][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 460.115489][T28876] ipt_ECN: cannot use operation on non-tcp rule [ 460.138267][T28872] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 460.154738][T28872] bond2: (slave lo): Enslaving as an active interface with an up link [ 460.164541][T28872] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 460.211737][T28874] bond2: entered promiscuous mode [ 460.243757][T28874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.256057][T28891] netlink: 'syz.2.6601': attribute type 1 has an invalid length. [ 460.283888][T28891] netlink: 'syz.2.6601': attribute type 3 has an invalid length. [ 460.294204][T28891] netlink: 'syz.2.6601': attribute type 7 has an invalid length. [ 460.302243][T28891] netlink: 'syz.2.6601': attribute type 8 has an invalid length. [ 460.314398][T28891] NCSI netlink: No device for ifindex 131092 [ 460.343469][T28874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.350607][T28874] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 460.361278][T28874] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 460.372541][T28874] bond2: (slave ip6gre1): making interface the new active one [ 460.381629][T28874] ip6gre1: entered promiscuous mode [ 460.390479][T28874] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 460.416998][T28895] netlink: 'syz.2.6601': attribute type 3 has an invalid length. [ 460.425390][T27334] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.449618][T27334] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 460.479455][T27334] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.511992][T27334] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.521663][T27334] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 460.531793][T27334] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.579451][T27334] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.607889][T27334] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 460.626496][T27333] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 460.628719][T27334] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.649924][T27334] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.658728][T27334] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 460.668213][T27334] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.678955][T28912] netlink: 'syz.0.6605': attribute type 16 has an invalid length. [ 460.687983][T28912] netlink: 'syz.0.6605': attribute type 17 has an invalid length. [ 460.722533][T28908] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.733330][T28908] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.772674][T28904] lo speed is unknown, defaulting to 1000 [ 460.832158][T28912] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.839345][T28912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.849464][T28912] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.856591][T28912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.927195][T28904] lo speed is unknown, defaulting to 1000 [ 461.133740][T28949] __nla_validate_parse: 21 callbacks suppressed [ 461.133758][T28949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6617'. [ 461.225249][T28949] macvtap1: entered promiscuous mode [ 461.230690][T28949] vlan0: entered promiscuous mode [ 461.237746][T28949] macvtap1: entered allmulticast mode [ 461.243257][T28949] vlan0: entered allmulticast mode [ 461.248886][T28949] veth0_vlan: entered allmulticast mode [ 461.271408][T28956] netlink: 'syz.3.6620': attribute type 11 has an invalid length. [ 461.287321][T28956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6620'. [ 461.479923][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6624'. [ 461.525089][T28981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6627'. [ 461.698545][T28985] syzkaller0: entered promiscuous mode [ 461.711393][T28985] syzkaller0: entered allmulticast mode [ 461.815195][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 461.935775][T29009] tipc: Failed to remove unknown binding: 66,0,0/0:99616859/99616863 [ 461.944072][T29009] tipc: Failed to remove unknown binding: 66,0,0/0:99616859/99616862 [ 461.953083][T29009] tipc: Failed to remove unknown binding: 66,0,0/0:99616859/99616861 [ 461.961745][T29009] tipc: Failed to remove unknown binding: 66,0,0/0:99616859/99616860 [ 461.973635][T29010] tipc: Failed to remove unknown binding: 66,0,0/0:99616859/99616863 [ 461.991725][T29010] tipc: Failed to remove unknown binding: 66,0,0/0:99616859/99616862 [ 462.000154][T29010] tipc: Failed to remove unknown binding: 66,0,0/0:99616859/99616861 [ 462.008541][T29010] tipc: Failed to remove unknown binding: 66,0,0/0:99616859/99616860 [ 462.099720][T21485] IPVS: starting estimator thread 0... [ 462.204422][T29015] IPVS: using max 51 ests per chain, 122400 per kthread [ 462.255374][T29021] gtp0: entered allmulticast mode [ 462.262435][T29021] gtp0: entered promiscuous mode [ 462.268676][T29021] team0: Device gtp0 is of different type [ 462.349116][T29033] netlink: 'syz.3.6645': attribute type 11 has an invalid length. [ 462.448096][T29043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6649'. [ 462.632054][T29066] netlink: 268 bytes leftover after parsing attributes in process `syz.4.6656'. [ 462.745073][T29061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6655'. [ 462.803029][T29083] TCP: TCP_TX_DELAY enabled [ 462.834118][T29085] netlink: 'syz.2.6662': attribute type 11 has an invalid length. [ 462.904817][T29091] FAULT_INJECTION: forcing a failure. [ 462.904817][T29091] name failslab, interval 1, probability 0, space 0, times 0 [ 462.917514][T29091] CPU: 0 UID: 0 PID: 29091 Comm: syz.0.6664 Not tainted syzkaller #0 PREEMPT(full) [ 462.917537][T29091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.917547][T29091] Call Trace: [ 462.917553][T29091] [ 462.917560][T29091] dump_stack_lvl+0xe8/0x150 [ 462.917583][T29091] should_fail_ex+0x40c/0x560 [ 462.917602][T29091] should_failslab+0xa8/0x100 [ 462.917624][T29091] ? skb_clone+0x212/0x3a0 [ 462.917638][T29091] kmem_cache_alloc_noprof+0x87/0x650 [ 462.917657][T29091] ? lock_acquire+0x5f/0x350 [ 462.917681][T29091] skb_clone+0x212/0x3a0 [ 462.917695][T29091] ? raw_local_deliver+0xb1b/0x1010 [ 462.917714][T29091] raw_local_deliver+0xb2e/0x1010 [ 462.917738][T29091] ? raw_local_deliver+0x345/0x1010 [ 462.917754][T29091] ? __pfx_raw_local_deliver+0x10/0x10 [ 462.917769][T29091] ? rcu_is_watching+0x15/0xb0 [ 462.917784][T29091] ? lock_acquire+0x5f/0x350 [ 462.917806][T29091] ip_protocol_deliver_rcu+0x3b/0x440 [ 462.917822][T29091] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 462.917839][T29091] ip_local_deliver_finish+0x3bb/0x6f0 [ 462.917857][T29091] NF_HOOK+0x336/0x3c0 [ 462.917882][T29091] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 462.917898][T29091] ? NF_HOOK+0x9e/0x3c0 [ 462.917912][T29091] ? __pfx_NF_HOOK+0x10/0x10 [ 462.917926][T29091] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 462.917942][T29091] ? ip_rcv_finish_core+0x1128/0x1c00 [ 462.917957][T29091] ? ip_local_deliver+0x113/0x190 [ 462.917972][T29091] ? __pfx_ip_local_deliver+0x10/0x10 [ 462.917985][T29091] ip_sublist_rcv_finish+0x1f0/0x240 [ 462.918003][T29091] ip_sublist_rcv+0x767/0xa70 [ 462.918021][T29091] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 462.918039][T29091] ? __pfx_ip_rcv_finish+0x10/0x10 [ 462.918053][T29091] ? ip_rcv_core+0x88d/0xd50 [ 462.918071][T29091] ip_list_rcv+0x3ec/0x440 [ 462.918090][T29091] ? __pfx_ip_list_rcv+0x10/0x10 [ 462.918106][T29091] ? kasan_save_track+0x4f/0x80 [ 462.918124][T29091] ? kasan_save_track+0x3e/0x80 [ 462.918142][T29091] ? __kasan_slab_alloc+0x6c/0x80 [ 462.918160][T29091] ? kmem_cache_alloc_bulk_noprof+0x49f/0x7c0 [ 462.918181][T29091] ? __pfx_ip_list_rcv+0x10/0x10 [ 462.918196][T29091] __netif_receive_skb_list_core+0x804/0x830 [ 462.918222][T29091] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 462.918244][T29091] netif_receive_skb_list_internal+0x995/0xcf0 [ 462.918263][T29091] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 462.918279][T29091] ? eth_type_trans+0x352/0x800 [ 462.918294][T29091] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 462.918313][T29091] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 462.918331][T29091] netif_receive_skb_list+0x55/0x450 [ 462.918347][T29091] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 462.918370][T29091] bpf_test_run_xdp_live+0x1875/0x1c20 [ 462.918395][T29091] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 462.918419][T29091] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 462.918450][T29091] ? 0xffffffffa0203d88 [ 462.918464][T29091] ? 0xffffffffa0203e98 [ 462.918475][T29091] ? 0xffffffffa0204010 [ 462.918487][T29091] ? 0xffffffffa02042d4 [ 462.918509][T29091] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 462.918525][T29091] ? _copy_from_user+0x94/0xb0 [ 462.918543][T29091] ? bpf_test_init+0x113/0x150 [ 462.918561][T29091] ? xdp_convert_md_to_buff+0x5b/0x330 [ 462.918583][T29091] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 462.918603][T29091] ? lock_release+0x4b/0x3c0 [ 462.918627][T29091] ? rcu_is_watching+0x15/0xb0 [ 462.918643][T29091] ? lock_release+0x4b/0x3c0 [ 462.918662][T29091] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 462.918683][T29091] ? __fget_files+0x2a/0x420 [ 462.918702][T29091] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 462.918724][T29091] bpf_prog_test_run+0x2c5/0x340 [ 462.918748][T29091] __sys_bpf+0x643/0x950 [ 462.918768][T29091] ? __pfx___sys_bpf+0x10/0x10 [ 462.918789][T29091] ? ksys_write+0x242/0x270 [ 462.918809][T29091] ? __pfx_ksys_write+0x10/0x10 [ 462.918830][T29091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.918846][T29091] __x64_sys_bpf+0x7c/0x90 [ 462.918874][T29091] do_syscall_64+0x174/0x580 [ 462.918895][T29091] ? trace_irq_disable+0x3b/0x140 [ 462.918914][T29091] ? clear_bhb_loop+0x40/0x90 [ 462.918932][T29091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.918947][T29091] RIP: 0033:0x7fed48f9ce59 [ 462.918962][T29091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.918975][T29091] RSP: 002b:00007fed49ecc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.918994][T29091] RAX: ffffffffffffffda RBX: 00007fed49215fa0 RCX: 00007fed48f9ce59 [ 462.919006][T29091] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 462.919017][T29091] RBP: 00007fed49ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 462.919028][T29091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 462.919038][T29091] R13: 00007fed49216038 R14: 00007fed49215fa0 R15: 00007ffd6b0ba0b8 [ 462.919058][T29091] [ 462.939680][T29085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.527017][T29106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6666'. [ 463.543032][T29106] netlink: 35 bytes leftover after parsing attributes in process `syz.2.6666'. [ 463.555148][T29106] netlink: 35 bytes leftover after parsing attributes in process `syz.2.6666'. [ 463.568064][T29106] xt_l2tp: missing protocol rule (udp|l2tpip) [ 463.646180][T29111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.701318][T29111] bond2: (slave geneve2): making interface the new active one [ 463.715494][T29111] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 464.018315][T29152] syzkaller0: create flow: hash 2895362431 index 1 [ 464.082188][T29152] syzkaller0: delete flow: hash 2895362431 index 1 [ 464.254436][T27334] net_ratelimit: 15 callbacks suppressed [ 464.254453][T27334] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 464.275116][T27334] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 464.794619][T27334] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 464.809044][T27334] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 465.325248][T27334] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 465.340351][T27334] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 465.864769][ T5759] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 465.879276][ T5759] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 466.404592][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 466.419050][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 466.611513][T29113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.620813][T29117] __nla_validate_parse: 3 callbacks suppressed [ 466.620830][T29117] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6669'. [ 466.727143][T29186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6685'. [ 466.730918][T29191] validate_nla: 7 callbacks suppressed [ 466.730933][T29191] netlink: 'syz.1.6689': attribute type 1 has an invalid length. [ 466.908244][T29202] syzkaller0: entered allmulticast mode [ 466.960742][T29213] netlink: 'syz.4.6698': attribute type 10 has an invalid length. [ 466.987039][T29213] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.996173][T29213] bond0: (slave team0): Enslaving as an active interface with an up link [ 467.028512][T29215] syzkaller0: entered promiscuous mode [ 467.039055][T29223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6700'. [ 467.040926][T29215] syzkaller0: entered allmulticast mode [ 467.071907][T29223] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.083490][T29223] bridge_slave_1 (unregistering): left allmulticast mode [ 467.091647][T29223] bridge_slave_1 (unregistering): left promiscuous mode [ 467.099757][T29223] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.262007][T29248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6709'. [ 467.292906][T29248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6709'. [ 467.306937][T29248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6709'. [ 467.325118][T29251] vlan2: entered promiscuous mode [ 467.332303][T29251] hsr0: entered promiscuous mode [ 467.352103][T29251] vlan2: entered allmulticast mode [ 467.365925][T29251] hsr0: entered allmulticast mode [ 467.387372][T29251] hsr_slave_0: entered allmulticast mode [ 467.421246][T29251] hsr_slave_1: entered allmulticast mode [ 467.451703][T29264] netlink: 'syz.0.6712': attribute type 1 has an invalid length. [ 467.463128][T29262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.473578][T29264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6712'. [ 467.485197][T29262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.507495][T29262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.521729][T29262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.550609][T29262] batman_adv: batadv0: Interface deactivated: gretap1 [ 467.557945][T29267] netlink: 'syz.4.6713': attribute type 4 has an invalid length. [ 467.566048][T29268] netlink: 'syz.4.6713': attribute type 4 has an invalid length. [ 467.566494][T29262] batman_adv: batadv0: Removing interface: gretap1 [ 467.632127][T29266] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.639624][T29266] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.720819][T29266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.733122][T29266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.824244][T29266] vlan0: left allmulticast mode [ 467.835467][T29266] veth0_vlan: left allmulticast mode [ 467.847428][T29266] vlan0: left promiscuous mode [ 467.858117][T29266] macvtap1: left promiscuous mode [ 467.867916][T29266] macvtap1: left allmulticast mode [ 467.941089][ T94] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.982448][ T94] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 468.018880][ T94] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.037834][ T94] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.066727][ T94] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 468.087916][ T94] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.127146][T29276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6715'. [ 468.148814][T29300] netlink: 'syz.0.6721': attribute type 11 has an invalid length. [ 468.207860][ T94] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.223875][ T94] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 468.240951][ T94] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.252252][ T94] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.261055][ T94] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 468.270236][ T94] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.354109][T29310] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6721'. [ 468.401575][T29320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6725'. [ 468.418596][T29325] netlink: 'syz.4.6728': attribute type 3 has an invalid length. [ 468.476436][T29327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.511876][T29327] Bluetooth: MGMT ver 1.23 [ 468.629740][T29345] GUP no longer grows the stack in syz.2.6734 (29345): 200000003000-20000000a000 (200000001000) [ 468.646327][T29345] CPU: 0 UID: 0 PID: 29345 Comm: syz.2.6734 Not tainted syzkaller #0 PREEMPT(full) [ 468.646353][T29345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.646363][T29345] Call Trace: [ 468.646370][T29345] [ 468.646378][T29345] dump_stack_lvl+0xe8/0x150 [ 468.646402][T29345] __get_user_pages+0x238c/0x2720 [ 468.646453][T29345] ? lock_release+0x4b/0x3c0 [ 468.646478][T29345] ? __gup_longterm_locked+0xc3b/0x15c0 [ 468.646502][T29345] ? ktime_get+0x1f5/0x220 [ 468.646538][T29345] __gup_longterm_locked+0xd52/0x15c0 [ 468.646558][T29345] ? gup_fast_fallback+0xbc4/0x20d0 [ 468.646577][T29345] ? rcu_is_watching+0x15/0xb0 [ 468.646594][T29345] ? rcu_is_watching+0x15/0xb0 [ 468.646612][T29345] gup_fast_fallback+0x1d82/0x20d0 [ 468.646643][T29345] ? __pfx_gup_fast_fallback+0x10/0x10 [ 468.646662][T29345] ? lock_release+0x4b/0x3c0 [ 468.646681][T29345] ? __fget_files+0x2a/0x420 [ 468.646697][T29345] ? is_valid_gup_args+0x11f/0x200 [ 468.646714][T29345] ? get_user_pages_fast+0x4d/0xb0 [ 468.646729][T29345] __iov_iter_get_pages_alloc+0x378/0xa40 [ 468.646753][T29345] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 468.646788][T29345] iov_iter_get_pages2+0x5e/0xa0 [ 468.646811][T29345] __se_sys_vmsplice+0x7b5/0x1660 [ 468.646841][T29345] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 468.646861][T29345] ? __pfx_futex_wait+0x10/0x10 [ 468.646921][T29345] ? rcu_is_watching+0x15/0xb0 [ 468.646940][T29345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.646959][T29345] do_syscall_64+0x174/0x580 [ 468.646980][T29345] ? trace_irq_disable+0x3b/0x140 [ 468.647003][T29345] ? clear_bhb_loop+0x40/0x90 [ 468.647026][T29345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.647043][T29345] RIP: 0033:0x7fd13b79ce59 [ 468.647060][T29345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.647074][T29345] RSP: 002b:00007fd13c6fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 468.647093][T29345] RAX: ffffffffffffffda RBX: 00007fd13ba15fa0 RCX: 00007fd13b79ce59 [ 468.647107][T29345] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 468.647118][T29345] RBP: 00007fd13b832e6f R08: 0000000000000000 R09: 0000000000000000 [ 468.647130][T29345] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 468.647140][T29345] R13: 00007fd13ba16038 R14: 00007fd13ba15fa0 R15: 00007ffe28f54448 [ 468.647161][T29345] [ 469.010693][T29365] netlink: 'syz.2.6742': attribute type 1 has an invalid length. [ 469.069431][T29364] bond3: (slave geneve2): making interface the new active one [ 469.078569][T29364] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 469.091732][T27334] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.112101][T27334] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.124094][T27334] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.152682][T29372] sit0: entered promiscuous mode [ 469.159738][T29372] netlink: 'syz.4.6745': attribute type 1 has an invalid length. [ 469.180764][T27334] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.269677][T29384] pim6reg: entered allmulticast mode [ 469.341746][T29393] syzkaller0: entered promiscuous mode [ 469.349940][T29393] syzkaller0: entered allmulticast mode [ 469.479097][T29407] netlink: 'syz.0.6757': attribute type 2 has an invalid length. [ 469.490405][T29407] netlink: 'syz.0.6757': attribute type 11 has an invalid length. [ 469.504185][ T12] net_ratelimit: 10 callbacks suppressed [ 469.504200][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 469.525005][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 470.074780][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 470.089291][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 470.406874][T29458] : renamed from gretap0 (while UP) [ 470.522335][T29475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.605707][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 470.620208][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 470.782743][T29502] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 470.799559][T29501] syzkaller0: entered promiscuous mode [ 470.808578][T29501] syzkaller0: entered allmulticast mode [ 471.027253][T29515] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 471.037926][T29515] bond4 (unregistering): Released all slaves [ 471.127766][T29529] bridge: RTM_NEWNEIGH with invalid ether address [ 471.196783][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 471.211424][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 471.304238][T29541] bond4: entered promiscuous mode [ 471.313972][T29552] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 471.341079][T29552] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 471.362761][T29552] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 471.378796][T29552] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 471.509254][T29564] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 471.711443][T29593] netlink: 'syz.4.6816': attribute type 11 has an invalid length. [ 471.731985][T29593] __nla_validate_parse: 31 callbacks suppressed [ 471.732003][T29593] netlink: 199556 bytes leftover after parsing attributes in process `syz.4.6816'. [ 471.761499][T29597] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6819'. [ 471.773977][T29597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6819'. [ 471.806701][T29602] syzkaller0: entered promiscuous mode [ 471.824166][T29602] syzkaller0: entered allmulticast mode [ 471.869626][T29599] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6820'. [ 472.039625][T29623] IPv6: NLM_F_CREATE should be specified when creating new route [ 472.064742][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.072012][ C1] bridge0: topology change detected, propagating [ 472.188962][T29640] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 472.422545][T29646] validate_nla: 10 callbacks suppressed [ 472.422564][T29646] netlink: 'syz.1.6833': attribute type 7 has an invalid length. [ 472.450278][T29646] netlink: 'syz.1.6833': attribute type 8 has an invalid length. [ 472.511107][T29663] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.6837'. [ 472.538949][T29667] netlink: 'syz.1.6839': attribute type 3 has an invalid length. [ 472.595095][T29674] netlink: 'syz.0.6841': attribute type 1 has an invalid length. [ 472.611396][T29674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.756237][T29678] vlan3: entered promiscuous mode [ 472.770795][T29678] bond3: entered promiscuous mode [ 472.776639][T29678] vlan3: entered allmulticast mode [ 472.781798][T29678] bond3: entered allmulticast mode [ 472.807378][T29674] bond3: (slave bridge1): making interface the new active one [ 472.815196][T29674] bridge1: entered promiscuous mode [ 472.820587][T29674] bridge1: entered allmulticast mode [ 472.827538][T29674] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 473.164708][T29711] netlink: 'syz.3.6851': attribute type 13 has an invalid length. [ 473.187815][T29711] gretap0: refused to change device tx_queue_len [ 473.213911][T29706] tc action pedit 'at' offset 9 out of bounds [ 473.236359][T29718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6844'. [ 473.290512][T29720] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20002 [ 473.411369][T29727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6852'. [ 473.519070][T29737] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 473.612923][T29752] Cannot find del_set index 2 as target [ 473.616025][T29753] netlink: 'syz.2.6858': attribute type 1 has an invalid length. [ 473.644089][T29752] xt_hashlimit: size too large, truncated to 1048576 [ 473.673493][T29753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.699811][T29759] bond4: (slave geneve3): making interface the new active one [ 473.710169][T29759] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 473.720552][ T5759] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 473.740912][ T5759] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 473.758129][ T5759] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 473.780941][T29767] netlink: 'syz.2.6860': attribute type 39 has an invalid length. [ 473.789758][ T5759] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 473.800452][T29767] hsr_slave_0: left promiscuous mode [ 473.804680][T29768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6859'. [ 473.817971][T29767] hsr_slave_1: left promiscuous mode [ 474.804498][ T12] net_ratelimit: 14 callbacks suppressed [ 474.804517][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 474.824967][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 475.344810][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 475.359327][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 475.884666][ T5759] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 475.900345][ T5759] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 476.424676][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 476.439978][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 476.511939][T29736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.524922][T29763] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6859'. [ 476.623145][T29786] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 476.633221][T29786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6864'. [ 476.647036][T29786] netlink: 'syz.4.6864': attribute type 1 has an invalid length. [ 476.668011][T29786] netlink: 'syz.4.6864': attribute type 1 has an invalid length. [ 476.781068][T29813] netlink: 'syz.0.6871': attribute type 11 has an invalid length. [ 476.804039][T29813] netlink: 'syz.0.6871': attribute type 4 has an invalid length. [ 476.822642][T29813] __nla_validate_parse: 1 callbacks suppressed [ 476.822660][T29813] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.6871'. [ 476.881815][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6873'. [ 476.926959][T29822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6876'. [ 476.965351][ T5759] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 477.173774][T29850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6885'. [ 477.193987][T29850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6885'. [ 477.463196][T29874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6893'. [ 477.595944][T29888] syzkaller0: entered promiscuous mode [ 477.608317][T29888] syzkaller0: entered allmulticast mode [ 477.761391][T29901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6899'. [ 477.771570][T29901] validate_nla: 1 callbacks suppressed [ 477.771588][T29901] netlink: 'syz.3.6899': attribute type 3 has an invalid length. [ 477.864956][T29906] bond5 (unregistering): Released all slaves [ 477.935330][T29911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6903'. [ 478.008676][T29918] syzkaller0: entered promiscuous mode [ 478.024036][T29918] syzkaller0: entered allmulticast mode [ 478.048320][T29925] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6908'. [ 478.059707][T29926] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6908'. [ 478.083634][T29924] tipc: MTU too low for tipc bearer [ 478.297799][T29948] syzkaller0: entered promiscuous mode [ 478.304586][T29948] syzkaller0: entered allmulticast mode [ 478.324902][T29947] netlink: 'syz.3.6917': attribute type 29 has an invalid length. [ 478.361217][T29947] syzkaller0: entered promiscuous mode [ 478.405901][T29947] syzkaller0: entered allmulticast mode [ 478.727518][T29983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.754370][T29983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.766648][T29983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 478.781411][T29983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 478.878474][T29983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.913911][T29983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.925301][T29983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 478.943076][T29983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 478.968637][T30004] netlink: 'syz.3.6933': attribute type 6 has an invalid length. [ 479.029924][T29983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.044898][T29983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.063767][T29983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 479.090401][T29983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 479.321273][T29983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.331883][T29983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.355205][T29983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 479.386390][T29983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 479.606938][T27334] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.617688][T27334] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.628716][T27334] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 479.637580][T27334] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 479.650334][T30054] netlink: 'syz.3.6948': attribute type 2 has an invalid length. [ 479.661538][T27333] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.670121][T27333] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.678586][T27333] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 479.699534][T27333] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 479.726300][T27333] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.735331][T27333] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.743637][T27333] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 479.757558][T27333] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 479.782284][T30046] syzkaller0: entered promiscuous mode [ 479.789012][T30046] syzkaller0: entered allmulticast mode [ 479.796327][ T6803] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.809616][ T6803] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.826647][ T6803] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 479.835194][ T6803] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 479.847466][T29982] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.860925][T29982] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 479.871588][T29982] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 479.888490][T29982] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 479.901042][T30050] tipc: Invalid UDP bearer configuration [ 479.901065][T30050] tipc: Enabling of bearer rejected, failed to enable media [ 479.917079][ T6803] ================================================================== [ 479.925257][ T6803] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1550 [ 479.932800][ T6803] Read of size 8 at addr ffff88807775baa8 by task kworker/u8:9/6803 [ 479.940770][ T6803] [ 479.943110][ T6803] CPU: 0 UID: 0 PID: 6803 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 479.943130][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.943140][ T6803] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 479.943233][ T6803] Call Trace: [ 479.943238][ T6803] [ 479.943242][ T6803] dump_stack_lvl+0xe8/0x150 [ 479.943257][ T6803] print_address_description+0x55/0x1e0 [ 479.943276][ T6803] ? __mutex_lock+0x154/0x1550 [ 479.943288][ T6803] print_report+0x58/0x70 [ 479.943296][ T6803] kasan_report+0x117/0x150 [ 479.943312][ T6803] ? rcu_is_watching+0x15/0xb0 [ 479.943324][ T6803] ? __mutex_lock+0x154/0x1550 [ 479.943337][ T6803] __mutex_lock+0x154/0x1550 [ 479.943349][ T6803] ? __mutex_lock+0x5d4/0x1550 [ 479.943361][ T6803] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 479.943375][ T6803] ? __pfx___mutex_lock+0x10/0x10 [ 479.943387][ T6803] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.943400][ T6803] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 479.943416][ T6803] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 479.943430][ T6803] ? process_scheduled_works+0xa20/0x14e0 [ 479.943440][ T6803] ? rcu_is_watching+0x15/0xb0 [ 479.943449][ T6803] ? process_scheduled_works+0xa20/0x14e0 [ 479.943460][ T6803] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 479.943474][ T6803] ? rcu_is_watching+0x15/0xb0 [ 479.943483][ T6803] ? process_scheduled_works+0xa20/0x14e0 [ 479.943494][ T6803] process_scheduled_works+0xa8e/0x14e0 [ 479.943511][ T6803] ? __pfx_process_scheduled_works+0x10/0x10 [ 479.943521][ T6803] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.943534][ T6803] ? assign_work+0x3cf/0x5d0 [ 479.943545][ T6803] worker_thread+0xa47/0xfb0 [ 479.943562][ T6803] kthread+0x388/0x470 [ 479.943571][ T6803] ? __pfx_worker_thread+0x10/0x10 [ 479.943582][ T6803] ? __pfx_kthread+0x10/0x10 [ 479.943590][ T6803] ret_from_fork+0x514/0xb70 [ 479.943608][ T6803] ? __pfx_ret_from_fork+0x10/0x10 [ 479.943617][ T6803] ? __switch_to+0xc89/0x1420 [ 479.943631][ T6803] ? __pfx_kthread+0x10/0x10 [ 479.943639][ T6803] ret_from_fork_asm+0x1a/0x30 [ 479.943653][ T6803] [ 479.943656][ T6803] [ 480.147191][ T6803] Allocated by task 29983: [ 480.151593][ T6803] kasan_save_track+0x3e/0x80 [ 480.156269][ T6803] __kasan_kmalloc+0x93/0xb0 [ 480.160942][ T6803] __kmalloc_noprof+0x358/0x750 [ 480.165826][ T6803] udp_tunnel_nic_netdevice_event+0x4e9/0x1850 [ 480.171979][ T6803] notifier_call_chain+0x1a5/0x3d0 [ 480.177172][ T6803] register_netdevice+0x18a4/0x1eb0 [ 480.182361][ T6803] nsim_create+0xbd7/0x1140 [ 480.186951][ T6803] __nsim_dev_port_add+0x7f8/0xcd0 [ 480.192094][ T6803] nsim_dev_port_add_all+0x37/0xf0 [ 480.197222][ T6803] nsim_dev_reload_up+0x4dd/0x880 [ 480.202348][ T6803] devlink_reload+0x4b2/0x890 [ 480.207098][ T6803] devlink_nl_reload_doit+0xa9c/0xc80 [ 480.212458][ T6803] genl_family_rcv_msg_doit+0x233/0x340 [ 480.217995][ T6803] genl_rcv_msg+0x614/0x7a0 [ 480.222496][ T6803] netlink_rcv_skb+0x226/0x4a0 [ 480.227254][ T6803] genl_rcv+0x28/0x40 [ 480.231369][ T6803] netlink_unicast+0x7bb/0x940 [ 480.236126][ T6803] netlink_sendmsg+0x813/0xb40 [ 480.240879][ T6803] ____sys_sendmsg+0x9b9/0xa20 [ 480.245635][ T6803] ___sys_sendmsg+0x2a5/0x360 [ 480.250315][ T6803] __x64_sys_sendmsg+0x1b1/0x290 [ 480.255290][ T6803] do_syscall_64+0x174/0x580 [ 480.259896][ T6803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.265777][ T6803] [ 480.268088][ T6803] Freed by task 29982: [ 480.272139][ T6803] kasan_save_track+0x3e/0x80 [ 480.276805][ T6803] kasan_save_free_info+0x40/0x50 [ 480.281814][ T6803] __kasan_slab_free+0x5c/0x80 [ 480.286565][ T6803] kfree+0x1c5/0x640 [ 480.290446][ T6803] udp_tunnel_nic_netdevice_event+0x1236/0x1850 [ 480.296676][ T6803] notifier_call_chain+0x1a5/0x3d0 [ 480.301795][ T6803] unregister_netdevice_many_notify+0x17de/0x2150 [ 480.308192][ T6803] unregister_netdevice_queue+0x2f5/0x340 [ 480.313912][ T6803] nsim_destroy+0x26d/0x800 [ 480.318403][ T6803] __nsim_dev_port_del+0x14e/0x200 [ 480.323531][ T6803] nsim_dev_reload_destroy+0x288/0x490 [ 480.328983][ T6803] nsim_dev_reload_down+0x8a/0xc0 [ 480.334000][ T6803] devlink_reload+0x1c5/0x890 [ 480.338665][ T6803] devlink_nl_reload_doit+0xa9c/0xc80 [ 480.344022][ T6803] genl_family_rcv_msg_doit+0x233/0x340 [ 480.349557][ T6803] genl_rcv_msg+0x614/0x7a0 [ 480.354047][ T6803] netlink_rcv_skb+0x226/0x4a0 [ 480.358885][ T6803] genl_rcv+0x28/0x40 [ 480.362853][ T6803] netlink_unicast+0x7bb/0x940 [ 480.367608][ T6803] netlink_sendmsg+0x813/0xb40 [ 480.372362][ T6803] ____sys_sendmsg+0x9b9/0xa20 [ 480.377123][ T6803] ___sys_sendmsg+0x2a5/0x360 [ 480.381789][ T6803] __x64_sys_sendmsg+0x1b1/0x290 [ 480.386715][ T6803] do_syscall_64+0x174/0x580 [ 480.391295][ T6803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.397172][ T6803] [ 480.399480][ T6803] Last potentially related work creation: [ 480.405179][ T6803] kasan_save_stack+0x3e/0x60 [ 480.409847][ T6803] kasan_record_aux_stack+0xbd/0xd0 [ 480.415038][ T6803] insert_work+0x3d/0x330 [ 480.419377][ T6803] __queue_work+0xb7c/0xff0 [ 480.423920][ T6803] queue_work_on+0x106/0x1d0 [ 480.428498][ T6803] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 480.434116][ T6803] udp_tunnel_push_rx_port+0x169/0x1f0 [ 480.439557][ T6803] geneve_offload_rx_ports+0xc7/0x150 [ 480.444986][ T6803] geneve_netdevice_event+0x6a/0x80 [ 480.450261][ T6803] notifier_call_chain+0x1a5/0x3d0 [ 480.455395][ T6803] call_netdevice_notifiers+0x90/0xd0 [ 480.460809][ T6803] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 480.466947][ T6803] notifier_call_chain+0x1a5/0x3d0 [ 480.472050][ T6803] register_netdevice+0x18a4/0x1eb0 [ 480.477241][ T6803] nsim_create+0xbd7/0x1140 [ 480.481732][ T6803] __nsim_dev_port_add+0x7f8/0xcd0 [ 480.486830][ T6803] nsim_dev_port_add_all+0x37/0xf0 [ 480.491931][ T6803] nsim_dev_reload_up+0x4dd/0x880 [ 480.496942][ T6803] devlink_reload+0x4b2/0x890 [ 480.501605][ T6803] devlink_nl_reload_doit+0xa9c/0xc80 [ 480.506961][ T6803] genl_family_rcv_msg_doit+0x233/0x340 [ 480.512493][ T6803] genl_rcv_msg+0x614/0x7a0 [ 480.516982][ T6803] netlink_rcv_skb+0x226/0x4a0 [ 480.521735][ T6803] genl_rcv+0x28/0x40 [ 480.525704][ T6803] netlink_unicast+0x7bb/0x940 [ 480.530462][ T6803] netlink_sendmsg+0x813/0xb40 [ 480.535224][ T6803] ____sys_sendmsg+0x9b9/0xa20 [ 480.539981][ T6803] ___sys_sendmsg+0x2a5/0x360 [ 480.544646][ T6803] __x64_sys_sendmsg+0x1b1/0x290 [ 480.549574][ T6803] do_syscall_64+0x174/0x580 [ 480.554152][ T6803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.560031][ T6803] [ 480.562356][ T6803] Second to last potentially related work creation: [ 480.568931][ T6803] kasan_save_stack+0x3e/0x60 [ 480.573617][ T6803] kasan_record_aux_stack+0xbd/0xd0 [ 480.578811][ T6803] insert_work+0x3d/0x330 [ 480.583133][ T6803] __queue_work+0xcb6/0xff0 [ 480.587630][ T6803] queue_work_on+0x106/0x1d0 [ 480.592213][ T6803] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 480.597834][ T6803] udp_tunnel_push_rx_port+0x169/0x1f0 [ 480.603279][ T6803] vxlan_offload_rx_ports+0x129/0x1f0 [ 480.608722][ T6803] vxlan_netdevice_event+0x111/0x490 [ 480.613995][ T6803] notifier_call_chain+0x1a5/0x3d0 [ 480.619099][ T6803] call_netdevice_notifiers+0x90/0xd0 [ 480.624467][ T6803] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 480.630612][ T6803] notifier_call_chain+0x1a5/0x3d0 [ 480.635715][ T6803] register_netdevice+0x18a4/0x1eb0 [ 480.640901][ T6803] nsim_create+0xbd7/0x1140 [ 480.645390][ T6803] __nsim_dev_port_add+0x7f8/0xcd0 [ 480.650491][ T6803] nsim_dev_port_add_all+0x37/0xf0 [ 480.655587][ T6803] nsim_dev_reload_up+0x4dd/0x880 [ 480.660599][ T6803] devlink_reload+0x4b2/0x890 [ 480.665265][ T6803] devlink_nl_reload_doit+0xa9c/0xc80 [ 480.670630][ T6803] genl_family_rcv_msg_doit+0x233/0x340 [ 480.676161][ T6803] genl_rcv_msg+0x614/0x7a0 [ 480.680656][ T6803] netlink_rcv_skb+0x226/0x4a0 [ 480.685409][ T6803] genl_rcv+0x28/0x40 [ 480.689738][ T6803] netlink_unicast+0x7bb/0x940 [ 480.694505][ T6803] netlink_sendmsg+0x813/0xb40 [ 480.699270][ T6803] ____sys_sendmsg+0x9b9/0xa20 [ 480.704120][ T6803] ___sys_sendmsg+0x2a5/0x360 [ 480.708790][ T6803] __x64_sys_sendmsg+0x1b1/0x290 [ 480.713722][ T6803] do_syscall_64+0x174/0x580 [ 480.718311][ T6803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.724195][ T6803] [ 480.726508][ T6803] The buggy address belongs to the object at ffff88807775ba00 [ 480.726508][ T6803] which belongs to the cache kmalloc-256 of size 256 [ 480.740548][ T6803] The buggy address is located 168 bytes inside of [ 480.740548][ T6803] freed 256-byte region [ffff88807775ba00, ffff88807775bb00) [ 480.754400][ T6803] [ 480.756718][ T6803] The buggy address belongs to the physical page: [ 480.763130][ T6803] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7775a [ 480.771898][ T6803] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 480.780389][ T6803] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 480.787930][ T6803] page_type: f5(slab) [ 480.791901][ T6803] raw: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 480.800482][ T6803] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 480.809060][ T6803] head: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 480.817727][ T6803] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 480.826486][ T6803] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 480.835152][ T6803] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 480.843808][ T6803] page dumped because: kasan: bad access detected [ 480.850216][ T6803] page_owner tracks the page as allocated [ 480.855914][ T6803] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5746, tgid 5746 (kworker/1:8), ts 420507352561, free_ts 420066428888 [ 480.876741][ T6803] post_alloc_hook+0x22d/0x280 [ 480.881516][ T6803] get_page_from_freelist+0x24ae/0x2530 [ 480.887067][ T6803] __alloc_frozen_pages_noprof+0x18d/0x380 [ 480.892878][ T6803] allocate_slab+0x74/0x5d0 [ 480.897375][ T6803] refill_objects+0x328/0x3c0 [ 480.902043][ T6803] __pcs_replace_empty_main+0x2e0/0x6b0 [ 480.907575][ T6803] __kmalloc_cache_noprof+0x388/0x660 [ 480.912939][ T6803] br_multicast_new_group+0x156/0x12a0 [ 480.918458][ T6803] __br_multicast_add_group+0x283/0xa60 [ 480.924065][ T6803] br_multicast_rcv+0x3c58/0x77c0 [ 480.929168][ T6803] br_dev_xmit+0xbbb/0x1a30 [ 480.933720][ T6803] dev_hard_start_xmit+0x2cd/0x830 [ 480.938824][ T6803] __dev_queue_xmit+0x1435/0x37f0 [ 480.943839][ T6803] ip6_output+0x337/0x540 [ 480.948320][ T6803] NF_HOOK+0x177/0x4f0 [ 480.952459][ T6803] mld_sendpack+0x890/0xe10 [ 480.956964][ T6803] page last free pid 26226 tgid 26226 stack trace: [ 480.963454][ T6803] __free_frozen_pages+0xc0d/0xd20 [ 480.968591][ T6803] __slab_free+0x274/0x2c0 [ 480.973005][ T6803] qlist_free_all+0x99/0x100 [ 480.977582][ T6803] kasan_quarantine_reduce+0x148/0x160 [ 480.983031][ T6803] __kasan_slab_alloc+0x22/0x80 [ 480.987877][ T6803] __kmalloc_noprof+0x312/0x750 [ 480.992717][ T6803] tomoyo_realpath_from_path+0xef/0x640 [ 480.998326][ T6803] tomoyo_path_perm+0x283/0x560 [ 481.003209][ T6803] security_inode_getattr+0x12b/0x310 [ 481.008577][ T6803] __x64_sys_newfstat+0x133/0x270 [ 481.013589][ T6803] do_syscall_64+0x174/0x580 [ 481.018176][ T6803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.024082][ T6803] [ 481.026482][ T6803] Memory state around the buggy address: [ 481.032100][ T6803] ffff88807775b980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 481.040149][ T6803] ffff88807775ba00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 481.048214][ T6803] >ffff88807775ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 481.056439][ T6803] ^ [ 481.061791][ T6803] ffff88807775bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 481.069835][ T6803] ffff88807775bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 481.078059][ T6803] ================================================================== [ 481.108198][ T12] net_ratelimit: 13 callbacks suppressed [ 481.108215][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 481.128525][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 481.142211][ T6803] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 481.142235][ T6803] CPU: 0 UID: 0 PID: 6803 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 481.142288][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.142299][ T6803] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 481.142329][ T6803] Call Trace: [ 481.142336][ T6803] [ 481.142345][ T6803] vpanic+0x56c/0xa60 [ 481.142367][ T6803] ? __pfx_vpanic+0x10/0x10 [ 481.142384][ T6803] ? rcu_is_watching+0x15/0xb0 [ 481.142405][ T6803] panic+0xc5/0xd0 [ 481.142421][ T6803] ? __pfx_panic+0x10/0x10 [ 481.142438][ T6803] ? preempt_schedule_thunk+0x16/0x40 [ 481.142462][ T6803] ? __mutex_lock+0x154/0x1550 [ 481.142482][ T6803] ? preempt_schedule_thunk+0x16/0x40 [ 481.142502][ T6803] ? __mutex_lock+0x154/0x1550 [ 481.142520][ T6803] check_panic_on_warn+0x89/0xb0 [ 481.142561][ T6803] ? __mutex_lock+0x154/0x1550 [ 481.142579][ T6803] end_report+0x73/0x170 [ 481.142602][ T6803] ? __mutex_lock+0x154/0x1550 [ 481.142620][ T6803] kasan_report+0x128/0x150 [ 481.142640][ T6803] ? rcu_is_watching+0x15/0xb0 [ 481.142657][ T6803] ? __mutex_lock+0x154/0x1550 [ 481.142679][ T6803] __mutex_lock+0x154/0x1550 [ 481.142700][ T6803] ? __mutex_lock+0x5d4/0x1550 [ 481.142720][ T6803] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 481.142743][ T6803] ? __pfx___mutex_lock+0x10/0x10 [ 481.142762][ T6803] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.142780][ T6803] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 481.142795][ T6803] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 481.142815][ T6803] ? process_scheduled_works+0xa20/0x14e0 [ 481.142831][ T6803] ? rcu_is_watching+0x15/0xb0 [ 481.142844][ T6803] ? process_scheduled_works+0xa20/0x14e0 [ 481.142861][ T6803] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 481.142883][ T6803] ? rcu_is_watching+0x15/0xb0 [ 481.142900][ T6803] ? process_scheduled_works+0xa20/0x14e0 [ 481.142918][ T6803] process_scheduled_works+0xa8e/0x14e0 [ 481.142943][ T6803] ? __pfx_process_scheduled_works+0x10/0x10 [ 481.142961][ T6803] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.342551][ T6803] ? assign_work+0x3cf/0x5d0 [ 481.347143][ T6803] worker_thread+0xa47/0xfb0 [ 481.351734][ T6803] kthread+0x388/0x470 [ 481.355796][ T6803] ? __pfx_worker_thread+0x10/0x10 [ 481.360898][ T6803] ? __pfx_kthread+0x10/0x10 [ 481.365476][ T6803] ret_from_fork+0x514/0xb70 [ 481.370059][ T6803] ? __pfx_ret_from_fork+0x10/0x10 [ 481.375154][ T6803] ? __switch_to+0xc89/0x1420 [ 481.379824][ T6803] ? __pfx_kthread+0x10/0x10 [ 481.384403][ T6803] ret_from_fork_asm+0x1a/0x30 [ 481.389173][ T6803] [ 481.392474][ T6803] Kernel Offset: disabled [ 481.396846][ T6803] Rebooting in 86400 seconds..